This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json) Hash identifier: KLKVoSpXRR4HqrZThoVKUGuUGeBGM2qCzhvZew9ezd8= Subject key identifier: 3C:37:25:06:45:76:DB:21:66:E9:A4:FA:58:CF:99:5F:BA:C5:92:F5 Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99 Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499 Certificate serial: 019BF46344874C5F64B78DBF162D69D3037A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft Manifest number: 15CC Signing time: Sun 25 Jan 2026 09:01:44 +0000 Manifest this update: Sun 25 Jan 2026 09:01:44 +0000 Manifest next update: Mon 26 Jan 2026 09:01:44 +0000 Files and hashes: 1: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: QBtWdBqXuwM/IZ9iOHLJ5lXe6422Wpr+O9B9Vc0ByEU=) 2: d-ZgCOBX-bnyXymKa1SuDj5rBlw.roa (hash: y//RDl/N7uwiS3ix7FguqOqN3XfD3i8I9nlyndyoqYQ=) 3: j9ojRqA8hjMwSRYUCcpjNJf9hKs.roa (hash: wQ5cGmc4TT6YDfuWa820fpVGpW1HF0ecpTjnTfQVH14=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:44:87:4c:5f:64:b7:8d:bf:16:2d:69:d3:03:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499 Validity Not Before: Jan 25 09:01:44 2026 GMT Not After : Jan 26 09:01:44 2026 GMT Subject: CN=3c3725064576db2166e9a4fa58cf995fbac592f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9f:3c:ec:f3:8f:ec:6c:55:4d:a5:51:85:76: be:ef:12:6a:a9:22:77:16:52:dc:d0:7c:03:1c:91: 43:79:47:81:63:e8:34:81:19:87:96:88:71:91:60: 71:51:ef:3f:b9:b5:a1:9c:55:41:83:30:42:55:ab: 86:3b:20:ff:f6:4b:40:61:39:8d:92:bb:1b:bd:15: 05:8e:e4:51:ca:bc:3d:7a:ee:8f:78:30:e2:f3:59: 8f:50:db:9a:91:73:3f:7b:fd:9d:12:1d:bc:17:b4: 00:12:17:cf:d6:09:93:bf:e7:83:96:7b:b6:af:53: 27:2a:d0:d5:f3:31:c2:d0:ee:9d:4a:37:4d:20:67: 6a:51:a1:28:f8:eb:a0:4f:7b:22:54:b4:22:eb:61: c0:52:47:45:37:84:ae:d9:40:d9:3a:c7:45:92:5c: b8:78:36:37:db:4d:47:ba:4f:20:86:46:76:95:52: d5:52:b9:98:1c:20:5c:dc:e9:56:22:5d:1d:3a:9b: ca:ce:78:01:80:62:8e:c2:54:90:47:3c:c7:8b:94: 9c:fd:0c:52:a4:de:4c:9c:30:38:a2:3f:7f:67:25: 72:a0:67:d2:ed:2e:b2:38:a4:cc:ab:6f:21:e9:db: df:ed:2f:4d:40:3a:67:03:e5:fa:d7:62:2e:2a:dc: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:37:25:06:45:76:DB:21:66:E9:A4:FA:58:CF:99:5F:BA:C5:92:F5 X509v3 Authority Key Identifier: keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:93:9b:a1:9c:70:ba:58:3c:2f:49:9f:2b:0e:61:64:96:ff: ff:cd:32:7c:df:0b:b2:46:d9:83:66:01:0f:f7:39:0c:4f:a7: e5:62:6b:93:be:56:37:a1:78:6f:94:7d:18:43:91:ce:49:e3: 6d:00:ea:51:8f:ed:21:0d:ad:47:b2:71:07:bf:b3:52:06:0a: 27:25:2b:9a:cb:78:0e:10:ea:35:05:c3:67:b7:5c:45:2f:54: 5a:4f:8a:f0:84:aa:fe:b9:08:04:4d:ce:54:48:4f:51:d4:11: 17:d0:07:87:ef:57:66:7c:25:ff:94:ad:8e:28:e7:dd:d8:2f: df:c5:7b:20:b1:b2:a6:cb:7e:54:68:bd:53:c1:25:07:2a:3f: 2a:a3:9c:a0:97:b2:71:ec:e9:a2:d2:2b:c5:c2:f8:4f:bb:a1: cf:55:7f:84:cc:5f:ee:df:be:8b:48:9e:42:32:ee:9d:e3:af: 3c:59:ae:17:90:2b:8f:34:06:56:ee:74:73:3d:86:8a:f9:e7: 7b:66:3b:82:ec:d0:c6:61:58:34:18:7b:0f:f5:62:aa:69:4f: 4d:af:06:86:e5:ef:b1:d8:b3:44:8e:71:bd:e6:d3:2b:e0:bc: 75:31:41:ab:e9:b7:c9:b7:d6:94:cc:ff:2c:8b:ff:d3:53:ea: 2c:ab:25:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0Y0SHTF9kt42/Fi1p0wN6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjBkZWMxM2RmMjA1YTY2ZWM1MjI3OTI1YjhmNTZiZGIw OWY0OTkwHhcNMjYwMTI1MDkwMTQ0WhcNMjYwMTI2MDkwMTQ0WjAzMTEwLwYDVQQD EygzYzM3MjUwNjQ1NzZkYjIxNjZlOWE0ZmE1OGNmOTk1ZmJhYzU5MmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ887POP7GxVTaVRhXa+7xJqqSJ3 FlLc0HwDHJFDeUeBY+g0gRmHlohxkWBxUe8/ubWhnFVBgzBCVauGOyD/9ktAYTmN krsbvRUFjuRRyrw9eu6PeDDi81mPUNuakXM/e/2dEh28F7QAEhfP1gmTv+eDlnu2 r1MnKtDV8zHC0O6dSjdNIGdqUaEo+OugT3siVLQi62HAUkdFN4Su2UDZOsdFkly4 eDY3201Huk8ghkZ2lVLVUrmYHCBc3OlWIl0dOpvKzngBgGKOwlSQRzzHi5Sc/QxS pN5MnDA4oj9/ZyVyoGfS7S6yOKTMq28h6dvf7S9NQDpnA+X612IuKtzPtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDw3JQZFdtshZumk+ljPmV+6xZL1MB8GA1UdIwQY MBaAFGyw3sE98gWmbsUieSW49WvbCfSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQt NTJiOWU2YTE2MzUwLzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9jYTQ2ZmMtMzg0Ny00ZjFkLTljZTQtNTJiOWU2YTE2MzUw LzEvYkxEZXdUM3lCYVp1eFNKNUpiajFhOXNKOUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe5OboZxw ulg8L0mfKw5hZJb//80yfN8LskbZg2YBD/c5DE+n5WJrk75WN6F4b5R9GEORzknj bQDqUY/tIQ2tR7JxB7+zUgYKJyUrmst4DhDqNQXDZ7dcRS9UWk+K8ISq/rkIBE3O VEhPUdQRF9AHh+9XZnwl/5Stjijn3dgv38V7ILGypst+VGi9U8ElByo/KqOcoJey cezpotIrxcL4T7uhz1V/hMxf7t++i0ieQjLuneOvPFmuF5ArjzQGVu50cz2Givnn e2Y7guzQxmFYNBh7D/ViqmlPTa8GhuXvsdizRI5xvebTK+C8dTFBq+m3ybfWlMz/ LIv/01PqLKslFg== -----END CERTIFICATE-----Generated at Sun Jan 25 13:58:24 2026 by rpki-client