This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft File: BkmD06ShwmqilQNIacWE91c4Cys.mft (raw, json) Hash identifier: L2vXqnBIHWnGIrDZMFtbpN7SIz3mR/n4CvdyuOqAmZA= Subject key identifier: 0A:A9:EA:A5:C5:9F:2B:99:F5:8D:B2:95:4B:15:20:0F:51:21:E9:D3 Authority key identifier: 06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B Certificate issuer: /CN=064983d3a4a1c26aa295034869c584f757380b2b Certificate serial: 019BF53E62982B65292652D5B8AEBCB5CE12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft Manifest number: 14C5 Signing time: Sun 25 Jan 2026 13:01:04 +0000 Manifest this update: Sun 25 Jan 2026 13:01:04 +0000 Manifest next update: Mon 26 Jan 2026 13:01:04 +0000 Files and hashes: 1: A4n1QfD0iscTrbBktYKciEddwcY.roa (hash: cgPbG6MU76mOSTBkpemcWJ21uY8j3EL3AxxbDcih+VE=) 2: BYpm9i5G2Jm6uaJJtUrofSvB2cs.roa (hash: sIpQ2sbPEMrlplpHLKZQECZcAj2kOZVTCoUy08QJDcw=) 3: BkmD06ShwmqilQNIacWE91c4Cys.crl (hash: xt4CFFq9Sdtb6gEpbhX9A/Oc3zroIKEnwkgdrLe71J8=) 4: wAJ_pCMa4TFcgUQnb3-N4NkW88w.roa (hash: v0hjCO6WeS6ijOFcxvfF0/0VDtvSJkTCMAw63tG6eZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:62:98:2b:65:29:26:52:d5:b8:ae:bc:b5:ce:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064983d3a4a1c26aa295034869c584f757380b2b Validity Not Before: Jan 25 13:01:04 2026 GMT Not After : Jan 26 13:01:04 2026 GMT Subject: CN=0aa9eaa5c59f2b99f58db2954b15200f5121e9d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:50:63:d7:a1:0e:06:ef:dd:dc:dd:7c:e2:9b: e2:48:53:5b:1f:d3:03:b7:d8:4c:b3:4e:4c:14:50: ea:e1:09:de:af:66:c4:25:68:ad:c8:5d:4e:93:c5: 35:69:1c:dd:32:3b:e5:81:02:d8:a3:b0:0c:c9:16: 01:4a:c8:63:21:71:c2:1a:23:0f:97:12:89:67:ce: 30:b4:73:67:a4:7e:bf:15:29:2f:af:49:81:4c:a5: 98:96:e1:83:30:b8:85:9e:84:5e:01:90:78:91:d5: c8:47:5f:b1:60:0b:ff:c3:5a:30:bf:7d:29:64:cc: 96:a8:ce:16:25:cd:3e:96:f6:e8:23:4b:1e:9c:4a: a5:7f:d9:33:7b:1b:37:aa:92:a1:51:78:d0:4d:96: 83:32:eb:7b:d7:c1:38:fe:96:07:94:94:ec:b7:b2: 63:68:ed:85:06:7b:d6:6f:c8:95:7a:73:00:27:eb: f1:3e:6d:f5:db:be:ff:23:00:a4:cc:b8:3e:e2:73: 5c:5a:10:a2:27:ba:52:b3:34:6f:9a:55:ce:07:71: 89:d6:79:48:98:c1:91:89:fa:67:e9:fb:07:34:e6: c2:79:1a:aa:90:12:04:e4:b8:a7:94:79:d3:07:e5: 96:17:9a:79:92:52:fe:9a:db:b4:c6:21:47:8b:f5: a0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A9:EA:A5:C5:9F:2B:99:F5:8D:B2:95:4B:15:20:0F:51:21:E9:D3 X509v3 Authority Key Identifier: keyid:06:49:83:D3:A4:A1:C2:6A:A2:95:03:48:69:C5:84:F7:57:38:0B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkmD06ShwmqilQNIacWE91c4Cys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/d37915-6a39-44d1-8e21-4ba3fc3484ce/1/BkmD06ShwmqilQNIacWE91c4Cys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ab:cf:13:58:45:45:66:95:a0:90:dd:0b:c0:07:b6:b5:dc: dc:f5:a8:f0:e5:e1:ea:27:5c:4b:49:e8:98:64:04:55:c0:66: 18:00:9c:d1:26:93:be:3f:7e:9b:57:46:35:26:cc:e0:54:ce: 54:09:f3:fe:bb:db:a1:67:5a:ef:00:cc:c6:39:d5:2f:54:2d: 2c:2c:e0:13:ca:40:aa:e0:a9:0c:77:95:c8:d0:7c:55:c3:5c: 79:88:b5:08:6f:14:e9:5a:1e:68:09:26:7e:ef:b6:6b:c5:42: 03:1c:93:70:ca:1c:a9:be:12:ad:d2:45:20:ba:3a:af:42:b1: 82:ca:7c:01:b6:f0:75:92:ed:6c:85:25:b7:f8:0e:9d:46:12: e7:1b:76:86:48:45:89:29:19:59:c3:c1:c2:e6:91:cd:8a:7d: 96:02:10:d0:7b:44:e0:57:7d:3d:dc:f8:11:1b:69:a8:c9:57: c4:cf:89:e5:b2:e1:b6:09:08:f3:0a:65:29:7a:37:94:46:ee: e8:c4:1d:c5:2d:95:78:d7:b7:6f:7e:63:74:bc:c0:4d:8d:8d: ce:45:b7:d7:27:de:c8:d5:ac:c0:84:41:76:b3:ee:c7:88:39: 76:fc:f4:95:04:2e:b3:e1:4c:7b:58:60:73:40:31:31:db:5c: 4f:60:33:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PmKYK2UpJlLVuK68tc4SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NDk4M2QzYTRhMWMyNmFhMjk1MDM0ODY5YzU4NGY3NTcz ODBiMmIwHhcNMjYwMTI1MTMwMTA0WhcNMjYwMTI2MTMwMTA0WjAzMTEwLwYDVQQD EygwYWE5ZWFhNWM1OWYyYjk5ZjU4ZGIyOTU0YjE1MjAwZjUxMjFlOWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVBj16EOBu/d3N184pviSFNbH9MD t9hMs05MFFDq4Qner2bEJWityF1Ok8U1aRzdMjvlgQLYo7AMyRYBSshjIXHCGiMP lxKJZ84wtHNnpH6/FSkvr0mBTKWYluGDMLiFnoReAZB4kdXIR1+xYAv/w1owv30p ZMyWqM4WJc0+lvboI0senEqlf9kzexs3qpKhUXjQTZaDMut718E4/pYHlJTst7Jj aO2FBnvWb8iVenMAJ+vxPm31277/IwCkzLg+4nNcWhCiJ7pSszRvmlXOB3GJ1nlI mMGRifpn6fsHNObCeRqqkBIE5LinlHnTB+WWF5p5klL+mtu0xiFHi/WgVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAqp6qXFnyuZ9Y2ylUsVIA9RIenTMB8GA1UdIwQY MBaAFAZJg9OkocJqopUDSGnFhPdXOAsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEt NGJhM2ZjMzQ4NGNlLzEvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9kMzc5MTUtNmEzOS00NGQxLThlMjEtNGJhM2ZjMzQ4NGNl LzEvQmttRDA2U2h3bXFpbFFOSWFjV0U5MWM0Q3lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaavPE1hF RWaVoJDdC8AHtrXc3PWo8OXh6idcS0nomGQEVcBmGACc0SaTvj9+m1dGNSbM4FTO VAnz/rvboWda7wDMxjnVL1QtLCzgE8pAquCpDHeVyNB8VcNceYi1CG8U6VoeaAkm fu+2a8VCAxyTcMocqb4SrdJFILo6r0Kxgsp8AbbwdZLtbIUlt/gOnUYS5xt2hkhF iSkZWcPBwuaRzYp9lgIQ0HtE4Fd9Pdz4ERtpqMlXxM+J5bLhtgkI8wplKXo3lEbu 6MQdxS2VeNe3b35jdLzATY2NzkW31yfeyNWswIRBdrPux4g5dvz0lQQus+FMe1hg c0AxMdtcT2AzoA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:15:06 2026 by rpki-client