This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft File: bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft (raw, json) Hash identifier: m7O2avgZR2GfjTPKKR0oYqc/SiFxgjStRz1vyTkZ8/Q= Subject key identifier: 35:12:3D:2B:3F:70:89:0D:52:10:10:CE:32:F6:B2:33:EE:C5:FF:9E Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23 Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23 Certificate serial: 019BF8E3CC3E5C5F1B285A098D84DDB63093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft Manifest number: 0663 Signing time: Mon 26 Jan 2026 06:00:37 +0000 Manifest this update: Mon 26 Jan 2026 06:00:37 +0000 Manifest next update: Tue 27 Jan 2026 06:00:37 +0000 Files and hashes: 1: U5KRJaLW-C1j2ySoKDiQhcIiS7w.roa (hash: 47exCNrT+wdct4CXwd3gADeOVCMD5bpFixf7fXR3XIk=) 2: bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl (hash: cQxjDhI0L4jH9xEW7h6kgVWbjm52qGJmd+SoIyElpKg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:cc:3e:5c:5f:1b:28:5a:09:8d:84:dd:b6:30:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23 Validity Not Before: Jan 26 06:00:37 2026 GMT Not After : Jan 27 06:00:37 2026 GMT Subject: CN=35123d2b3f70890d521010ce32f6b233eec5ff9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:d9:36:77:6f:3e:bf:84:04:0a:f5:6c:c2: 54:06:1e:a2:f7:3d:45:48:fc:e4:20:f8:79:b1:ef: 9e:31:a0:a3:2e:a8:99:e6:96:65:34:3e:85:87:06: f2:4b:e1:fd:ba:41:e4:b1:2f:19:2e:b3:d3:6f:c6: 19:1b:31:0d:53:22:6b:73:f6:17:74:13:77:87:24: 29:79:e7:fd:29:c6:7d:6d:c0:f1:0a:42:0d:a8:9e: 58:64:cb:db:16:f8:77:99:60:16:78:d8:2c:dd:7d: e7:39:29:bc:53:a3:36:b7:e3:6e:d2:4e:7a:ba:32: 11:15:d7:ce:1a:a5:75:4c:42:bc:20:9a:33:af:a0: 9c:77:50:e0:1c:74:1a:7d:66:21:69:fc:b7:95:02: fb:5d:8e:b4:24:b3:ec:4b:c1:3c:db:af:39:2f:aa: 16:12:3c:95:89:8d:14:96:77:dd:7f:c4:d4:1b:5c: 77:21:2c:22:48:47:89:2a:fb:93:b0:d4:86:d6:c6: 14:be:23:f0:97:85:3d:20:dd:c3:0d:93:04:f8:bf: 6a:1f:fa:29:9d:68:40:5a:78:87:b4:f5:7e:f6:3d: 70:2c:d5:f9:86:dd:a5:85:0b:4c:bf:6b:3b:0a:aa: 60:1e:99:96:3e:5d:82:23:60:85:4d:ca:7a:cd:ce: ee:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:12:3D:2B:3F:70:89:0D:52:10:10:CE:32:F6:B2:33:EE:C5:FF:9E X509v3 Authority Key Identifier: keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:04:f6:5d:d8:df:64:17:37:0c:7d:67:29:34:71:e7:cf:bf: 04:2a:0d:ac:e1:8f:b9:88:89:8c:12:10:d0:0b:e7:81:ef:c1: 55:f5:f9:bd:fa:46:b7:72:71:a8:b1:99:c8:d5:7d:da:45:16: be:0e:85:fe:14:69:3a:c1:00:24:36:e8:bc:1d:d1:dc:3a:87: 6f:0d:89:29:34:d8:45:a4:8f:8d:28:95:79:2b:7d:c2:24:d5: ee:99:52:92:04:8d:c9:8a:cb:70:b1:5a:4a:fe:60:0e:8e:29: d2:f8:8e:17:72:2f:85:df:65:d0:96:6e:16:5d:71:70:fa:f4: 80:8e:5d:de:8d:48:48:e8:d5:64:4c:9a:0b:21:90:c2:4d:93: 65:16:a8:02:e9:3b:7e:7e:b0:a8:8f:65:03:34:fa:c6:76:8a: d6:d8:07:84:9c:4d:91:64:e2:5e:09:7b:4b:3c:c4:d0:9b:5a: 95:47:b5:63:04:75:c1:28:22:85:07:66:19:ec:72:7c:bd:67: 3f:83:81:a7:61:b7:c2:a4:64:1b:f6:84:b0:6f:c5:3d:4e:ea: 7d:b0:7a:bd:7f:65:fb:ee:84:da:a6:46:25:cc:24:d8:fe:fd: 27:3f:20:c8:ab:0b:38:f1:a0:7a:51:28:b0:2b:6f:66:f8:8c: 91:0f:47:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv448w+XF8bKFoJjYTdtjCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGQ0MmZmZGI3ZTgyNzcwMjNmMTAxOWI1NTRmZWIxOWY1 YzNmMjMwHhcNMjYwMTI2MDYwMDM3WhcNMjYwMTI3MDYwMDM3WjAzMTEwLwYDVQQD EygzNTEyM2QyYjNmNzA4OTBkNTIxMDEwY2UzMmY2YjIzM2VlYzVmZjllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuHZNndvPr+EBAr1bMJUBh6i9z1F SPzkIPh5se+eMaCjLqiZ5pZlND6FhwbyS+H9ukHksS8ZLrPTb8YZGzENUyJrc/YX dBN3hyQpeef9KcZ9bcDxCkINqJ5YZMvbFvh3mWAWeNgs3X3nOSm8U6M2t+Nu0k56 ujIRFdfOGqV1TEK8IJozr6Ccd1DgHHQafWYhafy3lQL7XY60JLPsS8E82685L6oW EjyViY0Ulnfdf8TUG1x3ISwiSEeJKvuTsNSG1sYUviPwl4U9IN3DDZME+L9qH/op nWhAWniHtPV+9j1wLNX5ht2lhQtMv2s7CqpgHpmWPl2CI2CFTcp6zc7uQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUSPSs/cIkNUhAQzjL2sjPuxf+eMB8GA1UdIwQY MBaAFG3dQv/bfoJ3Aj8QGbVU/rGfXD8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9mMWMzNzUtNDFkYS00ZWE2LWFjZDEt MDliYzkyZDRlZDk2LzEvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9mMWMzNzUtNDFkYS00ZWE2LWFjZDEtMDliYzkyZDRlZDk2 LzEvYmQxQ185dC1nbmNDUHhBWnRWVC1zWjljUHlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgT2Xdjf ZBc3DH1nKTRx58+/BCoNrOGPuYiJjBIQ0Avnge/BVfX5vfpGt3JxqLGZyNV92kUW vg6F/hRpOsEAJDbovB3R3DqHbw2JKTTYRaSPjSiVeSt9wiTV7plSkgSNyYrLcLFa Sv5gDo4p0viOF3Ivhd9l0JZuFl1xcPr0gI5d3o1ISOjVZEyaCyGQwk2TZRaoAuk7 fn6wqI9lAzT6xnaK1tgHhJxNkWTiXgl7SzzE0JtalUe1YwR1wSgihQdmGexyfL1n P4OBp2G3wqRkG/aEsG/FPU7qfbB6vX9l++6E2qZGJcwk2P79Jz8gyKsLOPGgelEo sCtvZviMkQ9Hig== -----END CERTIFICATE-----Generated at Mon Jan 26 10:27:18 2026 by rpki-client