This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json) Hash identifier: PA19WTkEKjJE5V9DadJu7QF/98pYOgfF9+L9uzHzTaU= Subject key identifier: 49:FD:EC:FD:99:39:0B:3F:90:E4:0C:B2:D1:DA:E6:12:F8:75:13:3C Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9 Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9 Certificate serial: 019BF807FFAA10F36FA0C1AB60C2FA492525 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft Manifest number: 0D43 Signing time: Mon 26 Jan 2026 02:00:32 +0000 Manifest this update: Mon 26 Jan 2026 02:00:32 +0000 Manifest next update: Tue 27 Jan 2026 02:00:32 +0000 Files and hashes: 1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: tH674NqyMWXUtRLpEKxo5kbCybYRBF7+8lAl8rmngyA=) 2: qPxd8qMxhd6Yq15uwp5rXHAxZ2E.roa (hash: 7ZX3c0L8iUXI21GiIPtHoJrfkVa81NDxH/D4ulRW6l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:07:ff:aa:10:f3:6f:a0:c1:ab:60:c2:fa:49:25:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Jan 27 02:00:32 2026 GMT Subject: CN=49fdecfd99390b3f90e40cb2d1dae612f875133c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:3e:58:b2:4b:60:8d:27:16:39:cc:e4:8c: df:75:1d:db:aa:49:59:a6:fe:fa:07:c7:43:4e:48: fa:88:54:de:01:08:bd:19:22:ee:2f:18:3a:23:01: ba:9c:d1:2f:b3:9c:6e:03:00:ff:62:1d:c6:41:32: ba:d9:bd:9a:d3:a3:c0:6e:a1:65:75:66:44:91:36: fa:68:bd:e7:38:75:bb:8e:65:6a:79:10:75:81:c3: aa:35:b5:59:97:ad:59:88:1f:2e:74:c4:27:3a:a8: c1:20:5b:b6:fc:bd:2d:c6:43:09:44:0a:be:36:7f: 95:87:9c:24:21:eb:85:6c:9a:c0:12:a9:5c:3a:08: 6b:3e:9f:04:30:b5:84:a9:af:79:15:6c:43:56:e3: 47:a1:3a:fb:95:cc:e9:2c:99:a0:ab:ae:a8:51:5f: 27:24:04:02:8d:ed:5e:ce:fe:41:98:68:d1:b3:dc: 89:2d:f8:07:e6:8e:88:e2:9a:b0:5c:df:1d:55:8f: 14:34:e9:44:19:29:82:dc:57:b6:db:70:fa:8d:8b: 7b:dc:ec:4f:30:44:07:54:aa:4d:d1:46:d0:73:06: 70:3c:90:e9:9c:4d:d0:e6:b9:d0:55:0d:ba:37:80: 2a:4a:19:d4:d2:b8:c0:7b:38:86:96:66:4e:9c:d2: e2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:FD:EC:FD:99:39:0B:3F:90:E4:0C:B2:D1:DA:E6:12:F8:75:13:3C X509v3 Authority Key Identifier: keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:ec:94:13:f6:35:4a:74:75:00:61:03:3d:58:2c:53:df:27: ce:0a:8b:be:4d:9d:6b:e8:69:88:08:d1:c7:a2:45:35:4a:fa: a1:f7:1d:6f:a4:f1:2a:4c:cf:7b:7a:e0:10:64:67:40:10:04: 2f:8c:a9:67:3c:c9:87:52:e8:cc:d2:11:a1:d6:f6:12:1a:61: ee:47:01:df:d6:92:29:e6:29:96:12:be:31:b3:3e:20:ee:32: c4:7c:29:84:f0:3f:84:6a:63:95:7e:f5:43:38:c0:40:d3:a7: 85:65:e4:45:6d:68:a3:a7:d2:46:ce:9b:40:af:c4:bf:6c:98: 81:2b:b2:71:9e:41:47:c3:7b:34:4b:af:b9:57:0c:d8:27:de: 9b:9f:ef:ce:25:20:1f:fb:52:8d:47:87:89:36:43:f0:a3:c8: f8:e3:a7:9f:9e:cc:57:12:65:8f:1d:03:5c:27:fd:35:47:1d: 08:fd:82:b4:65:e2:ff:dd:35:f4:0a:19:b3:f3:8e:f6:be:63: 3c:ff:4e:41:b9:44:1a:4c:94:24:34:97:82:ff:73:b3:ee:10: 74:f6:3e:86:5a:f6:53:41:1d:5e:f0:d8:a3:79:61:e6:3d:a2: 08:43:72:32:d3:08:85:6c:71:22:22:c5:db:9d:38:6f:2c:73: ff:25:48:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4B/+qEPNvoMGrYML6SSUlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTc1NzQ0MmU0N2Y4MjYwOGJlZjQyM2RhYzM0NGMyNTM1 OGRiZjkwHhcNMjYwMTI2MDIwMDMyWhcNMjYwMTI3MDIwMDMyWjAzMTEwLwYDVQQD Eyg0OWZkZWNmZDk5MzkwYjNmOTBlNDBjYjJkMWRhZTYxMmY4NzUxMzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9M+WLJLYI0nFjnM5IzfdR3bqklZ pv76B8dDTkj6iFTeAQi9GSLuLxg6IwG6nNEvs5xuAwD/Yh3GQTK62b2a06PAbqFl dWZEkTb6aL3nOHW7jmVqeRB1gcOqNbVZl61ZiB8udMQnOqjBIFu2/L0txkMJRAq+ Nn+Vh5wkIeuFbJrAEqlcOghrPp8EMLWEqa95FWxDVuNHoTr7lczpLJmgq66oUV8n JAQCje1ezv5BmGjRs9yJLfgH5o6I4pqwXN8dVY8UNOlEGSmC3Fe223D6jYt73OxP MEQHVKpN0UbQcwZwPJDpnE3Q5rnQVQ26N4AqShnU0rjAeziGlmZOnNLiSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEn97P2ZOQs/kOQMstHa5hL4dRM8MB8GA1UdIwQY MBaAFAanV0QuR/gmCL70I9rDRMJTWNv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iMWUwMTItMTJkMC00NGEzLWE2YWYt YjI1YTY3YjJlYjRhLzEvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9iMWUwMTItMTJkMC00NGEzLWE2YWYtYjI1YTY3YjJlYjRh LzEvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASuyUE/Y1 SnR1AGEDPVgsU98nzgqLvk2da+hpiAjRx6JFNUr6ofcdb6TxKkzPe3rgEGRnQBAE L4ypZzzJh1LozNIRodb2Ehph7kcB39aSKeYplhK+MbM+IO4yxHwphPA/hGpjlX71 QzjAQNOnhWXkRW1oo6fSRs6bQK/Ev2yYgSuycZ5BR8N7NEuvuVcM2Cfem5/vziUg H/tSjUeHiTZD8KPI+OOnn57MVxJljx0DXCf9NUcdCP2CtGXi/9019AoZs/OO9r5j PP9OQblEGkyUJDSXgv9zs+4QdPY+hlr2U0EdXvDYo3lh5j2iCENyMtMIhWxxIiLF 2504byxz/yVIdQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:39 2026 by rpki-client