This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft File: bzLuXwGJ75tnFBjtM27LFyj5kgo.mft (raw, json) Hash identifier: CjTSBNE718fmrqZ5qarUxEYFzJ0uB7fLzhmDZFi9gIk= Subject key identifier: 92:FD:11:B3:13:FC:75:B6:D6:82:39:62:05:10:69:14:BB:E7:03:71 Authority key identifier: 6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A Certificate issuer: /CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a Certificate serial: 019BF6517D84DD65A5E1F294C0B6E4E5C174 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft Manifest number: B7 Signing time: Sun 25 Jan 2026 18:01:34 +0000 Manifest this update: Sun 25 Jan 2026 18:01:34 +0000 Manifest next update: Mon 26 Jan 2026 18:01:34 +0000 Files and hashes: 1: bzLuXwGJ75tnFBjtM27LFyj5kgo.crl (hash: h/Iu/L47nar2eGVTooGgdrG65vfLwR9zDPO6CgbJDxQ=) 2: wEZZ62iCzbaAWMViItHMRW3Yn4A.roa (hash: 9u0WzB3secIPXGuUPwiYCCAPxshkCONWk6lZILLF7AA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:7d:84:dd:65:a5:e1:f2:94:c0:b6:e4:e5:c1:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f32ee5f0189ef9b671418ed336ecb1728f9920a Validity Not Before: Jan 25 18:01:34 2026 GMT Not After : Jan 26 18:01:34 2026 GMT Subject: CN=92fd11b313fc75b6d682396205106914bbe70371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:2f:aa:c1:2b:e6:0c:60:a6:a7:bf:ff:2f:ae: cc:c2:82:9b:f3:e0:c8:45:0f:25:49:35:48:57:c6: e4:94:fd:82:4e:24:d7:39:53:1e:54:0b:36:6f:ad: 23:35:9b:30:2d:a4:85:e8:3f:3c:73:76:a1:82:89: e6:3d:fd:5b:f9:58:c0:19:8d:bf:da:49:30:b6:88: b0:08:f0:93:b0:1a:49:b9:db:31:c9:ad:ea:af:8c: 02:aa:1b:5c:00:7d:c2:2d:5d:58:f9:06:0d:5f:fe: 4a:e0:98:bc:a3:f0:2f:7b:62:85:93:dc:e6:76:b3: f4:99:d8:11:d3:cb:bb:c9:31:c6:9b:8b:7c:ab:80: 28:29:7c:bc:5f:e2:55:c4:1e:41:a3:82:75:23:83: b2:f8:b0:c3:db:a0:0e:2d:a8:8d:5c:18:4e:bd:14: 72:e0:92:06:ac:be:89:64:df:d7:74:e6:80:b9:03: a5:eb:4b:74:eb:df:18:b0:4f:3a:a9:ad:bf:94:e4: 74:36:09:31:f4:e0:b9:ae:26:3c:f3:70:bc:8d:15: 44:8d:bc:54:fb:31:25:e4:92:7b:1a:59:e4:23:2f: 16:56:7f:a8:90:c4:bc:ec:07:3d:a5:5a:ff:c3:37: 02:32:b7:72:1d:3d:7c:49:66:41:cb:5d:1d:14:37: 0f:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:FD:11:B3:13:FC:75:B6:D6:82:39:62:05:10:69:14:BB:E7:03:71 X509v3 Authority Key Identifier: keyid:6F:32:EE:5F:01:89:EF:9B:67:14:18:ED:33:6E:CB:17:28:F9:92:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzLuXwGJ75tnFBjtM27LFyj5kgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b2edcb-ee21-49ef-8fcf-8e7613804c80/1/bzLuXwGJ75tnFBjtM27LFyj5kgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:ef:03:d7:33:05:f6:3f:65:ac:2b:67:07:20:53:15:21:5c: 8d:08:25:0c:eb:9d:55:01:92:c2:ea:33:07:3e:da:f8:4b:b6: 67:5f:a5:49:4e:17:4d:23:e1:54:4b:7a:7d:e5:86:a2:e3:d6: 40:7b:3a:17:f6:7f:e1:15:a5:19:92:d1:3f:3b:27:b6:81:24: 2c:55:85:e5:98:96:fa:b6:ce:86:e2:7a:06:29:c2:45:6f:0f: 54:a8:c7:2e:fb:27:f5:c6:e1:3e:db:a5:f3:57:9c:83:61:6e: a5:03:b6:11:be:c9:92:63:1e:bc:20:c1:c4:2b:1f:a2:35:f2: e3:e6:3e:d4:05:5b:71:91:11:27:6d:4b:08:48:2f:8c:d1:29: fb:70:6c:d5:11:67:2a:af:40:14:7f:fd:41:c9:e2:22:dd:28: ed:90:65:be:6d:6b:ff:8d:a4:94:e0:77:89:62:57:7f:6d:6b: 13:75:f6:74:18:7b:ec:5c:d4:e0:bd:fc:67:e3:9f:b4:9f:1d: 49:65:4b:10:4c:99:ff:67:4d:c6:7c:6b:1f:a8:f9:b7:fb:87: 9e:d7:97:59:03:69:b5:b7:f3:13:a4:24:39:be:f4:05:58:3d: bc:72:62:7c:85:99:12:40:e4:7d:dc:26:16:83:55:37:ea:fb: d7:07:da:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UX2E3WWl4fKUwLbk5cF0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzJlZTVmMDE4OWVmOWI2NzE0MThlZDMzNmVjYjE3Mjhm OTkyMGEwHhcNMjYwMTI1MTgwMTM0WhcNMjYwMTI2MTgwMTM0WjAzMTEwLwYDVQQD Eyg5MmZkMTFiMzEzZmM3NWI2ZDY4MjM5NjIwNTEwNjkxNGJiZTcwMzcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAny+qwSvmDGCmp7//L67MwoKb8+DI RQ8lSTVIV8bklP2CTiTXOVMeVAs2b60jNZswLaSF6D88c3ahgonmPf1b+VjAGY2/ 2kkwtoiwCPCTsBpJudsxya3qr4wCqhtcAH3CLV1Y+QYNX/5K4Ji8o/Ave2KFk9zm drP0mdgR08u7yTHGm4t8q4AoKXy8X+JVxB5Bo4J1I4Oy+LDD26AOLaiNXBhOvRRy 4JIGrL6JZN/XdOaAuQOl60t0698YsE86qa2/lOR0Ngkx9OC5riY883C8jRVEjbxU +zEl5JJ7GlnkIy8WVn+okMS87Ac9pVr/wzcCMrdyHT18SWZBy10dFDcPwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJL9EbMT/HW21oI5YgUQaRS75wNxMB8GA1UdIwQY MBaAFG8y7l8Bie+bZxQY7TNuyxco+ZIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2Yt OGU3NjEzODA0YzgwLzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9iMmVkY2ItZWUyMS00OWVmLThmY2YtOGU3NjEzODA0Yzgw LzEvYnpMdVh3R0o3NXRuRkJqdE0yN0xGeWo1a2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmO8D1zMF 9j9lrCtnByBTFSFcjQglDOudVQGSwuozBz7a+Eu2Z1+lSU4XTSPhVEt6feWGouPW QHs6F/Z/4RWlGZLRPzsntoEkLFWF5ZiW+rbOhuJ6BinCRW8PVKjHLvsn9cbhPtul 81ecg2FupQO2Eb7JkmMevCDBxCsfojXy4+Y+1AVbcZERJ21LCEgvjNEp+3Bs1RFn Kq9AFH/9QcniIt0o7ZBlvm1r/42klOB3iWJXf21rE3X2dBh77FzU4L38Z+OftJ8d SWVLEEyZ/2dNxnxrH6j5t/uHnteXWQNptbfzE6QkOb70BVg9vHJifIWZEkDkfdwm FoNVN+r71wfamQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:47:59 2026 by rpki-client