This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json) Hash identifier: aU2s2HXn1q+2+eyygbdaobu1hDzh8ct4xLef6b1+xNw= Subject key identifier: FD:16:3F:DA:0D:4D:38:A1:60:85:0A:0A:5C:F0:73:F7:2D:78:2F:20 Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Certificate serial: 019BF161F75522781839D87BF33FE28C18B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft Manifest number: 0FE9 Signing time: Sat 24 Jan 2026 19:01:27 +0000 Manifest this update: Sat 24 Jan 2026 19:01:27 +0000 Manifest next update: Sun 25 Jan 2026 19:01:27 +0000 Files and hashes: 1: 9F4nFbGxWFyzlJVE1S__5b6FPCI.roa (hash: g0Q3yvsLaJ0f1xZGMnOTjSsR0ohn67wJH/LM7dSM5CA=) 2: ERNFrnzBGMp5dbReFDeBkgmcPh8.roa (hash: fopuSknYAN9eY8CjJVKKrYqlanNz4e2UGCvAXKYoocE=) 3: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=) 4: ZzjkBXr5q1g4RTOv6r81K4wPzek.roa (hash: EbxKJ4vDtHIhISfCa5emGMn2e3XIMHISVR6d79MhkPc=) 5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: whFIAGRtyaDsy11p2wfGLHnlZ7s79I2frRUN8LTwADc=) 6: uQF7IyytbS3yrbTg44uQRPpFYao.roa (hash: k+4BWSV4vpxlK8x4wwgoZ+fmKkoDTHmAUh9+Y4xZiic=) 7: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=) 8: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 19:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f1:61:f7:55:22:78:18:39:d8:7b:f3:3f:e2:8c:18:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Validity Not Before: Jan 24 19:01:27 2026 GMT Not After : Jan 25 19:01:27 2026 GMT Subject: CN=fd163fda0d4d38a160850a0a5cf073f72d782f20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ac:26:8c:33:3a:e5:34:16:20:ff:87:df:07: 29:1e:dc:32:8a:df:1e:03:5a:fa:02:9d:7d:3f:24: f7:2f:f9:6e:d2:a0:9e:da:44:00:c3:37:a2:ca:7d: 5e:1a:05:1f:84:30:16:d5:19:cc:dd:a3:33:c3:ea: 62:2b:8e:0f:bb:f6:12:bc:e5:36:09:7e:ac:49:5c: ae:b9:4d:09:67:93:db:3a:1f:54:2a:3f:1c:72:e0: 36:71:19:d0:25:65:8f:52:f7:ab:ed:74:d3:22:f0: 92:bf:1d:20:28:ae:c9:4e:18:b7:e2:70:65:20:92: db:04:57:75:bb:8a:0a:c3:2a:f8:80:9f:10:2f:bc: 73:d4:59:96:26:7d:39:ab:b8:66:d7:33:75:e0:ff: 20:7a:d9:4b:06:b3:13:55:57:8d:50:86:de:9c:a2: 8d:5c:41:32:ac:4d:44:9a:29:60:e6:75:41:ac:7a: d1:d7:83:ad:94:52:47:2f:7e:92:0f:88:15:d1:20: 2c:b4:a3:f2:96:96:bb:58:0c:d0:5d:4f:35:08:21: 9d:b1:2b:2c:f9:7e:23:72:7e:ee:97:5a:13:42:90: 37:82:2e:29:40:e4:65:c1:9d:4a:af:bf:f8:03:ee: 1c:bf:a7:4c:78:c3:19:ab:a0:19:55:f4:b6:66:4c: 1d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:16:3F:DA:0D:4D:38:A1:60:85:0A:0A:5C:F0:73:F7:2D:78:2F:20 X509v3 Authority Key Identifier: keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:6c:09:c7:aa:6a:ef:cb:3b:09:ca:1f:24:b0:60:d1:21:ed: f9:8f:62:c9:ac:4e:13:7f:88:a8:29:a3:59:7b:5a:f2:2b:d8: f1:26:23:f7:1b:2c:71:32:7c:c4:c1:c0:ae:da:fd:60:4b:24: 0a:5d:4e:a1:62:58:69:3a:60:a8:6e:0d:0c:1e:a7:25:28:9a: 77:3f:6c:b8:86:f4:86:9a:81:05:a9:c7:fd:55:e8:0f:42:1e: 5a:fc:ae:25:b1:a9:0f:7f:1b:21:6f:eb:8a:98:d3:6c:04:b2: fb:88:29:93:6b:b6:0a:c3:f3:dc:a5:fc:4d:d7:02:46:3d:e5: da:13:91:41:ca:77:66:54:9a:d0:d6:22:a5:f8:38:e5:71:ca: 02:53:24:03:ec:1e:d6:7f:3e:f5:6c:58:d3:aa:d6:38:4f:55: 03:ee:6e:99:d4:1e:29:f2:7a:fc:a6:8f:80:ea:2a:bf:79:a5: 9c:85:06:e5:33:a7:cf:e5:b1:9c:ae:47:91:65:41:04:3d:b6: ca:e9:6b:77:10:6f:a4:89:9f:cd:a0:a1:13:46:0c:89:bb:ec: 20:ba:7f:8d:3d:51:b0:0a:7f:ca:9a:b2:6f:eb:c3:96:6a:20: c1:e3:80:3e:52:e1:37:4a:54:ee:73:e0:f5:d5:fb:68:ff:53: 48:1e:99:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvxYfdVIngYOdh78z/ijBi3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2 ZGVmMjAwHhcNMjYwMTI0MTkwMTI3WhcNMjYwMTI1MTkwMTI3WjAzMTEwLwYDVQQD EyhmZDE2M2ZkYTBkNGQzOGExNjA4NTBhMGE1Y2YwNzNmNzJkNzgyZjIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqwmjDM65TQWIP+H3wcpHtwyit8e A1r6Ap19PyT3L/lu0qCe2kQAwzeiyn1eGgUfhDAW1RnM3aMzw+piK44Pu/YSvOU2 CX6sSVyuuU0JZ5PbOh9UKj8ccuA2cRnQJWWPUver7XTTIvCSvx0gKK7JThi34nBl IJLbBFd1u4oKwyr4gJ8QL7xz1FmWJn05q7hm1zN14P8getlLBrMTVVeNUIbenKKN XEEyrE1Emilg5nVBrHrR14OtlFJHL36SD4gV0SAstKPylpa7WAzQXU81CCGdsSss +X4jcn7ul1oTQpA3gi4pQORlwZ1Kr7/4A+4cv6dMeMMZq6AZVfS2ZkwdgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0WP9oNTTihYIUKClzwc/cteC8gMB8GA1UdIwQY MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1 LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmwJx6pq 78s7CcofJLBg0SHt+Y9iyaxOE3+IqCmjWXta8ivY8SYj9xsscTJ8xMHArtr9YEsk Cl1OoWJYaTpgqG4NDB6nJSiadz9suIb0hpqBBanH/VXoD0IeWvyuJbGpD38bIW/r ipjTbASy+4gpk2u2CsPz3KX8TdcCRj3l2hORQcp3ZlSa0NYipfg45XHKAlMkA+we 1n8+9WxY06rWOE9VA+5umdQeKfJ6/KaPgOoqv3mlnIUG5TOnz+WxnK5HkWVBBD22 yulrdxBvpImfzaChE0YMibvsILp/jT1RsAp/ypqyb+vDlmogweOAPlLhN0pU7nPg 9dX7aP9TSB6ZQA== -----END CERTIFICATE-----Generated at Sun Jan 25 05:41:56 2026 by rpki-client