This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft File: biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft (raw, json) Hash identifier: 3SOUJatPIdq35k6OtDTxL9ekw7rmRPfpwt178XA1+do= Subject key identifier: DB:5F:E5:04:0C:A0:B5:14:59:70:73:7A:18:AB:AA:CE:43:77:DF:F8 Authority key identifier: 6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9 Certificate issuer: /CN=6e213db6d2b1e4f30b62ed1167e25223626360b9 Certificate serial: 019BF7D23B2A3A2546CA7CB463B7C495BE2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft Manifest number: 0187 Signing time: Mon 26 Jan 2026 01:01:48 +0000 Manifest this update: Mon 26 Jan 2026 01:01:48 +0000 Manifest next update: Tue 27 Jan 2026 01:01:48 +0000 Files and hashes: 1: 5wY_n2E9m5Fm8AHGBhePkR6VYWk.roa (hash: ZBwa+iIbx4TsdQ1LjVsQwUbo717HhRLxWJOE/WzCBUk=) 2: biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl (hash: ZA1YLMn3TT4jnt+TBE4dNJWeVRCQQNNT2imV5+slUnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:3b:2a:3a:25:46:ca:7c:b4:63:b7:c4:95:be:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e213db6d2b1e4f30b62ed1167e25223626360b9 Validity Not Before: Jan 26 01:01:48 2026 GMT Not After : Jan 27 01:01:48 2026 GMT Subject: CN=db5fe5040ca0b5145970737a18abaace4377dff8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:fd:e9:58:73:da:78:9f:3a:f9:26:0f:e0:bf: 87:18:5c:39:0c:ad:2f:8e:7c:91:5a:38:05:bf:3f: 35:80:37:56:cd:41:6b:c6:4a:6f:8f:ad:df:57:8b: a4:c0:d6:86:19:ef:ca:f1:bf:d2:be:4d:80:f4:c1: 49:55:d7:4a:8f:97:0b:16:1f:a5:42:61:ca:fe:d5: b5:94:2d:ef:f2:b2:1b:39:80:90:3b:35:d5:4c:3c: 70:89:6a:ef:fd:67:c1:7c:d8:2f:9f:21:52:59:67: 48:3e:a7:d5:9b:c1:74:a8:f7:70:30:c7:07:73:4c: fd:7e:bc:09:ce:6b:a4:e7:ba:8c:9e:e2:52:ef:e4: 84:d7:d4:60:9e:b5:f1:71:3e:f1:4e:41:70:55:b0: 6f:7a:82:08:c6:33:e3:4d:ef:4e:2b:4a:54:6a:27: f6:22:05:42:c8:4e:fa:b6:2a:86:b5:de:89:cb:fd: ba:13:c6:bd:a8:89:aa:0d:85:66:30:ec:b3:e0:38: 1a:d5:9e:ac:90:f9:f1:78:51:a2:a3:fe:94:42:bf: e6:25:d4:21:3d:54:6e:e8:40:5d:3a:32:a8:7a:9a: 7c:c8:5b:f2:ba:9c:5b:a2:ed:94:71:4e:18:de:2d: 05:1e:45:1e:8e:10:b9:c6:6e:db:c9:f9:ac:8f:18: 33:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:5F:E5:04:0C:A0:B5:14:59:70:73:7A:18:AB:AA:CE:43:77:DF:F8 X509v3 Authority Key Identifier: keyid:6E:21:3D:B6:D2:B1:E4:F3:0B:62:ED:11:67:E2:52:23:62:63:60:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biE9ttKx5PMLYu0RZ-JSI2JjYLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/13276a-c575-479f-939f-cc4474c3211a/1/biE9ttKx5PMLYu0RZ-JSI2JjYLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:66:8d:16:91:c2:81:05:61:8c:58:23:1b:50:f3:dd:23:80: a0:ed:03:c8:47:8c:f1:63:b2:03:6f:32:42:8a:d5:ef:54:19: 0a:35:5c:5f:a5:47:9d:44:75:bb:4d:66:1c:06:4d:51:e3:53: 63:f1:9d:6a:7c:9e:bb:6b:33:a8:7e:15:98:f1:f5:08:52:bc: 39:30:d0:a8:97:00:26:2c:e4:e1:0c:fc:49:c8:c8:4f:8b:d4: 53:24:63:d9:83:2e:8b:f7:b3:90:40:0c:f1:f9:70:a5:af:9e: 27:b0:08:3c:b7:85:43:96:66:3b:84:2d:7d:e6:c0:6e:cd:6a: 9c:cf:c5:4c:b3:1b:2e:eb:20:45:9a:05:ff:80:2a:32:b1:19: df:71:f6:e0:41:64:49:b3:f4:ea:25:36:26:88:4c:69:d9:50: de:31:ba:78:ca:2f:54:91:cc:b4:26:ea:8d:33:82:aa:21:a7: fa:f9:f9:97:c5:9b:58:1c:1b:99:4b:ad:cf:32:e4:69:6f:b6: d8:8a:e1:3d:82:4f:a1:ce:5a:44:78:f7:01:2a:11:90:1d:c4: 09:f1:64:fb:38:6a:12:b3:49:42:a1:d7:e3:7e:b1:e5:cb:25: 6e:40:a1:33:ad:49:4e:84:ff:21:2b:b2:ec:1b:5f:8d:6b:93: e0:5e:fd:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30jsqOiVGyny0Y7fElb4uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMjEzZGI2ZDJiMWU0ZjMwYjYyZWQxMTY3ZTI1MjIzNjI2 MzYwYjkwHhcNMjYwMTI2MDEwMTQ4WhcNMjYwMTI3MDEwMTQ4WjAzMTEwLwYDVQQD EyhkYjVmZTUwNDBjYTBiNTE0NTk3MDczN2ExOGFiYWFjZTQzNzdkZmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf3pWHPaeJ86+SYP4L+HGFw5DK0v jnyRWjgFvz81gDdWzUFrxkpvj63fV4ukwNaGGe/K8b/Svk2A9MFJVddKj5cLFh+l QmHK/tW1lC3v8rIbOYCQOzXVTDxwiWrv/WfBfNgvnyFSWWdIPqfVm8F0qPdwMMcH c0z9frwJzmuk57qMnuJS7+SE19RgnrXxcT7xTkFwVbBveoIIxjPjTe9OK0pUaif2 IgVCyE76tiqGtd6Jy/26E8a9qImqDYVmMOyz4Dga1Z6skPnxeFGio/6UQr/mJdQh PVRu6EBdOjKoepp8yFvyupxbou2UcU4Y3i0FHkUejhC5xm7byfmsjxgzUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtf5QQMoLUUWXBzehirqs5Dd9/4MB8GA1UdIwQY MBaAFG4hPbbSseTzC2LtEWfiUiNiY2C5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmlFOXR0S3g1UE1MWXUwUlotSlNJMkpqWUxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xMzI3NmEtYzU3NS00NzlmLTkzOWYt Y2M0NDc0YzMyMTFhLzEvYmlFOXR0S3g1UE1MWXUwUlotSlNJMkpqWUxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8xMzI3NmEtYzU3NS00NzlmLTkzOWYtY2M0NDc0YzMyMTFh LzEvYmlFOXR0S3g1UE1MWXUwUlotSlNJMkpqWUxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemaNFpHC gQVhjFgjG1Dz3SOAoO0DyEeM8WOyA28yQorV71QZCjVcX6VHnUR1u01mHAZNUeNT Y/Gdanyeu2szqH4VmPH1CFK8OTDQqJcAJizk4Qz8ScjIT4vUUyRj2YMui/ezkEAM 8flwpa+eJ7AIPLeFQ5ZmO4QtfebAbs1qnM/FTLMbLusgRZoF/4AqMrEZ33H24EFk SbP06iU2JohMadlQ3jG6eMovVJHMtCbqjTOCqiGn+vn5l8WbWBwbmUutzzLkaW+2 2IrhPYJPoc5aRHj3ASoRkB3ECfFk+zhqErNJQqHX436x5cslbkChM61JToT/ISuy 7BtfjWuT4F79Zg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:52 2026 by rpki-client