This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json) Hash identifier: hkDryXm715V1XfRrax8Xir5DvuO+EW6W+OXgLK88JI8= Subject key identifier: EF:1C:0B:A4:2C:18:21:7D:3B:E9:49:89:04:21:B8:C6:51:93:D5:D9 Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d Certificate serial: 019BFC1C78CAAF762C761B94316161CAE62A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 21:01:22 +0000 Manifest this update: Mon 26 Jan 2026 21:01:22 +0000 Manifest next update: Tue 27 Jan 2026 21:01:22 +0000 Files and hashes: 1: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (hash: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs=) 2: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: 0OlAf+vBFE6ybKnMOTvkf6EfHpIaCuWwWpZEHhntY9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:78:ca:af:76:2c:76:1b:94:31:61:61:ca:e6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d Validity Not Before: Jan 26 21:01:22 2026 GMT Not After : Jan 27 21:01:22 2026 GMT Subject: CN=ef1c0ba42c18217d3be949890421b8c65193d5d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:63:9c:7b:25:e6:26:eb:73:11:3a:d9:6e:ec: a6:1d:d4:87:c8:39:37:b3:b9:a1:a1:1d:6c:2f:47: b7:13:38:ba:62:0a:ef:4a:0e:be:f0:0b:26:80:f1: a1:30:57:8d:94:43:69:20:9d:6b:bb:23:60:d9:b0: 68:7d:07:47:15:25:d1:50:dd:12:12:df:32:0d:d1: 8d:7c:2e:fd:c4:73:79:1d:dd:fb:8c:a9:25:f9:d1: 95:75:80:26:c2:c3:64:6e:35:bd:d6:08:d0:04:1b: c6:9b:ae:86:40:b1:a5:b5:d5:e0:e9:b2:bf:ef:ab: c0:ce:e0:0e:9b:e2:88:68:27:ca:dc:cf:39:50:8d: d6:46:3b:79:82:07:8d:00:91:cc:8e:3a:1d:1c:a6: 52:e0:9c:95:27:be:94:75:1c:a1:35:05:54:67:ee: e2:47:84:3f:35:2b:e6:76:a8:1a:c8:42:6b:05:d1: a0:f6:f5:9c:b2:7a:97:71:97:6e:99:4c:d7:54:3d: 9f:0f:27:45:4b:9f:48:6f:25:88:7a:14:fc:b5:78: 6e:30:17:6a:d9:59:fa:51:32:62:c6:2b:14:94:17: 4a:12:e1:03:94:9c:54:e9:24:e2:2b:3d:2f:d9:72: 79:fd:b5:da:63:d5:7d:a4:70:e6:1e:01:31:3b:fc: 8d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1C:0B:A4:2C:18:21:7D:3B:E9:49:89:04:21:B8:C6:51:93:D5:D9 X509v3 Authority Key Identifier: keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:7f:df:19:f3:a6:f7:3c:9b:92:f6:bd:bc:d8:0a:16:b1:d3: a5:e6:88:81:34:6c:06:7d:29:8a:8f:6c:8e:15:97:f7:2f:36: a7:8c:55:e7:cb:cd:10:95:2b:0f:2b:20:57:04:b6:89:6c:96: 44:70:ae:dd:0e:b0:72:1b:31:24:2b:fe:89:1e:5d:77:16:50: a0:b4:cc:34:f5:ec:43:23:2d:cd:cd:1a:1c:44:f4:3d:fe:25: 3e:0e:f5:7b:56:1a:5a:e0:57:f3:bf:cb:de:af:74:27:d1:36: 77:13:da:d0:d7:d0:9c:b5:5a:85:e8:14:ff:f1:0c:0e:09:66: ad:88:e0:02:52:6f:c8:87:7d:79:c2:9e:1e:75:fa:68:27:a2: f0:f0:f2:f7:ed:55:52:d0:9c:10:d4:d8:c0:bb:3e:bf:50:ec: 9b:d0:00:e1:fe:7c:f8:fa:2d:41:92:52:6a:2d:38:49:b4:bf: 1e:20:ed:ab:ce:93:9f:de:50:70:12:bf:31:47:74:3b:95:ae: f2:9f:ca:89:9f:9f:1e:2b:6f:39:e9:8d:7b:5f:28:50:aa:7b: 22:5c:81:19:fc:95:9f:db:8f:e2:c1:5a:b9:62:66:8b:c1:93: ef:31:62:82:d4:8a:9c:1d:8e:ee:43:d1:e0:34:23:fe:4f:81: 5d:f3:48:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HHjKr3YsdhuUMWFhyuYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZmYzZDg5OWUyNmZjODRmYjQzNzlmYjMyNWYxNzRiNTA3 NWNlMGQwHhcNMjYwMTI2MjEwMTIyWhcNMjYwMTI3MjEwMTIyWjAzMTEwLwYDVQQD EyhlZjFjMGJhNDJjMTgyMTdkM2JlOTQ5ODkwNDIxYjhjNjUxOTNkNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA62OceyXmJutzETrZbuymHdSHyDk3 s7mhoR1sL0e3Ezi6YgrvSg6+8AsmgPGhMFeNlENpIJ1ruyNg2bBofQdHFSXRUN0S Et8yDdGNfC79xHN5Hd37jKkl+dGVdYAmwsNkbjW91gjQBBvGm66GQLGltdXg6bK/ 76vAzuAOm+KIaCfK3M85UI3WRjt5ggeNAJHMjjodHKZS4JyVJ76UdRyhNQVUZ+7i R4Q/NSvmdqgayEJrBdGg9vWcsnqXcZdumUzXVD2fDydFS59IbyWIehT8tXhuMBdq 2Vn6UTJixisUlBdKEuEDlJxU6STiKz0v2XJ5/bXaY9V9pHDmHgExO/yNywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO8cC6QsGCF9O+lJiQQhuMZRk9XZMB8GA1UdIwQY MBaAFGz/PYmeJvyE+0N5+zJfF0tQdc4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQt NTQwOGY4ZDlkZmIxLzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQtNTQwOGY4ZDlkZmIx LzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABH/fGfOm 9zybkva9vNgKFrHTpeaIgTRsBn0pio9sjhWX9y82p4xV58vNEJUrDysgVwS2iWyW RHCu3Q6wchsxJCv+iR5ddxZQoLTMNPXsQyMtzc0aHET0Pf4lPg71e1YaWuBX87/L 3q90J9E2dxPa0NfQnLVahegU//EMDglmrYjgAlJvyId9ecKeHnX6aCei8PDy9+1V UtCcENTYwLs+v1Dsm9AA4f58+PotQZJSai04SbS/HiDtq86Tn95QcBK/MUd0O5Wu 8p/KiZ+fHitvOemNe18oUKp7IlyBGfyVn9uP4sFauWJmi8GT7zFigtSKnB2O7kPR 4DQj/k+BXfNIqw== -----END CERTIFICATE-----Generated at Tue Jan 27 02:12:34 2026 by rpki-client