This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft File: BFxfO7gRkXIMDd-LPPNNkdq04dM.mft (raw, json) Hash identifier: xEHM9v6kww8+Ejoj4Za48t6ADOe8yLtlBTShYwjwBiE= Subject key identifier: D6:CD:4C:05:29:A6:CA:4D:28:11:95:AA:F1:CD:5A:3A:42:98:E9:BF Authority key identifier: 04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3 Certificate issuer: /CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3 Certificate serial: 019BF619C5693FAEBCBDD6476C7D783E5F91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 17:00:42 +0000 Manifest this update: Sun 25 Jan 2026 17:00:42 +0000 Manifest next update: Mon 26 Jan 2026 17:00:42 +0000 Files and hashes: 1: BFxfO7gRkXIMDd-LPPNNkdq04dM.crl (hash: 0iaMkrdSTqPj1A3Z30U057tYhf4O+IkfSTdqYJFWCpM=) 2: CZyTJuOlnq-ky9dbEConr41Bm38.roa (hash: 5rtJlpCqmLKREoblfIHZUZwHo3e3ekq4hHO8j58CnBY=) 3: euKoI7vmey1fTPE04HoSqLuDz4Q.roa (hash: 32wDb/N882DtoqSetNBAzx24jUXx/OWTovG5eWeLxNM=) 4: jH6Kf-tfYBLVkCwlhSp3lBJ6KCQ.roa (hash: m/C4McZFMkjpAqtTsTyqkoINmbz3Lx0YilvVZ7bpG9M=) 5: rWvQJ8xO6-SPDys-uWKDLRUA43o.roa (hash: zHIdrKZtf58ZqctGwQ2WHJ41AOjM3MPJlFFP2hW5ctw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:c5:69:3f:ae:bc:bd:d6:47:6c:7d:78:3e:5f:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=045c5f3bb81191720c0ddf8b3cf34d91dab4e1d3 Validity Not Before: Jan 25 17:00:42 2026 GMT Not After : Jan 26 17:00:42 2026 GMT Subject: CN=d6cd4c0529a6ca4d281195aaf1cd5a3a4298e9bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:69:20:db:d5:d5:08:66:18:98:1f:68:47:e0: d3:3b:24:30:9c:59:d4:b0:e3:21:48:b6:19:36:6a: 74:61:4a:99:1b:c5:0d:6d:b4:32:e8:82:1e:69:7a: c1:bf:cc:c0:b2:39:25:2d:6f:2f:23:9e:e8:db:2f: 78:e7:a4:22:d9:7b:b9:54:32:77:c4:83:a9:be:f8: 73:a2:3d:a5:8b:db:ab:a9:35:28:c5:ec:0e:eb:a7: a2:ac:04:1c:38:63:c3:d0:00:15:01:c2:e9:33:18: bc:04:cb:ce:b6:1e:1d:d9:b7:eb:fd:5e:9b:13:ea: 50:e5:0e:ae:9f:59:3e:1b:8d:74:00:7b:52:12:03: c6:87:65:56:ca:a9:57:6b:31:dd:31:83:e2:8b:20: 2a:3f:33:c1:7e:88:5d:e3:65:72:b5:55:6f:52:41: 87:a0:80:70:70:85:e3:f9:3c:3a:94:f1:bc:1f:8a: db:80:9c:57:1b:d1:ff:81:83:78:23:15:43:f4:c7: 03:a3:09:c4:be:55:4d:5f:5b:ca:e8:63:5e:b5:e3: 84:f8:b2:fe:a2:ce:f5:3e:5d:27:06:eb:9c:60:bb: 33:b5:3b:67:ae:6b:5d:22:50:14:be:c4:09:0b:77: 8f:b3:a4:6b:bc:ec:42:ca:16:c8:45:d5:f2:36:1c: 30:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CD:4C:05:29:A6:CA:4D:28:11:95:AA:F1:CD:5A:3A:42:98:E9:BF X509v3 Authority Key Identifier: keyid:04:5C:5F:3B:B8:11:91:72:0C:0D:DF:8B:3C:F3:4D:91:DA:B4:E1:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BFxfO7gRkXIMDd-LPPNNkdq04dM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6eabcd-a8fc-43ea-8b7c-fbb80853c1be/1/BFxfO7gRkXIMDd-LPPNNkdq04dM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:23:08:01:6b:10:c3:3e:44:ea:d5:be:80:f1:54:08:d2:35: 28:68:18:b9:8e:47:28:0b:2f:87:4f:fd:22:a3:32:7c:db:e4: 90:5b:f9:36:27:ab:21:e1:a3:27:19:97:70:b1:5b:dc:4b:f8: 02:81:5f:b0:16:a1:8c:3c:72:fe:e7:54:c4:e4:33:28:94:40: 7f:aa:89:5f:52:95:3d:e6:e8:a9:33:00:2c:24:68:07:db:ed: d6:11:f6:b5:21:7a:1a:78:a5:00:e2:2d:d6:89:60:22:44:6e: c3:b4:ec:07:6f:23:d5:0d:da:24:25:8c:c6:60:ae:8f:5a:2f: 11:d6:1f:3b:2b:b9:63:35:69:d0:25:55:8d:fa:ca:11:e5:96: fe:b1:1b:6d:86:08:0c:bf:46:30:22:23:19:96:6c:3a:60:06: 36:e0:5b:2c:0a:18:77:a7:57:3c:75:49:80:70:b5:ed:6d:21: 5c:de:79:a4:0d:97:d2:11:c0:b3:73:5f:02:6d:6f:0a:40:2b: b7:f2:bc:d3:ae:3a:78:f1:fd:29:77:2b:13:ff:1d:81:8b:f2: 8f:d4:20:a8:8a:0b:ef:5c:ed:0a:c7:7a:31:dd:dd:f7:46:27: 8d:13:93:c5:d6:87:d4:68:d4:b6:73:94:87:2d:81:25:57:0c: e4:93:51:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GcVpP668vdZHbH14Pl+RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NWM1ZjNiYjgxMTkxNzIwYzBkZGY4YjNjZjM0ZDkxZGFi NGUxZDMwHhcNMjYwMTI1MTcwMDQyWhcNMjYwMTI2MTcwMDQyWjAzMTEwLwYDVQQD EyhkNmNkNGMwNTI5YTZjYTRkMjgxMTk1YWFmMWNkNWEzYTQyOThlOWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGkg29XVCGYYmB9oR+DTOyQwnFnU sOMhSLYZNmp0YUqZG8UNbbQy6IIeaXrBv8zAsjklLW8vI57o2y9456Qi2Xu5VDJ3 xIOpvvhzoj2li9urqTUoxewO66eirAQcOGPD0AAVAcLpMxi8BMvOth4d2bfr/V6b E+pQ5Q6un1k+G410AHtSEgPGh2VWyqlXazHdMYPiiyAqPzPBfohd42VytVVvUkGH oIBwcIXj+Tw6lPG8H4rbgJxXG9H/gYN4IxVD9McDownEvlVNX1vK6GNeteOE+LL+ os71Pl0nBuucYLsztTtnrmtdIlAUvsQJC3ePs6RrvOxCyhbIRdXyNhww0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbNTAUppspNKBGVqvHNWjpCmOm/MB8GA1UdIwQY MBaAFARcXzu4EZFyDA3fizzzTZHatOHTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82ZWFiY2QtYThmYy00M2VhLThiN2Mt ZmJiODA4NTNjMWJlLzEvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82ZWFiY2QtYThmYy00M2VhLThiN2MtZmJiODA4NTNjMWJl LzEvQkZ4Zk83Z1JrWElNRGQtTFBQTk5rZHEwNGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniMIAWsQ wz5E6tW+gPFUCNI1KGgYuY5HKAsvh0/9IqMyfNvkkFv5NierIeGjJxmXcLFb3Ev4 AoFfsBahjDxy/udUxOQzKJRAf6qJX1KVPeboqTMALCRoB9vt1hH2tSF6GnilAOIt 1olgIkRuw7TsB28j1Q3aJCWMxmCuj1ovEdYfOyu5YzVp0CVVjfrKEeWW/rEbbYYI DL9GMCIjGZZsOmAGNuBbLAoYd6dXPHVJgHC17W0hXN55pA2X0hHAs3NfAm1vCkAr t/K80646ePH9KXcrE/8dgYvyj9QgqIoL71ztCsd6Md3d90YnjROTxdaH1GjUtnOU hy2BJVcM5JNRhQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:26 2026 by rpki-client