This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft File: bBt3vE7dikuDdEdqc0dxm2drdV4.mft (raw, json) Hash identifier: uysL6SnKUZk6j9zUBuc8TL6+UlYPOk2xK8btspqGoys= Subject key identifier: 3C:B7:6E:15:0C:D7:EF:EA:61:34:E7:BD:06:26:39:AB:36:21:17:06 Authority key identifier: 6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E Certificate issuer: /CN=6c1b77bc4edd8a4b8374476a7347719b676b755e Certificate serial: 019BF3BD79532661FA4716F30D412DB872D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft Manifest number: 097D Signing time: Sun 25 Jan 2026 06:00:39 +0000 Manifest this update: Sun 25 Jan 2026 06:00:39 +0000 Manifest next update: Mon 26 Jan 2026 06:00:39 +0000 Files and hashes: 1: bBt3vE7dikuDdEdqc0dxm2drdV4.crl (hash: DjqV3Hzj0WTTZhA6/6p8jj007dkKDv83rVyDCJ75jws=) 2: e1omXpCIQpnerGyCBf44XvMH7b8.roa (hash: WuuVal2MbC5TVrn+qWtOZo1dB1Kr34wJojmJ2NY5UPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:79:53:26:61:fa:47:16:f3:0d:41:2d:b8:72:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c1b77bc4edd8a4b8374476a7347719b676b755e Validity Not Before: Jan 25 06:00:39 2026 GMT Not After : Jan 26 06:00:39 2026 GMT Subject: CN=3cb76e150cd7efea6134e7bd062639ab36211706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:82:85:40:7f:86:06:7d:92:f9:f2:6c:a7:3e: df:bc:2f:4b:a0:a8:68:09:94:14:12:a8:76:30:f7: c8:3e:bc:8c:72:0c:1c:c5:eb:a0:b7:86:b4:99:7e: f9:0d:42:25:7b:83:ad:72:34:21:02:c1:2e:81:4c: 45:af:dd:7e:dc:0c:56:b6:cc:52:14:7a:4b:fe:91: 3d:c0:2e:f7:40:71:4b:d4:7d:a9:5d:6b:3d:b5:2e: f2:79:c4:9b:b2:cf:c4:07:d0:df:28:a0:ef:f7:41: 6b:7b:84:5f:07:56:07:ff:66:7b:cd:6e:a2:40:b3: 4b:8a:19:02:bd:54:24:d5:64:49:42:ef:88:29:82: 75:a0:fc:47:67:4e:b7:64:f8:d5:02:4b:7d:ad:21: b4:f2:51:88:a2:76:f2:3b:81:c8:4a:14:36:af:bb: 23:74:21:b4:18:60:90:4b:48:b5:49:07:4c:a1:87: 51:96:70:60:34:18:6b:30:92:34:d1:b3:7b:8c:c1: 7a:68:1a:08:79:38:55:cf:b9:bc:b5:ce:f1:11:fe: 91:0a:71:31:4b:25:fa:4e:52:94:10:0d:51:f3:4e: 92:07:aa:81:8e:5e:ce:b4:69:aa:44:73:31:7b:33: 2b:7c:d2:d9:9a:28:7e:e0:33:6b:65:62:6c:92:52: 6e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B7:6E:15:0C:D7:EF:EA:61:34:E7:BD:06:26:39:AB:36:21:17:06 X509v3 Authority Key Identifier: keyid:6C:1B:77:BC:4E:DD:8A:4B:83:74:47:6A:73:47:71:9B:67:6B:75:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBt3vE7dikuDdEdqc0dxm2drdV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/367d39-8be4-4ecb-9bb6-ffd91b425a00/1/bBt3vE7dikuDdEdqc0dxm2drdV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:26:91:c3:01:82:94:5c:d0:ef:38:b1:95:19:68:93:bb:7b: d4:dd:1d:cc:bc:eb:c1:83:cc:6d:8f:5c:ac:20:54:f5:80:84: 95:e9:bb:58:d6:4a:3f:fb:65:e4:41:e5:19:10:65:cd:9d:9d: db:72:b2:2d:7b:9c:9e:41:d6:cf:5c:af:2d:a3:da:45:e4:c5: 4d:a8:1f:8a:c9:a8:85:1e:a3:a9:0c:79:40:0d:34:88:7f:2f: f6:3a:3f:87:b5:49:91:df:4e:ae:51:7e:e0:6f:e8:84:f7:e3: 6f:b4:1a:17:ce:66:ab:1e:0d:ab:44:30:5e:fe:2a:c8:eb:6b: bf:0b:ce:8a:d2:ee:5f:32:e3:1a:29:22:74:91:66:a9:98:23: 70:67:94:c5:e0:b7:ac:3f:ae:3a:65:6e:8f:52:02:4c:bb:ea: 2b:24:7e:65:1c:cf:bd:3f:74:b5:00:a1:59:19:b8:d6:41:c8: 65:2c:aa:e8:96:e2:4f:bd:10:93:0d:4d:0e:c1:f4:a9:64:4c: 30:0b:39:68:79:26:92:2e:9d:ec:3c:4d:8a:35:a7:22:51:6d: 41:96:c9:b8:44:29:72:1d:3d:46:3c:47:87:30:69:fb:cf:9a: f3:d1:6c:47:53:ed:be:8d:39:9f:12:c8:55:f2:5d:3c:7b:89: ea:95:a6:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvXlTJmH6RxbzDUEtuHLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMWI3N2JjNGVkZDhhNGI4Mzc0NDc2YTczNDc3MTliNjc2 Yjc1NWUwHhcNMjYwMTI1MDYwMDM5WhcNMjYwMTI2MDYwMDM5WjAzMTEwLwYDVQQD EygzY2I3NmUxNTBjZDdlZmVhNjEzNGU3YmQwNjI2MzlhYjM2MjExNzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIKFQH+GBn2S+fJspz7fvC9LoKho CZQUEqh2MPfIPryMcgwcxeugt4a0mX75DUIle4OtcjQhAsEugUxFr91+3AxWtsxS FHpL/pE9wC73QHFL1H2pXWs9tS7yecSbss/EB9DfKKDv90Fre4RfB1YH/2Z7zW6i QLNLihkCvVQk1WRJQu+IKYJ1oPxHZ063ZPjVAkt9rSG08lGIonbyO4HIShQ2r7sj dCG0GGCQS0i1SQdMoYdRlnBgNBhrMJI00bN7jMF6aBoIeThVz7m8tc7xEf6RCnEx SyX6TlKUEA1R806SB6qBjl7OtGmqRHMxezMrfNLZmih+4DNrZWJsklJu6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDy3bhUM1+/qYTTnvQYmOas2IRcGMB8GA1UdIwQY MBaAFGwbd7xO3YpLg3RHanNHcZtna3VeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYt ZmZkOTFiNDI1YTAwLzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zNjdkMzktOGJlNC00ZWNiLTliYjYtZmZkOTFiNDI1YTAw LzEvYkJ0M3ZFN2Rpa3VEZEVkcWMwZHhtMmRyZFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWiaRwwGC lFzQ7zixlRlok7t71N0dzLzrwYPMbY9crCBU9YCElem7WNZKP/tl5EHlGRBlzZ2d 23KyLXucnkHWz1yvLaPaReTFTagfismohR6jqQx5QA00iH8v9jo/h7VJkd9OrlF+ 4G/ohPfjb7QaF85mqx4Nq0QwXv4qyOtrvwvOitLuXzLjGikidJFmqZgjcGeUxeC3 rD+uOmVuj1ICTLvqKyR+ZRzPvT90tQChWRm41kHIZSyq6JbiT70Qkw1NDsH0qWRM MAs5aHkmki6d7DxNijWnIlFtQZbJuEQpch09RjxHhzBp+8+a89FsR1Ptvo05nxLI VfJdPHuJ6pWmYw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:16 2026 by rpki-client