This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json) Hash identifier: T1gtOsmcj/uLICZJUeTG9QexF8UHge2+j4E1hs2dTMw= Subject key identifier: 7F:A6:40:4E:50:28:07:3B:BA:C3:94:B1:6A:62:54:E7:D8:74:1D:44 Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d Certificate serial: 019BF988E8E9903D2BD46A05D5F6CFBDBDC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft Manifest number: 14D6 Signing time: Mon 26 Jan 2026 09:00:57 +0000 Manifest this update: Mon 26 Jan 2026 09:00:57 +0000 Manifest next update: Tue 27 Jan 2026 09:00:57 +0000 Files and hashes: 1: Oon2IIrGkbnZaP-hb1ZNPn5crpM.roa (hash: aV6nVsAigskV1T2EnkJOb7mIfcRM6nE2dCNvULEtGlA=) 2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: pH+Jr8nQ5vNyaKmkd/ascWEKCsuy1S/N3j72c4ZYN78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:e8:e9:90:3d:2b:d4:6a:05:d5:f6:cf:bd:bd:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d Validity Not Before: Jan 26 09:00:57 2026 GMT Not After : Jan 27 09:00:57 2026 GMT Subject: CN=7fa6404e5028073bbac394b16a6254e7d8741d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:ff:c4:ba:28:5b:c4:87:e9:cf:e7:85:ab:b1: 41:04:7f:2c:87:4b:75:2a:eb:c2:25:5a:e8:82:da: 66:5c:64:31:3e:c8:ac:37:e8:dd:51:b1:7f:4b:25: f7:d9:d5:c0:a6:85:0e:af:b6:e8:ec:7e:6e:7b:60: f4:fb:f7:b7:35:d1:b5:7d:60:ed:b9:29:fb:c8:bf: 35:0e:05:5d:ef:e3:64:07:b6:cc:3c:02:e0:75:7f: 11:d8:dc:3b:55:93:38:14:4e:b7:d7:99:6f:99:40: 81:cd:54:a3:ed:f2:2e:fd:9b:a8:c3:30:87:bf:00: 6a:d5:d8:28:31:79:98:e7:72:31:d8:88:e9:91:e1: d5:77:a0:8b:96:6d:78:0d:50:21:68:18:ac:86:c1: 7a:49:74:88:e9:4e:08:56:c3:cb:32:ea:06:98:2e: 39:57:04:27:50:7c:65:5c:42:ba:a9:c8:c5:a1:75: 68:6b:c8:4a:51:4a:f2:cf:ac:e1:04:4e:fd:6b:e2: 2d:2b:43:b0:21:90:b4:4d:e5:09:af:a4:95:5d:86: 2b:c0:c6:42:25:84:3b:3c:de:06:de:5c:d3:3c:32: bb:19:cf:de:f9:d5:c8:c4:ee:99:57:1f:fa:58:13: 72:92:5d:29:d5:17:2a:da:2b:b4:0c:9f:0e:0d:43: f5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:A6:40:4E:50:28:07:3B:BA:C3:94:B1:6A:62:54:E7:D8:74:1D:44 X509v3 Authority Key Identifier: keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:eb:c8:cf:1c:67:b5:98:a0:e7:ed:cb:73:b3:a4:6d:89:eb: e0:a6:70:1a:b9:58:64:4b:02:69:96:ff:32:72:9c:fb:26:2c: d0:d9:34:aa:ed:ad:a4:0a:ec:41:49:84:cc:ba:a2:b3:27:3c: 86:2d:6e:c1:98:1b:e7:00:50:be:59:5d:81:15:73:72:ad:af: 60:20:a0:df:8d:a7:8b:71:e1:fa:96:28:62:03:eb:5d:7e:7d: 69:7f:90:6a:93:56:c8:f9:48:59:c5:a4:f4:09:89:68:d0:de: 72:ff:16:a0:ee:8a:83:3c:c9:10:bb:1f:59:0f:36:78:fa:df: 2a:d8:81:ef:d0:23:b1:02:c2:4d:65:9c:f6:08:a5:97:92:dd: 3c:1b:89:76:e8:c8:ec:a3:b1:c0:05:70:82:59:5b:79:a5:a8: fa:16:cb:43:a8:bb:43:65:69:db:19:d9:61:fd:73:bd:27:b1: ac:f7:d7:e6:0d:e9:72:f6:5f:8d:71:d9:27:56:49:33:b1:82: 05:15:9f:90:e8:21:9f:61:62:f6:3e:75:5f:4a:2d:a4:d2:2f: 6c:d1:c6:10:b8:51:28:35:33:29:0a:5a:79:74:f4:25:b9:51: 17:15:8a:1f:fc:bd:d9:23:31:e1:d7:cc:cd:8c:5c:74:f1:82: b0:25:76:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iOjpkD0r1GoF1fbPvb3GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlM2U1MDFkMjUxM2U1YWVkNDQyM2Q3ZWIyNjVlNjA4MjJh OGU3OGQwHhcNMjYwMTI2MDkwMDU3WhcNMjYwMTI3MDkwMDU3WjAzMTEwLwYDVQQD Eyg3ZmE2NDA0ZTUwMjgwNzNiYmFjMzk0YjE2YTYyNTRlN2Q4NzQxZDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4v/EuihbxIfpz+eFq7FBBH8sh0t1 KuvCJVrogtpmXGQxPsisN+jdUbF/SyX32dXApoUOr7bo7H5ue2D0+/e3NdG1fWDt uSn7yL81DgVd7+NkB7bMPALgdX8R2Nw7VZM4FE6315lvmUCBzVSj7fIu/ZuowzCH vwBq1dgoMXmY53Ix2IjpkeHVd6CLlm14DVAhaBishsF6SXSI6U4IVsPLMuoGmC45 VwQnUHxlXEK6qcjFoXVoa8hKUUryz6zhBE79a+ItK0OwIZC0TeUJr6SVXYYrwMZC JYQ7PN4G3lzTPDK7Gc/e+dXIxO6ZVx/6WBNykl0p1Rcq2iu0DJ8ODUP1WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+mQE5QKAc7usOUsWpiVOfYdB1EMB8GA1UdIwQY MBaAFG4+UB0lE+Wu1EI9frJl5ggiqOeNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQt MTFkYWYxNzBkN2NkLzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQtMTFkYWYxNzBkN2Nk LzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuvIzxxn tZig5+3Lc7OkbYnr4KZwGrlYZEsCaZb/MnKc+yYs0Nk0qu2tpArsQUmEzLqisyc8 hi1uwZgb5wBQvlldgRVzcq2vYCCg342ni3Hh+pYoYgPrXX59aX+QapNWyPlIWcWk 9AmJaNDecv8WoO6KgzzJELsfWQ82ePrfKtiB79AjsQLCTWWc9gill5LdPBuJdujI 7KOxwAVwgllbeaWo+hbLQ6i7Q2Vp2xnZYf1zvSexrPfX5g3pcvZfjXHZJ1ZJM7GC BRWfkOghn2Fi9j51X0otpNIvbNHGELhRKDUzKQpaeXT0JblRFxWKH/y92SMx4dfM zYxcdPGCsCV2qQ== -----END CERTIFICATE-----Generated at Mon Jan 26 12:25:34 2026 by rpki-client