This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json) Hash identifier: CNyLukESWxo/uaateZMO084GU/BHzOP4WCpdbDmoabA= Subject key identifier: D9:4E:B8:E2:8F:C2:B8:7C:C3:A2:79:4B:51:E7:3D:6D:62:5C:55:C0 Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08 Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008 Certificate serial: 019BF3871EF762420D206A9429449537C315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft Manifest number: 1050 Signing time: Sun 25 Jan 2026 05:01:17 +0000 Manifest this update: Sun 25 Jan 2026 05:01:17 +0000 Manifest next update: Mon 26 Jan 2026 05:01:17 +0000 Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: m2vzp64oKpmL9nTBfwHX+GFMGWbqc+6K6EEpmll53k8=) 2: dCctAo4cF_cQVF9v9iua88jVN3g.roa (hash: NqSK6SL1qTb0fxaxxTxRSRb53epcbkxkPGl7gPfChT0=) 3: klXO-sH0E69ctlYICKM2oEhYAk0.roa (hash: 8p7Dn973TTYNLcmIRozlh88axGubR0kxdQP115KfTHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:87:1e:f7:62:42:0d:20:6a:94:29:44:95:37:c3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008 Validity Not Before: Jan 25 05:01:17 2026 GMT Not After : Jan 26 05:01:17 2026 GMT Subject: CN=d94eb8e28fc2b87cc3a2794b51e73d6d625c55c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:0f:40:86:d1:af:a4:5e:fa:cb:11:83:df:fb: a7:4b:c1:bc:90:6c:b0:9c:88:23:8d:29:83:f1:ed: 03:2d:d0:be:80:2e:c7:33:d9:d2:5d:f4:1a:6b:84: b3:9f:76:e2:17:c0:6d:33:40:af:8d:a3:eb:23:84: 16:34:83:0f:15:f7:99:5d:52:7b:83:ba:a8:74:38: 3d:fb:47:b3:a3:38:ba:86:75:49:da:9c:db:da:a6: 09:06:a7:01:b5:e1:ef:18:b7:ae:9b:95:27:55:1b: a3:24:10:f4:56:fc:08:ad:a0:74:d5:6e:31:1e:43: c0:c3:cc:96:3c:59:22:f8:51:e4:a0:72:dd:48:a6: 68:c6:81:9f:d1:0a:24:45:eb:22:91:7f:39:c5:50: ac:b9:6b:d2:e6:4e:fa:85:7e:95:5a:47:36:d0:ae: d5:c6:dc:d7:99:27:db:d8:b5:dc:aa:01:08:27:2c: 2d:1e:e7:1d:8c:0b:7a:65:64:63:e0:99:24:8e:56: e7:9e:b1:69:06:00:7c:d4:f8:25:b2:75:e7:1d:49: e0:bd:43:2d:8d:23:83:9f:85:c2:4b:d3:91:6b:4d: 9c:fd:8b:29:f0:c4:e5:d6:07:ae:a0:93:18:aa:0d: 11:5e:a7:9a:56:e6:18:de:21:b5:8e:96:5a:9c:66: b5:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:4E:B8:E2:8F:C2:B8:7C:C3:A2:79:4B:51:E7:3D:6D:62:5C:55:C0 X509v3 Authority Key Identifier: keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f2:f6:17:fe:14:fd:df:1e:11:9a:45:f2:b9:8e:36:8c:43:fd: f5:21:72:4e:a5:7b:6b:fc:18:ca:d9:8b:85:19:48:2f:90:7c: 2e:1d:c0:0b:24:f2:78:9d:3b:37:4c:2c:1b:b7:9a:e5:79:d0: 18:f4:b6:09:d6:4f:47:1e:cc:bb:e2:9f:20:2c:8d:70:a2:27: 2f:04:ad:50:8c:26:29:56:bc:35:94:16:6d:ac:50:41:65:31: 2e:4e:42:cc:99:e4:05:c3:2f:59:e1:aa:f8:5c:9a:94:e1:bd: 8d:db:05:94:a4:ef:9b:bc:a8:dd:98:d2:4b:5d:47:ae:cd:a0: 61:70:6c:ea:9b:34:5b:ca:29:87:e2:66:5c:40:35:15:f0:a3: 86:57:de:9c:50:18:3d:63:80:db:65:33:b5:2d:96:06:ac:f3: ba:10:94:e4:06:07:03:ca:64:a8:b6:db:b2:48:bf:9f:31:48: e7:57:5b:92:c4:9d:6e:e1:45:12:54:af:ed:7d:62:98:0c:8e: 54:3a:7a:8c:f6:c3:cc:b1:39:a8:36:24:95:d3:d0:9a:e3:5b: 33:98:e1:4a:16:8c:cc:9b:86:6e:d4:2d:89:e6:32:83:ee:4b: 90:88:27:46:33:6e:29:69:20:85:0c:80:7f:29:9c:00:ba:08: 6d:c4:27:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhx73YkINIGqUKUSVN8MVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYmM4NDAyZjA5MjM0M2I5YzAzZDM4NjA2OTcyOGY4OTgz ZTYwMDgwHhcNMjYwMTI1MDUwMTE3WhcNMjYwMTI2MDUwMTE3WjAzMTEwLwYDVQQD EyhkOTRlYjhlMjhmYzJiODdjYzNhMjc5NGI1MWU3M2Q2ZDYyNWM1NWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7w9AhtGvpF76yxGD3/unS8G8kGyw nIgjjSmD8e0DLdC+gC7HM9nSXfQaa4Szn3biF8BtM0CvjaPrI4QWNIMPFfeZXVJ7 g7qodDg9+0ezozi6hnVJ2pzb2qYJBqcBteHvGLeum5UnVRujJBD0VvwIraB01W4x HkPAw8yWPFki+FHkoHLdSKZoxoGf0QokResikX85xVCsuWvS5k76hX6VWkc20K7V xtzXmSfb2LXcqgEIJywtHucdjAt6ZWRj4JkkjlbnnrFpBgB81PglsnXnHUngvUMt jSODn4XCS9ORa02c/Ysp8MTl1geuoJMYqg0RXqeaVuYY3iG1jpZanGa1WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlOuOKPwrh8w6J5S1HnPW1iXFXAMB8GA1UdIwQY MBaAFGy8hALwkjQ7nAPThgaXKPiYPmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQt MjgwZjVhNGI1ZTAzLzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQtMjgwZjVhNGI1ZTAz LzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA8vYX/hT9 3x4RmkXyuY42jEP99SFyTqV7a/wYytmLhRlIL5B8Lh3ACyTyeJ07N0wsG7ea5XnQ GPS2CdZPRx7Mu+KfICyNcKInLwStUIwmKVa8NZQWbaxQQWUxLk5CzJnkBcMvWeGq +FyalOG9jdsFlKTvm7yo3ZjSS11Hrs2gYXBs6ps0W8oph+JmXEA1FfCjhlfenFAY PWOA22UztS2WBqzzuhCU5AYHA8pkqLbbski/nzFI51dbksSdbuFFElSv7X1imAyO VDp6jPbDzLE5qDYkldPQmuNbM5jhShaMzJuGbtQtieYyg+5LkIgnRjNuKWkghQyA fymcALoIbcQniA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:36:14 2026 by rpki-client