This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft File: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft (raw, json) Hash identifier: SjdEOED+GD2MTJqTkJ8rXFaFbax+f+p7LOVX1ia2PGc= Subject key identifier: 1A:85:BE:16:08:3A:90:CA:E3:95:6A:27:C2:54:25:56:3B:DC:87:57 Authority key identifier: 04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2 Certificate issuer: /CN=04bec7578450f945d4f334df600c61a6f47232f2 Certificate serial: 019BF6F608C12640D8C06ED3AA1B9494E614 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft Manifest number: 0141 Signing time: Sun 25 Jan 2026 21:01:17 +0000 Manifest this update: Sun 25 Jan 2026 21:01:17 +0000 Manifest next update: Mon 26 Jan 2026 21:01:17 +0000 Files and hashes: 1: 7cXMcUqolF5Pk9hz94-VytCkN3g.roa (hash: t6QpqggeJZGtuJ23Q1yI38nLT1KfU+pRXoYRRRNFETU=) 2: BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl (hash: b+TZCy3fcJpUFTS7OfQme8QrxnTokvViY/fagRpvab4=) 3: XRp3KtTtDAfEDM3rwrv4Nkp2Rew.roa (hash: o7R+7Elj+Gl0UPTAPP1wQMI8V6KJzZF8gTCwiml6fUk=) 4: zkiUnt3u3gM-pY3nw2418jZ96as.roa (hash: cBWCrLkL25DqG+qiWavgwQLJKknM3yr54OTG4QErhfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f6:08:c1:26:40:d8:c0:6e:d3:aa:1b:94:94:e6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04bec7578450f945d4f334df600c61a6f47232f2 Validity Not Before: Jan 25 21:01:17 2026 GMT Not After : Jan 26 21:01:17 2026 GMT Subject: CN=1a85be16083a90cae3956a27c25425563bdc8757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6f:34:66:34:17:30:1d:c7:7d:1f:ab:74:00: db:09:0e:5f:62:a5:d0:51:21:54:88:1a:62:70:c0: e9:b1:3c:98:8a:b2:52:b1:cb:e2:97:f7:ba:82:f8: c9:c0:0e:80:32:fa:24:54:f3:3b:20:27:6c:b8:4f: 8d:af:a2:df:6d:39:4b:b4:ea:e0:a8:c0:5b:ee:69: 72:df:fa:82:d3:d8:93:d6:49:82:ee:0a:0b:ee:55: 12:bc:27:a9:b6:57:8d:8b:5d:5d:da:2e:0d:cd:9f: e4:94:b6:e9:28:ef:ab:52:02:1e:ee:ec:e6:4c:c4: 11:98:26:02:19:2a:fe:52:f5:48:66:30:b0:97:16: ad:2e:18:11:43:e2:aa:07:ab:66:58:39:0c:84:8f: 7a:93:4e:07:a6:15:6a:03:87:0b:bd:ea:00:f5:9b: de:bd:d4:b4:a0:54:41:38:2a:6f:97:7a:b5:d3:4c: 28:78:62:94:e9:4e:aa:4e:fb:7f:ab:81:83:7c:d2: 53:21:c3:48:35:e0:48:2e:69:d4:b2:50:93:73:44: 28:5c:b3:19:85:dd:7a:9a:99:2e:2e:1b:df:1b:9e: 36:47:9d:77:09:e4:11:67:fe:37:c6:b2:5c:72:cb: 5d:e6:02:4f:39:5e:b6:9f:a0:ae:9b:fa:70:3e:11: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:85:BE:16:08:3A:90:CA:E3:95:6A:27:C2:54:25:56:3B:DC:87:57 X509v3 Authority Key Identifier: keyid:04:BE:C7:57:84:50:F9:45:D4:F3:34:DF:60:0C:61:A6:F4:72:32:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b428e7-653c-46c7-973f-9db614cb127a/1/BL7HV4RQ-UXU8zTfYAxhpvRyMvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:69:cb:2d:2d:32:ab:22:cf:0a:8d:e1:8d:f0:c9:01:9b:94: 3a:12:17:b5:1b:ca:dc:78:e0:fd:a0:13:4a:c3:c7:5b:63:16: f1:a1:24:66:f8:99:6e:9e:0f:e5:56:2a:67:11:79:d1:cd:ff: 29:de:32:b2:07:65:5a:7e:42:84:54:7b:1d:e8:82:82:b5:ae: c1:2f:2d:64:2c:10:f8:f7:58:96:af:b2:0f:0a:8b:a6:e6:44: 39:ae:0a:fb:fd:2a:a6:1d:41:48:e4:25:7a:a4:9b:82:77:24: 58:71:ed:f7:b9:4d:d4:ee:46:c7:c2:aa:c8:d2:fa:b8:6b:65: 4d:4d:b8:66:da:a4:da:72:15:21:f8:da:08:90:1c:81:25:60: b9:4d:e2:8e:79:fd:c5:61:a6:9b:65:64:83:26:63:88:ed:f3: 61:a9:37:49:e5:55:8e:fd:e9:61:86:c6:59:d9:94:b2:69:04: c6:9b:c3:c0:00:4a:af:aa:8e:ed:ab:04:4f:ad:89:10:18:58: 93:95:49:bd:43:21:e6:1b:28:52:93:26:1e:51:22:44:9f:54: 9a:96:86:e9:d6:7b:0b:d3:de:59:63:46:ce:17:cc:0b:5e:3c: d3:8c:99:f4:d1:64:c2:81:80:75:65:be:2d:76:59:32:b7:db: 97:72:9b:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29gjBJkDYwG7TqhuUlOYUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YmVjNzU3ODQ1MGY5NDVkNGYzMzRkZjYwMGM2MWE2ZjQ3 MjMyZjIwHhcNMjYwMTI1MjEwMTE3WhcNMjYwMTI2MjEwMTE3WjAzMTEwLwYDVQQD EygxYTg1YmUxNjA4M2E5MGNhZTM5NTZhMjdjMjU0MjU1NjNiZGM4NzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW80ZjQXMB3HfR+rdADbCQ5fYqXQ USFUiBpicMDpsTyYirJSscvil/e6gvjJwA6AMvokVPM7ICdsuE+Nr6LfbTlLtOrg qMBb7mly3/qC09iT1kmC7goL7lUSvCeptleNi11d2i4NzZ/klLbpKO+rUgIe7uzm TMQRmCYCGSr+UvVIZjCwlxatLhgRQ+KqB6tmWDkMhI96k04HphVqA4cLveoA9Zve vdS0oFRBOCpvl3q100woeGKU6U6qTvt/q4GDfNJTIcNINeBILmnUslCTc0QoXLMZ hd16mpkuLhvfG542R513CeQRZ/43xrJccstd5gJPOV62n6Cum/pwPhHemwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqFvhYIOpDK45VqJ8JUJVY73IdXMB8GA1UdIwQY MBaAFAS+x1eEUPlF1PM032AMYab0cjLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9iNDI4ZTctNjUzYy00NmM3LTk3M2Yt OWRiNjE0Y2IxMjdhLzEvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9iNDI4ZTctNjUzYy00NmM3LTk3M2YtOWRiNjE0Y2IxMjdh LzEvQkw3SFY0UlEtVVhVOHpUZllBeGhwdlJ5TXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmnLLS0y qyLPCo3hjfDJAZuUOhIXtRvK3Hjg/aATSsPHW2MW8aEkZviZbp4P5VYqZxF50c3/ Kd4ysgdlWn5ChFR7HeiCgrWuwS8tZCwQ+PdYlq+yDwqLpuZEOa4K+/0qph1BSOQl eqSbgnckWHHt97lN1O5Gx8KqyNL6uGtlTU24Ztqk2nIVIfjaCJAcgSVguU3ijnn9 xWGmm2VkgyZjiO3zYak3SeVVjv3pYYbGWdmUsmkExpvDwABKr6qO7asET62JEBhY k5VJvUMh5hsoUpMmHlEiRJ9UmpaG6dZ7C9PeWWNGzhfMC14804yZ9NFkwoGAdWW+ LXZZMrfbl3KbjQ== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:22 2026 by rpki-client