This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft File: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft (raw, json) Hash identifier: OAC31YCNWKJa/3x9sRrWJploHPOnFtjUqnSk9lcOPGo= Subject key identifier: EB:B0:D5:89:3A:A8:99:85:90:C0:59:D6:AB:97:8F:D8:A1:D2:E2:CA Authority key identifier: 6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06 Certificate issuer: /CN=6ccc7137704b26301917563f2a84671ef6758006 Certificate serial: 019BF53EF45EAB7466AEF3D6034F6A128EBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft Manifest number: 06CF Signing time: Sun 25 Jan 2026 13:01:42 +0000 Manifest this update: Sun 25 Jan 2026 13:01:42 +0000 Manifest next update: Mon 26 Jan 2026 13:01:42 +0000 Files and hashes: 1: J6B1NmurBSlkEDodpO862ZEtVnU.asa (hash: vMggm0hPyL6Amd/bf3Z/Hi/LA8ZvGHj5OIPhqcU1OtI=) 2: bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl (hash: rtUCitAmu3UEw5Uzggb3hTI3zvkRYJXGutAgMCt6CyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:f4:5e:ab:74:66:ae:f3:d6:03:4f:6a:12:8e:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccc7137704b26301917563f2a84671ef6758006 Validity Not Before: Jan 25 13:01:42 2026 GMT Not After : Jan 26 13:01:42 2026 GMT Subject: CN=ebb0d5893aa8998590c059d6ab978fd8a1d2e2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f2:75:40:cf:9d:84:99:9d:ec:09:2a:0e:fd: 5c:a7:81:d8:fc:5e:ad:95:bb:bc:82:49:c7:92:44: f3:40:12:1c:58:06:aa:16:08:50:f9:87:19:b6:46: c9:34:e2:da:e7:3b:0b:37:8c:da:b2:75:45:fc:da: 96:c3:55:e4:d1:e9:07:61:05:fd:b0:1c:c4:24:f7: 41:cc:e2:f7:61:6e:cb:a7:bb:56:7f:c9:68:8e:d8: 6a:35:25:19:3d:c5:c4:7d:b7:e9:85:01:66:f1:52: ae:5b:76:65:fe:14:90:68:f0:e8:e3:24:f6:33:cb: b3:69:82:fa:e4:aa:f9:07:a3:61:d4:e1:6d:03:0c: c4:fe:7c:8c:ef:94:82:37:aa:c2:b9:32:a4:8c:08: fd:43:fd:17:0c:b5:7f:78:ca:9e:ec:d7:67:f8:a0: f8:e6:c6:89:d0:62:c4:99:70:34:dd:f3:72:fd:a0: 47:fe:77:1d:c8:59:33:01:1e:6b:b1:f0:8a:3e:62: a6:85:95:2a:a2:05:e2:c7:ea:4d:23:1c:2b:71:9c: e6:ff:b4:0f:9f:5a:4b:e6:80:a8:67:19:9c:5b:be: 38:46:ff:59:1c:e2:de:89:90:13:a8:38:a9:19:d7: b6:08:19:12:f7:b3:99:ec:22:b9:fb:ff:26:a5:14: 0d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B0:D5:89:3A:A8:99:85:90:C0:59:D6:AB:97:8F:D8:A1:D2:E2:CA X509v3 Authority Key Identifier: keyid:6C:CC:71:37:70:4B:26:30:19:17:56:3F:2A:84:67:1E:F6:75:80:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/bMxxN3BLJjAZF1Y_KoRnHvZ1gAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:52:26:b3:15:b8:09:17:a1:62:08:a0:69:dd:e7:6b:99:6f: c1:45:39:11:7d:d6:e1:0a:28:57:f6:1a:7d:85:10:d8:6d:23: c9:34:e3:b3:32:90:6b:ed:bd:81:45:6b:30:a6:b9:54:e7:60: 12:eb:7a:3c:f4:fd:c6:70:ba:14:53:36:36:1e:10:f2:e7:ba: 34:49:72:87:28:35:69:2d:40:c2:fa:94:2b:57:48:bb:ed:db: af:60:ba:b5:55:c1:66:30:22:45:64:e4:15:a5:a5:c2:83:b9: 3f:0b:9f:90:f0:df:fb:87:74:68:59:c5:bc:22:c5:56:d5:f8: 98:03:7f:f4:9b:0c:2c:cc:cc:18:95:e0:5f:3b:1f:af:70:55: be:2a:cd:8d:a9:5e:14:ef:98:b4:fe:b8:cc:a4:96:f3:6d:37: 3b:69:37:38:fb:ff:5c:bb:aa:48:de:14:54:b2:3d:a4:0f:02: 64:d0:2f:b2:d8:e1:e5:13:96:e1:79:2c:a8:fa:df:3f:ba:91: 0a:50:c2:e6:ed:08:8b:30:47:9c:47:e0:8e:3a:87:b4:d7:e4: 03:55:36:0d:f2:e7:99:b5:c8:c2:93:a0:75:16:a3:02:d6:e7: 0e:a8:ea:4d:72:87:5e:27:6d:be:8e:db:7f:31:a5:09:d5:6e: 31:97:af:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PvReq3RmrvPWA09qEo66MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2M3MTM3NzA0YjI2MzAxOTE3NTYzZjJhODQ2NzFlZjY3 NTgwMDYwHhcNMjYwMTI1MTMwMTQyWhcNMjYwMTI2MTMwMTQyWjAzMTEwLwYDVQQD EyhlYmIwZDU4OTNhYTg5OTg1OTBjMDU5ZDZhYjk3OGZkOGExZDJlMmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/J1QM+dhJmd7AkqDv1cp4HY/F6t lbu8gknHkkTzQBIcWAaqFghQ+YcZtkbJNOLa5zsLN4zasnVF/NqWw1Xk0ekHYQX9 sBzEJPdBzOL3YW7Lp7tWf8lojthqNSUZPcXEfbfphQFm8VKuW3Zl/hSQaPDo4yT2 M8uzaYL65Kr5B6Nh1OFtAwzE/nyM75SCN6rCuTKkjAj9Q/0XDLV/eMqe7Ndn+KD4 5saJ0GLEmXA03fNy/aBH/ncdyFkzAR5rsfCKPmKmhZUqogXix+pNIxwrcZzm/7QP n1pL5oCoZxmcW744Rv9ZHOLeiZATqDipGde2CBkS97OZ7CK5+/8mpRQNuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuw1Yk6qJmFkMBZ1quXj9ih0uLKMB8GA1UdIwQY MBaAFGzMcTdwSyYwGRdWPyqEZx72dYAGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGIt OTJmNTIwZTQ2ZTg4LzEvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9lOTcxMjAtNDIwOC00YWNjLWE1NGItOTJmNTIwZTQ2ZTg4 LzEvYk14eE4zQkxKakFaRjFZX0tvUm5IdloxZ0FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFImsxW4 CRehYgigad3na5lvwUU5EX3W4QooV/YafYUQ2G0jyTTjszKQa+29gUVrMKa5VOdg Eut6PPT9xnC6FFM2Nh4Q8ue6NElyhyg1aS1AwvqUK1dIu+3br2C6tVXBZjAiRWTk FaWlwoO5PwufkPDf+4d0aFnFvCLFVtX4mAN/9JsMLMzMGJXgXzsfr3BVvirNjale FO+YtP64zKSW8203O2k3OPv/XLuqSN4UVLI9pA8CZNAvstjh5ROW4XksqPrfP7qR ClDC5u0IizBHnEfgjjqHtNfkA1U2DfLnmbXIwpOgdRajAtbnDqjqTXKHXidtvo7b fzGlCdVuMZev0A== -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:18 2026 by rpki-client