This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json) Hash identifier: vDBhzcD5OYam5sX12glFyrtgBNcrzmcEZ/Z7b+Y9x68= Subject key identifier: 97:B1:F5:35:F6:9B:C9:D6:24:F5:A3:55:40:96:9E:D1:73:A3:BA:63 Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94 Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94 Certificate serial: 019BF61A079B7F517A4508AAC7AB5ECAF4CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft Manifest number: 0B25 Signing time: Sun 25 Jan 2026 17:00:59 +0000 Manifest this update: Sun 25 Jan 2026 17:00:59 +0000 Manifest next update: Mon 26 Jan 2026 17:00:59 +0000 Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: qvcsxvrfykQ0IJCDniJE4OIdnQn9wN0iKpLrRANxK5c=) 2: Is7C3W26lEw15lD5VhKPKWdkM8M.roa (hash: OE4K7vc1yucd3jpu96y3uZHtADB9bFEDzoGvFJGStC4=) 3: cqEx3z1wzl-0mdtNpY4AnTyAIMc.roa (hash: GFZBmF6WdLGeI9dqHrnwm1HNWHgZhg1gZ+mGTpe3Vfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:1a:07:9b:7f:51:7a:45:08:aa:c7:ab:5e:ca:f4:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94 Validity Not Before: Jan 25 17:00:59 2026 GMT Not After : Jan 26 17:00:59 2026 GMT Subject: CN=97b1f535f69bc9d624f5a35540969ed173a3ba63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:7b:1f:a4:e9:87:68:6e:73:85:e2:fe:c8: fb:5e:7a:c2:4d:7e:e8:21:02:66:21:13:03:11:da: c3:c3:20:3d:f3:e7:93:2e:32:ca:00:80:3d:07:96: 73:6e:10:2d:e3:fa:72:0f:20:9d:8e:e9:ed:d1:dd: fd:72:36:e6:53:26:68:a5:95:91:e8:36:3b:8c:a5: 1c:2c:4a:0c:da:87:3c:34:5e:66:49:d1:c1:0a:81: 66:dc:d9:d2:84:e0:3f:14:10:10:44:c3:80:22:bf: 50:17:f0:58:bf:94:4b:29:22:c8:40:67:5d:93:68: 4f:b4:a0:f7:d3:7a:ca:0f:f7:5c:0d:b9:71:3a:e4: 8c:5d:6e:35:a1:2e:56:45:82:56:e5:3c:9a:05:c9: cf:25:7a:9e:ec:f0:08:ff:12:3b:e4:31:fe:7b:9e: a3:7a:b5:74:9a:b4:06:c8:cc:ac:42:08:1c:90:9c: 05:80:dd:6d:f2:e1:67:f8:09:98:ce:96:23:72:10: 7e:c0:68:c7:ea:f4:a5:04:10:56:7a:ac:4f:25:db: 6c:d2:33:00:e4:37:35:84:4b:5d:24:6d:7f:42:8a: 9b:89:52:9b:85:47:d3:1a:86:c1:dd:c6:e1:57:5e: e5:fe:26:4b:57:aa:98:14:3d:1d:5b:fe:50:11:d1: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B1:F5:35:F6:9B:C9:D6:24:F5:A3:55:40:96:9E:D1:73:A3:BA:63 X509v3 Authority Key Identifier: keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:ad:38:37:46:40:ba:45:74:02:da:56:09:3c:74:af:14:af: 41:21:e7:6f:16:36:d8:fc:ee:2c:63:58:c6:f8:a1:0a:53:71: 49:b8:05:54:a9:10:bc:64:af:35:30:ca:b8:0a:f2:c6:46:d9: 6e:73:17:16:60:a6:d0:95:09:86:ef:33:0c:90:51:04:8e:96: 8c:c4:ce:df:9b:74:e5:5e:98:06:37:fc:4e:b9:dd:35:d6:d5: 55:09:d3:35:9c:57:e7:07:30:a7:15:c0:a8:94:3e:0b:fe:5a: e3:e0:24:85:1e:bb:ad:80:38:f2:75:79:89:45:27:02:09:fe: 92:e1:c2:ed:22:3a:7f:45:bb:00:37:db:5b:a6:17:06:e9:e5: 58:f3:88:33:75:73:1f:be:25:0e:de:50:6d:3e:ea:83:6a:fa: 85:55:eb:52:71:f9:d0:74:5c:4d:66:ac:ad:68:2f:e1:55:9c: 33:02:da:71:7a:8b:8b:e4:cc:c2:5a:7f:77:84:02:7c:45:f4: f2:30:6a:fc:08:a3:82:9e:28:ea:39:7c:60:42:68:80:1a:50: 87:33:d8:a8:03:a1:5d:d9:30:1b:35:c3:ad:54:74:68:76:a1: fb:5d:bf:2f:b1:f5:0c:1e:c5:35:d0:36:e6:93:61:ea:86:88: 2f:64:4c:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Ggebf1F6RQiqx6teyvTPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MjE2ZWVjNTE0YjA3ZGNlMjlkMzAxM2ExOTBiMmVlNWZj YjFmOTQwHhcNMjYwMTI1MTcwMDU5WhcNMjYwMTI2MTcwMDU5WjAzMTEwLwYDVQQD Eyg5N2IxZjUzNWY2OWJjOWQ2MjRmNWEzNTU0MDk2OWVkMTczYTNiYTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yZ7H6Tph2huc4Xi/sj7XnrCTX7o IQJmIRMDEdrDwyA98+eTLjLKAIA9B5ZzbhAt4/pyDyCdjunt0d39cjbmUyZopZWR 6DY7jKUcLEoM2oc8NF5mSdHBCoFm3NnShOA/FBAQRMOAIr9QF/BYv5RLKSLIQGdd k2hPtKD303rKD/dcDblxOuSMXW41oS5WRYJW5TyaBcnPJXqe7PAI/xI75DH+e56j erV0mrQGyMysQggckJwFgN1t8uFn+AmYzpYjchB+wGjH6vSlBBBWeqxPJdts0jMA 5Dc1hEtdJG1/QoqbiVKbhUfTGobB3cbhV17l/iZLV6qYFD0dW/5QEdHdOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJex9TX2m8nWJPWjVUCWntFzo7pjMB8GA1UdIwQY MBaAFAYhbuxRSwfc4p0wE6GQsu5fyx+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmlGdTdGRkxCOXppblRBVG9aQ3k3bF9MSDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xODY4ZWUtNTFhOC00NjE5LTkxNDMt MTg4ZGNmZjBlNDA1LzEvQmlGdTdGRkxCOXppblRBVG9aQ3k3bF9MSDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xODY4ZWUtNTFhOC00NjE5LTkxNDMtMTg4ZGNmZjBlNDA1 LzEvQmlGdTdGRkxCOXppblRBVG9aQ3k3bF9MSDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJq04N0ZA ukV0AtpWCTx0rxSvQSHnbxY22PzuLGNYxvihClNxSbgFVKkQvGSvNTDKuAryxkbZ bnMXFmCm0JUJhu8zDJBRBI6WjMTO35t05V6YBjf8TrndNdbVVQnTNZxX5wcwpxXA qJQ+C/5a4+AkhR67rYA48nV5iUUnAgn+kuHC7SI6f0W7ADfbW6YXBunlWPOIM3Vz H74lDt5QbT7qg2r6hVXrUnH50HRcTWasrWgv4VWcMwLacXqLi+TMwlp/d4QCfEX0 8jBq/Aijgp4o6jl8YEJogBpQhzPYqAOhXdkwGzXDrVR0aHah+12/L7H1DB7FNdA2 5pNh6oaIL2RMbQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:39 2026 by rpki-client