This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json) Hash identifier: xzn+mCoeXF2RKI/EHBm47bATuxGl1IjTtRq/jNg41n4= Subject key identifier: 70:51:D7:F7:8C:9C:C3:9F:F7:B9:5A:FF:7E:70:BE:EA:91:A4:D0:A3 Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45 Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445 Certificate serial: 019BF72CAE3307A78B4AB74066FFAD1A4B73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft Manifest number: 0944 Signing time: Sun 25 Jan 2026 22:00:59 +0000 Manifest this update: Sun 25 Jan 2026 22:00:59 +0000 Manifest next update: Mon 26 Jan 2026 22:00:59 +0000 Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: z5kOWf/4nXSSBQiEGfioOpTA6nV0B4eqvu5pLkrSi1w=) 2: wPl7ynnI5jX4tx7pSw6wN-FRjIs.roa (hash: Wc0jszL4Hb97uhnMz/zMSryxca7jN11EVHOmQGyZa3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ae:33:07:a7:8b:4a:b7:40:66:ff:ad:1a:4b:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445 Validity Not Before: Jan 25 22:00:59 2026 GMT Not After : Jan 26 22:00:59 2026 GMT Subject: CN=7051d7f78c9cc39ff7b95aff7e70beea91a4d0a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:88:3f:b1:ae:92:3e:d9:fc:00:41:6f:7d:9d: a6:9e:3c:7e:72:80:b8:1e:a5:37:16:1f:37:33:d8: 0c:e3:7d:65:a4:6d:27:aa:ad:27:ce:31:7d:92:b2: 33:3b:12:15:65:5a:68:97:da:7a:bd:35:26:32:79: 1e:25:f8:51:ef:aa:60:43:95:4b:8a:ea:8c:0e:72: 34:e2:6b:34:32:e3:67:4f:f8:8f:43:18:05:83:c7: 77:80:f1:3a:c0:e0:5d:e5:ec:0e:03:de:4c:32:03: 81:83:71:49:0a:82:66:b3:fc:d9:cc:49:8b:0f:da: 43:99:42:62:6c:8d:53:2e:05:5c:b4:38:b5:1d:5c: 16:5c:f4:f4:85:6f:72:fb:e7:0d:07:8e:8b:8e:13: be:a7:d4:a5:ce:2e:3d:e5:07:60:df:4b:46:ad:0d: 12:ff:86:cf:44:9c:55:04:0d:cf:ce:e9:3c:0f:5f: ff:4b:e5:1f:85:9a:37:6a:9a:8f:15:e7:9a:6c:41: 8a:30:e2:26:08:51:3a:dc:a2:ae:73:ab:04:95:c8: 69:54:1e:99:5c:e7:52:33:0c:61:60:b1:c7:85:eb: ec:a7:a5:47:33:8f:2a:ad:b0:60:fb:4b:bb:fc:bf: 21:f0:c5:92:e4:43:27:4c:5f:ec:5f:99:c6:e5:c3: 02:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:51:D7:F7:8C:9C:C3:9F:F7:B9:5A:FF:7E:70:BE:EA:91:A4:D0:A3 X509v3 Authority Key Identifier: keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:94:11:b2:48:96:ca:6d:dd:ea:39:2b:93:b9:16:52:61:2f: 50:36:2c:f7:a9:78:a0:72:41:f9:a4:01:8f:a4:3e:e0:6b:74: 62:3a:76:6b:29:42:7f:bf:67:03:03:26:6a:0d:a0:26:59:91: 15:e7:08:70:65:93:57:df:34:d8:e9:03:be:93:d8:c8:53:bb: be:3e:d3:cd:5e:74:14:29:09:96:c3:94:8d:8b:79:b0:80:5d: 11:da:85:8c:19:57:34:e8:35:94:b9:fd:69:b9:aa:59:f0:d4: 1d:a3:99:43:16:9a:82:68:6f:0e:1d:31:6c:c8:ac:e8:b2:37: 15:d3:a4:af:ff:cc:a7:77:14:a3:4e:59:01:f9:ed:e2:3d:d0: bd:e6:01:f3:4a:03:47:70:20:9e:6e:1a:68:50:25:82:72:4c: 07:85:92:69:07:36:53:59:61:2b:59:e6:d2:ee:20:fd:5d:d0: 38:df:04:4a:c9:49:ea:96:2c:be:cf:63:05:9d:f6:23:be:50: ff:72:42:7f:b3:5c:07:62:3e:ad:3e:8f:a5:5d:ed:81:6b:5c: bd:de:de:0f:ff:e6:57:f6:0d:8b:85:01:ed:60:bb:1f:02:5e: b7:51:b8:de:a6:f9:e2:da:7e:6d:ce:44:57:53:3a:92:fd:b1: c1:2e:7f:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LK4zB6eLSrdAZv+tGktzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NjVmNmY1Zjc5MzZkYjgzNTFhMGEzOTNjZjA2OWE1MThl NTc0NDUwHhcNMjYwMTI1MjIwMDU5WhcNMjYwMTI2MjIwMDU5WjAzMTEwLwYDVQQD Eyg3MDUxZDdmNzhjOWNjMzlmZjdiOTVhZmY3ZTcwYmVlYTkxYTRkMGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ig/sa6SPtn8AEFvfZ2mnjx+coC4 HqU3Fh83M9gM431lpG0nqq0nzjF9krIzOxIVZVpol9p6vTUmMnkeJfhR76pgQ5VL iuqMDnI04ms0MuNnT/iPQxgFg8d3gPE6wOBd5ewOA95MMgOBg3FJCoJms/zZzEmL D9pDmUJibI1TLgVctDi1HVwWXPT0hW9y++cNB46LjhO+p9Slzi495Qdg30tGrQ0S /4bPRJxVBA3Pzuk8D1//S+UfhZo3apqPFeeabEGKMOImCFE63KKuc6sElchpVB6Z XOdSMwxhYLHHhevsp6VHM48qrbBg+0u7/L8h8MWS5EMnTF/sX5nG5cMCPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBR1/eMnMOf97la/35wvuqRpNCjMB8GA1UdIwQY MBaAFAdl9vX3k224NRoKOTzwaaUY5XRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEt ZjQ2YjQ2ZDUzODAwLzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEtZjQ2YjQ2ZDUzODAw LzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpQRskiW ym3d6jkrk7kWUmEvUDYs96l4oHJB+aQBj6Q+4Gt0Yjp2aylCf79nAwMmag2gJlmR FecIcGWTV9802OkDvpPYyFO7vj7TzV50FCkJlsOUjYt5sIBdEdqFjBlXNOg1lLn9 abmqWfDUHaOZQxaagmhvDh0xbMis6LI3FdOkr//Mp3cUo05ZAfnt4j3QveYB80oD R3Agnm4aaFAlgnJMB4WSaQc2U1lhK1nm0u4g/V3QON8ESslJ6pYsvs9jBZ32I75Q /3JCf7NcB2I+rT6PpV3tgWtcvd7eD//mV/YNi4UB7WC7HwJet1G43qb54tp+bc5E V1M6kv2xwS5/PQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:48:44 2026 by rpki-client