This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json) Hash identifier: yQdNqrMylSIKvuA8kSa7l2Dae5ZvnTh/mfNXVGbXdIg= Subject key identifier: 93:DE:35:96:6E:9D:64:26:18:FE:C8:1E:5D:5E:D9:E6:05:12:D1:42 Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4 Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4 Certificate serial: 019BF53EC1843F3972FD81D5A8E8508B979E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 13:01:29 +0000 Manifest this update: Sun 25 Jan 2026 13:01:29 +0000 Manifest next update: Mon 26 Jan 2026 13:01:29 +0000 Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: H6VdWChYjV2lIewlp0pQI5C2KuLWqDJhaIWKFMHXeXw=) 2: MJnpHwqWRCcgwA2k13dIsZbF1wg.roa (hash: PFwAyy/D0gAKEytNprzS6x7dl1CAJgdTy4faTQEJoSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:c1:84:3f:39:72:fd:81:d5:a8:e8:50:8b:97:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4 Validity Not Before: Jan 25 13:01:29 2026 GMT Not After : Jan 26 13:01:29 2026 GMT Subject: CN=93de35966e9d642618fec81e5d5ed9e60512d142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a3:c4:cc:14:e0:5f:22:ed:23:78:83:8c:6c: e3:16:26:7a:90:a7:52:27:14:04:b4:05:07:13:e4: c7:45:ce:f6:78:68:eb:c7:92:f9:fc:07:4f:f9:5a: d5:9a:d3:61:30:a7:54:54:7a:ed:28:de:2d:d3:0b: f4:47:0c:4b:71:a2:5c:7f:c9:50:c9:fc:62:0f:80: f3:2f:f2:fb:1e:c4:ef:4b:88:21:33:6a:2e:b7:9c: 84:2a:8f:16:be:5e:ab:61:6d:4d:1f:7f:05:82:09: 0f:eb:73:0d:cc:3b:ad:dd:61:1d:1f:0f:d3:ef:4a: cb:8f:e5:dd:c2:ee:bf:58:d0:f4:f7:50:74:74:b7: 19:1e:37:62:08:56:d7:93:ba:51:bb:80:9b:a0:84: ef:49:81:0b:ae:c3:0f:34:eb:f3:d3:8e:64:ba:5f: 1d:69:05:6a:4c:47:8c:af:36:d5:d2:c0:38:12:b2: ed:29:d8:39:f5:5d:e2:2a:30:d9:e5:69:ab:02:42: 03:3c:25:37:45:23:a8:fd:6a:f5:83:65:50:c9:77: 00:c4:72:c7:a0:34:9f:f3:22:21:be:54:c1:fc:41: df:3e:a4:d7:d9:99:5d:49:65:51:dc:17:fb:97:ad: 7f:b8:31:95:84:fe:42:33:81:ac:f3:12:e5:ff:bc: d4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:DE:35:96:6E:9D:64:26:18:FE:C8:1E:5D:5E:D9:E6:05:12:D1:42 X509v3 Authority Key Identifier: keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:43:38:4c:92:03:32:da:99:35:a6:3f:63:bc:8f:c9:f6:b3: c8:06:11:61:a3:33:72:b4:05:c4:e7:f0:46:d7:a2:d2:9c:53: 77:2f:d0:38:ee:49:9c:c0:49:cc:f0:6b:0f:4b:83:46:53:8f: 8b:06:91:a0:43:57:6f:24:dd:dd:c2:7c:1b:9d:a8:2b:de:92: 05:07:83:48:ca:61:5e:98:7c:53:8a:e8:09:62:de:88:d9:f5: c9:eb:09:ce:f1:35:0d:1a:76:a0:6f:38:71:7d:1e:10:c4:72: 29:7b:73:a7:65:80:15:05:58:82:57:89:6c:a4:fc:f0:89:e5: c3:68:27:a3:e7:f4:c8:8e:59:00:6d:aa:61:b6:0b:d0:1b:72: 94:ac:2c:99:1c:b3:7d:c3:6e:3b:d8:0d:1f:22:2d:85:15:7d: d1:52:20:8e:a2:fc:0e:e3:33:b1:a1:cd:3e:7c:94:7c:97:af: a8:a4:6d:37:2f:de:0e:f7:25:27:eb:82:84:17:c8:3f:81:32: af:0c:3e:56:72:5b:b2:b2:1b:e8:b6:df:f8:f0:79:04:78:33: 20:4c:a6:24:02:48:3a:fc:3b:89:26:04:29:7e:3e:cd:c2:eb: 9e:91:eb:41:c4:8d:ae:83:6c:4a:cb:96:2c:2a:03:13:5f:6f: c1:5f:96:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PsGEPzly/YHVqOhQi5eeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzhlNjQyOTllNTQ1ZDM2MzcwNzRjYjk0NmI0MDBmNzk5 MGVjZjQwHhcNMjYwMTI1MTMwMTI5WhcNMjYwMTI2MTMwMTI5WjAzMTEwLwYDVQQD Eyg5M2RlMzU5NjZlOWQ2NDI2MThmZWM4MWU1ZDVlZDllNjA1MTJkMTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaPEzBTgXyLtI3iDjGzjFiZ6kKdS JxQEtAUHE+THRc72eGjrx5L5/AdP+VrVmtNhMKdUVHrtKN4t0wv0RwxLcaJcf8lQ yfxiD4DzL/L7HsTvS4ghM2out5yEKo8Wvl6rYW1NH38FggkP63MNzDut3WEdHw/T 70rLj+Xdwu6/WND091B0dLcZHjdiCFbXk7pRu4CboITvSYELrsMPNOvz045kul8d aQVqTEeMrzbV0sA4ErLtKdg59V3iKjDZ5WmrAkIDPCU3RSOo/Wr1g2VQyXcAxHLH oDSf8yIhvlTB/EHfPqTX2ZldSWVR3Bf7l61/uDGVhP5CM4Gs8xLl/7zUwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJPeNZZunWQmGP7IHl1e2eYFEtFCMB8GA1UdIwQY MBaAFAQ45kKZ5UXTY3B0y5RrQA95kOz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWIt YzZkYzU4MTM3ZDA3LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWItYzZkYzU4MTM3ZDA3 LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYEM4TJID MtqZNaY/Y7yPyfazyAYRYaMzcrQFxOfwRtei0pxTdy/QOO5JnMBJzPBrD0uDRlOP iwaRoENXbyTd3cJ8G52oK96SBQeDSMphXph8U4roCWLeiNn1yesJzvE1DRp2oG84 cX0eEMRyKXtzp2WAFQVYgleJbKT88Inlw2gno+f0yI5ZAG2qYbYL0BtylKwsmRyz fcNuO9gNHyIthRV90VIgjqL8DuMzsaHNPnyUfJevqKRtNy/eDvclJ+uChBfIP4Ey rww+VnJbsrIb6Lbf+PB5BHgzIEymJAJIOvw7iSYEKX4+zcLrnpHrQcSNroNsSsuW LCoDE19vwV+W8A== -----END CERTIFICATE-----Generated at Sun Jan 25 17:03:20 2026 by rpki-client