This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft File: BmHyD7in5jXXvMlMAL7XF5t2CPY.mft (raw, json) Hash identifier: QRA2S5/H5W4+d72wIg6ofDXdLIQyPCS7/GmO88k5RKw= Subject key identifier: A5:9D:53:57:DC:A8:40:A7:43:93:5C:C4:EE:C3:34:28:1A:94:2E:8E Authority key identifier: 06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6 Certificate issuer: /CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6 Certificate serial: 019BF6F5A87C4C04DE9969DFF240D79C642E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft Manifest number: 0AA6 Signing time: Sun 25 Jan 2026 21:00:53 +0000 Manifest this update: Sun 25 Jan 2026 21:00:53 +0000 Manifest next update: Mon 26 Jan 2026 21:00:53 +0000 Files and hashes: 1: BmHyD7in5jXXvMlMAL7XF5t2CPY.crl (hash: NWV/siTJQpiPdKjKdNpAq1bY+R9x56TiZAWpaHd8+nc=) 2: HOmsaADbKL0_Nb10hk_P_lDZ0_Y.roa (hash: 00uvM1qPEx8W9hFfLWy2Rcng+t4mc0OvA6j8KzFwgTQ=) 3: Xc20FTd_9i1cvP_V-us2VR8rcgw.roa (hash: P+2TwYeHZ5Tcfkj30y1ee92Z2pzwCyx2c2a540pfIM4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:a8:7c:4c:04:de:99:69:df:f2:40:d7:9c:64:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0661f20fb8a7e635d7bcc94c00bed7179b7608f6 Validity Not Before: Jan 25 21:00:53 2026 GMT Not After : Jan 26 21:00:53 2026 GMT Subject: CN=a59d5357dca840a743935cc4eec334281a942e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c3:c5:cc:62:7b:29:55:e3:ee:f9:c6:fc:77: 76:1b:bd:37:4b:c3:88:b9:8b:f1:32:98:41:9d:8a: 31:76:be:6f:6c:a0:19:20:da:b2:43:48:dd:f8:1e: 97:03:95:ab:aa:fe:f2:59:89:2f:36:ad:de:dd:14: 9b:7a:61:76:6b:d7:e5:a2:43:90:0a:07:59:d9:26: 65:8d:98:72:21:52:d2:3e:a4:67:f5:ea:f1:29:05: 45:98:b7:73:70:11:4e:3b:a6:d7:a8:a1:e7:09:f8: 28:a7:d5:43:70:eb:27:9e:d4:eb:00:31:6e:e8:d4: a4:9c:95:35:00:d3:05:23:de:97:d2:a5:8f:bc:27: 94:ee:78:5d:de:59:3b:ef:73:dc:ed:d0:df:8c:4a: 4b:e2:28:b4:2e:a9:63:a0:04:85:e9:81:47:6f:4f: ee:76:23:5b:b3:e7:67:53:90:35:b6:c6:2f:4f:65: c5:90:60:a7:83:61:76:39:f7:06:1b:92:d0:e1:60: 64:42:68:fd:ac:97:a4:d7:1f:f9:3a:08:96:ab:46: 0f:5a:95:d4:f4:89:a9:ee:6d:26:d6:69:d6:9b:51: 75:73:61:5b:08:a3:50:cc:f7:d4:26:04:9d:5c:8b: f3:71:23:c4:c1:bd:95:90:2c:72:23:36:49:ef:b2: 28:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9D:53:57:DC:A8:40:A7:43:93:5C:C4:EE:C3:34:28:1A:94:2E:8E X509v3 Authority Key Identifier: keyid:06:61:F2:0F:B8:A7:E6:35:D7:BC:C9:4C:00:BE:D7:17:9B:76:08:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmHyD7in5jXXvMlMAL7XF5t2CPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6d49b-bc6f-4ce4-9333-ad8edfe5f0f7/1/BmHyD7in5jXXvMlMAL7XF5t2CPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d6:c2:85:37:7d:5f:29:32:e4:d1:19:97:8d:d4:f3:01:b3: 85:5c:43:6d:5c:b1:37:86:fe:10:f9:da:84:b4:bb:33:8e:f6: 0d:64:99:df:df:02:4c:40:4f:81:db:0e:b3:65:6a:2a:28:55: d2:cf:2e:69:8f:ce:a2:84:3e:2a:a6:db:ca:a3:c4:5b:94:04: cb:c6:c7:ec:12:e9:16:7d:41:b7:64:2c:8a:46:c5:5e:02:8d: e5:40:a5:a4:10:07:a5:2d:86:19:a8:8a:7d:be:f6:35:75:08: c2:7b:69:1c:f6:34:ff:1f:3c:e0:93:9b:50:e6:69:91:77:f5: 88:54:6c:95:5f:37:a2:92:c0:9f:d6:ec:27:ac:f4:15:41:d7: ba:16:dc:df:da:03:94:06:a4:a3:84:71:be:0b:2e:2b:1c:ef: ff:2c:9f:57:e2:ec:b4:82:89:fc:84:b3:52:bc:91:61:62:14: 6d:96:5a:aa:0e:f1:8f:75:53:47:f2:75:ed:8e:57:af:b6:0e: 0a:ca:ac:eb:34:58:1a:70:c1:0c:51:ad:4e:a5:84:4d:05:46: 99:87:2a:0f:ea:fc:0b:fb:18:16:c6:3d:fe:7f:bb:c1:85:c9: 82:1d:f1:cb:5e:bc:2d:38:cb:e8:61:e0:8a:40:76:c7:e1:41: e5:97:3b:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29ah8TATemWnf8kDXnGQuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjFmMjBmYjhhN2U2MzVkN2JjYzk0YzAwYmVkNzE3OWI3 NjA4ZjYwHhcNMjYwMTI1MjEwMDUzWhcNMjYwMTI2MjEwMDUzWjAzMTEwLwYDVQQD EyhhNTlkNTM1N2RjYTg0MGE3NDM5MzVjYzRlZWMzMzQyODFhOTQyZThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucPFzGJ7KVXj7vnG/Hd2G703S8OI uYvxMphBnYoxdr5vbKAZINqyQ0jd+B6XA5Wrqv7yWYkvNq3e3RSbemF2a9flokOQ CgdZ2SZljZhyIVLSPqRn9erxKQVFmLdzcBFOO6bXqKHnCfgop9VDcOsnntTrADFu 6NSknJU1ANMFI96X0qWPvCeU7nhd3lk773Pc7dDfjEpL4ii0LqljoASF6YFHb0/u diNbs+dnU5A1tsYvT2XFkGCng2F2OfcGG5LQ4WBkQmj9rJek1x/5OgiWq0YPWpXU 9Imp7m0m1mnWm1F1c2FbCKNQzPfUJgSdXIvzcSPEwb2VkCxyIzZJ77IoawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWdU1fcqECnQ5NcxO7DNCgalC6OMB8GA1UdIwQY MBaAFAZh8g+4p+Y117zJTAC+1xebdgj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMt YWQ4ZWRmZTVmMGY3LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9kNmQ0OWItYmM2Zi00Y2U0LTkzMzMtYWQ4ZWRmZTVmMGY3 LzEvQm1IeUQ3aW41alhYdk1sTUFMN1hGNXQyQ1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASNbChTd9 Xyky5NEZl43U8wGzhVxDbVyxN4b+EPnahLS7M472DWSZ398CTEBPgdsOs2VqKihV 0s8uaY/OooQ+KqbbyqPEW5QEy8bH7BLpFn1Bt2QsikbFXgKN5UClpBAHpS2GGaiK fb72NXUIwntpHPY0/x884JObUOZpkXf1iFRslV83opLAn9bsJ6z0FUHXuhbc39oD lAako4RxvgsuKxzv/yyfV+LstIKJ/ISzUryRYWIUbZZaqg7xj3VTR/J17Y5Xr7YO Csqs6zRYGnDBDFGtTqWETQVGmYcqD+r8C/sYFsY9/n+7wYXJgh3xy168LTjL6GHg ikB2x+FB5Zc7hA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:15:15 2026 by rpki-client