This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: +gEiiPGvFuutsDu7gpgxkMYplY1/wwu7wMYz14ntf+Y= Subject key identifier: 4F:51:05:6B:AA:22:40:D8:78:99:91:7A:EF:9D:E4:67:56:74:86:59 Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 019BF3F4A9B6DE6C77D949033AA519EE17EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 17F3 Signing time: Sun 25 Jan 2026 07:00:56 +0000 Manifest this update: Sun 25 Jan 2026 07:00:56 +0000 Manifest next update: Mon 26 Jan 2026 07:00:56 +0000 Files and hashes: 1: 3VQqtiom1KN9zcDFbHb_HNwz1EI.roa (hash: n7BuRmEffiATFiumwmipm2pKN3sbI8aRpEp3yWS0w6c=) 2: 53Y6HNT6PybZ5fv0RIq3VzI1Ero.roa (hash: gfRH81Dg27dQ3kodzezmL1Q0yfGmr/Pdqe1spxmMPZE=) 3: 7fjKgyx9Yaxh1FmHZYJUH95301c.roa (hash: T1XxvO4P4dkHl+WGoPHzZBE5VBrM/N30kEx3n7zSiDA=) 4: 8rGqH77YTfgMLRPyoN61N8RnEq0.roa (hash: ZNQ10Ukgjrp4rH/Ovez3kQihf1PS+l23PddvrRzZauI=) 5: BXn_bVoFgxHmHunAkFZSuzgFSwk.roa (hash: jxJIsK3YcEKMp25t1FYnjxefcJAQeAeiUCQ6rxD9bpw=) 6: BoaVLgPlhn4qr_fU3lgNc_DP-CI.roa (hash: 8gys4r5Jrh79V6ospkWBTCV9aubZPTwmXqR+dBSZNIM=) 7: ID3uGpE-dcekqFUA9CaskNQTHgw.roa (hash: +8FnPQxela/00fZdYSydOiN682t6g2gq5E5EtP0QcC8=) 8: LfmeRYcfUiEj399TDpOym_UlFRA.roa (hash: BkStJv/EZ8z0hAQkEE3CqcK8hG9A1BieEUEqY6z0bK8=) 9: TY35IYclW4VPKdwgjzeN1-eRV5w.roa (hash: NrbtXiKXpUhJK+M5wfVFLQO6KPLEcpep0fo9uaa4vxY=) 10: UPWe1Wug7fNHuCoRI5LkUE4bICs.roa (hash: RDVH/BCV293ZQWWctDV3PRotDWVexWOj6PnUwJgAPTM=) 11: ayDmsI9qPMkxJ9NCKjnvD4ewlH0.roa (hash: D0WB+C7bGTZZc6yEWTFDivFil9okzEXHOU5scGXoB+Q=) 12: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: uaYOBOxdlYqScZSxIr6q6OCr/2g19CL6o2JJHPfnnI4=) 13: h-Wv51tawGDDmzKTTiZygQFK1dI.roa (hash: gqUuhqm1O9kzFr7mzHK7ZrQWJPre8M3ei4+B6j2pDcQ=) 14: kDFa5fuToySOCU5vcGqCPDIk2Pc.roa (hash: I1BI9NSvaTv9rq7lHhxdUbN5f5WvqbSLYeczo8o1iF8=) 15: kehR6DRCeFwK5vsEVm60Bz8cG6c.roa (hash: L7sYa6xHC69xAZ7O1gkCc5slSgVN1A33m9IE9XvzF3U=) 16: mpGPMzUEL2GiaFu_ro-uoSMpDSM.roa (hash: De6x6yshStzd8qqnnIj6N4UKaPqhjyF/TsaAnqUmWqQ=) 17: oBqkwnj05lVwlwGOkOtelMXi290.roa (hash: KWxt3/pFpWp3KL1iplFsqb9jfnpqg64kOikp0uiyOdM=) 18: p1SWpdWXGLbEBPrhZY5QfK82wIw.roa (hash: VfVL2JfcEVzWDqasnouu2XzXkqrAe9JpcBaMStaIF8Y=) 19: sBAGBCoZpRTh-6po9Toi-VKMV10.roa (hash: XU348a2UokXBEiecPQsK1jFxCMx0Gc+NuqKhJQxgwZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:a9:b6:de:6c:77:d9:49:03:3a:a5:19:ee:17:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Jan 25 07:00:56 2026 GMT Not After : Jan 26 07:00:56 2026 GMT Subject: CN=4f51056baa2240d87899917aef9de46756748659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:00:ca:6a:c2:92:01:38:99:14:f5:8f:c1:2f: 6b:32:c0:22:99:67:5f:0e:27:33:1b:bd:45:a9:02: b7:4e:e3:df:f3:59:47:45:18:c1:f7:34:06:8f:05: 6c:b2:a3:2a:8f:54:f8:35:71:20:21:db:2e:ec:7a: fb:12:48:26:8b:77:d4:16:99:9f:50:55:a6:28:ae: 07:f8:23:4a:49:48:72:85:97:ee:35:d4:ac:33:23: d7:23:d2:78:dd:79:ee:94:d2:c9:03:53:cd:43:4e: 4f:10:08:40:e1:d5:14:85:36:6d:2a:db:1d:10:b6: 33:86:7b:81:77:eb:32:5e:74:65:21:97:fd:ae:fa: 99:89:4e:16:87:26:be:b0:2a:8e:af:92:f1:d3:98: 87:1f:bf:76:8f:3e:dc:90:4e:fa:72:a7:a3:c0:44: 8b:ab:d1:a9:3e:98:04:21:6c:90:3e:4e:16:90:ef: 56:b8:77:09:7b:23:e9:b0:e5:10:b4:e8:69:02:c9: 19:9a:b5:c6:ed:60:13:6a:af:7f:0b:fb:72:cf:ca: 0e:94:6a:04:4f:d3:6b:9a:9a:d9:d4:6e:a1:b1:9b: 29:9b:0d:93:0e:11:25:e0:7c:42:39:43:b6:93:65: 1e:72:ca:36:ef:ea:bd:32:3d:12:a2:6d:18:6e:fc: 2e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:51:05:6B:AA:22:40:D8:78:99:91:7A:EF:9D:E4:67:56:74:86:59 X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c8:d9:a0:d1:1b:93:c2:d3:0f:5b:fd:54:e7:f9:91:29:f2: b7:63:41:eb:92:0f:0e:ad:b8:58:4d:4d:f0:a9:c6:3e:bc:8e: 5f:20:8a:80:82:55:bc:2d:1c:0f:76:d0:51:3d:f8:1a:f9:f7: 1d:02:51:81:d3:e3:34:12:c8:e9:a9:e7:34:01:5e:cf:b4:f8: 24:e0:33:f1:f8:04:77:9e:1d:63:8c:ce:f9:7c:1f:b9:08:31: e3:2d:db:40:67:71:af:89:f0:6a:a8:10:a9:b2:52:31:b1:3f: de:94:8d:8a:98:b8:f9:04:7f:3b:66:2f:97:20:ef:c7:f8:7f: ba:11:86:dd:17:02:57:97:31:16:c1:81:7b:74:9d:0d:30:5d: 1b:19:d3:7f:8a:1e:b8:3f:ca:6f:05:67:2e:f8:42:94:d6:c8: 3e:7d:a7:eb:fa:a8:c0:f7:67:52:d7:9d:bb:52:93:98:27:96: dc:d7:1e:63:fb:e1:59:00:9f:18:f8:ba:10:2e:ed:e7:a5:e2: c8:9f:ed:7b:7c:a1:b9:9d:33:e6:31:62:b7:dc:08:c5:02:97: d2:21:6e:22:92:6b:cb:95:73:3f:5a:59:47:4c:1d:85:7b:57: 36:25:68:d5:7d:e0:55:5c:81:85:74:a2:d7:68:41:3d:62:08: f2:c0:90:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9Km23mx32UkDOqUZ7hfuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYwMTI1MDcwMDU2WhcNMjYwMTI2MDcwMDU2WjAzMTEwLwYDVQQD Eyg0ZjUxMDU2YmFhMjI0MGQ4Nzg5OTkxN2FlZjlkZTQ2NzU2NzQ4NjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowDKasKSATiZFPWPwS9rMsAimWdf DiczG71FqQK3TuPf81lHRRjB9zQGjwVssqMqj1T4NXEgIdsu7Hr7Ekgmi3fUFpmf UFWmKK4H+CNKSUhyhZfuNdSsMyPXI9J43XnulNLJA1PNQ05PEAhA4dUUhTZtKtsd ELYzhnuBd+syXnRlIZf9rvqZiU4Whya+sCqOr5Lx05iHH792jz7ckE76cqejwESL q9GpPpgEIWyQPk4WkO9WuHcJeyPpsOUQtOhpAskZmrXG7WATaq9/C/tyz8oOlGoE T9NrmprZ1G6hsZspmw2TDhEl4HxCOUO2k2Uecso27+q9Mj0Som0Ybvwu5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9RBWuqIkDYeJmReu+d5GdWdIZZMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsjZoNEb k8LTD1v9VOf5kSnyt2NB65IPDq24WE1N8KnGPryOXyCKgIJVvC0cD3bQUT34Gvn3 HQJRgdPjNBLI6annNAFez7T4JOAz8fgEd54dY4zO+XwfuQgx4y3bQGdxr4nwaqgQ qbJSMbE/3pSNipi4+QR/O2YvlyDvx/h/uhGG3RcCV5cxFsGBe3SdDTBdGxnTf4oe uD/KbwVnLvhClNbIPn2n6/qowPdnUtedu1KTmCeW3NceY/vhWQCfGPi6EC7t56Xi yJ/te3yhuZ0z5jFit9wIxQKX0iFuIpJry5VzP1pZR0wdhXtXNiVo1X3gVVyBhXSi 12hBPWII8sCQoQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:26 2026 by rpki-client