This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft File: BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft (raw, json) Hash identifier: tJEuazqzcKB2oGBEYjTAHr79aUh6nH8T4uDyks7LCzE= Subject key identifier: E1:DD:24:11:5A:8D:43:58:EB:20:67:F8:A4:7F:E5:8E:69:CD:20:56 Authority key identifier: 06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09 Certificate issuer: /CN=061702d2c29195fa0a7db11ee465f0c0545d1709 Certificate serial: 019BF83FABF275A78783137F353B50BD4A96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 03:01:20 +0000 Manifest this update: Mon 26 Jan 2026 03:01:20 +0000 Manifest next update: Tue 27 Jan 2026 03:01:20 +0000 Files and hashes: 1: BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl (hash: t9uEhvD/tu4rHHC1HOZZnQcUEo4zl8ILK9kGSXjCSik=) 2: IuvYb1hnFC_R3vbmr804zDcQ564.roa (hash: NxUdZjpgsvcOhxi2GuJmepTyufWX4gZ8PVnHKb+FC34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:ab:f2:75:a7:87:83:13:7f:35:3b:50:bd:4a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061702d2c29195fa0a7db11ee465f0c0545d1709 Validity Not Before: Jan 26 03:01:20 2026 GMT Not After : Jan 27 03:01:20 2026 GMT Subject: CN=e1dd24115a8d4358eb2067f8a47fe58e69cd2056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:1a:78:b3:82:01:89:ba:df:18:4d:7c:d6:23: d9:b2:0a:31:0b:49:dc:2f:e9:bd:c1:d0:9f:8d:f7: 64:fb:d2:f1:57:eb:68:95:4b:81:dd:d6:dc:25:ee: 7d:62:0b:d0:48:66:b6:c8:7c:70:16:25:e0:58:ad: 35:4e:64:93:f4:93:9b:d0:22:db:b2:4a:83:3d:b0: e9:90:f1:8b:f2:06:a4:e4:82:0e:ff:54:f7:46:83: 4b:c2:74:2a:5b:bf:f5:70:84:34:84:b6:6f:b9:5a: a6:f6:8c:86:23:6c:71:bb:30:ab:0c:fe:74:d7:a5: 07:0a:b4:6d:7c:00:b6:99:db:d0:cd:cb:1b:24:45: 5a:69:a7:92:70:c8:74:92:17:80:cd:79:a4:59:0f: 14:3a:b4:85:bc:7d:35:63:b9:35:2d:ef:02:22:20: fd:c8:77:5d:23:36:c6:88:b2:08:9c:d0:53:d8:1d: c5:d3:5c:aa:a6:f7:3e:b8:25:21:2a:50:a9:35:af: a5:b2:98:73:82:38:55:b8:52:9b:e0:2e:9f:e4:c9: 9d:5b:6c:e6:ae:7c:ee:fe:b4:b7:90:08:6b:b7:e0: 3b:e8:f0:ec:93:b5:d0:fd:cf:07:76:0d:15:b1:af: 2c:20:cd:ad:6d:1d:8d:ab:b4:a1:d5:c2:72:78:21: 18:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:DD:24:11:5A:8D:43:58:EB:20:67:F8:A4:7F:E5:8E:69:CD:20:56 X509v3 Authority Key Identifier: keyid:06:17:02:D2:C2:91:95:FA:0A:7D:B1:1E:E4:65:F0:C0:54:5D:17:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhcC0sKRlfoKfbEe5GXwwFRdFwk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/00b28b-cc72-4406-b6d8-4c51c6797c1f/1/BhcC0sKRlfoKfbEe5GXwwFRdFwk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:38:c6:be:a8:09:1c:89:cf:80:9c:4f:25:66:4f:37:7f:79: 2a:6d:67:b1:10:17:05:20:2a:53:e3:2f:83:4d:5e:6f:a5:13: 79:2b:8c:55:0f:54:f8:eb:ac:28:56:cf:52:8a:42:0d:1d:da: 7e:99:bd:63:d2:59:f8:23:d7:d0:df:6b:f0:f6:77:f0:1d:97: fc:ac:8d:73:b9:29:74:bb:95:d5:a0:fa:cf:96:60:a2:28:82: a3:f7:d1:d9:c3:b4:1c:d1:19:dd:40:e1:06:44:34:34:b9:bc: 2c:c1:e0:3a:7c:ed:5a:fb:77:b0:76:c5:1c:00:91:82:0f:4e: 2c:e3:ad:f1:87:5a:38:f8:e5:ec:8b:57:21:b7:40:1e:9b:be: a4:21:b5:ff:47:78:eb:be:54:19:44:60:fd:33:cf:2a:52:ae: af:29:e9:6c:4f:c4:06:4d:4e:65:5b:61:0c:85:31:ce:1d:5e: 03:4f:60:24:57:38:4b:75:38:2f:7a:4d:f5:2f:d9:67:e8:ac: 64:1e:a4:6a:ed:50:42:ca:d0:91:e6:8b:c5:95:9c:5f:b5:e8: c6:69:f1:ab:70:ba:e0:91:d2:33:58:1a:0b:5a:a0:f2:a4:55: 97:97:54:a2:09:17:76:ae:f8:d4:d0:18:a1:53:09:15:f7:28: 5e:a7:d1:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P6vydaeHgxN/NTtQvUqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTcwMmQyYzI5MTk1ZmEwYTdkYjExZWU0NjVmMGMwNTQ1 ZDE3MDkwHhcNMjYwMTI2MDMwMTIwWhcNMjYwMTI3MDMwMTIwWjAzMTEwLwYDVQQD EyhlMWRkMjQxMTVhOGQ0MzU4ZWIyMDY3ZjhhNDdmZTU4ZTY5Y2QyMDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hp4s4IBibrfGE181iPZsgoxC0nc L+m9wdCfjfdk+9LxV+tolUuB3dbcJe59YgvQSGa2yHxwFiXgWK01TmST9JOb0CLb skqDPbDpkPGL8gak5IIO/1T3RoNLwnQqW7/1cIQ0hLZvuVqm9oyGI2xxuzCrDP50 16UHCrRtfAC2mdvQzcsbJEVaaaeScMh0kheAzXmkWQ8UOrSFvH01Y7k1Le8CIiD9 yHddIzbGiLIInNBT2B3F01yqpvc+uCUhKlCpNa+lsphzgjhVuFKb4C6f5MmdW2zm rnzu/rS3kAhrt+A76PDsk7XQ/c8Hdg0Vsa8sIM2tbR2Nq7Sh1cJyeCEYYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOHdJBFajUNY6yBn+KR/5Y5pzSBWMB8GA1UdIwQY MBaAFAYXAtLCkZX6Cn2xHuRl8MBUXRcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgt NGM1MWM2Nzk3YzFmLzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS8wMGIyOGItY2M3Mi00NDA2LWI2ZDgtNGM1MWM2Nzk3YzFm LzEvQmhjQzBzS1JsZm9LZmJFZTVHWHd3RlJkRndrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTjGvqgJ HInPgJxPJWZPN395Km1nsRAXBSAqU+Mvg01eb6UTeSuMVQ9U+OusKFbPUopCDR3a fpm9Y9JZ+CPX0N9r8PZ38B2X/KyNc7kpdLuV1aD6z5ZgoiiCo/fR2cO0HNEZ3UDh BkQ0NLm8LMHgOnztWvt3sHbFHACRgg9OLOOt8YdaOPjl7ItXIbdAHpu+pCG1/0d4 675UGURg/TPPKlKurynpbE/EBk1OZVthDIUxzh1eA09gJFc4S3U4L3pN9S/ZZ+is ZB6kau1QQsrQkeaLxZWcX7Xoxmnxq3C64JHSM1gaC1qg8qRVl5dUogkXdq741NAY oVMJFfcoXqfR5g== -----END CERTIFICATE-----Generated at Mon Jan 26 05:12:57 2026 by rpki-client