This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft File: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json) Hash identifier: cZ+AOiA/HM0TIbFVNF7l5lCxXzNxtQm43hpNrZF2cF4= Subject key identifier: 5A:59:45:9B:CB:92:44:25:93:A2:18:DF:63:AF:77:6A:AF:72:D9:69 Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08 Certificate issuer: /CN=fc157d396ed992843daeef7b9cca73b043966c08 Certificate serial: 019BF7D22153D2150BBB7783A15E3A62C3A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft Manifest number: 02F0 Signing time: Mon 26 Jan 2026 01:01:41 +0000 Manifest this update: Mon 26 Jan 2026 01:01:41 +0000 Manifest next update: Tue 27 Jan 2026 01:01:41 +0000 Files and hashes: 1: LIEZPbv5mJgzybmqxdXVKVc2eR0.roa (hash: sER4hAOSChMge30hLfJ7QNzWkQjrQzcNYsA2DInAczg=) 2: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: hFpM6bN3oMTqAfE//IAGrl4kKS4fgUU7EcG5UD1BzWc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d2:21:53:d2:15:0b:bb:77:83:a1:5e:3a:62:c3:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08 Validity Not Before: Jan 26 01:01:41 2026 GMT Not After : Jan 27 01:01:41 2026 GMT Subject: CN=5a59459bcb92442593a218df63af776aaf72d969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9c:c5:a3:4e:bd:2f:3f:c9:49:22:d3:3a:f2: 52:43:85:dd:d2:dd:67:68:25:0d:05:40:ac:0a:52: de:30:05:76:7e:55:30:49:6d:37:54:40:a3:5d:af: 5d:f3:de:2a:fa:9a:45:35:af:12:51:39:8b:77:6d: 08:58:43:16:9f:85:bd:18:1c:e0:34:ca:dd:d5:27: 39:aa:63:e4:f0:f2:3d:0f:68:7e:bd:f7:27:49:0d: e0:6a:81:83:aa:12:fe:6b:6e:31:4e:81:f0:93:3e: 1c:6e:8e:68:80:d7:6c:9c:fa:de:f4:ad:ef:fb:d0: 5c:a1:45:d0:49:4d:84:77:01:12:49:73:f4:c4:c6: 27:83:7f:a1:b2:8a:24:85:93:6e:d0:b2:c4:51:33: be:dd:3e:62:42:e3:87:44:d2:3d:47:38:62:c6:e2: 8c:02:04:04:f1:c7:c1:cb:f1:ea:d0:a4:b5:54:03: ae:f3:7f:28:57:bf:86:12:ba:c0:40:5a:fb:11:49: 50:df:5f:4f:20:23:e0:8d:68:39:eb:b4:3c:6f:3a: 1d:76:63:e7:91:b9:dd:84:a1:c4:1a:39:00:b9:ba: 9f:f3:b1:fc:4f:d2:5f:60:6a:e5:3d:5f:65:7c:9b: 5b:56:64:b9:68:2f:99:2e:53:77:9f:81:bf:4b:40: fc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:59:45:9B:CB:92:44:25:93:A2:18:DF:63:AF:77:6A:AF:72:D9:69 X509v3 Authority Key Identifier: keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:45:b0:ab:6e:b9:6c:52:21:ac:e6:81:f1:1b:97:a1:7a:8f: d8:4b:b9:c9:5c:c9:f1:9d:e9:f1:30:51:31:32:29:35:56:e3: fa:38:5e:3d:5c:42:02:65:ee:55:4b:62:2d:74:93:fa:a9:34: f2:32:cd:c7:79:9d:a1:3d:63:ce:09:56:dd:22:a5:2f:48:ae: bb:b3:d1:70:6b:c8:4d:1f:53:42:08:95:e7:1c:e8:61:a1:59: c0:ba:01:e2:5e:73:13:71:24:3e:7c:08:14:49:2a:67:23:0e: 87:31:02:67:7c:52:7d:31:5c:d5:44:ae:2f:2b:d7:4a:e9:36: 1a:f5:ae:04:3b:30:5a:01:cb:cd:eb:dc:08:08:3d:08:87:15: 27:c9:c9:b4:aa:ae:53:b6:3f:69:65:67:9f:d4:94:01:6e:15: e8:6d:70:ef:b7:7c:94:ad:d8:8a:70:75:21:7d:b5:1c:c7:47: 47:71:98:8a:86:b7:25:c5:6c:00:ec:77:c3:e2:aa:51:f0:30: 59:e2:3c:33:cb:fa:70:99:64:81:9f:73:ac:d9:3a:63:a7:19: 7c:96:17:0d:52:ab:12:6d:37:71:f5:14:fa:44:db:ad:a2:62: 70:47:10:69:76:c7:82:cb:d8:83:06:e2:92:09:14:69:9d:1b: 48:5f:43:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30iFT0hULu3eDoV46YsOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMTU3ZDM5NmVkOTkyODQzZGFlZWY3YjljY2E3M2IwNDM5 NjZjMDgwHhcNMjYwMTI2MDEwMTQxWhcNMjYwMTI3MDEwMTQxWjAzMTEwLwYDVQQD Eyg1YTU5NDU5YmNiOTI0NDI1OTNhMjE4ZGY2M2FmNzc2YWFmNzJkOTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZzFo069Lz/JSSLTOvJSQ4Xd0t1n aCUNBUCsClLeMAV2flUwSW03VECjXa9d894q+ppFNa8SUTmLd20IWEMWn4W9GBzg NMrd1Sc5qmPk8PI9D2h+vfcnSQ3gaoGDqhL+a24xToHwkz4cbo5ogNdsnPre9K3v +9BcoUXQSU2EdwESSXP0xMYng3+hsookhZNu0LLEUTO+3T5iQuOHRNI9RzhixuKM AgQE8cfBy/Hq0KS1VAOu838oV7+GErrAQFr7EUlQ319PICPgjWg567Q8bzoddmPn kbndhKHEGjkAubqf87H8T9JfYGrlPV9lfJtbVmS5aC+ZLlN3n4G/S0D8lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpZRZvLkkQlk6IY32Ovd2qvctlpMB8GA1UdIwQY MBaAFPwVfTlu2ZKEPa7ve5zKc7BDlmwIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9mY2VhNTAtZmU0Ny00NjY0LTkyNjct YzBkY2NkYjdhOTA1LzEvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9mY2VhNTAtZmU0Ny00NjY0LTkyNjctYzBkY2NkYjdhOTA1 LzEvX0JWOU9XN1prb1E5cnU5N25NcHpzRU9XYkFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0Wwq265 bFIhrOaB8RuXoXqP2Eu5yVzJ8Z3p8TBRMTIpNVbj+jhePVxCAmXuVUtiLXST+qk0 8jLNx3mdoT1jzglW3SKlL0iuu7PRcGvITR9TQgiV5xzoYaFZwLoB4l5zE3EkPnwI FEkqZyMOhzECZ3xSfTFc1USuLyvXSuk2GvWuBDswWgHLzevcCAg9CIcVJ8nJtKqu U7Y/aWVnn9SUAW4V6G1w77d8lK3YinB1IX21HMdHR3GYioa3JcVsAOx3w+KqUfAw WeI8M8v6cJlkgZ9zrNk6Y6cZfJYXDVKrEm03cfUU+kTbraJicEcQaXbHgsvYgwbi kgkUaZ0bSF9DkA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:37 2026 by rpki-client