This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json) Hash identifier: ovW+jY6N4ahTaOTVwCOxDxRFLfY0vleAvcy7ZksZ+6Q= Subject key identifier: 50:DA:4D:39:67:AE:86:CF:F7:DD:1F:F0:E1:80:CF:45:48:FE:30:28 Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af Certificate serial: 019BF91BAFBB17CD8EEF4388085978EC54D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 07:01:39 +0000 Manifest this update: Mon 26 Jan 2026 07:01:39 +0000 Manifest next update: Tue 27 Jan 2026 07:01:39 +0000 Files and hashes: 1: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: eGQaAmwK+C2ydw98AHBwiUdKPxKMiKLyPYoZBgxNVKA=) 2: u5hJOCynJQAu4PH5D56C-AeKtEc.roa (hash: 53JyrjI2rSv7IJ0kdQIBEc2NY8BsRGlwPaWvUaVHA/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:af:bb:17:cd:8e:ef:43:88:08:59:78:ec:54:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af Validity Not Before: Jan 26 07:01:39 2026 GMT Not After : Jan 27 07:01:39 2026 GMT Subject: CN=50da4d3967ae86cff7dd1ff0e180cf4548fe3028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:53:b2:97:3a:f1:c7:33:4b:9a:bb:a1:78:ea: 2f:77:57:7b:4e:6a:b9:46:84:d6:7c:60:8b:0c:7a: 93:3c:3b:81:bf:02:00:c0:96:13:06:84:4c:eb:8f: 3d:e7:56:48:d2:a7:8d:35:d2:73:0d:f4:80:ef:1f: 39:ea:ce:94:c1:c3:64:cc:ac:79:50:f9:80:e9:31: af:b9:e7:b6:c9:69:00:83:7c:71:27:87:71:84:48: f5:c0:70:5e:07:27:25:8c:52:b4:4a:9c:a3:a1:50: 61:96:b9:ca:48:07:fe:c5:fd:3f:d2:b3:1f:84:01: f0:92:0f:67:84:5c:ff:31:c0:34:19:0e:b3:01:b0: 36:f1:ff:8f:80:59:d1:cc:86:d1:e9:0f:5a:ef:ed: 0b:27:c9:f3:0e:0d:ea:d5:1a:2a:13:fe:d7:ff:e5: 80:6c:3d:f7:2f:2c:4b:f6:02:de:b7:12:d2:79:49: 4d:66:51:c5:aa:dc:5a:dd:ba:a4:22:0e:24:20:db: 62:4a:69:0b:8e:e6:d5:31:99:6e:c9:33:ae:a9:f4: f1:5f:27:3d:2e:7e:48:8e:c0:90:a5:69:38:2c:b4: e8:0e:11:07:82:89:17:70:b1:79:75:09:5b:df:8e: a7:38:12:0d:f7:3a:73:53:8b:de:04:26:22:70:f0: 35:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:DA:4D:39:67:AE:86:CF:F7:DD:1F:F0:E1:80:CF:45:48:FE:30:28 X509v3 Authority Key Identifier: keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:66:6e:8c:6c:1c:46:62:2e:31:2f:f3:9c:a0:34:cf:e2:a3: 68:37:db:e8:c6:95:3d:06:b0:cf:20:5e:76:ba:b4:68:6f:b8: 4d:04:3c:68:b5:d6:48:5e:71:7b:b0:ea:f0:cd:04:6d:e1:1f: 72:a0:6a:8a:be:57:23:be:c0:c3:30:79:2c:b1:19:44:86:49: 74:70:4f:f2:7b:c7:be:e7:d7:98:92:ed:cc:be:62:9d:4b:55: 45:c0:4c:3e:ea:dc:fa:47:e8:20:d6:a7:11:94:48:c3:fc:c5: 7c:2a:3f:09:80:1a:7f:28:79:b2:85:db:78:69:44:ec:98:72: d6:3b:80:1e:ec:e0:39:52:af:09:77:03:6f:e1:8a:d3:23:0a: 97:fd:a6:24:ad:4e:d8:b7:65:9f:08:cb:5e:5c:83:fd:2e:29: b7:bd:9b:5e:59:79:43:a0:62:db:30:2e:6f:66:36:70:b0:9a: 14:60:19:6a:a3:d7:9f:74:1d:ac:56:e4:b6:70:d9:3c:03:f8: 10:f9:d3:03:f9:f1:75:d8:5c:be:f0:f4:30:0b:2d:db:ec:ca: 0e:49:fe:14:19:7d:6a:5a:1f:ab:b0:3b:9a:c3:17:74:f2:40: 08:fb:3e:cf:8c:57:3f:15:83:d9:4e:47:32:c3:de:21:30:bd: 47:e9:4c:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G6+7F82O70OICFl47FTUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODkwZWY2YTg4YWIzM2ZhNWEyMDY3NjA3NjhkZDMyNTFj MjM4YWYwHhcNMjYwMTI2MDcwMTM5WhcNMjYwMTI3MDcwMTM5WjAzMTEwLwYDVQQD Eyg1MGRhNGQzOTY3YWU4NmNmZjdkZDFmZjBlMTgwY2Y0NTQ4ZmUzMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVOylzrxxzNLmruheOovd1d7Tmq5 RoTWfGCLDHqTPDuBvwIAwJYTBoRM648951ZI0qeNNdJzDfSA7x856s6UwcNkzKx5 UPmA6TGvuee2yWkAg3xxJ4dxhEj1wHBeBycljFK0SpyjoVBhlrnKSAf+xf0/0rMf hAHwkg9nhFz/McA0GQ6zAbA28f+PgFnRzIbR6Q9a7+0LJ8nzDg3q1RoqE/7X/+WA bD33LyxL9gLetxLSeUlNZlHFqtxa3bqkIg4kINtiSmkLjubVMZluyTOuqfTxXyc9 Ln5IjsCQpWk4LLToDhEHgokXcLF5dQlb346nOBIN9zpzU4veBCYicPA1eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDaTTlnrobP990f8OGAz0VI/jAoMB8GA1UdIwQY MBaAFGyJDvaoirM/paIGdgdo3TJRwjivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yYjdjZDEtNDliNi00OTIxLWE1ZTEt NjFmOTFlZGVkZjBhLzEvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yYjdjZDEtNDliNi00OTIxLWE1ZTEtNjFmOTFlZGVkZjBh LzEvYklrTzlxaUtzei1sb2daMkIyamRNbEhDT0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2ZujGwc RmIuMS/znKA0z+KjaDfb6MaVPQawzyBedrq0aG+4TQQ8aLXWSF5xe7Dq8M0EbeEf cqBqir5XI77AwzB5LLEZRIZJdHBP8nvHvufXmJLtzL5inUtVRcBMPurc+kfoINan EZRIw/zFfCo/CYAafyh5soXbeGlE7Jhy1juAHuzgOVKvCXcDb+GK0yMKl/2mJK1O 2LdlnwjLXlyD/S4pt72bXll5Q6Bi2zAub2Y2cLCaFGAZaqPXn3QdrFbktnDZPAP4 EPnTA/nxddhcvvD0MAst2+zKDkn+FBl9alofq7A7msMXdPJACPs+z4xXPxWD2U5H MsPeITC9R+lMBA== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:19 2026 by rpki-client