This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json) Hash identifier: O5LBjTLs2Dqz+dWR5NokkYsvhl+lEss6a4D82i7BUIQ= Subject key identifier: C2:FD:C3:E8:B5:9F:A4:0D:D8:FA:16:F3:44:0D:A9:E2:88:A8:2A:81 Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b Certificate serial: 019BF6BF30ECA2DBE685DC3EA7565BBFA21C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft Manifest number: 17F4 Signing time: Sun 25 Jan 2026 20:01:23 +0000 Manifest this update: Sun 25 Jan 2026 20:01:23 +0000 Manifest next update: Mon 26 Jan 2026 20:01:23 +0000 Files and hashes: 1: 5NilnHVTFvhw8pc3Lval-8HXW7Y.roa (hash: gQRKbTEYjnTPPF8SZWL9Teg705vkg8I26INqJViriWM=) 2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: U24qJjxX7rmk2KQS0FBByKvbm/JxwqUGU9srbFsTeEE=) 3: hlcXZMeAMbkehrXk-27ZnwwQkjg.asa (hash: wBLQaWYKTnIqqL34G0mpW0UNwvJ6e3s2XvxRjFygR1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:30:ec:a2:db:e6:85:dc:3e:a7:56:5b:bf:a2:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b Validity Not Before: Jan 25 20:01:23 2026 GMT Not After : Jan 26 20:01:23 2026 GMT Subject: CN=c2fdc3e8b59fa40dd8fa16f3440da9e288a82a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ea:8b:f7:d9:80:62:da:a6:82:6e:19:78:26: 28:35:f2:4e:2a:6b:e6:bd:01:32:25:e9:44:54:2f: 31:c1:57:38:c7:52:2a:1c:08:fc:63:0c:0b:11:dc: 5c:71:13:a9:8c:63:f0:0f:dc:08:1b:81:24:18:9f: 26:a3:f2:32:82:83:ce:73:f2:ae:6a:cb:a5:4e:99: 9b:75:b9:6a:8f:ca:fd:43:24:f5:d2:7a:a3:78:eb: 23:86:b2:e0:28:13:ed:82:04:02:46:33:31:88:20: bc:4d:67:95:a5:dd:35:f4:9b:28:f3:68:2a:e1:6f: 6a:01:bb:c3:53:33:9b:bc:9d:07:68:6e:1b:61:98: 81:97:16:f1:30:3e:6f:a0:e1:d6:e0:be:48:56:cb: 8b:7c:83:98:eb:d1:06:35:75:14:f4:0f:fd:f6:00: 52:11:e8:1d:0e:41:2e:66:e6:10:9f:a5:0a:94:76: 4d:9b:91:f2:f8:f4:cd:c9:1f:1e:84:c2:b6:4c:3c: 79:0e:3e:49:0b:fc:9b:8a:99:2c:c6:3e:b9:25:8c: 1d:20:5d:bc:59:18:a6:f6:cc:51:6a:75:2a:d8:ef: 6a:61:16:68:22:42:db:56:fd:79:d5:f0:f9:59:47: e3:ab:6a:dd:d7:22:c9:25:94:ce:4a:f7:e5:28:4b: ad:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:FD:C3:E8:B5:9F:A4:0D:D8:FA:16:F3:44:0D:A9:E2:88:A8:2A:81 X509v3 Authority Key Identifier: keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:77:fc:62:04:8e:0e:a1:de:af:02:e0:b2:c1:a3:e5:84:6b: 27:1e:89:dd:42:31:70:f7:07:86:cd:c4:7f:84:e8:b4:1c:91: 6a:8a:3c:d2:bf:32:3e:85:cb:7e:6f:23:ad:89:d4:d6:f1:82: fd:30:62:67:f5:ab:37:26:89:7d:83:f7:ec:db:bc:a5:75:2b: 3c:e6:16:74:80:9c:f2:88:5a:35:06:ec:89:05:37:88:df:b5: 18:bf:1a:94:49:3f:2a:dd:2f:05:45:2e:94:71:77:d0:c7:b0: f7:8b:90:ec:22:85:9b:21:4b:8e:96:69:b0:30:c8:a0:df:4b: ae:a1:9a:8b:f3:72:76:88:1a:a2:c3:a2:35:09:aa:93:4a:94: f5:c4:dc:f2:96:f5:4d:b4:d9:09:32:0f:19:f1:e9:74:f1:ee: 24:1b:03:64:6b:3f:32:f9:9d:4d:70:58:2c:f6:9d:ab:ab:c6: 05:54:6a:0a:03:63:88:7a:1a:98:f2:7b:88:72:91:1a:a3:5e: bd:14:c3:91:29:44:c2:fb:13:1f:00:92:d7:5c:f9:29:f3:ba: 96:bc:29:57:76:d9:a9:26:59:1f:69:0b:77:32:83:0a:81:b5: ee:fc:50:f0:69:bd:93:4e:53:74:c4:4c:0c:0f:25:70:ff:51: e1:31:5e:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vzDsotvmhdw+p1Zbv6IcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNWU0ZWY1NTE2Nzk5ZmZlMGJiMWI4MzkzMTdkYmQzNTVi YjdhOWIwHhcNMjYwMTI1MjAwMTIzWhcNMjYwMTI2MjAwMTIzWjAzMTEwLwYDVQQD EyhjMmZkYzNlOGI1OWZhNDBkZDhmYTE2ZjM0NDBkYTllMjg4YTgyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOqL99mAYtqmgm4ZeCYoNfJOKmvm vQEyJelEVC8xwVc4x1IqHAj8YwwLEdxccROpjGPwD9wIG4EkGJ8mo/IygoPOc/Ku asulTpmbdblqj8r9QyT10nqjeOsjhrLgKBPtggQCRjMxiCC8TWeVpd019Jso82gq 4W9qAbvDUzObvJ0HaG4bYZiBlxbxMD5voOHW4L5IVsuLfIOY69EGNXUU9A/99gBS EegdDkEuZuYQn6UKlHZNm5Hy+PTNyR8ehMK2TDx5Dj5JC/ybipksxj65JYwdIF28 WRim9sxRanUq2O9qYRZoIkLbVv151fD5WUfjq2rd1yLJJZTOSvflKEut3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFML9w+i1n6QN2PoW80QNqeKIqCqBMB8GA1UdIwQY MBaAFGxeTvVRZ5n/4Lsbg5MX29NVu3qbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUt MWJlNzUzZmFkMWJmLzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS85ZDk2ODAtZmZiZi00M2QxLTljMDUtMWJlNzUzZmFkMWJm LzEvYkY1TzlWRm5tZl9ndXh1RGt4ZmIwMVc3ZXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiXf8YgSO DqHerwLgssGj5YRrJx6J3UIxcPcHhs3Ef4TotByRaoo80r8yPoXLfm8jrYnU1vGC /TBiZ/WrNyaJfYP37Nu8pXUrPOYWdICc8ohaNQbsiQU3iN+1GL8alEk/Kt0vBUUu lHF30Mew94uQ7CKFmyFLjpZpsDDIoN9LrqGai/NydogaosOiNQmqk0qU9cTc8pb1 TbTZCTIPGfHpdPHuJBsDZGs/MvmdTXBYLPadq6vGBVRqCgNjiHoamPJ7iHKRGqNe vRTDkSlEwvsTHwCS11z5KfO6lrwpV3bZqSZZH2kLdzKDCoG17vxQ8Gm9k05TdMRM DA8lcP9R4TFeEA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:18 2026 by rpki-client