This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft File: BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft (raw, json) Hash identifier: NkPlnIAUgYsdJsbwkrUqWcnQmQ5ZRBp91oGdKnpsgB0= Subject key identifier: F3:10:F5:47:10:31:EF:BF:16:F8:7F:CD:FB:5A:45:AE:D5:6D:0C:8E Authority key identifier: 07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA Certificate issuer: /CN=0701b929fd9edbabae35dd44adc161d7d470b1fa Certificate serial: 019BF65130AB3440839271C7FCB9DD739334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 18:01:14 +0000 Manifest this update: Sun 25 Jan 2026 18:01:14 +0000 Manifest next update: Mon 26 Jan 2026 18:01:14 +0000 Files and hashes: 1: BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl (hash: EZ0WZUoI9lcuZ9lzXrLu/gSli5fTxMV3I7NHAdBE6Qw=) 2: rGvb_I1RWnjkOaC400eqOKX9gUs.roa (hash: s5r54/+TDX9ueX3DDQrKoX9eeoMeNDSEWK7Un4JmwLY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:30:ab:34:40:83:92:71:c7:fc:b9:dd:73:93:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0701b929fd9edbabae35dd44adc161d7d470b1fa Validity Not Before: Jan 25 18:01:14 2026 GMT Not After : Jan 26 18:01:14 2026 GMT Subject: CN=f310f5471031efbf16f87fcdfb5a45aed56d0c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:41:cc:3d:ac:63:b8:4a:ba:76:cb:80:57:98: de:18:98:60:59:9c:3b:2b:98:d4:9e:87:d9:dc:cc: fd:98:79:08:f9:8c:40:d8:1f:1b:40:9b:d0:d4:64: 5f:bd:d6:a7:de:b5:29:a6:0a:32:df:bb:95:c5:16: d0:47:1b:75:7f:b1:5b:a7:ac:d1:f2:fd:a9:05:ae: 68:b7:65:48:8d:38:5c:9b:3d:dd:d1:2b:44:ad:5e: a2:6b:18:32:e7:aa:c5:db:7d:03:8f:66:4d:88:ef: ec:72:d7:89:0e:a5:e2:a4:ec:e1:88:1a:ef:81:1d: d2:a2:67:4e:3d:13:06:3b:4d:10:40:50:a3:d1:1a: 84:6d:87:d4:3c:e0:68:3a:a3:50:6b:ac:3f:76:a4: f7:07:35:fc:8c:1e:f5:97:3f:91:ae:38:ed:99:7b: f8:ed:76:4c:1b:de:e1:ed:d7:b7:6b:5a:b2:53:57: e5:ae:0c:a4:af:22:0c:dc:1b:b4:6a:35:56:9e:c2: fa:8d:29:c3:f0:5e:3f:eb:e2:6c:d1:5d:bd:12:73: 8a:34:b9:5d:73:5d:25:07:42:48:5a:17:83:22:3e: cc:df:7e:69:58:3d:e5:e4:e2:bb:13:2a:f2:e2:ea: 7a:8a:1a:df:92:58:85:75:50:3d:74:56:f5:24:7b: ae:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:10:F5:47:10:31:EF:BF:16:F8:7F:CD:FB:5A:45:AE:D5:6D:0C:8E X509v3 Authority Key Identifier: keyid:07:01:B9:29:FD:9E:DB:AB:AE:35:DD:44:AD:C1:61:D7:D4:70:B1:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwG5Kf2e26uuNd1ErcFh19Rwsfo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2b42fc-49bc-4f81-987b-85493046ec46/1/BwG5Kf2e26uuNd1ErcFh19Rwsfo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d9:7c:c2:9e:19:fc:4e:5d:07:a6:b0:23:f9:6c:95:27:f3: 68:be:40:36:d8:da:6a:b8:1d:bd:45:ab:cc:1b:71:73:ba:9d: 2c:e2:7a:b3:fa:4f:7a:98:a9:25:6b:40:b3:54:33:cc:57:e8: 0d:9f:79:d1:99:77:f2:d8:17:81:a3:0c:a0:64:ac:6b:13:98: b6:5c:a5:51:35:ba:5d:d7:01:ca:85:97:cd:5e:5c:68:e1:b6: 7e:a5:45:8b:89:4e:5f:d9:df:47:d5:05:74:b4:cf:3c:e8:be: ba:9c:05:56:38:52:94:ea:5a:52:a9:ab:56:79:db:d0:54:ca: 4d:0d:30:55:90:5d:61:60:6b:78:b8:58:d8:7f:8e:56:19:a2: 17:d4:ea:3d:11:c9:13:b5:69:2f:43:e5:1c:b1:3a:2d:5b:64: c7:c4:2a:2d:a6:f8:60:69:c7:75:13:15:cc:7e:04:64:8e:81: 7b:3c:b0:03:39:bc:4b:4d:29:29:79:a1:28:13:1d:be:ee:86: 4e:32:c9:08:85:62:ba:9a:10:71:29:6b:70:60:bc:ea:ff:96: 72:de:97:e5:da:79:e9:4d:4b:57:9d:b2:cd:ca:98:56:92:ce: a9:9d:7f:13:91:c9:c0:64:00:89:4c:4a:07:ed:64:f3:de:78: f2:90:54:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UTCrNECDknHH/Lndc5M0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDFiOTI5ZmQ5ZWRiYWJhZTM1ZGQ0NGFkYzE2MWQ3ZDQ3 MGIxZmEwHhcNMjYwMTI1MTgwMTE0WhcNMjYwMTI2MTgwMTE0WjAzMTEwLwYDVQQD EyhmMzEwZjU0NzEwMzFlZmJmMTZmODdmY2RmYjVhNDVhZWQ1NmQwYzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0HMPaxjuEq6dsuAV5jeGJhgWZw7 K5jUnofZ3Mz9mHkI+YxA2B8bQJvQ1GRfvdan3rUppgoy37uVxRbQRxt1f7Fbp6zR 8v2pBa5ot2VIjThcmz3d0StErV6iaxgy56rF230Dj2ZNiO/scteJDqXipOzhiBrv gR3SomdOPRMGO00QQFCj0RqEbYfUPOBoOqNQa6w/dqT3BzX8jB71lz+RrjjtmXv4 7XZMG97h7de3a1qyU1flrgykryIM3Bu0ajVWnsL6jSnD8F4/6+Js0V29EnOKNLld c10lB0JIWheDIj7M335pWD3l5OK7Eyry4up6ihrfkliFdVA9dFb1JHuuIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMQ9UcQMe+/Fvh/zftaRa7VbQyOMB8GA1UdIwQY MBaAFAcBuSn9nturrjXdRK3BYdfUcLH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2It ODU0OTMwNDZlYzQ2LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yYjQyZmMtNDliYy00ZjgxLTk4N2ItODU0OTMwNDZlYzQ2 LzEvQndHNUtmMmUyNnV1TmQxRXJjRmgxOVJ3c2ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYtl8wp4Z /E5dB6awI/lslSfzaL5ANtjaargdvUWrzBtxc7qdLOJ6s/pPepipJWtAs1QzzFfo DZ950Zl38tgXgaMMoGSsaxOYtlylUTW6XdcByoWXzV5caOG2fqVFi4lOX9nfR9UF dLTPPOi+upwFVjhSlOpaUqmrVnnb0FTKTQ0wVZBdYWBreLhY2H+OVhmiF9TqPRHJ E7VpL0PlHLE6LVtkx8QqLab4YGnHdRMVzH4EZI6BezywAzm8S00pKXmhKBMdvu6G TjLJCIViupoQcSlrcGC86v+Wct6X5dp56U1LV52yzcqYVpLOqZ1/E5HJwGQAiUxK B+1k89548pBUqA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:45 2026 by rpki-client