This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json) Hash identifier: n8n3Q8OcC+F4qtVrvKhTtoHNRDoihLSQJxdrPdxt0Ks= Subject key identifier: 1D:60:C3:65:54:04:B3:DE:3D:9A:33:6F:9E:44:C4:8B:4B:91:43:00 Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e Certificate serial: 019BF5E3467F13A2FF236422DFE7647A648D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 16:01:11 +0000 Manifest this update: Sun 25 Jan 2026 16:01:11 +0000 Manifest next update: Mon 26 Jan 2026 16:01:11 +0000 Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: fWCZBGqIbD6kbN1Sr4ytFRMLSxesMcZgWItpWAhwUz8=) 2: G2r9KsUTtbxHKB5JKNC2RVQtxUM.roa (hash: tpJ2/AVYhiDqHmd6oabX9AFZV9PFSJLtrHg1I6lP9Xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:46:7f:13:a2:ff:23:64:22:df:e7:64:7a:64:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e Validity Not Before: Jan 25 16:01:11 2026 GMT Not After : Jan 26 16:01:11 2026 GMT Subject: CN=1d60c3655404b3de3d9a336f9e44c48b4b914300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:10:ec:25:8c:0e:a6:70:fd:79:47:68:20:9d: a9:1d:65:72:cc:8a:d4:10:cd:97:a4:af:bc:75:25: 1c:7e:65:4b:69:16:a3:be:e9:cd:6d:f6:f3:56:3c: 08:d3:ae:0c:d7:75:10:b8:3f:bc:6a:fc:2c:7a:d6: 44:7e:1a:87:ec:d0:4b:1a:19:1c:9d:f9:5f:22:16: 9d:82:35:91:4b:0c:34:e9:24:77:71:24:36:98:46: 03:c4:41:3b:6c:20:38:e4:44:a3:84:2f:c1:24:c5: 29:a3:e6:f3:61:2a:24:86:9b:93:f5:1c:b0:e8:48: 71:3d:5b:2e:7b:41:e2:85:78:14:d4:7d:a4:8c:ec: 9a:3a:a4:77:7f:8d:ac:6a:9c:77:a7:ea:84:c9:f3: 13:39:42:5f:c2:16:5e:5f:21:ec:84:ec:c3:98:3f: 38:10:f8:f4:8a:35:15:ce:f4:47:c2:71:30:b0:74: e9:6a:63:89:a2:58:e4:0c:77:b5:fe:8e:ff:a4:08: 4e:b1:df:35:bb:cf:42:8a:d4:f5:28:d9:5c:cd:85: d3:d9:cc:25:8e:11:29:a4:5b:b8:bb:30:78:fa:40: 10:f9:af:71:e5:c7:be:56:93:70:f8:09:b6:59:e9: 6e:ad:32:c5:42:93:08:60:5c:00:41:13:a8:b1:0a: 08:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:60:C3:65:54:04:B3:DE:3D:9A:33:6F:9E:44:C4:8B:4B:91:43:00 X509v3 Authority Key Identifier: keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a9:3d:2e:a3:45:83:37:1e:75:07:35:f9:e3:31:46:16:1f: e7:aa:37:68:a9:52:4e:4d:4a:58:4f:16:ec:41:c2:41:0a:ad: ea:0f:25:f7:d9:a6:59:3b:43:9b:05:be:1d:f5:25:25:70:e5: 3b:c6:2a:b6:69:5d:b6:10:8a:12:8f:68:e0:b2:6c:66:7c:a7: 0e:aa:ff:ce:e2:29:1f:5a:4c:19:a9:ed:65:59:eb:23:82:01: 97:a8:6b:22:37:f8:e8:d0:53:21:af:12:c7:3a:f2:9f:ac:87: 6b:53:82:ad:dc:e3:f0:48:89:67:71:ea:35:58:e8:61:c4:95: 92:b3:7e:27:fb:fb:49:81:e4:9e:a9:94:2b:55:a8:f7:38:44: 3b:72:01:a0:81:46:23:4e:71:02:c7:e4:30:c9:5a:6a:7e:0c: 7a:2e:da:d6:bf:56:7a:51:c7:9a:13:dc:93:cf:a1:1c:04:43: 12:a1:66:2c:68:66:4e:4e:82:ab:48:8f:81:e0:0c:a3:d6:b2: 86:57:1c:7d:ad:f2:f8:0d:56:84:17:63:18:2a:95:2f:27:1e: b2:87:bd:28:b3:96:7f:9b:6a:aa:5f:9e:7a:d0:78:fa:89:86: 67:06:4c:89:b5:7b:c4:11:e9:04:86:2a:f9:90:bc:cc:a4:43: 33:72:ab:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv140Z/E6L/I2Qi3+dkemSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjQwNjZmODY2Y2YzNmU5Y2JhOWU5YmU2ZjkwMjY0ZGEz NzJmM2UwHhcNMjYwMTI1MTYwMTExWhcNMjYwMTI2MTYwMTExWjAzMTEwLwYDVQQD EygxZDYwYzM2NTU0MDRiM2RlM2Q5YTMzNmY5ZTQ0YzQ4YjRiOTE0MzAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhDsJYwOpnD9eUdoIJ2pHWVyzIrU EM2XpK+8dSUcfmVLaRajvunNbfbzVjwI064M13UQuD+8avwsetZEfhqH7NBLGhkc nflfIhadgjWRSww06SR3cSQ2mEYDxEE7bCA45ESjhC/BJMUpo+bzYSokhpuT9Ryw 6EhxPVsue0HihXgU1H2kjOyaOqR3f42sapx3p+qEyfMTOUJfwhZeXyHshOzDmD84 EPj0ijUVzvRHwnEwsHTpamOJoljkDHe1/o7/pAhOsd81u89CitT1KNlczYXT2cwl jhEppFu4uzB4+kAQ+a9x5ce+VpNw+Am2WelurTLFQpMIYFwAQROosQoIzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1gw2VUBLPePZozb55ExItLkUMAMB8GA1UdIwQY MBaAFAUkBm+GbPNunLqem+b5AmTaNy8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt ODA0YzQ2NzkwOTNmLzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm LzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqk9LqNF gzcedQc1+eMxRhYf56o3aKlSTk1KWE8W7EHCQQqt6g8l99mmWTtDmwW+HfUlJXDl O8YqtmldthCKEo9o4LJsZnynDqr/zuIpH1pMGantZVnrI4IBl6hrIjf46NBTIa8S xzryn6yHa1OCrdzj8EiJZ3HqNVjoYcSVkrN+J/v7SYHknqmUK1Wo9zhEO3IBoIFG I05xAsfkMMlaan4Mei7a1r9WelHHmhPck8+hHARDEqFmLGhmTk6Cq0iPgeAMo9ay hlccfa3y+A1WhBdjGCqVLycesoe9KLOWf5tqql+eetB4+omGZwZMibV7xBHpBIYq +ZC8zKRDM3Krrg== -----END CERTIFICATE-----Generated at Sun Jan 25 20:52:50 2026 by rpki-client