This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft File: bm17yr_MMI1CAFPEgqDVn7EoLjA.mft (raw, json) Hash identifier: lQeABYWTl+A2qznypA2GKUtHE+yV5XJxA2JJHdHPzcY= Subject key identifier: 2A:B0:7E:C9:D0:A0:3D:00:FB:EC:C5:60:78:71:88:E3:ED:75:C0:46 Authority key identifier: 6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30 Certificate issuer: /CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30 Certificate serial: 019BF2745AE5FF60303F8E081B22AD2072C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft Manifest number: 17FC Signing time: Sun 25 Jan 2026 00:01:10 +0000 Manifest this update: Sun 25 Jan 2026 00:01:10 +0000 Manifest next update: Mon 26 Jan 2026 00:01:10 +0000 Files and hashes: 1: InqWS5rTHtoJHqAAMNFNS-6YNzU.roa (hash: PCgwCy8zvVIhGv1SDbFVEmkSMCsbV4aCFlf6s9OR4Ns=) 2: NF7flV9Z7UaOMGg6mJH46C1-Xq0.roa (hash: fmiuFA8CeszA+aip616DB8dgdxALGZBhtxt21OyYIWM=) 3: NdjagWCchyoUBDH_RRwhcy-qdpY.roa (hash: rfUn6HMhfHmkmcQD7GkdDWgPYr7YZfPMYcAy3H0prJk=) 4: bVJONHJfgKZDBK0Jlsu-AiUrumY.roa (hash: 1OcxCV/N7P1Um6U586/l5XgFjBvwzM7c2rUdENhKMFs=) 5: bm17yr_MMI1CAFPEgqDVn7EoLjA.crl (hash: witckMy3y7h1DPzbVVPpr9UXy6LbP8hL8aQUWKbAnw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:74:5a:e5:ff:60:30:3f:8e:08:1b:22:ad:20:72:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e6d7bcabfcc308d420053c482a0d59fb1282e30 Validity Not Before: Jan 25 00:01:10 2026 GMT Not After : Jan 26 00:01:10 2026 GMT Subject: CN=2ab07ec9d0a03d00fbecc560787188e3ed75c046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bc:81:85:d2:fa:98:70:df:2d:b5:56:c5:24: ee:9a:bd:cb:a1:79:7e:53:de:ea:1c:20:8a:5f:df: 3a:b2:85:40:92:82:26:87:a2:7e:d6:af:46:7d:20: 20:20:bc:b7:55:3e:0f:95:02:64:da:51:99:bf:69: 9d:7d:84:40:29:47:9c:06:a0:10:20:f9:f9:a3:d6: f1:45:cb:f3:57:e8:74:6e:0d:1f:1b:57:aa:a6:9f: 74:a3:98:c1:d9:07:cc:d7:e8:e7:af:c0:6e:8e:99: cf:0c:c3:6c:df:97:b4:68:de:6d:c7:26:88:17:fc: 7e:21:cf:7b:81:68:35:d2:44:18:db:77:0a:4b:74: 31:fd:38:08:db:7a:33:26:66:42:64:c1:f3:8e:11: 68:5a:97:ae:e9:ae:a9:9a:37:0f:69:d0:94:b6:e3: d8:3d:fe:62:06:95:05:6a:a8:33:7b:25:48:9d:17: 55:62:2c:88:bf:7a:53:a9:21:44:01:39:bf:80:15: 1b:5c:9f:85:cd:4d:a2:af:03:7a:dc:e5:d3:89:96: 1c:4e:51:55:5a:a8:07:32:c6:73:c6:d5:03:35:1b: 94:ed:56:db:df:a3:1e:c2:38:b4:d9:81:3b:af:a8: 55:8e:d1:e8:57:7a:cd:35:b6:f2:f6:f7:1b:c8:eb: e7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B0:7E:C9:D0:A0:3D:00:FB:EC:C5:60:78:71:88:E3:ED:75:C0:46 X509v3 Authority Key Identifier: keyid:6E:6D:7B:CA:BF:CC:30:8D:42:00:53:C4:82:A0:D5:9F:B1:28:2E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bm17yr_MMI1CAFPEgqDVn7EoLjA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/45c689-afaa-4da3-a942-93194eb6108d/1/bm17yr_MMI1CAFPEgqDVn7EoLjA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:09:4a:2b:78:d8:94:72:90:5a:aa:0a:08:be:97:7d:df:99: 30:d7:a8:98:40:9e:9d:07:23:92:08:84:2b:44:54:82:05:6d: 7b:52:7f:dc:f2:96:d2:89:c0:89:6e:21:32:23:93:09:ad:e6: 7a:37:4a:b1:03:89:1d:99:92:77:8b:48:86:d4:4d:a3:98:c9: dc:89:5c:8a:8f:2c:f3:4b:94:fc:78:4e:2c:db:ec:9e:e8:ef: e3:a1:60:31:17:6c:00:cc:05:a8:ae:9b:63:36:9d:16:14:14: f4:40:65:de:a4:a8:c2:b1:5b:8e:9b:4e:ea:b8:81:0e:cd:cc: 96:5b:95:f9:f9:7d:41:ad:88:a7:ca:bb:99:07:25:ed:10:ab: 1c:c0:a0:4f:16:81:5f:f6:5e:e7:d8:e5:de:56:7f:f8:9f:f9: 7e:6b:d9:3d:8b:c1:ae:f9:28:ae:cb:7d:80:46:44:57:d5:10: 8a:03:14:6a:33:1e:d6:50:ec:86:30:b1:14:e4:f6:50:ca:e9: e4:02:c2:c4:18:b5:21:05:fe:7d:d1:8c:09:b6:2b:7d:c3:fa: 56:46:30:9d:1c:7c:6d:4f:e9:fd:69:2d:99:29:85:84:a3:b4: b5:a9:21:02:22:0e:eb:65:e4:0e:52:d5:35:45:52:19:f7:16: 2c:ae:c2:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvydFrl/2AwP44IGyKtIHLBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNmQ3YmNhYmZjYzMwOGQ0MjAwNTNjNDgyYTBkNTlmYjEy ODJlMzAwHhcNMjYwMTI1MDAwMTEwWhcNMjYwMTI2MDAwMTEwWjAzMTEwLwYDVQQD EygyYWIwN2VjOWQwYTAzZDAwZmJlY2M1NjA3ODcxODhlM2VkNzVjMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmryBhdL6mHDfLbVWxSTumr3LoXl+ U97qHCCKX986soVAkoImh6J+1q9GfSAgILy3VT4PlQJk2lGZv2mdfYRAKUecBqAQ IPn5o9bxRcvzV+h0bg0fG1eqpp90o5jB2QfM1+jnr8BujpnPDMNs35e0aN5txyaI F/x+Ic97gWg10kQY23cKS3Qx/TgI23ozJmZCZMHzjhFoWpeu6a6pmjcPadCUtuPY Pf5iBpUFaqgzeyVInRdVYiyIv3pTqSFEATm/gBUbXJ+FzU2irwN63OXTiZYcTlFV WqgHMsZzxtUDNRuU7Vbb36Mewji02YE7r6hVjtHoV3rNNbby9vcbyOvn0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqwfsnQoD0A++zFYHhxiOPtdcBGMB8GA1UdIwQY MBaAFG5te8q/zDCNQgBTxIKg1Z+xKC4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDIt OTMxOTRlYjYxMDhkLzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy80NWM2ODktYWZhYS00ZGEzLWE5NDItOTMxOTRlYjYxMDhk LzEvYm0xN3lyX01NSTFDQUZQRWdxRFZuN0VvTGpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdAlKK3jY lHKQWqoKCL6Xfd+ZMNeomECenQcjkgiEK0RUggVte1J/3PKW0onAiW4hMiOTCa3m ejdKsQOJHZmSd4tIhtRNo5jJ3Ilcio8s80uU/HhOLNvsnujv46FgMRdsAMwFqK6b YzadFhQU9EBl3qSowrFbjptO6riBDs3MlluV+fl9Qa2Ip8q7mQcl7RCrHMCgTxaB X/Ze59jl3lZ/+J/5fmvZPYvBrvkorst9gEZEV9UQigMUajMe1lDshjCxFOT2UMrp 5ALCxBi1IQX+fdGMCbYrfcP6VkYwnRx8bU/p/WktmSmFhKO0takhAiIO62XkDlLV NUVSGfcWLK7Cxw== -----END CERTIFICATE-----Generated at Sun Jan 25 10:59:08 2026 by rpki-client