This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft File: Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft (raw, json) Hash identifier: UmmROB55X37edIvnVfh6zmOOsqnA9CvmFSkUGnC+XWI= Subject key identifier: D5:9A:57:DF:F9:06:37:A3:65:12:A7:CE:70:22:1D:02:4C:0C:E6:AF Authority key identifier: 06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98 Certificate issuer: /CN=06097a72e4ae40b6b9929b72f81efd71c517dd98 Certificate serial: 019BF808045BEF002C909D9C9D83163E3568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft Manifest number: 040C Signing time: Mon 26 Jan 2026 02:00:33 +0000 Manifest this update: Mon 26 Jan 2026 02:00:33 +0000 Manifest next update: Tue 27 Jan 2026 02:00:33 +0000 Files and hashes: 1: Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl (hash: WarKzjGsqwCR0HhHQDW3MWbakiKIMi9QkBJzXPO2KG0=) 2: egh2jlJ3EvVVoKqsyyD80-m512Q.roa (hash: RHu71nLbKp8lHX4W0lV6aHdUtImYmFlIXsjzf9wXMgw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:04:5b:ef:00:2c:90:9d:9c:9d:83:16:3e:35:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06097a72e4ae40b6b9929b72f81efd71c517dd98 Validity Not Before: Jan 26 02:00:33 2026 GMT Not After : Jan 27 02:00:33 2026 GMT Subject: CN=d59a57dff90637a36512a7ce70221d024c0ce6af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:6b:e0:db:d8:65:ef:ed:cc:d6:b3:01:fe:3c: 0b:81:ac:05:2e:df:74:07:fd:32:8b:2a:b3:c4:5b: 73:e2:65:a5:b0:91:a9:a2:ec:2f:e1:4e:49:eb:64: d9:bb:14:5a:5c:b6:8e:97:ef:e5:f3:05:bc:36:80: 52:43:3d:92:95:45:b7:a5:b5:5d:af:db:4f:cf:e5: 41:66:6b:db:d0:b6:25:56:eb:89:b2:70:8a:82:53: 14:60:d1:a9:95:26:1a:55:a5:d3:d9:a6:4f:5a:08: 7e:95:c8:a4:cd:de:4e:5e:29:24:56:e8:18:9a:6b: 6c:5a:c0:45:0b:58:c5:b9:35:6b:dc:9f:4e:fd:5b: 9a:e2:fe:ca:d8:b8:0e:17:37:3b:c6:05:11:00:ac: 76:bb:fd:d7:ac:19:82:d9:87:3a:8d:d6:6c:04:2f: 9e:34:f7:4b:77:e5:c7:0d:9d:15:c3:d6:a6:57:38: c8:bf:0f:08:c4:06:e0:53:f5:ff:e7:06:52:e5:a2: b1:3b:fa:2f:6c:bc:b5:f0:73:d1:16:2c:06:83:2f: a9:87:72:e6:8b:b9:b3:c2:5f:7b:43:18:62:72:bf: f3:8d:cd:87:69:66:72:b5:a6:57:0d:be:e3:fc:6a: d4:1c:f0:e2:b7:d2:6a:48:86:10:07:17:05:fc:01: e2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9A:57:DF:F9:06:37:A3:65:12:A7:CE:70:22:1D:02:4C:0C:E6:AF X509v3 Authority Key Identifier: keyid:06:09:7A:72:E4:AE:40:B6:B9:92:9B:72:F8:1E:FD:71:C5:17:DD:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bgl6cuSuQLa5kpty-B79ccUX3Zg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3a109a-9b32-45a8-9b0c-7a02517fd9d2/1/Bgl6cuSuQLa5kpty-B79ccUX3Zg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c5:a7:ee:21:40:b7:d1:d9:5e:c5:b8:53:98:15:64:53:69: 76:33:43:3f:39:b5:60:95:27:8c:ba:97:5c:66:d3:dc:5a:28: 1d:00:35:a9:5a:ac:77:c8:57:b2:3a:2a:70:0a:45:8c:86:c3: 52:46:46:9f:81:35:b9:ac:22:40:61:a9:5c:20:fd:2c:27:e1: f5:09:fd:a4:b0:42:05:2a:5c:45:fe:65:a2:66:a2:dc:b7:c9: 11:38:5d:53:c0:5f:01:b6:be:3a:b9:4c:c6:03:27:1e:fa:f2: ef:25:f8:a1:c3:56:4a:3b:e7:7d:ad:24:d4:6b:69:ec:93:ee: 0b:08:57:79:80:37:de:72:ad:39:12:c2:19:c7:b9:c1:f3:22: b3:90:1e:50:52:e5:80:5c:33:b4:05:41:be:3c:ac:da:65:49: 92:cb:8a:73:b8:b2:fe:43:d5:78:32:8b:ba:d5:fa:15:a5:17: 56:0f:e1:a2:89:1b:2e:49:4f:40:9e:18:96:ba:fd:bd:6b:e4: ae:02:fe:75:ad:18:e1:78:d3:53:6a:c9:7e:ad:4c:ed:ea:dc: 21:db:65:a4:e4:5e:73:35:2d:3a:ec:a7:11:da:50:e3:79:b2: f4:57:c7:5f:e6:f8:6c:0e:f0:02:b3:c2:e5:e0:83:18:a0:d8: 93:f4:a2:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CARb7wAskJ2cnYMWPjVoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MDk3YTcyZTRhZTQwYjZiOTkyOWI3MmY4MWVmZDcxYzUx N2RkOTgwHhcNMjYwMTI2MDIwMDMzWhcNMjYwMTI3MDIwMDMzWjAzMTEwLwYDVQQD EyhkNTlhNTdkZmY5MDYzN2EzNjUxMmE3Y2U3MDIyMWQwMjRjMGNlNmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmvg29hl7+3M1rMB/jwLgawFLt90 B/0yiyqzxFtz4mWlsJGpouwv4U5J62TZuxRaXLaOl+/l8wW8NoBSQz2SlUW3pbVd r9tPz+VBZmvb0LYlVuuJsnCKglMUYNGplSYaVaXT2aZPWgh+lcikzd5OXikkVugY mmtsWsBFC1jFuTVr3J9O/Vua4v7K2LgOFzc7xgURAKx2u/3XrBmC2Yc6jdZsBC+e NPdLd+XHDZ0Vw9amVzjIvw8IxAbgU/X/5wZS5aKxO/ovbLy18HPRFiwGgy+ph3Lm i7mzwl97Qxhicr/zjc2HaWZytaZXDb7j/GrUHPDit9JqSIYQBxcF/AHiKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWaV9/5BjejZRKnznAiHQJMDOavMB8GA1UdIwQY MBaAFAYJenLkrkC2uZKbcvge/XHFF92YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMt N2EwMjUxN2ZkOWQyLzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zYTEwOWEtOWIzMi00NWE4LTliMGMtN2EwMjUxN2ZkOWQy LzEvQmdsNmN1U3VRTGE1a3B0eS1CNzljY1VYM1pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARcWn7iFA t9HZXsW4U5gVZFNpdjNDPzm1YJUnjLqXXGbT3FooHQA1qVqsd8hXsjoqcApFjIbD UkZGn4E1uawiQGGpXCD9LCfh9Qn9pLBCBSpcRf5lomai3LfJEThdU8BfAba+OrlM xgMnHvry7yX4ocNWSjvnfa0k1Gtp7JPuCwhXeYA33nKtORLCGce5wfMis5AeUFLl gFwztAVBvjys2mVJksuKc7iy/kPVeDKLutX6FaUXVg/hookbLklPQJ4Ylrr9vWvk rgL+da0Y4XjTU2rJfq1M7ercIdtlpOReczUtOuynEdpQ43my9FfHX+b4bA7wArPC 5eCDGKDYk/SiAw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:34 2026 by rpki-client