This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json) Hash identifier: 1Gb+Ndy0karaV2GW33GT8h6cctVl5fCqBFud4aWm+vQ= Subject key identifier: A4:C0:57:EB:F7:7C:35:20:8E:C3:BF:69:49:34:99:F6:07:17:B5:00 Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07 Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07 Certificate serial: 019BF7639BB13F970C273084197E5DCBACC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft Manifest number: 17EC Signing time: Sun 25 Jan 2026 23:00:58 +0000 Manifest this update: Sun 25 Jan 2026 23:00:58 +0000 Manifest next update: Mon 26 Jan 2026 23:00:58 +0000 Files and hashes: 1: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: TE9xW+qxtAUDI2xs6BYMbW6iXfVQ/uGbt6AB6gX+8Ro=) 2: oetUUkO4cZ8XU4zZUrbGoYOdszE.roa (hash: wn2OyJ+kz4z5ywBpw9YbEq0aRUfcFISzvLJUM7TfkuA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:9b:b1:3f:97:0c:27:30:84:19:7e:5d:cb:ac:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07 Validity Not Before: Jan 25 23:00:58 2026 GMT Not After : Jan 26 23:00:58 2026 GMT Subject: CN=a4c057ebf77c35208ec3bf69493499f60717b500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:e9:aa:56:3d:25:e2:a0:77:b3:23:27:c5:41: f0:9d:a7:39:76:28:e8:75:1f:9f:1d:90:a3:f6:15: 04:5b:9c:41:f5:f5:6c:a8:c9:28:9b:c4:96:c2:e2: b4:a8:79:16:90:03:99:fd:e1:e9:cc:b6:95:df:aa: 74:a6:17:a6:f4:c1:00:c6:87:82:c4:1b:e4:3f:f8: 37:1c:fb:7e:7f:67:0d:12:65:73:d9:4b:49:38:5c: 24:1c:8d:1e:8a:70:fd:c4:69:70:01:a0:8e:9e:31: 61:2f:15:47:26:9e:d0:84:9b:b5:50:3b:72:93:68: 95:71:f8:a6:a4:d9:fe:51:3a:84:0a:ed:f3:3d:f8: 6e:39:3a:5f:e3:18:58:86:33:86:cb:50:05:63:01: c9:43:c1:b5:fa:22:79:e5:ef:c6:0b:f6:eb:12:ff: 2e:c2:39:25:a7:d2:7d:12:d4:74:e5:e6:28:bc:93: c1:52:47:35:69:5e:09:1f:0a:f8:e6:77:c6:0e:21: df:5b:5f:80:08:60:1d:bd:8e:5e:f1:15:13:0c:fd: f0:23:e9:3f:73:03:4a:82:a2:fc:29:2a:f2:5a:36: b9:40:dc:d9:97:87:df:11:62:d6:8b:15:90:f1:10: 58:16:82:40:53:0a:63:84:ce:9d:35:7c:9c:13:63: e4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C0:57:EB:F7:7C:35:20:8E:C3:BF:69:49:34:99:F6:07:17:B5:00 X509v3 Authority Key Identifier: keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:4f:5f:0c:23:18:b9:07:b6:54:15:b3:6a:60:67:12:8d:bf: e9:ae:30:05:96:4c:71:fc:c2:fb:87:63:c1:ff:e3:cd:15:b4: a4:ad:e7:86:1c:ba:21:67:ea:fa:02:24:d2:f5:9b:56:77:eb: ab:8d:14:47:18:da:4c:53:2b:b0:e5:03:e0:93:06:b2:14:ae: 91:59:67:5b:83:0a:13:49:31:93:c6:a2:0b:63:7d:de:22:65: 34:e2:31:73:67:25:64:01:96:a4:8a:11:e2:b8:74:5e:4e:06: 71:1a:8d:75:6e:c8:bb:e8:d3:8e:e4:8a:90:26:ec:b6:0e:78: 11:1d:f6:5b:f8:9b:19:fd:21:f3:1c:95:9a:b9:2c:b1:e6:dd: 8c:b4:ec:af:64:26:c4:b6:22:b6:ed:74:22:9d:0a:db:f2:84: 89:60:76:3e:cd:36:56:ce:83:31:47:9a:7d:31:de:c0:bc:71: fe:ce:71:ec:22:32:74:8c:0f:e4:fb:83:a7:68:a9:28:43:4c: 41:bf:7a:11:1a:53:03:d6:f7:13:7a:9b:cf:8b:ca:0c:38:82: a9:7c:01:6d:c4:54:7e:c8:2c:7b:7d:6a:d1:d2:09:56:e8:1d: 3e:12:0e:44:ee:73:4e:79:e2:d4:7c:5a:8a:0c:e5:9b:b5:f3: 58:ef:ac:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y5uxP5cMJzCEGX5dy6zJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzU3NjkxYzE1YzllYjNhMzc5OTE3ODA2ZDI5NGZkMzkx NzVlMDcwHhcNMjYwMTI1MjMwMDU4WhcNMjYwMTI2MjMwMDU4WjAzMTEwLwYDVQQD EyhhNGMwNTdlYmY3N2MzNTIwOGVjM2JmNjk0OTM0OTlmNjA3MTdiNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+mqVj0l4qB3syMnxUHwnac5dijo dR+fHZCj9hUEW5xB9fVsqMkom8SWwuK0qHkWkAOZ/eHpzLaV36p0phem9MEAxoeC xBvkP/g3HPt+f2cNEmVz2UtJOFwkHI0einD9xGlwAaCOnjFhLxVHJp7QhJu1UDty k2iVcfimpNn+UTqECu3zPfhuOTpf4xhYhjOGy1AFYwHJQ8G1+iJ55e/GC/brEv8u wjklp9J9EtR05eYovJPBUkc1aV4JHwr45nfGDiHfW1+ACGAdvY5e8RUTDP3wI+k/ cwNKgqL8KSryWja5QNzZl4ffEWLWixWQ8RBYFoJAUwpjhM6dNXycE2PkZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTAV+v3fDUgjsO/aUk0mfYHF7UAMB8GA1UdIwQY MBaAFGzFdpHBXJ6zo3mReAbSlP05F14HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMt ZmRkYjk2ZTZkYWQxLzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy8zYzQyZGItMTU2NS00ZWJlLWI0YmMtZmRkYjk2ZTZkYWQx LzEvYk1WMmtjRmNuck9qZVpGNEJ0S1VfVGtYWGdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGE9fDCMY uQe2VBWzamBnEo2/6a4wBZZMcfzC+4djwf/jzRW0pK3nhhy6IWfq+gIk0vWbVnfr q40URxjaTFMrsOUD4JMGshSukVlnW4MKE0kxk8aiC2N93iJlNOIxc2clZAGWpIoR 4rh0Xk4GcRqNdW7Iu+jTjuSKkCbstg54ER32W/ibGf0h8xyVmrkssebdjLTsr2Qm xLYitu10Ip0K2/KEiWB2Ps02Vs6DMUeafTHewLxx/s5x7CIydIwP5PuDp2ipKENM Qb96ERpTA9b3E3qbz4vKDDiCqXwBbcRUfsgse31q0dIJVugdPhIORO5zTnni1Hxa igzlm7XzWO+sXQ== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:56 2026 by rpki-client