This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft File: 39BGr17cEZZAltwg9q8d5V2ckDA.mft (raw, json) Hash identifier: Y3CrhZwWFbgWc+fHxDMRpY/6WavbQd9aqPUzlclGbb0= Subject key identifier: 4C:F0:30:64:2F:48:79:95:5D:0D:DC:12:46:15:36:4F:75:FB:93:B7 Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30 Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030 Certificate serial: 019BF6BEB77410D4A657A8BE67D237291073 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft Manifest number: 06C1 Signing time: Sun 25 Jan 2026 20:00:52 +0000 Manifest this update: Sun 25 Jan 2026 20:00:52 +0000 Manifest next update: Mon 26 Jan 2026 20:00:52 +0000 Files and hashes: 1: 39BGr17cEZZAltwg9q8d5V2ckDA.crl (hash: xPFMWBaGs9LoxmiwyPParjT1M/KdILYQxS8iCZdBVyE=) 2: ff8nxFEwNiU35BIrYX2EMq7wgM8.roa (hash: JLFff/Q61v4Z6LU+Tog+UuL94G1mvJmCoeYQCLB2v0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:b7:74:10:d4:a6:57:a8:be:67:d2:37:29:10:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030 Validity Not Before: Jan 25 20:00:52 2026 GMT Not After : Jan 26 20:00:52 2026 GMT Subject: CN=4cf030642f4879955d0ddc124615364f75fb93b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f3:3c:42:2f:89:a3:0f:7c:ab:5d:42:8c:24: 9c:04:23:f7:b4:35:bc:2c:7e:68:63:9f:19:a6:ea: 8d:30:d0:91:78:27:10:fb:20:e6:73:47:af:ed:ca: db:d7:de:e2:6c:37:73:12:1c:df:f3:c3:52:58:a7: b2:c8:cc:c6:ba:c4:8e:7a:f1:68:fd:a4:ed:a4:9d: 56:b8:df:85:da:7b:9c:bc:43:1d:a9:56:8c:b7:d5: 6d:14:6e:f3:1a:5a:bf:49:fa:a4:26:ec:3b:bf:b3: 97:de:e5:e9:a2:71:ad:eb:ac:93:1a:2a:8f:3b:98: fa:04:f2:7c:7a:65:29:24:79:b1:4e:3a:27:0a:30: f6:67:89:09:3b:3d:64:c0:0c:de:b3:99:80:ec:a0: 48:96:b7:3b:4e:7c:39:9e:c8:24:c0:11:f0:b4:50: e7:ab:89:09:17:0f:9e:ff:20:31:f4:8f:0f:a0:5e: 4b:fd:b8:be:b9:65:69:23:f7:68:aa:b9:94:70:21: d5:9e:54:89:e1:0b:82:c0:3b:ce:2c:a4:e6:a8:25: 8c:2e:c9:0a:de:c8:cb:ef:7e:81:4f:29:98:07:3e: 2e:1d:ce:6c:a9:bc:19:80:65:4a:89:88:58:61:3c: af:a6:e3:7c:7e:03:f4:fb:cd:46:10:42:32:5d:19: 13:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F0:30:64:2F:48:79:95:5D:0D:DC:12:46:15:36:4F:75:FB:93:B7 X509v3 Authority Key Identifier: keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:d8:3c:32:6e:cb:b2:2a:01:ca:09:d1:1a:50:a3:b4:c9:59: 83:17:db:cf:27:75:ef:88:97:59:79:fd:1c:47:0b:56:9c:f3: 2c:77:5a:27:bf:f2:6e:41:4e:98:32:44:1e:ee:c1:2b:c8:c7: d4:64:d9:90:f9:99:44:c9:e5:a8:c3:60:7a:63:7d:9d:60:5d: a6:2c:a1:80:b9:ca:0e:d8:19:50:ff:46:59:96:0d:b2:42:e2: 94:8a:03:09:49:87:cd:a6:06:ab:28:d5:b3:85:72:1f:24:5c: 83:32:c2:89:61:5a:0e:92:b4:13:8f:9e:84:5e:eb:fc:75:19: 74:de:36:6f:f0:41:d6:4f:a0:fb:a7:e0:e8:fc:19:5f:13:16: 0a:9d:95:81:0e:e5:65:8b:be:e6:8e:ba:8e:f1:e3:62:94:f7: 22:b3:4c:27:81:3c:22:83:55:f4:69:7f:ca:7a:c2:db:83:e6: ea:0f:7c:e8:d9:82:55:e2:50:c1:8a:28:cb:d1:55:80:93:6b: 50:b0:7a:63:1b:fe:4a:2e:5e:dc:84:3c:4c:44:29:18:3e:ca: a6:06:c4:11:f1:ae:c7:37:54:5b:04:2a:42:92:1a:4a:da:28: a6:b4:cd:db:2b:82:2d:35:3c:13:4a:ed:44:dd:bb:67:f9:aa: 60:54:cb:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vrd0ENSmV6i+Z9I3KRBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZDA0NmFmNWVkYzExOTY0MDk2ZGMyMGY2YWYxZGU1NWQ5 YzkwMzAwHhcNMjYwMTI1MjAwMDUyWhcNMjYwMTI2MjAwMDUyWjAzMTEwLwYDVQQD Eyg0Y2YwMzA2NDJmNDg3OTk1NWQwZGRjMTI0NjE1MzY0Zjc1ZmI5M2I3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/M8Qi+Jow98q11CjCScBCP3tDW8 LH5oY58ZpuqNMNCReCcQ+yDmc0ev7crb197ibDdzEhzf88NSWKeyyMzGusSOevFo /aTtpJ1WuN+F2nucvEMdqVaMt9VtFG7zGlq/SfqkJuw7v7OX3uXponGt66yTGiqP O5j6BPJ8emUpJHmxTjonCjD2Z4kJOz1kwAzes5mA7KBIlrc7Tnw5nsgkwBHwtFDn q4kJFw+e/yAx9I8PoF5L/bi+uWVpI/doqrmUcCHVnlSJ4QuCwDvOLKTmqCWMLskK 3sjL736BTymYBz4uHc5sqbwZgGVKiYhYYTyvpuN8fgP0+81GEEIyXRkTIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzwMGQvSHmVXQ3cEkYVNk91+5O3MB8GA1UdIwQY MBaAFN/QRq9e3BGWQJbcIPavHeVdnJAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2Mt NTg4ZTBkOTIzYzE1LzEvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9iZmQwZmYtODQ1ZS00ZTEyLWFjN2MtNTg4ZTBkOTIzYzE1 LzEvMzlCR3IxN2NFWlpBbHR3ZzlxOGQ1VjJja0RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2Ng8Mm7L sioBygnRGlCjtMlZgxfbzyd174iXWXn9HEcLVpzzLHdaJ7/ybkFOmDJEHu7BK8jH 1GTZkPmZRMnlqMNgemN9nWBdpiyhgLnKDtgZUP9GWZYNskLilIoDCUmHzaYGqyjV s4VyHyRcgzLCiWFaDpK0E4+ehF7r/HUZdN42b/BB1k+g+6fg6PwZXxMWCp2VgQ7l ZYu+5o66jvHjYpT3IrNMJ4E8IoNV9Gl/ynrC24Pm6g986NmCVeJQwYooy9FVgJNr ULB6Yxv+Si5e3IQ8TEQpGD7KpgbEEfGuxzdUWwQqQpIaStooprTN2yuCLTU8E0rt RN27Z/mqYFTL5w== -----END CERTIFICATE-----Generated at Mon Jan 26 00:18:47 2026 by rpki-client