This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft File: BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft (raw, json) Hash identifier: NFwm/nHzy2eOndNNdjn6WSFGB5zOj98qwFQaZVG1608= Subject key identifier: EF:06:A8:0E:DC:7D:13:0C:B5:CB:52:AB:CE:91:27:95:B2:1D:E8:CC Authority key identifier: 05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63 Certificate issuer: /CN=05f221f5f04cf9d96ddea44251b2b823f7114663 Certificate serial: 019BF72CD3E0E9FE4B3DE61C9F5B4D0BADF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft Manifest number: 050A Signing time: Sun 25 Jan 2026 22:01:08 +0000 Manifest this update: Sun 25 Jan 2026 22:01:08 +0000 Manifest next update: Mon 26 Jan 2026 22:01:08 +0000 Files and hashes: 1: BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl (hash: o6xIbsTgBzjBtrkUDOwQPt64MkSJDCxo8DDDIQJ34NI=) 2: oeeUNH_u8HxoB6Gbedq862_OYJg.roa (hash: Xrem3WCbpam6OLjoGPhqcP2mKEQjM9Q29NunWFcGIDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:d3:e0:e9:fe:4b:3d:e6:1c:9f:5b:4d:0b:ad:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05f221f5f04cf9d96ddea44251b2b823f7114663 Validity Not Before: Jan 25 22:01:08 2026 GMT Not After : Jan 26 22:01:08 2026 GMT Subject: CN=ef06a80edc7d130cb5cb52abce912795b21de8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:6e:bc:b5:56:43:80:6a:6a:4d:10:1d:55: e8:60:85:1f:ce:92:1e:a8:49:a4:db:92:f8:19:c3: 5d:88:a1:38:bd:e8:7b:5d:1d:89:31:2f:c0:d5:11: 02:d2:a1:f6:11:26:8a:29:dc:4f:fe:42:31:1e:b5: 51:f8:f6:af:a1:eb:ce:06:1e:6e:29:df:dc:5a:54: d8:de:98:f7:95:1e:16:32:1c:25:d4:2b:91:ab:4d: cf:cf:2d:92:39:19:1e:2a:9a:62:56:d9:22:12:6d: 16:e2:a8:75:a5:c9:c9:b5:96:7f:8a:39:09:ee:6c: 0c:24:6e:a6:d3:4c:3d:42:9f:76:96:30:30:6c:46: df:07:e3:f7:33:2b:d3:d1:83:af:2a:57:d1:d7:b0: 19:bc:f9:37:fc:b1:71:8b:1a:98:eb:10:c0:32:f3: 3a:0b:84:ed:ef:27:e2:36:08:62:ab:6b:87:30:88: f1:14:84:53:bb:e8:1e:e2:34:3d:fe:ee:30:c1:4e: a5:50:29:c4:84:69:e9:18:95:53:6d:2e:7e:17:b9: ea:88:66:f3:a1:dc:32:49:7f:cc:6f:25:c5:43:c2: 0f:b9:c3:f0:5d:d8:65:d9:c3:33:89:56:af:76:2c: 98:9b:6e:4e:1d:95:0e:48:ab:2a:28:1f:cc:e7:43: 05:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:06:A8:0E:DC:7D:13:0C:B5:CB:52:AB:CE:91:27:95:B2:1D:E8:CC X509v3 Authority Key Identifier: keyid:05:F2:21:F5:F0:4C:F9:D9:6D:DE:A4:42:51:B2:B8:23:F7:11:46:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfIh9fBM-dlt3qRCUbK4I_cRRmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/b7d1b5-7cb8-46aa-ad58-cbf2a3b6a284/1/BfIh9fBM-dlt3qRCUbK4I_cRRmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:dc:ff:9e:a7:8e:80:dc:3d:58:bd:14:71:d5:03:62:d8:43: 63:c7:09:fb:0e:35:b4:1b:fa:18:8d:9d:03:be:d0:e4:69:b3: 32:69:cf:90:ce:96:a5:f4:24:d5:06:20:e4:a3:e7:96:6c:72: 7e:f5:68:91:35:2c:ae:0d:a2:8b:92:d3:ae:24:5a:f2:b2:4a: 98:03:4a:ec:a0:90:eb:7f:67:8f:20:28:14:2f:19:d9:b4:07: 8f:a1:4e:6b:86:a7:2c:e7:82:2c:ea:d8:e1:01:20:c2:18:ba: b8:48:3a:9b:99:0e:72:12:be:2b:24:d3:4a:9b:64:54:7a:1c: 4f:b2:e8:3f:36:71:7c:e8:28:7b:77:e4:f9:04:f2:b9:f2:e4: 12:e3:20:8c:27:d5:1c:69:f2:f9:b3:05:a2:b6:a4:1c:db:aa: e5:0a:04:94:df:04:67:0b:47:5d:84:2d:10:eb:ff:46:af:81: a3:b3:b4:9c:47:ee:f6:f4:95:d1:e5:61:02:d6:a4:99:30:84: 33:dc:72:3d:84:7c:f3:8c:53:64:5d:d7:1d:a9:c9:10:e2:9c: 35:c5:23:2f:8e:b1:6e:ab:78:f9:a9:5c:88:16:a0:fa:9c:bf: 48:c0:08:d8:48:fc:83:e8:ba:d5:f8:ac:e9:02:ba:51:7c:ae: d4:16:38:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LNPg6f5LPeYcn1tNC63yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZjIyMWY1ZjA0Y2Y5ZDk2ZGRlYTQ0MjUxYjJiODIzZjcx MTQ2NjMwHhcNMjYwMTI1MjIwMTA4WhcNMjYwMTI2MjIwMTA4WjAzMTEwLwYDVQQD EyhlZjA2YTgwZWRjN2QxMzBjYjVjYjUyYWJjZTkxMjc5NWIyMWRlOGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv5uvLVWQ4Bqak0QHVXoYIUfzpIe qEmk25L4GcNdiKE4veh7XR2JMS/A1REC0qH2ESaKKdxP/kIxHrVR+PavoevOBh5u Kd/cWlTY3pj3lR4WMhwl1CuRq03Pzy2SORkeKppiVtkiEm0W4qh1pcnJtZZ/ijkJ 7mwMJG6m00w9Qp92ljAwbEbfB+P3MyvT0YOvKlfR17AZvPk3/LFxixqY6xDAMvM6 C4Tt7yfiNghiq2uHMIjxFIRTu+ge4jQ9/u4wwU6lUCnEhGnpGJVTbS5+F7nqiGbz odwySX/MbyXFQ8IPucPwXdhl2cMziVavdiyYm25OHZUOSKsqKB/M50MF8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8GqA7cfRMMtctSq86RJ5WyHejMMB8GA1UdIwQY MBaAFAXyIfXwTPnZbd6kQlGyuCP3EUZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9iN2QxYjUtN2NiOC00NmFhLWFkNTgt Y2JmMmEzYjZhMjg0LzEvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9iN2QxYjUtN2NiOC00NmFhLWFkNTgtY2JmMmEzYjZhMjg0 LzEvQmZJaDlmQk0tZGx0M3FSQ1ViSzRJX2NSUm1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl9z/nqeO gNw9WL0UcdUDYthDY8cJ+w41tBv6GI2dA77Q5GmzMmnPkM6WpfQk1QYg5KPnlmxy fvVokTUsrg2ii5LTriRa8rJKmANK7KCQ639njyAoFC8Z2bQHj6FOa4anLOeCLOrY 4QEgwhi6uEg6m5kOchK+KyTTSptkVHocT7LoPzZxfOgoe3fk+QTyufLkEuMgjCfV HGny+bMForakHNuq5QoElN8EZwtHXYQtEOv/Rq+Bo7O0nEfu9vSV0eVhAtakmTCE M9xyPYR884xTZF3XHanJEOKcNcUjL46xbqt4+alciBag+py/SMAI2Ej8g+i61fis 6QK6UXyu1BY4Dw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:31:13 2026 by rpki-client