This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft File: BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft (raw, json) Hash identifier: Vuc8maj8trx31rf9KH27VYO6JpmErfcE886DpmluJTE= Subject key identifier: 15:D2:4C:27:85:CB:20:F7:68:A6:F2:04:FB:B4:94:E7:EA:A0:51:C0 Authority key identifier: 04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88 Certificate issuer: /CN=04345b7638de9d2d2966527cb363e37c31d4a188 Certificate serial: 019BF5E36C88804B89AD45BCA51DD8795EB6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft Manifest number: 071C Signing time: Sun 25 Jan 2026 16:01:20 +0000 Manifest this update: Sun 25 Jan 2026 16:01:20 +0000 Manifest next update: Mon 26 Jan 2026 16:01:20 +0000 Files and hashes: 1: BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl (hash: SZDDHsWkvnTAIbDWTtWp9e5Ws7euGEDYflQ6DPWt1iw=) 2: D11DDtRSfUPKIJoObwE0ulcCyHA.roa (hash: 8G0oMjv0ep8YMr6bTxIdYNKBAAbfLyPFVH5h489dkok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:6c:88:80:4b:89:ad:45:bc:a5:1d:d8:79:5e:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04345b7638de9d2d2966527cb363e37c31d4a188 Validity Not Before: Jan 25 16:01:20 2026 GMT Not After : Jan 26 16:01:20 2026 GMT Subject: CN=15d24c2785cb20f768a6f204fbb494e7eaa051c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:14:c0:aa:51:76:bc:65:f7:1b:4c:38:5a:f1: a2:4d:7c:45:61:92:bd:b0:23:a0:db:ea:0e:04:a6: 10:f4:8f:05:41:e6:d8:81:4c:1c:d2:2b:62:d2:51: 88:1d:c9:80:b0:b1:67:61:dc:c6:a7:5e:bb:f8:0a: 4f:8e:63:cf:90:7c:9b:a8:d3:19:e1:91:b6:c7:7c: b8:41:40:b9:6f:76:fa:09:33:6d:ad:53:52:c9:12: 10:ed:26:8b:50:e2:40:c0:43:37:53:24:81:b4:62: 46:70:61:7b:9a:82:4a:74:7b:be:1c:01:7a:8a:73: a2:ae:e5:c6:88:7e:db:97:31:0c:f6:d4:e6:03:c5: 69:62:2a:9b:5f:6a:ad:cd:80:99:8a:a1:9e:ab:be: c0:ef:b4:b3:f1:78:c7:07:4a:7e:b7:dc:8b:9c:3c: 68:9c:15:fc:86:34:eb:30:31:d3:a1:dc:35:cb:7d: 41:8e:40:c4:0e:ab:ff:17:65:11:06:63:49:4b:e9: da:f2:86:c6:d8:55:d4:28:11:58:11:84:44:ff:2c: e2:ac:31:ff:23:e8:01:50:00:a8:14:88:ed:0b:b4: 4f:28:ac:0d:ad:43:82:8f:09:70:5a:df:24:b5:28: 3f:62:49:4f:7e:a1:ae:0c:94:36:a6:19:2e:60:9a: 6e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D2:4C:27:85:CB:20:F7:68:A6:F2:04:FB:B4:94:E7:EA:A0:51:C0 X509v3 Authority Key Identifier: keyid:04:34:5B:76:38:DE:9D:2D:29:66:52:7C:B3:63:E3:7C:31:D4:A1:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDRbdjjenS0pZlJ8s2PjfDHUoYg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/194873-7a93-45d0-9465-22a7d2e7453c/1/BDRbdjjenS0pZlJ8s2PjfDHUoYg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:31:a4:74:8f:24:61:0b:70:e5:25:f4:57:4b:d8:c7:d4:0c: 76:be:d0:a0:5f:d9:6f:ec:c0:11:5f:78:30:d5:2c:90:79:a8: 0f:e4:8d:cd:2b:f6:6d:f0:aa:24:a2:a1:ed:70:b3:02:a6:f0: 47:0f:7b:8f:42:df:53:23:70:60:24:36:da:69:91:a9:b4:fd: 8a:85:5e:32:30:ab:54:89:41:31:5b:2c:d0:96:ab:00:65:87: 30:d1:26:c3:1d:6c:94:f5:52:20:f9:1d:43:fb:1a:c2:9c:00: 37:6f:2f:64:78:fc:cb:67:6e:fc:02:1d:d2:94:b5:d8:c9:6c: 87:ed:dd:6a:8b:92:9a:21:69:b8:6c:b1:4b:37:89:ce:29:fd: d4:00:47:a5:ca:c2:36:63:13:d7:3c:ba:3c:44:15:4a:f9:ef: d8:42:65:2d:a4:0c:db:b3:3b:a1:1c:2f:47:7a:d8:37:31:a2: d4:ae:d0:0f:ca:66:7f:a2:50:cb:e9:78:1d:7d:41:c9:cc:80: 7c:8c:9c:a6:f6:9b:c3:da:17:3d:36:db:aa:0d:27:b8:ec:cc: 52:11:d8:5f:64:70:b2:60:a9:c7:e7:f1:87:f8:2d:70:d5:ab: e7:55:8d:f4:49:c4:f1:f9:19:0d:06:60:eb:c9:b8:c3:10:a0: 91:f2:c4:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv142yIgEuJrUW8pR3YeV62MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzQ1Yjc2MzhkZTlkMmQyOTY2NTI3Y2IzNjNlMzdjMzFk NGExODgwHhcNMjYwMTI1MTYwMTIwWhcNMjYwMTI2MTYwMTIwWjAzMTEwLwYDVQQD EygxNWQyNGMyNzg1Y2IyMGY3NjhhNmYyMDRmYmI0OTRlN2VhYTA1MWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRTAqlF2vGX3G0w4WvGiTXxFYZK9 sCOg2+oOBKYQ9I8FQebYgUwc0iti0lGIHcmAsLFnYdzGp167+ApPjmPPkHybqNMZ 4ZG2x3y4QUC5b3b6CTNtrVNSyRIQ7SaLUOJAwEM3UySBtGJGcGF7moJKdHu+HAF6 inOiruXGiH7blzEM9tTmA8VpYiqbX2qtzYCZiqGeq77A77Sz8XjHB0p+t9yLnDxo nBX8hjTrMDHTodw1y31BjkDEDqv/F2URBmNJS+na8obG2FXUKBFYEYRE/yzirDH/ I+gBUACoFIjtC7RPKKwNrUOCjwlwWt8ktSg/YklPfqGuDJQ2phkuYJpunQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXSTCeFyyD3aKbyBPu0lOfqoFHAMB8GA1UdIwQY MBaAFAQ0W3Y43p0tKWZSfLNj43wx1KGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8xOTQ4NzMtN2E5My00NWQwLTk0NjUt MjJhN2QyZTc0NTNjLzEvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8xOTQ4NzMtN2E5My00NWQwLTk0NjUtMjJhN2QyZTc0NTNj LzEvQkRSYmRqamVuUzBwWmxKOHMyUGpmREhVb1lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlTGkdI8k YQtw5SX0V0vYx9QMdr7QoF/Zb+zAEV94MNUskHmoD+SNzSv2bfCqJKKh7XCzAqbw Rw97j0LfUyNwYCQ22mmRqbT9ioVeMjCrVIlBMVss0JarAGWHMNEmwx1slPVSIPkd Q/sawpwAN28vZHj8y2du/AId0pS12Mlsh+3daouSmiFpuGyxSzeJzin91ABHpcrC NmMT1zy6PEQVSvnv2EJlLaQM27M7oRwvR3rYNzGi1K7QD8pmf6JQy+l4HX1BycyA fIycpvabw9oXPTbbqg0nuOzMUhHYX2RwsmCpx+fxh/gtcNWr51WN9EnE8fkZDQZg 68m4wxCgkfLE/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:08 2026 by rpki-client