This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft File: bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft (raw, json) Hash identifier: E5q2Owo5o1tDqriyMRs8I8PSIS7mbeTiwCrFLosod34= Subject key identifier: 9D:D2:51:CD:47:34:EA:2C:36:1A:6D:9A:9F:09:53:EE:01:22:D1:D6 Authority key identifier: 6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 Certificate issuer: /CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Certificate serial: 019BF79AE9CD9308C5CE327E1A3FC887D89C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft Manifest number: 1870 Signing time: Mon 26 Jan 2026 00:01:23 +0000 Manifest this update: Mon 26 Jan 2026 00:01:23 +0000 Manifest next update: Tue 27 Jan 2026 00:01:23 +0000 Files and hashes: 1: TjYcJALyGbmW-x31ry7QsUvdQtQ.roa (hash: knhLPKVdJjwTBCuKiy0BNSL8TQGPgiu2tFYYWRO2204=) 2: baEkayAg80jmYDBU-ExaHSLpuaI.roa (hash: nAErtQy9uElHFQjfJS5ckQ4epiwL6hvpsQEYN9BEeqw=) 3: bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl (hash: +O7a6bNTIIk5fFluWg8uePmOb/u4r5XshY7T0qscKzY=) 4: cGs3UaDvGLQ1Q_TQpZAPaINt4Es.roa (hash: W7uHnT9KoPvCIjHy/wyMQaAb03AUeFyxBB7Do1XvIvI=) 5: ebSZBecc7df92SgP59-y12trz8Y.roa (hash: eWLHCXv7jbIrxX4dZcu1pV/1wCL3MzIiRwN/vf2jitQ=) 6: nmGtGkrhBfqxDaqozTHEU7woU_8.roa (hash: myNlScXFtUNhqDOYxLDED2mEeSRwem2M2mluAw2qbGU=) 7: oRALtbh2nuCRd23sDYqfy35X5z0.roa (hash: jC6NP1kM59PVY3etFPE/j9NV0XqouvnOb2E4RPSGrX4=) 8: pI2S2lg5Mevtnr1gNuhTMLXlTZk.roa (hash: 5cp4WqQX2Fq4/2gG8NNXNJQnzkTkhV+uz8kgPR8ik8M=) 9: pUi-gLSXqZ0JaQPDBRSSYpMiavg.roa (hash: BVbd5i0a2oHy3QrO+gV4ifjJEQxi06QcvV9UBgsyx9E=) 10: rWySjgHmxws3lM6jmie75S8CDBw.roa (hash: At0oBHsNt1VyqDJTW3hMzgCfUrv9SJ/hPxisShjHIa0=) 11: yYjK6TLqyOsG3tmiBYFMP1Aoexg.roa (hash: 3ZWyZKdoBkHem28rqJLRhRuGSLJ2oX1IHJZHOWmP0p0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:e9:cd:93:08:c5:ce:32:7e:1a:3f:c8:87:d8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3030a4b67f95c2fed902d56657faa2494b5129 Validity Not Before: Jan 26 00:01:23 2026 GMT Not After : Jan 27 00:01:23 2026 GMT Subject: CN=9dd251cd4734ea2c361a6d9a9f0953ee0122d1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f0:67:9a:73:fd:fb:7c:98:28:11:14:31:6f: ca:3a:c6:9e:4b:3f:31:98:63:04:aa:f9:88:65:8c: 9f:e8:3f:b5:ad:95:eb:42:24:06:83:55:cf:c9:25: 8e:e1:4e:a3:9a:c7:21:a4:31:e8:73:56:51:53:ed: 44:4c:5d:c3:23:56:58:22:04:d1:ca:db:2b:32:8c: f9:50:11:f2:fc:7a:1e:a7:c6:04:2d:5d:2d:1e:b6: 8f:c6:41:34:e7:ff:7a:90:5a:94:9d:7c:bf:7b:d7: 37:2f:70:98:bd:39:83:ef:8c:85:7c:33:db:de:55: 5e:b2:9c:89:5b:89:b5:72:c5:3d:45:e6:21:f5:6c: 02:f2:3a:17:b0:17:37:7f:5a:70:0d:f4:61:cf:82: 9c:43:10:d8:d1:3c:52:e1:1c:3d:bb:ea:a1:07:f9: 84:4b:12:52:a2:1c:a3:e6:0b:db:1a:ef:ac:b3:a6: ac:3b:cc:43:f9:c7:26:77:75:33:f2:bc:b2:a4:fc: 51:fb:53:5a:ea:3e:87:83:0f:5d:3f:7a:c6:fa:9c: 06:3b:33:4f:bb:99:b7:a1:24:5f:b3:2d:10:c4:8c: e6:4a:e8:ef:2f:7c:f7:57:4f:bf:50:c8:f5:73:90: 0a:99:0b:8a:08:2c:54:17:de:f2:c7:3e:2a:65:88: f2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D2:51:CD:47:34:EA:2C:36:1A:6D:9A:9F:09:53:EE:01:22:D1:D6 X509v3 Authority Key Identifier: keyid:6F:30:30:A4:B6:7F:95:C2:FE:D9:02:D5:66:57:FA:A2:49:4B:51:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzAwpLZ_lcL-2QLVZlf6oklLUSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/2b99a3-dd5f-4ffe-82ef-bf3b21a270f2/1/bzAwpLZ_lcL-2QLVZlf6oklLUSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:7b:88:f3:c7:94:6c:be:c4:29:b7:f5:9f:a4:6f:73:90:a6: 52:6a:d9:42:cb:ad:48:9e:28:51:74:ec:09:da:9c:59:30:09: 04:02:cf:c2:e0:f6:a3:c2:88:66:0a:c8:bd:3c:4b:fd:cf:f6: 44:f9:00:73:c1:97:30:ab:46:f3:3e:e1:72:bc:ce:a2:73:56: de:51:71:bb:14:71:ab:59:68:54:74:2b:38:ad:54:32:7e:3b: b8:34:ba:e5:15:47:b0:e9:94:4b:bf:14:4a:95:84:45:ee:8c: cd:95:7d:fb:44:9a:49:67:5e:19:00:19:12:11:da:ff:1f:63: 94:bd:9c:7f:9d:96:ab:1b:d9:10:ce:29:3c:41:cf:83:0e:be: 0e:cc:4c:97:9d:a9:a8:9a:f6:ea:c9:17:d0:9b:cf:02:da:35: 14:66:c6:9b:97:53:0e:c2:51:c4:d1:eb:94:4f:a0:0f:85:35: 04:0c:cc:6c:5b:c7:63:66:5e:ff:4c:94:5c:49:e4:33:db:1c: 45:73:1f:f9:88:14:ab:af:25:36:8f:15:5e:43:8c:98:92:4f: 51:83:1b:09:48:0e:29:09:13:79:74:6a:be:15:02:61:72:23: ca:fc:d3:7f:ba:3a:f8:51:ba:60:27:97:25:23:ee:bb:43:60: f9:a2:d4:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3munNkwjFzjJ+Gj/Ih9icMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMzAzMGE0YjY3Zjk1YzJmZWQ5MDJkNTY2NTdmYWEyNDk0 YjUxMjkwHhcNMjYwMTI2MDAwMTIzWhcNMjYwMTI3MDAwMTIzWjAzMTEwLwYDVQQD Eyg5ZGQyNTFjZDQ3MzRlYTJjMzYxYTZkOWE5ZjA5NTNlZTAxMjJkMWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/BnmnP9+3yYKBEUMW/KOsaeSz8x mGMEqvmIZYyf6D+1rZXrQiQGg1XPySWO4U6jmschpDHoc1ZRU+1ETF3DI1ZYIgTR ytsrMoz5UBHy/Hoep8YELV0tHraPxkE05/96kFqUnXy/e9c3L3CYvTmD74yFfDPb 3lVespyJW4m1csU9ReYh9WwC8joXsBc3f1pwDfRhz4KcQxDY0TxS4Rw9u+qhB/mE SxJSohyj5gvbGu+ss6asO8xD+ccmd3Uz8ryypPxR+1Na6j6Hgw9dP3rG+pwGOzNP u5m3oSRfsy0QxIzmSujvL3z3V0+/UMj1c5AKmQuKCCxUF97yxz4qZYjypwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ3SUc1HNOosNhptmp8JU+4BItHWMB8GA1UdIwQY MBaAFG8wMKS2f5XC/tkC1WZX+qJJS1EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYt YmYzYjIxYTI3MGYyLzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8yYjk5YTMtZGQ1Zi00ZmZlLTgyZWYtYmYzYjIxYTI3MGYy LzEvYnpBd3BMWl9sY0wtMlFMVlpsZjZva2xMVVNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjnuI88eU bL7EKbf1n6Rvc5CmUmrZQsutSJ4oUXTsCdqcWTAJBALPwuD2o8KIZgrIvTxL/c/2 RPkAc8GXMKtG8z7hcrzOonNW3lFxuxRxq1loVHQrOK1UMn47uDS65RVHsOmUS78U SpWERe6MzZV9+0SaSWdeGQAZEhHa/x9jlL2cf52WqxvZEM4pPEHPgw6+DsxMl52p qJr26skX0JvPAto1FGbGm5dTDsJRxNHrlE+gD4U1BAzMbFvHY2Ze/0yUXEnkM9sc RXMf+YgUq68lNo8VXkOMmJJPUYMbCUgOKQkTeXRqvhUCYXIjyvzTf7o6+FG6YCeX JSPuu0Ng+aLUSA== -----END CERTIFICATE-----Generated at Mon Jan 26 06:06:34 2026 by rpki-client