This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft File: B-rSmInb9i85j2S8YUkWZzBW1F4.mft (raw, json) Hash identifier: 50GhmByfueD8yFrLBlg65+KN9eiN1kIWHxOzupJxPr0= Subject key identifier: F1:6B:8D:2D:25:EA:87:79:DD:E1:D7:CD:EA:24:80:26:EA:92:72:73 Authority key identifier: 07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E Certificate issuer: /CN=07ead29889dbf62f398f64bc614916673056d45e Certificate serial: 019BF808721BBA93906E369F18A7CBAECB05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 02:01:01 +0000 Manifest this update: Mon 26 Jan 2026 02:01:01 +0000 Manifest next update: Tue 27 Jan 2026 02:01:01 +0000 Files and hashes: 1: B-rSmInb9i85j2S8YUkWZzBW1F4.crl (hash: NV9t/NbPzz7a2ornP8vdH/CxFFP+Q06vDXbHBPcWG7w=) 2: WD55UE5qlePOSI_a9oMyg8wcNhM.roa (hash: k6v6oyStwZCW3ua9CbvEUWEuQ//GR0Gueu0YUBIfqMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:72:1b:ba:93:90:6e:36:9f:18:a7:cb:ae:cb:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ead29889dbf62f398f64bc614916673056d45e Validity Not Before: Jan 26 02:01:01 2026 GMT Not After : Jan 27 02:01:01 2026 GMT Subject: CN=f16b8d2d25ea8779dde1d7cdea248026ea927273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:39:77:84:67:78:7d:68:4d:f5:f6:0c:18:c2: e3:f2:93:96:13:93:dc:d8:d7:75:76:1c:65:a9:5b: 3f:55:34:9c:b3:49:bf:d8:67:82:70:97:08:18:b8: 6a:b9:81:b4:8c:ca:90:5d:90:53:68:9f:b9:1b:b8: c2:ad:6e:fd:09:09:11:7e:a6:36:ce:13:db:e3:57: a9:85:be:39:a8:03:ac:db:4d:67:64:f1:04:17:84: 71:a8:07:1a:87:ee:17:99:08:85:27:ac:0e:7c:a6: 3d:4b:00:bc:0d:08:cf:ac:b8:23:63:2c:4c:e6:0d: 96:bc:cd:cb:f7:db:f6:37:19:ff:c7:6a:81:89:6c: e2:5c:8a:04:43:67:a0:a7:cb:b7:bc:cd:67:3d:2d: 16:a6:e9:95:4b:7e:e1:de:2c:a3:f2:00:c1:c4:7f: bb:f4:3a:8a:3f:e7:72:30:e2:89:f4:a9:d1:dd:c2: 35:e5:8c:bf:22:d6:fc:17:b0:3c:70:3a:16:31:df: ab:2d:a4:f4:81:5f:6c:ed:07:00:62:0b:f3:4e:83: 8e:fb:da:f6:76:39:dc:64:2e:c0:08:5c:61:43:96: 13:aa:5d:af:83:34:cf:8f:7f:fa:03:49:32:99:b1: 61:73:5e:7a:23:88:fc:04:8d:ab:00:28:3e:0a:28: df:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:6B:8D:2D:25:EA:87:79:DD:E1:D7:CD:EA:24:80:26:EA:92:72:73 X509v3 Authority Key Identifier: keyid:07:EA:D2:98:89:DB:F6:2F:39:8F:64:BC:61:49:16:67:30:56:D4:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-rSmInb9i85j2S8YUkWZzBW1F4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6abcd1-eeee-46d5-9f6c-df6871e2f735/1/B-rSmInb9i85j2S8YUkWZzBW1F4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:16:87:a2:de:a2:ff:82:1d:c2:f8:da:d3:dc:4e:d4:7c:ac: 0a:c8:4b:54:c4:3b:93:aa:33:c8:02:25:e3:e5:9d:46:58:5f: 3e:f3:d8:10:d8:33:bb:91:e0:9a:0d:ac:3d:5c:7b:a6:94:99: 81:ea:f7:4f:4d:19:9e:06:07:8c:09:de:d0:0f:7f:b4:73:f6: ab:17:68:ef:a6:24:dd:2d:c9:c8:4c:4f:1f:10:00:1d:b1:3f: a4:76:38:64:c8:c7:0f:f8:47:9b:bc:12:b4:37:a3:83:14:f9: ea:87:b5:fe:c0:21:76:61:ae:02:1f:d7:0f:28:26:b0:b3:22: d8:a5:93:6e:65:ff:29:42:f6:cb:38:9d:39:42:8a:6a:ce:c6: a8:6f:f5:53:24:00:e1:c0:04:3d:a8:23:cf:e0:c2:17:43:ec: ce:fc:bc:f1:47:0b:74:63:d3:5e:b0:94:41:99:b7:29:39:54: 09:18:b1:25:a5:8e:79:c0:58:62:75:52:bb:96:91:2c:f4:ef: 25:d2:ae:99:5d:e6:d5:d6:1d:db:ff:8b:7f:52:7d:1a:1d:5c: 96:aa:c5:83:e3:a4:6c:10:40:6c:4f:96:a4:02:ec:24:91:77: cd:53:94:5d:94:ce:a9:78:f1:d7:26:00:41:e4:36:e5:7f:50: f7:1a:86:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CHIbupOQbjafGKfLrssFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWFkMjk4ODlkYmY2MmYzOThmNjRiYzYxNDkxNjY3MzA1 NmQ0NWUwHhcNMjYwMTI2MDIwMTAxWhcNMjYwMTI3MDIwMTAxWjAzMTEwLwYDVQQD EyhmMTZiOGQyZDI1ZWE4Nzc5ZGRlMWQ3Y2RlYTI0ODAyNmVhOTI3MjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Dl3hGd4fWhN9fYMGMLj8pOWE5Pc 2Nd1dhxlqVs/VTScs0m/2GeCcJcIGLhquYG0jMqQXZBTaJ+5G7jCrW79CQkRfqY2 zhPb41ephb45qAOs201nZPEEF4RxqAcah+4XmQiFJ6wOfKY9SwC8DQjPrLgjYyxM 5g2WvM3L99v2Nxn/x2qBiWziXIoEQ2egp8u3vM1nPS0WpumVS37h3iyj8gDBxH+7 9DqKP+dyMOKJ9KnR3cI15Yy/Itb8F7A8cDoWMd+rLaT0gV9s7QcAYgvzToOO+9r2 djncZC7ACFxhQ5YTql2vgzTPj3/6A0kymbFhc156I4j8BI2rACg+CijfhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFrjS0l6od53eHXzeokgCbqknJzMB8GA1UdIwQY MBaAFAfq0piJ2/YvOY9kvGFJFmcwVtReMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMt ZGY2ODcxZTJmNzM1LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC82YWJjZDEtZWVlZS00NmQ1LTlmNmMtZGY2ODcxZTJmNzM1 LzEvQi1yU21JbmI5aTg1ajJTOFlVa1daekJXMUY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxaHot6i /4Idwvja09xO1HysCshLVMQ7k6ozyAIl4+WdRlhfPvPYENgzu5Hgmg2sPVx7ppSZ ger3T00ZngYHjAne0A9/tHP2qxdo76Yk3S3JyExPHxAAHbE/pHY4ZMjHD/hHm7wS tDejgxT56oe1/sAhdmGuAh/XDygmsLMi2KWTbmX/KUL2yzidOUKKas7GqG/1UyQA 4cAEPagjz+DCF0Pszvy88UcLdGPTXrCUQZm3KTlUCRixJaWOecBYYnVSu5aRLPTv JdKumV3m1dYd2/+Lf1J9Gh1clqrFg+OkbBBAbE+WpALsJJF3zVOUXZTOqXjx1yYA QeQ25X9Q9xqG1w== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:37 2026 by rpki-client