This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft File: BjfRzl3D-oAOHR3PvaqEH93UOQU.mft (raw, json) Hash identifier: p4nUokPXMNtpCd86qISd6YWk/VuWx8XOS2Af3IS5UsQ= Subject key identifier: F2:A2:23:08:73:8D:C2:A0:C1:4B:AD:FD:54:A0:20:F5:F9:5D:88:EC Authority key identifier: 06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05 Certificate issuer: /CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905 Certificate serial: 019BF8ADD65EE40BC172B1E6ADC8F2E1EAE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft Manifest number: 1633 Signing time: Mon 26 Jan 2026 05:01:40 +0000 Manifest this update: Mon 26 Jan 2026 05:01:40 +0000 Manifest next update: Tue 27 Jan 2026 05:01:40 +0000 Files and hashes: 1: BjfRzl3D-oAOHR3PvaqEH93UOQU.crl (hash: Es4lL9NisfjhA2uYduarH/7klP46c8+fo/Ex3GpHN38=) 2: G-BgSgA1DvY02PMsHCU-rGoXRQo.roa (hash: PS8e/lwF9c6L43N47uqYtfOx0c2N/MEHbFT+QBvkfks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:d6:5e:e4:0b:c1:72:b1:e6:ad:c8:f2:e1:ea:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0637d1ce5dc3fa800e1d1dcfbdaa841fddd43905 Validity Not Before: Jan 26 05:01:40 2026 GMT Not After : Jan 27 05:01:40 2026 GMT Subject: CN=f2a22308738dc2a0c14badfd54a020f5f95d88ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:6e:40:ca:64:57:6b:04:f0:95:4f:85:a8:64: 78:6b:d4:c4:8a:c8:76:83:85:bc:a0:b3:89:75:99: 8f:b3:32:cc:22:71:5e:6b:4f:ba:67:c7:ae:8e:0c: 40:b4:a7:c2:da:a8:0b:94:9a:db:09:85:dd:32:6e: a3:d1:62:5e:c3:39:47:5c:50:27:a8:19:68:0f:e1: 74:68:c0:cd:a8:5b:54:d6:ba:32:a1:a0:d0:3a:86: 26:61:37:66:41:5a:b8:a5:6d:89:55:ca:c0:66:29: 90:10:78:46:7d:c2:ac:37:1e:ea:42:1a:9f:1d:8d: 0d:9f:b9:2d:8c:2c:ad:52:cf:bd:90:62:7c:6d:0e: 90:2d:58:fb:af:6e:20:f6:5b:0a:df:c9:c4:d0:57: 7d:d9:3c:6e:e3:c0:5b:a2:34:6f:5f:88:6d:d4:e1: d3:01:1c:ba:1c:80:38:a2:81:3a:11:e9:af:df:56: be:fa:c4:23:9e:e4:d7:55:07:61:ec:cf:cc:7b:05: 31:ef:de:8b:9a:aa:e9:d1:73:d3:17:79:87:f3:60: 4b:bf:13:61:a3:50:d8:38:29:20:46:75:27:e4:ad: b2:5f:af:3a:10:39:17:e3:b4:48:54:a4:f7:02:3c: 9b:0d:2e:39:ea:9c:d6:a7:8f:75:96:f5:d3:57:be: 75:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:A2:23:08:73:8D:C2:A0:C1:4B:AD:FD:54:A0:20:F5:F9:5D:88:EC X509v3 Authority Key Identifier: keyid:06:37:D1:CE:5D:C3:FA:80:0E:1D:1D:CF:BD:AA:84:1F:DD:D4:39:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjfRzl3D-oAOHR3PvaqEH93UOQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/eaa602-2a3f-4f32-abce-3d80d686e747/1/BjfRzl3D-oAOHR3PvaqEH93UOQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:f3:4c:55:c7:dc:e2:19:a8:84:cd:7d:60:2e:06:f9:f6:ea: 73:53:a0:7c:0d:08:a4:b5:d1:fe:29:70:ec:f9:8e:39:d3:6f: 05:6d:46:55:1f:e8:5d:0e:4b:c1:9d:4f:e9:e4:4d:13:81:1c: f4:ad:e2:1d:e5:95:d6:fa:ac:93:ed:43:64:83:8e:23:ea:6c: 38:02:b6:5c:1d:6a:6e:ea:14:bf:87:7e:30:0c:22:02:79:ed: e9:ce:32:23:83:69:d4:57:df:37:97:47:28:d5:98:ba:3e:dd: 33:ea:db:5f:4d:91:2d:12:ef:5b:84:ae:d6:77:b3:6f:53:61: 89:17:da:08:39:b7:57:8d:8e:29:65:78:13:cf:96:b8:6c:c1: 87:74:2c:4f:a7:30:31:88:b2:1c:0a:18:ab:d4:2b:db:4c:a5: 7d:15:02:93:19:4f:0c:db:9a:b8:2d:3e:98:18:43:3f:10:3e: db:bc:6f:24:82:59:4c:5b:7e:21:ec:b4:4d:6b:8c:d3:f6:7c: af:97:68:29:9a:04:45:ed:12:3e:29:04:17:3b:1f:31:36:43: 72:dd:48:49:de:7a:a0:20:62:b9:52:90:d3:1e:5b:be:6f:23: 44:a8:5c:b4:df:58:3a:98:c4:0e:bc:2f:da:54:a0:69:ef:82: 31:79:5f:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rdZe5AvBcrHmrcjy4ermMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzdkMWNlNWRjM2ZhODAwZTFkMWRjZmJkYWE4NDFmZGRk NDM5MDUwHhcNMjYwMTI2MDUwMTQwWhcNMjYwMTI3MDUwMTQwWjAzMTEwLwYDVQQD EyhmMmEyMjMwODczOGRjMmEwYzE0YmFkZmQ1NGEwMjBmNWY5NWQ4OGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6W5AymRXawTwlU+FqGR4a9TEish2 g4W8oLOJdZmPszLMInFea0+6Z8eujgxAtKfC2qgLlJrbCYXdMm6j0WJewzlHXFAn qBloD+F0aMDNqFtU1royoaDQOoYmYTdmQVq4pW2JVcrAZimQEHhGfcKsNx7qQhqf HY0Nn7ktjCytUs+9kGJ8bQ6QLVj7r24g9lsK38nE0Fd92Txu48BbojRvX4ht1OHT ARy6HIA4ooE6Eemv31a++sQjnuTXVQdh7M/MewUx796Lmqrp0XPTF3mH82BLvxNh o1DYOCkgRnUn5K2yX686EDkX47RIVKT3AjybDS456pzWp491lvXTV751fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKiIwhzjcKgwUut/VSgIPX5XYjsMB8GA1UdIwQY MBaAFAY30c5dw/qADh0dz72qhB/d1DkFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpmUnpsM0Qtb0FPSFIzUHZhcUVIOTNVT1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9lYWE2MDItMmEzZi00ZjMyLWFiY2Ut M2Q4MGQ2ODZlNzQ3LzEvQmpmUnpsM0Qtb0FPSFIzUHZhcUVIOTNVT1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9lYWE2MDItMmEzZi00ZjMyLWFiY2UtM2Q4MGQ2ODZlNzQ3 LzEvQmpmUnpsM0Qtb0FPSFIzUHZhcUVIOTNVT1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw/NMVcfc 4hmohM19YC4G+fbqc1OgfA0IpLXR/ilw7PmOOdNvBW1GVR/oXQ5LwZ1P6eRNE4Ec 9K3iHeWV1vqsk+1DZIOOI+psOAK2XB1qbuoUv4d+MAwiAnnt6c4yI4Np1FffN5dH KNWYuj7dM+rbX02RLRLvW4Su1nezb1NhiRfaCDm3V42OKWV4E8+WuGzBh3QsT6cw MYiyHAoYq9Qr20ylfRUCkxlPDNuauC0+mBhDPxA+27xvJIJZTFt+Iey0TWuM0/Z8 r5doKZoERe0SPikEFzsfMTZDct1ISd56oCBiuVKQ0x5bvm8jRKhctN9YOpjEDrwv 2lSgae+CMXlfZQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:51 2026 by rpki-client