This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json) Hash identifier: TJlXmf/nMin3b4PuczsGOsxTIhmAVk0JEH18FsooQqg= Subject key identifier: 75:5E:ED:4D:FC:B7:73:21:49:CD:33:8A:90:86:99:D5:AE:52:2A:13 Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51 Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051 Certificate serial: 019BF53E7888D8F4A3A121E9E1C684E7B45A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 13:01:10 +0000 Manifest this update: Sun 25 Jan 2026 13:01:10 +0000 Manifest next update: Mon 26 Jan 2026 13:01:10 +0000 Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: OBm+mSoscA0cMlfwM+TaPEPqSN4W/vAMFnz3p1oL8Sw=) 2: Eutl85DJa5Wvda8Ay8PusU7FvGw.roa (hash: 0UQ/kddOeRvGr5lY/YK4culyM9uyjud6DEWUEwmL8/g=) 3: QHBZT5kThtefU6Yue7jJobqw9JU.roa (hash: pRD253NVKbYirBHDkZVZG3Wa4gP+JVRS3M7a27XwU/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:78:88:d8:f4:a3:a1:21:e9:e1:c6:84:e7:b4:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051 Validity Not Before: Jan 25 13:01:10 2026 GMT Not After : Jan 26 13:01:10 2026 GMT Subject: CN=755eed4dfcb7732149cd338a908699d5ae522a13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:6d:ce:29:63:06:1d:cc:17:ec:da:e2:e4: 12:5a:bf:81:26:39:32:7f:a9:a6:24:07:7f:77:d8: 86:cc:7e:92:4f:95:74:42:a1:7e:61:30:3e:3b:ae: 39:8e:e3:b3:5c:18:15:b2:2c:bc:9a:16:7c:c5:4f: 94:cf:38:63:38:d1:46:4e:b6:da:03:ff:af:b0:bb: fd:3c:a5:c5:e8:dc:24:bf:e1:0f:67:e1:cc:2b:bf: 0c:17:2b:05:a6:b3:4a:69:a9:3b:bf:70:9c:c2:37: 26:6b:8f:c4:17:e7:ee:d4:49:d4:d1:66:78:be:35: fd:22:f3:0e:e5:3a:83:ff:65:20:5b:06:db:4a:52: f4:09:94:3c:69:63:41:7c:76:ee:f3:4b:15:8e:ea: b2:4f:e4:2b:5e:6b:e1:f1:fb:d5:0e:db:06:78:12: 8f:4a:db:03:4b:17:50:a8:80:fe:78:5a:1d:8a:a7: 56:05:48:0d:3c:e0:82:4c:54:41:79:7c:13:e1:0e: 49:5d:7e:e8:a3:b3:01:97:8b:3c:9b:3a:06:5e:db: e0:02:27:84:72:5c:81:49:ae:75:00:8e:9e:b1:c7: 9a:18:27:a2:af:d1:6b:5d:14:0b:c8:16:74:a2:44: 25:77:ff:d8:f1:54:ed:91:31:75:4b:7f:a5:4c:03: c0:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5E:ED:4D:FC:B7:73:21:49:CD:33:8A:90:86:99:D5:AE:52:2A:13 X509v3 Authority Key Identifier: keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ec:0f:3d:9e:4c:f1:c4:cb:f3:26:d8:76:d7:08:25:cb:9d: 61:3a:21:04:e7:7d:4d:99:08:24:49:7f:03:cf:9f:39:79:61: e8:9e:da:e5:6e:20:ef:1b:f4:8b:91:d0:b3:c0:a9:2a:c9:8d: b7:df:11:42:a5:d5:4a:de:17:bc:24:24:ab:ab:73:b9:c3:07: c5:52:cd:10:b7:2d:29:a6:d1:eb:24:fa:07:7a:25:71:e1:eb: 4f:88:26:77:71:78:38:0b:ee:04:a5:c0:9b:72:55:ec:e3:4e: 9f:c6:9f:b5:25:d0:a4:95:0c:9e:a4:1d:9b:d1:75:6d:79:60: c4:61:27:15:92:7f:39:8d:c1:99:96:f1:63:56:1c:68:cb:e0: a4:79:27:3e:e0:30:00:78:40:ab:71:11:dc:13:2b:dc:0f:26: 79:2d:1f:18:69:42:8c:f4:18:19:ee:df:e0:77:58:06:02:45: 19:10:2c:62:a7:67:96:e8:5e:4b:4d:ca:f5:ea:92:81:68:35: 0a:e2:66:e0:5a:ed:b7:8a:d6:02:41:1f:6a:11:d7:ca:8c:cc: a6:65:8b:60:7f:cd:01:94:55:c0:fe:25:78:cb:c3:b7:3c:90: 47:1c:de:24:d3:b8:88:3d:f7:8d:5c:4f:6c:80:4b:2d:a9:27: 21:ca:b0:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PniI2PSjoSHp4caE57RaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NGRjZDBlZTcwMTRlZmIyZTNiNTU0ZmJiNzA2Mzg0ZWYx MWQwNTEwHhcNMjYwMTI1MTMwMTEwWhcNMjYwMTI2MTMwMTEwWjAzMTEwLwYDVQQD Eyg3NTVlZWQ0ZGZjYjc3MzIxNDljZDMzOGE5MDg2OTlkNWFlNTIyYTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWBtziljBh3MF+za4uQSWr+BJjky f6mmJAd/d9iGzH6ST5V0QqF+YTA+O645juOzXBgVsiy8mhZ8xU+UzzhjONFGTrba A/+vsLv9PKXF6Nwkv+EPZ+HMK78MFysFprNKaak7v3Ccwjcma4/EF+fu1EnU0WZ4 vjX9IvMO5TqD/2UgWwbbSlL0CZQ8aWNBfHbu80sVjuqyT+QrXmvh8fvVDtsGeBKP StsDSxdQqID+eFodiqdWBUgNPOCCTFRBeXwT4Q5JXX7oo7MBl4s8mzoGXtvgAieE clyBSa51AI6esceaGCeir9FrXRQLyBZ0okQld//Y8VTtkTF1S3+lTAPAAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVe7U38t3MhSc0zipCGmdWuUioTMB8GA1UdIwQY MBaAFAZNzQ7nAU77LjtVT7twY4TvEdBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTkt ZmI0NzQwZmRhMjUwLzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTktZmI0NzQwZmRhMjUw LzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOwPPZ5M 8cTL8ybYdtcIJcudYTohBOd9TZkIJEl/A8+fOXlh6J7a5W4g7xv0i5HQs8CpKsmN t98RQqXVSt4XvCQkq6tzucMHxVLNELctKabR6yT6B3olceHrT4gmd3F4OAvuBKXA m3JV7ONOn8aftSXQpJUMnqQdm9F1bXlgxGEnFZJ/OY3BmZbxY1YcaMvgpHknPuAw AHhAq3ER3BMr3A8meS0fGGlCjPQYGe7f4HdYBgJFGRAsYqdnluheS03K9eqSgWg1 CuJm4Frtt4rWAkEfahHXyozMpmWLYH/NAZRVwP4leMvDtzyQRxzeJNO4iD33jVxP bIBLLaknIcqw4g== -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:24 2026 by rpki-client