This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft File: BrjtmF7yA06OMHxEfzSWwyra0sg.mft (raw, json) Hash identifier: 0TKN4S7M/Kp6rZEXld0bfakhaK1kjVSZydJrJy20lJI= Subject key identifier: 2D:6E:7E:BF:38:D0:BC:09:73:63:B6:55:D9:D8:F3:3A:9F:E9:41:E8 Authority key identifier: 06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8 Certificate issuer: /CN=06b8ed985ef2034e8e307c447f3496c32adad2c8 Certificate serial: 019BF8ADE236B384CD32EBB68CDB5E8B27EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 05:01:43 +0000 Manifest this update: Mon 26 Jan 2026 05:01:43 +0000 Manifest next update: Tue 27 Jan 2026 05:01:43 +0000 Files and hashes: 1: BrjtmF7yA06OMHxEfzSWwyra0sg.crl (hash: RI38zNFFer1lwQI2Z8Z8MdxTVRrjbSwQX37IYB+LPu0=) 2: RV6tXj6W0nE7aN2FDSjnLLCyX9g.roa (hash: WdrE3hN0kAlM8z4J7L3E1iNI3SXMCvpVCPSlTiuP6e8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:e2:36:b3:84:cd:32:eb:b6:8c:db:5e:8b:27:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06b8ed985ef2034e8e307c447f3496c32adad2c8 Validity Not Before: Jan 26 05:01:43 2026 GMT Not After : Jan 27 05:01:43 2026 GMT Subject: CN=2d6e7ebf38d0bc097363b655d9d8f33a9fe941e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e5:27:53:46:7c:b1:bd:df:ee:24:cb:bd:f5: c7:bb:1c:54:b1:e9:24:95:77:0c:5e:85:0c:47:12: 65:3f:46:4f:7f:0c:30:23:91:e4:2a:26:d0:08:07: fc:86:ab:82:8a:3e:ce:2a:99:69:ec:3c:1f:fa:a3: eb:9b:94:c5:39:bd:32:85:55:7d:71:7c:a6:49:d4: fb:ae:71:b5:c9:53:e1:f0:80:b6:b7:27:34:04:73: 6c:94:9a:ef:98:71:d1:f9:fa:0a:75:f3:67:86:34: c0:e1:1b:13:3e:34:1b:09:a5:cc:70:2b:a8:fd:06: 89:3f:d6:ae:12:97:31:b8:b5:fe:07:0c:62:ed:c8: 4a:cc:47:52:65:47:15:0b:69:64:92:e1:8f:e2:43: bc:38:ea:33:1f:3b:9b:2b:d1:2b:ee:cf:f2:68:5c: 36:fc:40:0e:ac:79:7f:14:35:41:0d:aa:b2:d6:f0: bb:3b:76:05:e3:a3:c9:55:ff:1b:b7:5a:5a:24:53: 4b:cc:f8:ed:7b:a3:83:6a:74:82:71:06:72:97:c4: 73:d2:0d:9c:08:4c:6d:7e:0a:ff:6c:6b:55:7a:81: 63:c4:af:6b:aa:c3:84:d5:e3:ac:58:f4:0c:71:67: 1b:35:a4:2d:d2:58:d8:fa:d1:a7:d4:a8:a5:6b:6b: 75:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6E:7E:BF:38:D0:BC:09:73:63:B6:55:D9:D8:F3:3A:9F:E9:41:E8 X509v3 Authority Key Identifier: keyid:06:B8:ED:98:5E:F2:03:4E:8E:30:7C:44:7F:34:96:C3:2A:DA:D2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrjtmF7yA06OMHxEfzSWwyra0sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/fc5af5-0b50-4531-9374-ebeb9a991488/1/BrjtmF7yA06OMHxEfzSWwyra0sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8e:3c:34:90:bc:02:9c:2d:d2:ea:ae:2a:f1:ee:2b:84:a3: a5:92:30:3f:49:79:e9:e2:50:d0:60:aa:d0:53:84:36:f3:1c: 3e:64:00:90:14:48:e5:40:45:12:29:c7:e1:df:14:7c:57:41: 16:8c:d6:68:2c:53:0d:4b:1f:0a:58:57:9b:bd:be:7f:6c:82: 22:89:66:f1:f4:2c:32:dd:ef:16:67:04:31:0f:fb:6b:c4:a7: c9:26:a4:45:e1:a9:6f:73:71:92:9c:64:2b:34:7a:99:8a:34: c5:31:1d:40:07:88:54:d0:8b:7a:58:f7:75:b4:d7:4d:25:ab: 78:a0:6e:85:2e:af:37:af:62:6f:b6:8b:21:9a:af:67:a1:e9: 4a:0a:e1:da:ae:71:03:e9:57:d9:e4:27:4c:11:ed:16:1a:60: 02:9d:b4:b0:73:d7:15:22:14:91:26:43:8b:d5:ce:f7:8c:1d: 63:64:bf:1d:91:ab:c6:38:e8:c7:bd:3a:2d:22:8b:5f:86:3d: cb:7d:a7:8e:85:22:e2:08:d2:eb:61:f7:ab:f5:e9:ec:7e:c7: a0:15:22:9d:d6:d8:00:43:b1:69:f5:6f:8f:9a:e5:e7:f9:6a: 42:55:50:56:58:34:10:0c:19:21:92:07:8c:75:84:3a:f9:ad: 9b:a9:de:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4reI2s4TNMuu2jNteiyfrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YjhlZDk4NWVmMjAzNGU4ZTMwN2M0NDdmMzQ5NmMzMmFk YWQyYzgwHhcNMjYwMTI2MDUwMTQzWhcNMjYwMTI3MDUwMTQzWjAzMTEwLwYDVQQD EygyZDZlN2ViZjM4ZDBiYzA5NzM2M2I2NTVkOWQ4ZjMzYTlmZTk0MWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuUnU0Z8sb3f7iTLvfXHuxxUsekk lXcMXoUMRxJlP0ZPfwwwI5HkKibQCAf8hquCij7OKplp7Dwf+qPrm5TFOb0yhVV9 cXymSdT7rnG1yVPh8IC2tyc0BHNslJrvmHHR+foKdfNnhjTA4RsTPjQbCaXMcCuo /QaJP9auEpcxuLX+Bwxi7chKzEdSZUcVC2lkkuGP4kO8OOozHzubK9Er7s/yaFw2 /EAOrHl/FDVBDaqy1vC7O3YF46PJVf8bt1paJFNLzPjte6ODanSCcQZyl8Rz0g2c CExtfgr/bGtVeoFjxK9rqsOE1eOsWPQMcWcbNaQt0ljY+tGn1Kila2t1/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1ufr840LwJc2O2VdnY8zqf6UHoMB8GA1UdIwQY MBaAFAa47Zhe8gNOjjB8RH80lsMq2tLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQt ZWJlYjlhOTkxNDg4LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mYzVhZjUtMGI1MC00NTMxLTkzNzQtZWJlYjlhOTkxNDg4 LzEvQnJqdG1GN3lBMDZPTUh4RWZ6U1d3eXJhMHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMY48NJC8 Apwt0uquKvHuK4SjpZIwP0l56eJQ0GCq0FOENvMcPmQAkBRI5UBFEinH4d8UfFdB FozWaCxTDUsfClhXm72+f2yCIolm8fQsMt3vFmcEMQ/7a8SnySakReGpb3Nxkpxk KzR6mYo0xTEdQAeIVNCLelj3dbTXTSWreKBuhS6vN69ib7aLIZqvZ6HpSgrh2q5x A+lX2eQnTBHtFhpgAp20sHPXFSIUkSZDi9XO94wdY2S/HZGrxjjox706LSKLX4Y9 y32njoUi4gjS62H3q/Xp7H7HoBUindbYAEOxafVvj5rl5/lqQlVQVlg0EAwZIZIH jHWEOvmtm6neow== -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:45 2026 by rpki-client