This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft File: _Blb1oKo6aEk1YU9xekIquczm64.mft (raw, json) Hash identifier: /k3rpq8NwPWdfiYX8aEmGYDoS25uRReldMrn04Tn++M= Subject key identifier: 79:DA:AA:76:3E:9A:C6:A7:D0:CD:83:4F:F5:8D:6D:21:24:04:BA:88 Authority key identifier: FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE Certificate issuer: /CN=fc195bd682a8e9a124d5853dc5e908aae7339bae Certificate serial: 019BF68797B422C9748BED1EDE2E5EFFE50D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft Manifest number: 158F Signing time: Sun 25 Jan 2026 19:00:39 +0000 Manifest this update: Sun 25 Jan 2026 19:00:39 +0000 Manifest next update: Mon 26 Jan 2026 19:00:39 +0000 Files and hashes: 1: 9Gdq5WTw0ZuPJjsy8zP8qlbPGyM.roa (hash: O7acJDU/WGcI4rlhh92ziSJX98PTL8+XCfV6p+U+LBU=) 2: _Blb1oKo6aEk1YU9xekIquczm64.crl (hash: IdNqAzM69koq1Rrl6hjwh8GF6BLCs4B75EMxMjzBWXY=) 3: d9RC9y2977bpfxw87-wu3C0_I00.roa (hash: XD5GD2bciq08xkPmLM28bS/YqbODr73hxYN34HAtcGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:97:b4:22:c9:74:8b:ed:1e:de:2e:5e:ff:e5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc195bd682a8e9a124d5853dc5e908aae7339bae Validity Not Before: Jan 25 19:00:39 2026 GMT Not After : Jan 26 19:00:39 2026 GMT Subject: CN=79daaa763e9ac6a7d0cd834ff58d6d212404ba88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ea:d6:99:2c:42:54:f0:46:51:52:f1:25:c3: 8a:10:f5:b4:b9:7d:43:4c:b4:9a:9e:0f:4b:23:3d: d4:5c:60:cc:d8:c0:a3:ee:dd:b4:e9:6d:b5:c9:1f: 62:eb:7b:e9:d9:d7:40:32:e9:f1:92:31:ac:73:59: 6b:0b:8b:14:ab:6b:15:38:89:5f:79:a8:35:3d:ae: 82:ae:bb:bf:c8:fc:37:51:fc:8e:95:1a:6e:43:89: 79:4b:2b:12:e7:09:36:f0:69:b9:c7:9d:4b:65:2f: 81:ce:7c:b9:f6:76:7b:2d:41:bc:25:20:7d:ea:8a: 7d:7e:b6:84:ac:7d:81:ef:9b:4c:52:64:59:41:4a: 04:b4:2d:7b:5a:49:bc:a3:a6:0b:7b:43:f1:d1:c6: e0:04:c2:e4:54:9f:b4:d7:cf:e6:1c:4b:38:27:9f: 4f:07:e8:9b:ca:ee:9c:b7:cd:10:40:d6:cc:61:94: 61:45:a1:87:bf:5a:65:a4:a6:ce:d3:ab:7b:cb:69: de:49:6e:dd:73:6e:d3:9b:ff:fa:d0:b6:25:3f:5f: 15:f2:1a:b6:06:10:e7:8f:80:5b:f2:71:bc:23:b7: 00:a9:c8:6a:c7:e4:be:59:80:40:51:3e:5e:1d:d0: f1:cf:a9:c7:e7:5e:8f:c5:f1:fd:f3:3d:f2:8e:68: 7c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DA:AA:76:3E:9A:C6:A7:D0:CD:83:4F:F5:8D:6D:21:24:04:BA:88 X509v3 Authority Key Identifier: keyid:FC:19:5B:D6:82:A8:E9:A1:24:D5:85:3D:C5:E9:08:AA:E7:33:9B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Blb1oKo6aEk1YU9xekIquczm64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/db912f-bf6d-4f24-96ae-cc7b28990b81/1/_Blb1oKo6aEk1YU9xekIquczm64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:71:20:a5:90:19:55:1f:93:4c:e1:67:63:80:b4:62:50:c7: c1:9d:a3:e3:5d:60:a1:2f:d5:f4:fe:9f:7d:38:85:0d:a2:49: d8:f8:df:f4:bf:20:c4:8a:b7:40:e5:05:44:bf:6b:c6:2e:e4: 05:f9:fe:f4:95:8d:b8:78:d8:2f:de:65:cc:d5:a3:ed:d8:95: 91:76:50:df:f3:3a:75:7a:83:36:48:4d:03:ae:7c:fb:2b:55: e7:76:9a:6c:a1:b3:65:dd:93:b1:5b:12:2a:92:12:04:a1:b5: ca:87:0a:4f:83:5b:61:b6:47:6b:ce:ae:22:8f:16:09:48:91: db:f5:4b:45:32:f2:9a:0e:43:d7:89:3c:d7:25:b4:5e:b0:fc: 98:ae:48:24:fb:e3:bf:0c:a4:06:ed:78:ae:4f:3b:ee:d5:7d: f6:3e:54:d3:6b:16:d3:72:d4:73:4c:a8:a3:33:a3:7d:3e:44: 17:db:5c:32:8b:1e:df:7a:d4:a0:d4:cd:70:d9:f0:65:34:a2: 40:c7:c8:f3:d1:f5:81:5e:5f:f5:f1:ed:40:c6:7a:59:5a:7c: c9:ff:2c:35:c6:12:54:b4:00:1b:8e:b4:16:a0:ee:fa:c8:b8: f8:89:3f:5b:18:ce:67:40:d4:61:e3:33:a1:61:dc:8e:f5:a0: 28:3c:89:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h5e0Isl0i+0e3i5e/+UNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTk1YmQ2ODJhOGU5YTEyNGQ1ODUzZGM1ZTkwOGFhZTcz MzliYWUwHhcNMjYwMTI1MTkwMDM5WhcNMjYwMTI2MTkwMDM5WjAzMTEwLwYDVQQD Eyg3OWRhYWE3NjNlOWFjNmE3ZDBjZDgzNGZmNThkNmQyMTI0MDRiYTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+rWmSxCVPBGUVLxJcOKEPW0uX1D TLSang9LIz3UXGDM2MCj7t206W21yR9i63vp2ddAMunxkjGsc1lrC4sUq2sVOIlf eag1Pa6Crru/yPw3UfyOlRpuQ4l5SysS5wk28Gm5x51LZS+Bzny59nZ7LUG8JSB9 6op9fraErH2B75tMUmRZQUoEtC17Wkm8o6YLe0Px0cbgBMLkVJ+018/mHEs4J59P B+ibyu6ct80QQNbMYZRhRaGHv1plpKbO06t7y2neSW7dc27Tm//60LYlP18V8hq2 BhDnj4Bb8nG8I7cAqchqx+S+WYBAUT5eHdDxz6nH516PxfH98z3yjmh8TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnaqnY+msan0M2DT/WNbSEkBLqIMB8GA1UdIwQY MBaAFPwZW9aCqOmhJNWFPcXpCKrnM5uuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUt Y2M3YjI4OTkwYjgxLzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9kYjkxMmYtYmY2ZC00ZjI0LTk2YWUtY2M3YjI4OTkwYjgx LzEvX0JsYjFvS282YUVrMVlVOXhla0lxdWN6bTY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHEgpZAZ VR+TTOFnY4C0YlDHwZ2j411goS/V9P6ffTiFDaJJ2Pjf9L8gxIq3QOUFRL9rxi7k Bfn+9JWNuHjYL95lzNWj7diVkXZQ3/M6dXqDNkhNA658+ytV53aabKGzZd2TsVsS KpISBKG1yocKT4NbYbZHa86uIo8WCUiR2/VLRTLymg5D14k81yW0XrD8mK5IJPvj vwykBu14rk877tV99j5U02sW03LUc0yoozOjfT5EF9tcMose33rUoNTNcNnwZTSi QMfI89H1gV5f9fHtQMZ6WVp8yf8sNcYSVLQAG460FqDu+si4+Ik/WxjOZ0DUYeMz oWHcjvWgKDyJsQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:22:37 2026 by rpki-client