This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: kXOMBFzrHhzc+9ABwh14Z3TJ7r7N2vkF7CjvN6ouZJo= Subject key identifier: 1A:08:B5:BA:11:DF:D8:F9:C8:2E:FE:99:AF:3D:90:EA:1A:EC:BE:A4 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019BF442174297AAB694991788A1D4384229 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 18A1 Signing time: Sun 25 Jan 2026 08:25:30 +0000 Manifest this update: Sun 25 Jan 2026 08:25:30 +0000 Manifest next update: Mon 26 Jan 2026 08:25:30 +0000 Files and hashes: 1: 1-T2ZYMPKiBruESoAmH7Wwl9yq20.roa (hash: q7HWgyE7yd60WRqAoHlyuMAcwhALB0o3MA1S/JRjlcw=) 2: 1-zPv1sLkAImPDaF-sFx3J1tBqrg.roa (hash: lfy4SNV7N7tKzhQrJTRx4OtE/ViL7Dd59Cz+B5EnHRw=) 3: 1jmcz7jOlOGdcGXRNMnzsRu-6UU.roa (hash: fnm0p7VwPd/SE7t1j+KRSTaDum9eHMNM4fCSS//G4c8=) 4: F7PDvpn2QT60u98U-B9_BniGv6I.roa (hash: o6+nW99K+UNhSND42qU+AfPD+43WdjVx5KouvSDpigQ=) 5: IachUPTX_993yJEpQF0wVvXQlj0.roa (hash: +E7fJxAVDf8rQHDt1qq8WPbiZjHDDTDf+pccnAqllfE=) 6: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 7: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 8: RyOLum9WBpYD9XcaEtkq5xfJ-pw.roa (hash: QzwPO43PsmmF8A/TIkYS8Xm7a8SUbYZr7awJYHHN8bU=) 9: WVsmjCPefs7KHXgZz-bbNTXjMD0.roa (hash: YEl+2qT+1mBtx3DZ1sJncN0pILC1ehBn3WioOm4CV4c=) 10: XAVkFwFmyvY57lfSqibKjz6KeDU.roa (hash: li7XdxNnJr0ELrCqRVp6PQTgumqBLnv4y+xurqiiRuc=) 11: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 12: ZZyP39YfrFZakvmamSZHAuuUmuo.roa (hash: oJUOWdsz49JPJgOt3JQE1/P2uFWb5ZrW3kNy78Vrsv0=) 13: bEw5sCgCycmnwH0jvM4nquRCY3I.roa (hash: 3QaZNtqof+lUOH/KwwyaVDyzs65OBWvVZmx9SV9wg/A=) 14: bJpd8Oj5rzvFy2hgHwNUQ_tzjy4.roa (hash: izLdFM9N1wbZbR37d7jbsfqm2J2WRyeSpB6evgH/KdE=) 15: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: 2VYtEP2mmNkUvopJFBfpFA48pcj6xMeKNFei1vYqXII=) 16: en-Q7yeb2Z7kIhNbVjOcGbm5MIc.roa (hash: rXbw78vAg5cjNMmUQ0XTeSV5YcEgAXrrBnTa2Pbv9+k=) 17: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 18: hKSSu2G6xdGNtuk4KP9e-c-JuWM.roa (hash: 8+i8iJBk47mdia5rlvNl4a1wcChvvNLCljBmtQLLZ/8=) 19: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 20: rGlCDR1TNPy04YNRQwGPMqm4A1Q.roa (hash: JVwYAPtjzB0NRTvep3F6wBq3/yhmRQHEO5qI0A2SfVg=) 21: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 22: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) 23: yOLP8JGsQMCFzWngfeM-F2G3Csc.roa (hash: qUYYxQQnFX6MaYW1jl8K4rrQJvoPXd0mpK3gIXiWjkc=) 24: yfuTkFQKjPgCxkciPRz1HIUo6Gw.roa (hash: V/g6j3QRRQ10jRrTt5T1G9dqYBUtdzYwy5fiLM0sH2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:42:17:42:97:aa:b6:94:99:17:88:a1:d4:38:42:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Jan 25 08:25:30 2026 GMT Not After : Jan 26 08:25:30 2026 GMT Subject: CN=1a08b5ba11dfd8f9c82efe99af3d90ea1aecbea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:82:c2:38:1e:15:3a:f2:7b:c3:fc:f3:af: 93:8a:6b:8f:f8:59:02:13:74:6b:23:85:54:d4:47: 38:38:08:fd:72:b0:02:7e:80:fe:df:bc:f9:5c:74: 5a:22:73:b0:0a:5c:b5:7d:51:fc:62:22:df:9b:c7: f7:44:f5:20:9c:72:4e:fe:9a:f7:1a:2e:11:f6:1c: f4:fc:18:c1:8c:43:17:f2:39:71:bd:5a:a9:61:98: 97:95:38:0b:9f:8c:2a:be:37:fd:90:03:34:ea:2a: 54:f7:4d:09:b2:49:8c:a7:d9:3f:0b:51:08:81:83: e6:63:46:50:75:23:1a:59:04:e2:80:05:74:55:5e: 04:1a:99:96:bf:04:5b:bc:f5:be:4e:7c:58:ce:dc: 8e:df:b9:f3:78:41:50:b4:c9:e5:69:66:a9:43:04: a6:bc:c4:21:a3:d8:03:9a:fa:c1:a4:0d:b0:55:49: db:4f:ca:1d:ff:d2:47:81:f6:8d:db:18:ea:30:d1: eb:7b:21:4d:48:85:d9:32:82:90:ed:c4:94:ac:9d: d3:fd:f5:f8:e6:bf:7b:3f:56:d0:26:f6:5b:98:f1: 05:9c:2b:91:f1:d1:b8:fe:17:66:60:76:63:ce:ad: ce:92:54:a9:c5:95:2a:b2:9c:4c:20:8e:de:8c:bb: 5d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:08:B5:BA:11:DF:D8:F9:C8:2E:FE:99:AF:3D:90:EA:1A:EC:BE:A4 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:14:43:24:23:6e:9b:57:6e:b4:ac:d0:03:80:08:bf:31:af: a9:80:aa:9e:8b:8f:fc:19:c4:10:36:fb:93:e1:26:0f:69:1d: 1f:24:02:1b:95:96:6c:21:61:6b:f1:67:da:e7:07:df:3b:05: cf:97:c0:da:ae:53:aa:c9:77:b6:69:49:c9:7f:a4:db:fa:4d: 9d:5a:7a:72:c2:16:fb:7f:18:ac:6b:6e:d5:3b:c0:71:fd:7e: 11:89:b0:c3:8c:a8:f0:5f:f1:24:c4:70:db:f6:07:ab:cb:3f: 54:bf:67:13:6f:b7:df:ad:d8:47:82:90:9d:db:05:ea:6a:f0: 99:66:47:4a:bc:a3:db:96:b0:e1:35:05:f6:81:4e:5d:80:12: f5:78:5f:fd:3c:71:0d:22:a0:a2:57:f7:86:e8:95:e0:1b:c2: fe:27:1a:7d:c8:f1:a9:37:7c:d5:22:12:11:16:9d:8f:7b:d8: 67:b8:ac:a6:24:59:51:fd:c3:dd:9c:88:05:8e:e1:ae:84:4f: c2:ab:f9:00:5a:ef:4e:76:f2:d6:51:c3:fd:17:ce:75:f0:8c: e1:1b:99:45:72:8c:cb:46:b1:06:13:83:2e:be:e7:f1:5b:a2: 8e:f4:b5:b7:92:5c:80:dd:fc:42:b8:1b:5c:f6:a6:d1:11:1e: 73:68:f1:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0QhdCl6q2lJkXiKHUOEIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwMTI1MDgyNTMwWhcNMjYwMTI2MDgyNTMwWjAzMTEwLwYDVQQD EygxYTA4YjViYTExZGZkOGY5YzgyZWZlOTlhZjNkOTBlYTFhZWNiZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI2CwjgeFTrye8P886+TimuP+FkC E3RrI4VU1Ec4OAj9crACfoD+37z5XHRaInOwCly1fVH8YiLfm8f3RPUgnHJO/pr3 Gi4R9hz0/BjBjEMX8jlxvVqpYZiXlTgLn4wqvjf9kAM06ipU900JskmMp9k/C1EI gYPmY0ZQdSMaWQTigAV0VV4EGpmWvwRbvPW+TnxYztyO37nzeEFQtMnlaWapQwSm vMQho9gDmvrBpA2wVUnbT8od/9JHgfaN2xjqMNHreyFNSIXZMoKQ7cSUrJ3T/fX4 5r97P1bQJvZbmPEFnCuR8dG4/hdmYHZjzq3OklSpxZUqspxMII7ejLtdaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBoItboR39j5yC7+ma89kOoa7L6kMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdRRDJCNu m1dutKzQA4AIvzGvqYCqnouP/BnEEDb7k+EmD2kdHyQCG5WWbCFha/Fn2ucH3zsF z5fA2q5Tqsl3tmlJyX+k2/pNnVp6csIW+38YrGtu1TvAcf1+EYmww4yo8F/xJMRw 2/YHq8s/VL9nE2+3363YR4KQndsF6mrwmWZHSryj25aw4TUF9oFOXYAS9Xhf/Txx DSKgolf3huiV4BvC/icafcjxqTd81SISERadj3vYZ7ispiRZUf3D3ZyIBY7hroRP wqv5AFrvTnby1lHD/RfOdfCM4RuZRXKMy0axBhODLr7n8VuijvS1t5JcgN38Qrgb XPam0REec2jxhw== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:32 2026 by rpki-client