This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json) Hash identifier: Q5fxTC3CwVyjWDl++drFaaoOgH/lIAVFbYZs9ONyFSI= Subject key identifier: 53:47:58:57:C0:2C:E9:5A:48:BA:96:1C:51:AA:A0:6D:C4:D3:2C:33 Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Certificate serial: 019BF3F48200F1C28233637F6110BFDD7945 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft Manifest number: 02E1 Signing time: Sun 25 Jan 2026 07:00:45 +0000 Manifest this update: Sun 25 Jan 2026 07:00:45 +0000 Manifest next update: Mon 26 Jan 2026 07:00:45 +0000 Files and hashes: 1: Af11MVP6VhwPCZW4GvxhTV3l2Qw.roa (hash: 0zTqrzFvszKEBTsjbfLGhc0G5gFEU942DbGfKhHwTtQ=) 2: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: JmhKqMhVl7wv5wJhlgplayIt4uk3WuzDej/6KIqp3bg=) 3: MIEvnImfWTyOKpa2aWLkQhgEZmY.roa (hash: txV76t93bWRJ/yIQmWuamg16DjJLT7MgtJIe7paHB7E=) 4: PsdMSgJpRCSnxs0WFJwJ49XVU1U.roa (hash: iQu1OA2imBxucOaZb2YkGe/IH/xMnrU8wpfz8jp4qU8=) 5: h6YKC3XtERD2VCMyNiRftB7wCuk.roa (hash: MN0yYx9HV02KqbAFLm8yDd6oSKi7xPvjzFqT6fvBP6A=) 6: jQ2Nd_F_fm5WB6zVYLgJygrj3Gk.roa (hash: imgBuP5yDwSxgvaj2Hc0zIY/YoHhn9WPYKumza/pBos=) 7: o3e9S3T6jeJSI1jiUrWmkImHmRU.roa (hash: +d9ztGRXNM07c8j8iufqKla9V5/CBV9Ud9oEK+f9ZJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:82:00:f1:c2:82:33:63:7f:61:10:bf:dd:79:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690 Validity Not Before: Jan 25 07:00:45 2026 GMT Not After : Jan 26 07:00:45 2026 GMT Subject: CN=53475857c02ce95a48ba961c51aaa06dc4d32c33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:a7:93:b0:76:39:64:e8:60:4d:6f:3c:13: 89:22:0f:e2:6a:31:7b:a4:85:ca:a1:ab:e0:b3:11: cd:c0:df:47:94:3d:55:ae:81:de:d5:a3:d2:ae:3e: c5:44:8c:4f:b2:7d:17:78:9a:7d:f9:15:56:49:68: f5:f0:10:82:86:1d:c4:bf:2a:cc:70:02:4b:98:6a: 5f:3c:c1:81:50:82:be:fc:41:2f:42:c2:ac:2e:2f: ba:8e:fc:cb:bb:0f:45:63:f4:47:fa:ac:df:6e:f9: 1c:44:35:d2:e1:1a:b6:8f:35:31:78:0a:2f:1a:23: 5c:47:8c:38:d1:c6:f9:b7:4d:18:c1:aa:cd:0f:20: 54:71:8f:58:24:fb:fa:f1:c5:16:0e:6d:0a:6a:df: cc:9a:78:4e:43:dd:05:ec:7f:a5:0f:52:40:5d:1e: 52:5b:3e:c4:f4:7e:a9:17:5b:41:ff:76:00:81:97: 6a:d8:53:f0:a5:0b:f2:25:32:19:eb:95:56:63:23: 74:ad:f3:6b:d4:a2:14:a0:d3:3a:38:86:8f:89:1b: f3:bf:4f:21:3c:93:7c:66:dc:33:95:c4:0a:ec:7c: 05:3e:2b:52:c3:9f:b1:e5:82:84:2e:80:a2:bd:aa: f6:40:f2:9e:23:2f:fa:11:64:fe:ce:f2:70:2d:ac: 2e:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:47:58:57:C0:2C:E9:5A:48:BA:96:1C:51:AA:A0:6D:C4:D3:2C:33 X509v3 Authority Key Identifier: keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:2e:66:de:63:1e:d1:94:ed:90:95:30:28:1d:03:77:70:9e: 79:69:07:0c:33:20:94:d3:7f:3d:44:d6:a9:6c:bb:e1:a4:85: 2a:de:50:10:c3:47:e4:93:08:b3:e6:48:b5:c5:b2:5e:f9:71: 35:2d:9c:b9:ff:c8:b0:d2:b1:3c:b4:e8:d5:80:ae:3a:c3:86: 7f:3d:2b:e6:69:df:34:b0:a1:0f:14:e0:1d:56:aa:8a:94:e6: b4:89:d2:c1:3b:22:6d:20:62:30:f3:94:d6:f7:90:bc:ea:a1: 7f:04:a4:0f:c2:77:6d:b3:1e:9b:e8:78:e6:f0:22:93:09:a2: 28:da:ca:f8:16:7a:61:91:81:74:13:68:f8:e5:a5:2c:55:f3: 6f:f4:9b:bc:58:aa:02:b1:49:1c:f4:7b:fa:40:11:6a:5a:3d: ca:f4:f6:d8:41:aa:8a:7c:13:92:dd:6c:80:9d:0c:a4:4b:b7: 3c:b7:e4:d7:54:18:d8:84:1a:c9:47:57:b0:12:18:ed:1f:f3: b0:cd:56:26:a5:35:25:76:ca:8e:13:46:03:16:c9:ac:e5:7e: 6e:76:52:e1:2b:93:bd:10:4d:87:57:4d:79:d7:39:8c:4d:f0: fa:78:e2:31:16:23:4e:d5:5f:77:2e:50:6b:5e:eb:7e:b2:e4: ba:70:14:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9IIA8cKCM2N/YRC/3XlFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZDRkNDlkYTNlMTQ4NTVhN2I4ODM2MDNmZjE0OGMxYmIy MWY2OTAwHhcNMjYwMTI1MDcwMDQ1WhcNMjYwMTI2MDcwMDQ1WjAzMTEwLwYDVQQD Eyg1MzQ3NTg1N2MwMmNlOTVhNDhiYTk2MWM1MWFhYTA2ZGM0ZDMyYzMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZOnk7B2OWToYE1vPBOJIg/iajF7 pIXKoavgsxHNwN9HlD1VroHe1aPSrj7FRIxPsn0XeJp9+RVWSWj18BCChh3EvyrM cAJLmGpfPMGBUIK+/EEvQsKsLi+6jvzLuw9FY/RH+qzfbvkcRDXS4Rq2jzUxeAov GiNcR4w40cb5t00YwarNDyBUcY9YJPv68cUWDm0Kat/MmnhOQ90F7H+lD1JAXR5S Wz7E9H6pF1tB/3YAgZdq2FPwpQvyJTIZ65VWYyN0rfNr1KIUoNM6OIaPiRvzv08h PJN8ZtwzlcQK7HwFPitSw5+x5YKELoCivar2QPKeIy/6EWT+zvJwLawuzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNHWFfALOlaSLqWHFGqoG3E0ywzMB8GA1UdIwQY MBaAFAXU1J2j4UhVp7iDYD/xSMG7IfaQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQt NThmMWNiZjNjYWMzLzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8xYTNmOTEtMTViYy00ZWI4LTk3ZGQtNThmMWNiZjNjYWMz LzEvQmRUVW5hUGhTRldudUlOZ1BfRkl3YnNoOXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdi5m3mMe 0ZTtkJUwKB0Dd3CeeWkHDDMglNN/PUTWqWy74aSFKt5QEMNH5JMIs+ZItcWyXvlx NS2cuf/IsNKxPLTo1YCuOsOGfz0r5mnfNLChDxTgHVaqipTmtInSwTsibSBiMPOU 1veQvOqhfwSkD8J3bbMem+h45vAikwmiKNrK+BZ6YZGBdBNo+OWlLFXzb/SbvFiq ArFJHPR7+kARalo9yvT22EGqinwTkt1sgJ0MpEu3PLfk11QY2IQayUdXsBIY7R/z sM1WJqU1JXbKjhNGAxbJrOV+bnZS4SuTvRBNh1dNedc5jE3w+njiMRYjTtVfdy5Q a17rfrLkunAU4A== -----END CERTIFICATE-----Generated at Sun Jan 25 16:18:54 2026 by rpki-client