This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft File: BQKGH5I8fsETK1SPeruGG6yh9AY.mft (raw, json) Hash identifier: WYSLkDmykXUgA83rIyQx2ezPkqLRPWZkInpQHOc5f2M= Subject key identifier: FD:1A:AB:B8:B6:1E:E0:45:4E:D3:9D:CD:8B:E4:F5:54:D5:31:A5:AC Authority key identifier: 05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06 Certificate issuer: /CN=0502861f923c7ec1132b548f7abb861baca1f406 Certificate serial: 019BF53E407FFA7A592639A94ED4D9AE6F5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 13:00:56 +0000 Manifest this update: Sun 25 Jan 2026 13:00:56 +0000 Manifest next update: Mon 26 Jan 2026 13:00:56 +0000 Files and hashes: 1: 4xId8u9b8q-lFzit0aeMYHf1aos.roa (hash: bIiCjOm59k2+DaEA+uzk+kXF+YggLiyq1ws6GVtubmE=) 2: 594tnBsvKIUtd354L79eWkALjbo.roa (hash: se6HFx5gFtOCN0fAvBEYpmYqysJi5f0hio8lxmXV1GI=) 3: BQKGH5I8fsETK1SPeruGG6yh9AY.crl (hash: PRCjiHTgfppyenieQSWds9F0EFsNV087dq4v3Xg7guo=) 4: Ya-kXllajOG6K2U169D7kPW5oi0.roa (hash: Mi0AdJaGKYxd/0M8GSDpvWwVqIj1KoyYG1wJ5svzyI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:40:7f:fa:7a:59:26:39:a9:4e:d4:d9:ae:6f:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0502861f923c7ec1132b548f7abb861baca1f406 Validity Not Before: Jan 25 13:00:56 2026 GMT Not After : Jan 26 13:00:56 2026 GMT Subject: CN=fd1aabb8b61ee0454ed39dcd8be4f554d531a5ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ca:65:5c:d1:a8:b7:b8:95:32:cb:2c:a4:2e: 68:b1:3c:7a:7e:93:04:38:bd:99:9b:8f:7a:15:1d: 1e:07:d2:a3:74:08:20:d2:44:ee:77:c8:b4:eb:36: a4:70:aa:e3:6a:a1:14:66:05:7b:76:0f:09:69:80: 58:55:13:f3:b7:d7:91:50:c0:a6:54:f0:80:3e:1d: 35:91:98:f2:81:2e:d2:4b:91:cd:e2:3d:04:c6:c4: 69:78:52:6b:82:73:00:05:f9:19:7a:21:3f:a9:0f: d9:86:69:a6:24:80:ce:40:19:77:8b:79:98:b4:bd: 8e:3c:68:71:1f:10:78:25:48:57:a0:f2:78:18:03: 30:36:38:af:62:6b:9c:a2:63:02:db:fe:5d:45:12: 00:90:64:99:97:62:38:b6:14:b5:89:54:35:10:a4: 8f:72:49:0d:d8:da:12:85:42:88:f2:05:83:87:68: f9:21:69:61:4d:5a:51:ea:6e:d9:d4:37:b5:d1:3a: ae:1e:52:e4:45:e3:7c:53:50:f3:9e:5a:9d:16:1f: 0e:c2:58:c3:1f:34:af:d9:6c:0c:a3:ea:29:b7:2d: 0d:f8:28:af:c5:e5:36:56:db:a6:54:a4:b0:7f:fd: 3c:3a:3b:88:2c:43:67:14:bc:67:9a:34:6b:dd:25: 1c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:1A:AB:B8:B6:1E:E0:45:4E:D3:9D:CD:8B:E4:F5:54:D5:31:A5:AC X509v3 Authority Key Identifier: keyid:05:02:86:1F:92:3C:7E:C1:13:2B:54:8F:7A:BB:86:1B:AC:A1:F4:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQKGH5I8fsETK1SPeruGG6yh9AY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a9276f-e8c1-45d6-a42d-0c64debe9ec4/1/BQKGH5I8fsETK1SPeruGG6yh9AY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:da:bc:4b:08:e6:e1:86:50:67:a3:96:11:c9:13:ad:94:ac: ed:d0:33:7e:1f:63:4e:ec:4b:b2:91:52:71:67:2b:22:4c:4d: 47:e5:0b:1e:79:fb:6c:4a:ce:52:af:b9:3a:2a:f4:33:2a:b6: 9b:1f:92:22:e4:79:fd:4e:15:25:57:b5:77:00:2b:f9:b8:7e: 15:a6:18:59:d0:2a:60:07:0e:6c:26:d6:ca:ac:9b:0f:f7:08: 2a:e4:87:cd:95:1a:b9:bf:51:1b:1d:03:d2:8d:5b:6e:ee:e3: e0:a3:a2:5a:e3:de:9e:6b:ca:26:98:ee:69:a5:8b:e8:11:84: b0:14:e0:37:34:e3:76:fd:1d:0e:30:1b:dc:42:00:3e:10:e3: 47:67:96:d9:25:e2:fe:6b:d4:8a:ad:2c:ed:31:b2:87:30:1b: 30:47:c5:84:6e:4b:89:cf:2b:e8:21:2e:28:bd:3d:cb:9d:87: 44:e4:18:fc:5b:6e:fb:63:a6:a9:83:e0:15:37:55:23:8b:14: 18:2b:23:a7:e8:af:e6:58:ca:c4:69:91:4e:4c:10:42:f1:96: ad:17:09:dd:27:48:77:6a:17:ff:46:fa:b9:64:ad:86:33:de: 55:f0:59:ee:90:4d:84:5b:66:74:14:f3:33:00:9f:09:fe:de: 17:71:bb:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PkB/+npZJjmpTtTZrm9bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MDI4NjFmOTIzYzdlYzExMzJiNTQ4ZjdhYmI4NjFiYWNh MWY0MDYwHhcNMjYwMTI1MTMwMDU2WhcNMjYwMTI2MTMwMDU2WjAzMTEwLwYDVQQD EyhmZDFhYWJiOGI2MWVlMDQ1NGVkMzlkY2Q4YmU0ZjU1NGQ1MzFhNWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8plXNGot7iVMssspC5osTx6fpME OL2Zm496FR0eB9KjdAgg0kTud8i06zakcKrjaqEUZgV7dg8JaYBYVRPzt9eRUMCm VPCAPh01kZjygS7SS5HN4j0ExsRpeFJrgnMABfkZeiE/qQ/ZhmmmJIDOQBl3i3mY tL2OPGhxHxB4JUhXoPJ4GAMwNjivYmucomMC2/5dRRIAkGSZl2I4thS1iVQ1EKSP ckkN2NoShUKI8gWDh2j5IWlhTVpR6m7Z1De10TquHlLkReN8U1DznlqdFh8OwljD HzSv2WwMo+opty0N+CivxeU2VtumVKSwf/08OjuILENnFLxnmjRr3SUc2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0aq7i2HuBFTtOdzYvk9VTVMaWsMB8GA1UdIwQY MBaAFAUChh+SPH7BEytUj3q7hhusofQGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQt MGM2NGRlYmU5ZWM0LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9hOTI3NmYtZThjMS00NWQ2LWE0MmQtMGM2NGRlYmU5ZWM0 LzEvQlFLR0g1SThmc0VUSzFTUGVydUdHNnloOUFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdq8Swjm 4YZQZ6OWEckTrZSs7dAzfh9jTuxLspFScWcrIkxNR+ULHnn7bErOUq+5Oir0Myq2 mx+SIuR5/U4VJVe1dwAr+bh+FaYYWdAqYAcObCbWyqybD/cIKuSHzZUaub9RGx0D 0o1bbu7j4KOiWuPenmvKJpjuaaWL6BGEsBTgNzTjdv0dDjAb3EIAPhDjR2eW2SXi /mvUiq0s7TGyhzAbMEfFhG5Lic8r6CEuKL09y52HROQY/Ftu+2OmqYPgFTdVI4sU GCsjp+iv5ljKxGmRTkwQQvGWrRcJ3SdId2oX/0b6uWSthjPeVfBZ7pBNhFtmdBTz MwCfCf7eF3G7HQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:18 2026 by rpki-client