This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft File: u_Th_bQkqRICI7OnXGzMMbb2Iko.mft (raw, json) Hash identifier: ZzeGLMORygpo73pLxT4iikAGn5sdnyMs6lVxOKqi7hM= Subject key identifier: 02:A9:C1:1A:56:35:CE:93:3A:4F:30:30:4A:6B:1B:0A:3B:15:37:AA Authority key identifier: BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A Certificate issuer: /CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a Certificate serial: 019BF5756F81661768CF51BBE02D7AB16914 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft Manifest number: 16BF Signing time: Sun 25 Jan 2026 14:01:12 +0000 Manifest this update: Sun 25 Jan 2026 14:01:12 +0000 Manifest next update: Mon 26 Jan 2026 14:01:12 +0000 Files and hashes: 1: 7H6l8W7mloQmdCFME5bjkjpVqlI.roa (hash: T59Tl9zcDPQTjILJPoiX/wQPlxPSK4JPOrKNgwU40yY=) 2: JFxfDD-AJ-fYeQpwxlNBDToHx_A.roa (hash: +WZonE26u6Ny7SxSfdG+AH9dSkHMv7bOOSC0aT4GGz8=) 3: qPRMij18b3UBdhNaWj9X6XYBXVk.roa (hash: FnJYS8FAenTkSU7Qc1cYhhd/LFBxGNSv7vOsAQbJDN8=) 4: u_Th_bQkqRICI7OnXGzMMbb2Iko.crl (hash: H0xNmUNyqMypY0+mT1A5dXr+7IfdI7Ft/lNCkVEilfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:6f:81:66:17:68:cf:51:bb:e0:2d:7a:b1:69:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bbf4e1fdb424a9120223b3a75c6ccc31b6f6224a Validity Not Before: Jan 25 14:01:12 2026 GMT Not After : Jan 26 14:01:12 2026 GMT Subject: CN=02a9c11a5635ce933a4f30304a6b1b0a3b1537aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:37:a3:a6:6a:be:3a:6c:a9:03:89:c5:cc: 20:4b:58:9b:30:fc:05:74:ef:a0:3e:3f:f0:ff:40: 09:7b:50:ff:1f:9d:b5:e6:4d:57:95:7d:f2:73:35: 85:21:fd:16:7c:b2:b5:64:cb:76:8a:1f:20:b1:6c: 79:77:3f:26:84:0b:f8:0d:eb:e0:f0:73:ee:f7:c9: d2:51:1c:1f:97:a1:c8:11:d0:36:da:ab:03:07:40: 30:fd:c7:bc:5e:1d:2e:93:f9:3f:cf:ee:2d:1d:e7: 15:75:26:fc:8f:97:24:1c:e1:28:bb:c3:78:ab:b6: ca:73:a7:1d:c9:8a:72:5b:e3:e4:c6:f8:41:a3:6d: 30:f5:98:35:52:4f:1a:6e:e3:95:30:49:14:58:96: 93:6a:6a:b1:af:01:ea:16:6c:a4:05:c9:5d:07:97: d9:17:ad:5c:6d:32:db:ae:29:75:d6:3b:90:21:ae: 03:e7:ed:2d:3c:ef:3b:6b:e0:9c:13:2c:1c:b4:44: 91:9b:12:23:8e:8a:61:13:8c:76:05:74:60:da:92: 1d:41:3f:b2:1f:0d:45:db:45:3f:7c:98:e4:1b:a9: cf:eb:ab:68:6d:91:1b:fa:30:2c:1d:66:dd:33:25: 17:6f:63:e0:93:23:74:e4:39:67:a7:1d:00:86:59: 0e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A9:C1:1A:56:35:CE:93:3A:4F:30:30:4A:6B:1B:0A:3B:15:37:AA X509v3 Authority Key Identifier: keyid:BB:F4:E1:FD:B4:24:A9:12:02:23:B3:A7:5C:6C:CC:31:B6:F6:22:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_Th_bQkqRICI7OnXGzMMbb2Iko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/11cd10-3ef7-4105-8248-ba51323db4e5/1/u_Th_bQkqRICI7OnXGzMMbb2Iko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:7f:a6:66:4f:1d:b9:27:f7:87:ca:6d:4b:6c:12:2f:a4:66: f7:a8:88:5e:78:28:fe:42:40:bf:5c:b7:75:47:eb:1a:1d:ea: f3:39:dd:3c:af:74:e1:c2:25:7a:9a:bd:c5:23:40:5d:76:1e: cc:dc:ef:de:5b:5b:ec:1e:2d:c3:21:0d:fc:c7:7a:80:4c:d0: b9:e0:aa:13:19:35:3e:ee:a2:cb:4a:45:e0:2c:87:e3:8e:2d: 63:3d:58:5c:1e:33:6f:35:be:ed:b7:a5:a2:5f:fa:8b:39:48: 82:43:80:a3:2e:eb:dc:52:1f:a7:4a:6e:09:a3:02:a0:28:f4: 2c:76:ea:a0:5c:cd:95:2f:c8:cc:7d:46:74:a8:bb:2c:b0:28: 58:e2:67:83:02:45:3d:1e:6f:a2:10:3d:b9:e4:68:d5:c5:b4: 0c:f5:ea:8b:04:37:64:ae:ef:2d:17:ac:a7:81:90:6f:d7:63: 80:ef:0a:10:88:c2:ab:5e:72:4e:51:34:0c:ea:a7:64:c4:d2: 38:27:30:59:54:db:fe:2e:c1:17:dd:54:ad:03:ed:da:7d:aa: 94:53:7b:43:ba:e8:09:c3:a4:52:8f:8a:62:d6:47:4d:5e:ad: c7:3b:67:70:2d:f2:d8:ba:a6:f2:a7:18:8f:bc:c4:31:7c:c7: 14:11:32:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dW+BZhdoz1G74C16sWkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiZjRlMWZkYjQyNGE5MTIwMjIzYjNhNzVjNmNjYzMxYjZm NjIyNGEwHhcNMjYwMTI1MTQwMTEyWhcNMjYwMTI2MTQwMTEyWjAzMTEwLwYDVQQD EygwMmE5YzExYTU2MzVjZTkzM2E0ZjMwMzA0YTZiMWIwYTNiMTUzN2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXI3o6ZqvjpsqQOJxcwgS1ibMPwF dO+gPj/w/0AJe1D/H5215k1XlX3yczWFIf0WfLK1ZMt2ih8gsWx5dz8mhAv4Devg 8HPu98nSURwfl6HIEdA22qsDB0Aw/ce8Xh0uk/k/z+4tHecVdSb8j5ckHOEou8N4 q7bKc6cdyYpyW+PkxvhBo20w9Zg1Uk8abuOVMEkUWJaTamqxrwHqFmykBcldB5fZ F61cbTLbril11juQIa4D5+0tPO87a+CcEywctESRmxIjjophE4x2BXRg2pIdQT+y Hw1F20U/fJjkG6nP66tobZEb+jAsHWbdMyUXb2PgkyN05Dlnpx0AhlkO2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKpwRpWNc6TOk8wMEprGwo7FTeqMB8GA1UdIwQY MBaAFLv04f20JKkSAiOzp1xszDG29iJKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgt YmE1MTMyM2RiNGU1LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xMWNkMTAtM2VmNy00MTA1LTgyNDgtYmE1MTMyM2RiNGU1 LzEvdV9UaF9iUWtxUklDSTdPblhHek1NYmIySWtvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeH+mZk8d uSf3h8ptS2wSL6Rm96iIXngo/kJAv1y3dUfrGh3q8zndPK904cIlepq9xSNAXXYe zNzv3ltb7B4twyEN/Md6gEzQueCqExk1Pu6iy0pF4CyH444tYz1YXB4zbzW+7bel ol/6izlIgkOAoy7r3FIfp0puCaMCoCj0LHbqoFzNlS/IzH1GdKi7LLAoWOJngwJF PR5vohA9ueRo1cW0DPXqiwQ3ZK7vLResp4GQb9djgO8KEIjCq15yTlE0DOqnZMTS OCcwWVTb/i7BF91UrQPt2n2qlFN7Q7roCcOkUo+KYtZHTV6txztncC3y2Lqm8qcY j7zEMXzHFBEysQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:30 2026 by rpki-client