This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft File: bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json) Hash identifier: h3x5O+k0C/eIdr1OI3PqloLljq30HHZXkgSap20VgEg= Subject key identifier: D9:70:2D:51:DB:0C:75:CA:3C:F2:7B:FF:B7:67:0C:0D:0D:E8:22:86 Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e Certificate serial: 019BF6F5517A5B3EE50FE97B6D694736DA60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 21:00:30 +0000 Manifest this update: Sun 25 Jan 2026 21:00:30 +0000 Manifest next update: Mon 26 Jan 2026 21:00:30 +0000 Files and hashes: 1: D0GX8vfI6wVQ2R3ofiGwxGjvfHs.roa (hash: tjw3dTvmZmkhSGo/nTvjDlfnKPPhFeeD7BJ95LJU948=) 2: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: 81T/JLWDTFnBKjlWdTitvg/PpBJtXS/lLBmV9C3HKvY=) 3: kQ09oRNTXVR1xe3b-WsWF5CPy-g.roa (hash: mSM7RpELOqwcQmqGi1wB2iUWIWwoZbiElym83yRxbP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:51:7a:5b:3e:e5:0f:e9:7b:6d:69:47:36:da:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e Validity Not Before: Jan 25 21:00:30 2026 GMT Not After : Jan 26 21:00:30 2026 GMT Subject: CN=d9702d51db0c75ca3cf27bffb7670c0d0de82286 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:fb:96:6e:f7:d9:8e:27:57:6a:75:cb:5a:ad: 54:15:35:84:f3:f9:dd:8e:8c:b3:ef:9d:0e:57:20: c7:1c:e0:74:06:0a:51:6c:5a:ae:39:54:f9:98:82: 48:21:67:06:43:75:60:c8:c3:dc:87:b3:c6:60:c5: fb:11:34:c6:66:87:2a:98:31:25:28:dc:3e:1a:86: 55:4f:f9:3b:ee:08:94:61:a7:8e:75:9c:b0:ad:fc: 21:96:18:92:3d:5a:12:28:24:6e:e2:8a:fd:06:d0: 52:8b:e2:22:cf:d7:4d:dd:b9:78:95:bc:52:e7:b7: 5e:31:ab:d8:ad:a9:84:7b:c1:1e:20:9b:fa:c0:d5: a8:43:f4:be:fe:54:1b:11:93:8a:64:2a:88:2e:26: 9e:5b:72:ef:1c:be:df:99:e7:35:64:44:56:68:42: 2e:7c:07:9c:1e:91:d8:b1:4c:fd:9d:48:be:60:fc: c2:02:2b:39:90:bb:77:41:b6:4d:cd:f1:f0:e8:5d: c4:a4:73:4d:20:ca:26:7e:04:2f:c8:54:03:92:ff: f8:50:95:70:8f:86:23:87:73:35:ce:1c:67:b9:10: 0b:ce:7b:d9:ec:75:3d:f9:66:a9:53:a1:71:61:3c: d1:0c:f3:96:f6:2b:d2:3f:8b:29:6b:e5:da:21:1c: 22:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:70:2D:51:DB:0C:75:CA:3C:F2:7B:FF:B7:67:0C:0D:0D:E8:22:86 X509v3 Authority Key Identifier: keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:9e:fc:2f:a5:ee:8e:cf:3c:f0:53:df:d8:48:b8:00:51:7f: 69:ef:d9:e0:e4:7e:c3:70:06:03:e0:41:02:ab:e9:d1:4b:08: a9:27:08:5b:8d:d2:81:51:cf:9d:47:0e:a6:74:39:90:34:a0: ae:75:4e:ca:25:3e:af:a7:cb:2f:ff:97:04:a5:e3:b0:f1:25: 17:7b:0c:08:61:52:20:8c:25:0e:07:80:76:08:9d:ec:d3:17: a1:c6:32:9a:49:08:2f:45:8b:f4:89:30:f2:ec:5c:93:c4:3a: 7b:30:b7:79:fc:e6:a6:36:f5:fe:c1:2d:39:f8:fc:f3:f4:31: 0d:73:3c:4f:87:4e:66:4c:4c:9c:bd:64:85:fc:ea:b6:9a:1d: f7:71:35:9a:28:0f:8c:77:d8:e2:f1:38:eb:a3:2e:0e:13:53: 2a:4a:31:7d:61:80:b5:56:1d:fe:13:22:11:35:56:d3:f8:b1: 04:8d:41:50:af:08:50:7f:1c:54:b5:7a:44:44:8a:2f:f1:b2: 7c:70:d8:aa:15:1d:75:87:7a:90:2e:d6:9b:e7:89:ab:65:df: c4:06:fc:79:48:59:b5:ba:9a:3c:fd:b9:10:39:83:f9:04:ea: c8:72:94:fb:1b:35:9a:ea:e2:ca:9a:6f:29:1b:16:ce:cf:a4: cb:b7:9e:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29VF6Wz7lD+l7bWlHNtpgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZmQzNjA3MzZmMWZhNmM5NzcwZmNiNDhiZTU5NGJlNjA5 ZTViM2UwHhcNMjYwMTI1MjEwMDMwWhcNMjYwMTI2MjEwMDMwWjAzMTEwLwYDVQQD EyhkOTcwMmQ1MWRiMGM3NWNhM2NmMjdiZmZiNzY3MGMwZDBkZTgyMjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vuWbvfZjidXanXLWq1UFTWE8/nd joyz750OVyDHHOB0BgpRbFquOVT5mIJIIWcGQ3VgyMPch7PGYMX7ETTGZocqmDEl KNw+GoZVT/k77giUYaeOdZywrfwhlhiSPVoSKCRu4or9BtBSi+Iiz9dN3bl4lbxS 57deMavYramEe8EeIJv6wNWoQ/S+/lQbEZOKZCqILiaeW3LvHL7fmec1ZERWaEIu fAecHpHYsUz9nUi+YPzCAis5kLt3QbZNzfHw6F3EpHNNIMomfgQvyFQDkv/4UJVw j4Yjh3M1zhxnuRALznvZ7HU9+WapU6FxYTzRDPOW9ivSP4spa+XaIRwiuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlwLVHbDHXKPPJ7/7dnDA0N6CKGMB8GA1UdIwQY MBaAFGz9Ngc28fpsl3D8tIvllL5gnls+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgt ZWFmNjhiNTllNTk5LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zNDRlMmMtMWM1Ni00M2FiLTgxMDgtZWFmNjhiNTllNTk5 LzEvYlAwMkJ6YngtbXlYY1B5MGktV1V2bUNlV3o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi578L6Xu js888FPf2Ei4AFF/ae/Z4OR+w3AGA+BBAqvp0UsIqScIW43SgVHPnUcOpnQ5kDSg rnVOyiU+r6fLL/+XBKXjsPElF3sMCGFSIIwlDgeAdgid7NMXocYymkkIL0WL9Ikw 8uxck8Q6ezC3efzmpjb1/sEtOfj88/QxDXM8T4dOZkxMnL1khfzqtpod93E1migP jHfY4vE466MuDhNTKkoxfWGAtVYd/hMiETVW0/ixBI1BUK8IUH8cVLV6RESKL/Gy fHDYqhUddYd6kC7Wm+eJq2XfxAb8eUhZtbqaPP25EDmD+QTqyHKU+xs1muriyppv KRsWzs+ky7eeaA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:56:41 2026 by rpki-client