This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json) Hash identifier: eP53sBbUOKghvYRpEikWu0oTOFA8ocJadWxWBomiNC8= Subject key identifier: F7:1B:03:FA:E8:71:73:B3:DC:12:B2:70:7F:B3:2A:10:A9:E4:D8:F3 Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8 Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8 Certificate serial: 019BF57544AD415DC6DD1A74CB08EB80B3A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft Manifest number: 0DB2 Signing time: Sun 25 Jan 2026 14:01:01 +0000 Manifest this update: Sun 25 Jan 2026 14:01:01 +0000 Manifest next update: Mon 26 Jan 2026 14:01:01 +0000 Files and hashes: 1: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: dk3NlER2gRL9nahRvX0HKgjnE6dUDTosiRrt/jbNK04=) 2: fYQ8diFS0pMi17AAJonCpFXTGqg.roa (hash: IlQw7JdR5Y+EO+F9R5RY7SSoodskPtpA7HFrW9NLQp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:44:ad:41:5d:c6:dd:1a:74:cb:08:eb:80:b3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8 Validity Not Before: Jan 25 14:01:01 2026 GMT Not After : Jan 26 14:01:01 2026 GMT Subject: CN=f71b03fae87173b3dc12b2707fb32a10a9e4d8f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:a8:67:52:e0:7b:59:b2:16:3c:9c:e5:e1: e3:18:9a:5f:cd:62:34:85:54:34:75:84:13:fb:55: b7:58:58:10:31:77:65:44:6b:59:b7:f0:b5:e1:79: d1:44:72:d7:19:59:29:05:05:49:d8:61:d2:55:2b: 11:aa:6c:77:1a:33:32:aa:03:4f:79:3c:06:9c:ce: 5e:e0:31:db:f8:78:5e:21:14:0e:4c:2c:4b:c7:31: 3a:be:9c:bc:d3:00:1f:e2:5b:03:3a:fe:0a:9a:99: 8a:c4:cd:d0:cc:9c:3a:ec:c0:61:43:f4:0e:0b:56: c2:af:b3:e1:37:a5:73:01:7a:78:4e:f3:dc:1b:c7: 5c:eb:76:da:58:f0:3d:49:0d:5c:ba:ec:d5:b3:db: 34:3e:39:cc:d6:a2:58:5d:b8:51:e6:c7:73:55:cb: 41:cc:83:ce:13:72:a4:22:55:6c:e1:f2:d5:cd:fe: 14:e4:f5:54:13:63:64:05:fa:18:d0:a7:7a:c9:bf: 88:18:04:d1:55:17:f3:29:f6:36:b8:b1:e7:0d:bb: 69:3a:b9:b3:a9:bc:6a:56:9c:f2:d0:a1:87:28:38: 99:b9:6f:e0:60:12:da:0d:98:68:58:43:fb:a0:1c: ca:58:64:ec:64:9c:ba:0f:4b:bb:f0:1e:e5:3c:a7: f5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:1B:03:FA:E8:71:73:B3:DC:12:B2:70:7F:B3:2A:10:A9:E4:D8:F3 X509v3 Authority Key Identifier: keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:0b:67:c3:5e:3a:12:92:2b:0a:76:bc:77:4a:1e:2c:61:52: 37:08:07:a3:14:64:53:5e:5e:ba:1f:df:e1:cf:53:5c:66:8e: 2e:03:8d:42:b2:f8:e7:33:39:be:96:46:01:2f:e5:99:6d:f9: 97:65:cb:aa:18:4d:c8:e2:c2:fb:62:ec:8a:1e:cd:35:5d:44: b7:11:7d:77:ba:0e:67:69:0f:20:ab:c2:e7:f7:ac:7b:9d:c7: aa:6a:16:81:89:64:fb:14:ba:bd:42:83:ab:07:b6:cd:65:b4: ad:16:c9:34:ad:c2:b8:8c:29:00:6d:ff:6c:97:97:a7:f5:6c: 00:cf:8f:5d:fc:ed:26:0c:2d:cb:06:de:7a:11:7e:f6:aa:56: de:da:e8:4a:6e:49:0b:56:9b:eb:bf:c6:5e:6c:a9:c0:7e:db: 60:42:9b:c1:21:f8:c1:7f:59:6e:fb:b8:e8:a7:73:cf:75:c5: 2d:68:19:35:14:99:8a:01:b4:e7:17:67:1c:62:f2:ea:76:be: 56:2e:a0:ac:a5:db:f4:ca:a9:d6:28:4d:c4:1e:dd:b7:81:41: ff:23:47:d0:09:26:5a:98:8a:16:4c:78:97:5a:81:83:57:04: 52:25:7d:8e:58:fa:c3:98:1b:d0:9a:c8:67:5d:2e:dc:38:b7: 3b:7e:71:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dUStQV3G3Rp0ywjrgLOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk0NGVhYTljN2Y2ZDQ1NzQwNmYxNDJjNmUyOGNmNWFj YzZhYzgwHhcNMjYwMTI1MTQwMTAxWhcNMjYwMTI2MTQwMTAxWjAzMTEwLwYDVQQD EyhmNzFiMDNmYWU4NzE3M2IzZGMxMmIyNzA3ZmIzMmExMGE5ZTRkOGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdeoZ1Lge1myFjyc5eHjGJpfzWI0 hVQ0dYQT+1W3WFgQMXdlRGtZt/C14XnRRHLXGVkpBQVJ2GHSVSsRqmx3GjMyqgNP eTwGnM5e4DHb+HheIRQOTCxLxzE6vpy80wAf4lsDOv4KmpmKxM3QzJw67MBhQ/QO C1bCr7PhN6VzAXp4TvPcG8dc63baWPA9SQ1cuuzVs9s0PjnM1qJYXbhR5sdzVctB zIPOE3KkIlVs4fLVzf4U5PVUE2NkBfoY0Kd6yb+IGATRVRfzKfY2uLHnDbtpOrmz qbxqVpzy0KGHKDiZuW/gYBLaDZhoWEP7oBzKWGTsZJy6D0u78B7lPKf1jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcbA/rocXOz3BKycH+zKhCp5NjzMB8GA1UdIwQY MBaAFGypROqpx/bUV0BvFCxuKM9azGrIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYt M2RlNDRmYzhiM2I1LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYtM2RlNDRmYzhiM2I1 LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApgtnw146 EpIrCna8d0oeLGFSNwgHoxRkU15euh/f4c9TXGaOLgONQrL45zM5vpZGAS/lmW35 l2XLqhhNyOLC+2Lsih7NNV1EtxF9d7oOZ2kPIKvC5/ese53HqmoWgYlk+xS6vUKD qwe2zWW0rRbJNK3CuIwpAG3/bJeXp/VsAM+PXfztJgwtywbeehF+9qpW3troSm5J C1ab67/GXmypwH7bYEKbwSH4wX9Zbvu46Kdzz3XFLWgZNRSZigG05xdnHGLy6na+ Vi6grKXb9Mqp1ihNxB7dt4FB/yNH0AkmWpiKFkx4l1qBg1cEUiV9jlj6w5gb0JrI Z10u3Di3O35xag== -----END CERTIFICATE-----Generated at Sun Jan 25 16:30:07 2026 by rpki-client