This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft File: brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json) Hash identifier: vYkD1e2jq2Ye9cNQEt5VwGYhBHLLIy6O2QgSVxCcQHo= Subject key identifier: 9F:22:B4:EF:A6:BA:72:FE:3E:FC:EF:24:78:06:C1:50:A9:15:5A:BA Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0 Certificate issuer: /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0 Certificate serial: 019BF3192F7BEB3095E9DAB0D707D70347D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft Manifest number: 060D Signing time: Sun 25 Jan 2026 03:01:12 +0000 Manifest this update: Sun 25 Jan 2026 03:01:12 +0000 Manifest next update: Mon 26 Jan 2026 03:01:12 +0000 Files and hashes: 1: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: 7oy2CIvrOGfAxFWKLy91VzTpQWmeLmJ1S/PuuF4tViw=) 2: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (hash: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM=) 3: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (hash: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:19:2f:7b:eb:30:95:e9:da:b0:d7:07:d7:03:47:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0 Validity Not Before: Jan 25 03:01:12 2026 GMT Not After : Jan 26 03:01:12 2026 GMT Subject: CN=9f22b4efa6ba72fe3efcef247806c150a9155aba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ef:c9:41:f8:12:b3:9a:82:9e:ec:83:c0:94: 22:6d:bf:3d:88:67:04:96:93:87:a9:90:49:5d:6e: ae:a1:c0:cb:73:4e:56:29:7c:72:63:46:b4:82:5e: b6:70:4f:6f:10:e1:a8:6b:7f:cc:d6:75:ea:e1:b1: f1:a8:31:cd:d0:32:a4:2e:06:25:2b:0e:58:c1:3b: 49:19:c3:c0:90:53:61:4f:59:e3:18:fa:a6:97:ff: 71:69:37:81:30:ba:59:24:70:da:ee:50:78:d8:ff: d4:fd:60:0e:85:c3:0d:d2:eb:11:c3:c4:17:26:84: 7b:7f:49:dd:fc:db:7f:25:4b:ab:00:6f:13:43:c4: a2:5b:ca:05:ef:e0:32:2e:8d:05:c5:1f:03:3c:9a: b5:24:86:e0:6b:36:ab:62:04:9e:05:85:db:ba:13: fe:c2:69:5e:a5:e8:d3:dc:9c:4e:f7:4c:fb:41:34: 33:76:08:85:2a:dd:e5:dd:dc:95:ca:69:ca:38:11: 84:dd:b8:eb:f9:92:52:6f:f5:d1:00:48:64:20:20: 01:58:f6:0c:92:0d:f3:c2:a9:44:5b:6c:5c:1c:b5: 29:be:aa:35:2a:d4:6b:4e:17:ab:af:5e:b9:af:fc: 12:12:1e:3d:3f:2d:2e:5e:64:f4:4e:55:0e:45:18: 33:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:22:B4:EF:A6:BA:72:FE:3E:FC:EF:24:78:06:C1:50:A9:15:5A:BA X509v3 Authority Key Identifier: keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:84:d9:5e:84:1c:a0:20:2b:aa:a0:af:83:6a:75:e2:e5:28: 99:df:58:92:47:10:66:a4:b3:28:9c:f5:e0:28:19:45:02:5b: 9c:45:60:33:13:58:15:2b:ff:8a:fb:8b:d6:bc:72:bd:c3:7d: 23:7d:96:30:a1:3b:36:55:2a:33:b2:e0:05:8b:b6:b2:9b:da: c9:6b:09:31:e7:1b:32:f4:89:ef:8f:11:59:1b:c0:4d:aa:7f: 5c:53:c4:93:05:ba:0b:10:f2:81:ce:ca:af:bf:fc:74:a4:95: 32:b0:80:8d:ef:77:d1:7b:9c:d0:ed:c3:c0:e1:57:81:07:9a: fa:9d:b4:de:3c:dc:cc:eb:3b:db:15:05:58:fb:6b:26:e3:15: 1f:b1:d3:7d:3f:ab:30:7c:52:70:e0:a1:de:2c:de:d7:bb:67: 3e:58:e2:88:d8:dd:1f:81:ee:d8:fe:8a:ab:b3:65:f0:03:f4: 00:a9:f0:01:64:f8:e4:18:5b:93:3b:fc:4f:62:e5:e5:c2:fb: 4d:76:56:e1:bc:33:85:7a:31:39:8f:1c:1d:c4:af:48:db:53: 11:e7:f3:61:2a:0c:7e:d0:d7:10:0a:bf:90:d8:2c:e3:6b:0e: c6:e0:12:55:6b:a4:89:36:5c:66:0e:5e:ea:47:77:64:e5:c6: 0b:a9:96:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGS976zCV6dqw1wfXA0fQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjY0ZmE4ZTA1YTJkN2Y1NjRhY2YyODlhZTc1N2M0MDRj ZGQ5ZDAwHhcNMjYwMTI1MDMwMTEyWhcNMjYwMTI2MDMwMTEyWjAzMTEwLwYDVQQD Eyg5ZjIyYjRlZmE2YmE3MmZlM2VmY2VmMjQ3ODA2YzE1MGE5MTU1YWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO/JQfgSs5qCnuyDwJQibb89iGcE lpOHqZBJXW6uocDLc05WKXxyY0a0gl62cE9vEOGoa3/M1nXq4bHxqDHN0DKkLgYl Kw5YwTtJGcPAkFNhT1njGPqml/9xaTeBMLpZJHDa7lB42P/U/WAOhcMN0usRw8QX JoR7f0nd/Nt/JUurAG8TQ8SiW8oF7+AyLo0FxR8DPJq1JIbgazarYgSeBYXbuhP+ wmlepejT3JxO90z7QTQzdgiFKt3l3dyVymnKOBGE3bjr+ZJSb/XRAEhkICABWPYM kg3zwqlEW2xcHLUpvqo1KtRrTherr165r/wSEh49Py0uXmT0TlUORRgzTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ8itO+munL+PvzvJHgGwVCpFVq6MB8GA1UdIwQY MBaAFG62T6jgWi1/VkrPKJrnV8QEzdnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMt ODhjZjcyY2E5ZTQ2LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMtODhjZjcyY2E5ZTQ2 LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnoTZXoQc oCArqqCvg2p14uUomd9YkkcQZqSzKJz14CgZRQJbnEVgMxNYFSv/ivuL1rxyvcN9 I32WMKE7NlUqM7LgBYu2spvayWsJMecbMvSJ748RWRvATap/XFPEkwW6CxDygc7K r7/8dKSVMrCAje930Xuc0O3DwOFXgQea+p203jzczOs72xUFWPtrJuMVH7HTfT+r MHxScOCh3ize17tnPljiiNjdH4Hu2P6Kq7Nl8AP0AKnwAWT45Bhbkzv8T2Ll5cL7 TXZW4bwzhXoxOY8cHcSvSNtTEefzYSoMftDXEAq/kNgs42sOxuASVWukiTZcZg5e 6kd3ZOXGC6mWWg== -----END CERTIFICATE-----Generated at Sun Jan 25 09:06:25 2026 by rpki-client