This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft File: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft (raw, json) Hash identifier: GHMEPAWJTgB3nj/5O+C//ToMews0KrpxnZNMXvi9MS4= Subject key identifier: 1C:12:60:AF:CC:F1:27:7B:B9:03:0B:B0:AF:3B:DA:AB:A8:02:EB:49 Authority key identifier: 06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB Certificate issuer: /CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb Certificate serial: 019BF95209E73B7517A07E1B5207AFB64F94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft Manifest number: 0240 Signing time: Mon 26 Jan 2026 08:01:01 +0000 Manifest this update: Mon 26 Jan 2026 08:01:01 +0000 Manifest next update: Tue 27 Jan 2026 08:01:01 +0000 Files and hashes: 1: 9K4KSgE7a4TINjU8T65DCXK4OQE.roa (hash: 7Bektqw00nC0RCcxYyN+Y6qpUZR67WY00DYz/0pmVKk=) 2: Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl (hash: 9/grWoPVynVd3Te0Se8WGyhwiDYPqWGjs4eHTrX+kH8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:09:e7:3b:75:17:a0:7e:1b:52:07:af:b6:4f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a9fa8485ff0f4b85c7d4ef478f986093d9eccb Validity Not Before: Jan 26 08:01:01 2026 GMT Not After : Jan 27 08:01:01 2026 GMT Subject: CN=1c1260afccf1277bb9030bb0af3bdaaba802eb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:86:eb:4a:c6:58:03:bb:b5:28:cf:56:98: a4:db:50:cc:f4:10:20:07:0b:b6:92:86:4e:fa:0a: 30:52:85:36:2e:87:69:7c:ce:5b:98:4d:d3:1e:1a: 76:73:73:64:ac:34:4f:d6:bd:99:cb:30:42:e1:52: 64:f2:58:95:06:f1:72:d0:d7:ec:56:ad:3a:3c:2d: 47:22:fe:a1:d2:cb:f5:d0:d2:46:bc:72:ff:34:6a: 75:d5:1c:bb:8c:05:03:fd:5e:18:61:4b:8f:ce:0e: 5c:75:27:2d:a5:18:15:2f:95:b6:e1:44:3d:50:ee: c4:d0:33:a9:f2:a5:a6:b0:1c:b5:84:1e:2f:e5:40: c4:a0:0d:5d:93:e9:1f:b3:e8:a9:ce:ad:6e:b6:5a: 8d:04:06:57:66:14:51:ff:eb:4f:18:27:f0:e5:69: 2e:4f:bc:67:80:c2:37:c9:d1:db:30:14:ac:da:c7: 7b:bd:79:d0:53:d4:43:39:1a:95:a4:78:08:e6:69: 56:7e:d7:04:0c:1f:16:ba:9e:8f:3f:c6:35:00:c8: 6b:65:44:a1:d1:21:d2:06:66:79:6e:a1:99:ff:6b: 69:0c:72:93:82:9d:e4:a6:73:1d:f4:94:c8:9e:0d: b3:6e:42:0b:e3:3c:80:5b:ce:fe:e9:67:15:ed:69: 51:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:12:60:AF:CC:F1:27:7B:B9:03:0B:B0:AF:3B:DA:AB:A8:02:EB:49 X509v3 Authority Key Identifier: keyid:06:A9:FA:84:85:FF:0F:4B:85:C7:D4:EF:47:8F:98:60:93:D9:EC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c30740-bc9e-4ffe-ad74-2a464091356b/1/Bqn6hIX_D0uFx9TvR4-YYJPZ7Ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:3a:10:37:dc:ec:d0:a9:e5:e8:bb:4f:56:c6:4b:71:64:b1: a7:7f:32:2d:90:8e:c5:12:67:db:00:f2:c3:d0:73:97:97:c4: f2:cb:42:c4:5a:bc:ac:f3:90:38:b7:4d:25:5c:35:e0:23:87: 3b:b7:a4:de:87:b0:c0:2d:2d:a9:51:83:be:49:78:2d:c0:2a: d6:37:cc:2d:d0:09:e5:05:36:79:c4:be:c0:38:1b:ae:bc:18: 63:ed:ec:d0:3d:c7:4a:b1:81:7f:4b:7b:73:a1:44:38:af:8a: 42:99:87:20:9c:cc:82:6c:52:7d:9a:70:44:68:96:08:f7:d7: b2:24:62:e1:fd:fe:f6:2a:8d:81:9c:65:eb:d1:c9:a7:73:0a: 86:3d:e5:4d:99:29:bb:e1:cb:a8:3c:57:35:2e:87:7d:22:02: e9:4f:54:8e:8d:1f:9e:64:9b:b1:a4:05:21:f0:55:d4:8e:f5: 6c:32:bf:71:a4:bb:11:ec:80:85:28:80:73:e6:0f:f7:74:d5: 85:b8:ec:c7:af:b7:81:6a:04:c3:b4:21:be:50:d5:d3:bc:9a: e7:8f:61:1a:4b:ca:76:75:e0:12:3f:bd:78:55:4b:85:94:1c: 11:3d:d2:0e:51:84:4b:6c:cd:e3:40:64:94:3a:65:76:40:1c: a5:60:d5:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UgnnO3UXoH4bUgevtk+UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTlmYTg0ODVmZjBmNGI4NWM3ZDRlZjQ3OGY5ODYwOTNk OWVjY2IwHhcNMjYwMTI2MDgwMTAxWhcNMjYwMTI3MDgwMTAxWjAzMTEwLwYDVQQD EygxYzEyNjBhZmNjZjEyNzdiYjkwMzBiYjBhZjNiZGFhYmE4MDJlYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjSG60rGWAO7tSjPVpik21DM9BAg Bwu2koZO+gowUoU2LodpfM5bmE3THhp2c3NkrDRP1r2ZyzBC4VJk8liVBvFy0Nfs Vq06PC1HIv6h0sv10NJGvHL/NGp11Ry7jAUD/V4YYUuPzg5cdSctpRgVL5W24UQ9 UO7E0DOp8qWmsBy1hB4v5UDEoA1dk+kfs+ipzq1utlqNBAZXZhRR/+tPGCfw5Wku T7xngMI3ydHbMBSs2sd7vXnQU9RDORqVpHgI5mlWftcEDB8Wup6PP8Y1AMhrZUSh 0SHSBmZ5bqGZ/2tpDHKTgp3kpnMd9JTIng2zbkIL4zyAW87+6WcV7WlRLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwSYK/M8Sd7uQMLsK872quoAutJMB8GA1UdIwQY MBaAFAap+oSF/w9LhcfU70ePmGCT2ezLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQt MmE0NjQwOTEzNTZiLzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jMzA3NDAtYmM5ZS00ZmZlLWFkNzQtMmE0NjQwOTEzNTZi LzEvQnFuNmhJWF9EMHVGeDlUdlI0LVlZSlBaN01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjoQN9zs 0Knl6LtPVsZLcWSxp38yLZCOxRJn2wDyw9Bzl5fE8stCxFq8rPOQOLdNJVw14COH O7ek3oewwC0tqVGDvkl4LcAq1jfMLdAJ5QU2ecS+wDgbrrwYY+3s0D3HSrGBf0t7 c6FEOK+KQpmHIJzMgmxSfZpwRGiWCPfXsiRi4f3+9iqNgZxl69HJp3MKhj3lTZkp u+HLqDxXNS6HfSIC6U9Ujo0fnmSbsaQFIfBV1I71bDK/caS7EeyAhSiAc+YP93TV hbjsx6+3gWoEw7QhvlDV07ya549hGkvKdnXgEj+9eFVLhZQcET3SDlGES2zN40Bk lDpldkAcpWDV+Q== -----END CERTIFICATE-----Generated at Mon Jan 26 11:47:10 2026 by rpki-client