This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json) Hash identifier: rSERZI5NZ59oOUng6NVI3nxYDwVzZheHNiwBs2n91vM= Subject key identifier: 87:D6:0E:08:6F:BD:F6:32:20:43:7E:E5:8F:72:6B:62:27:F6:17:7A Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7 Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7 Certificate serial: 019BF687F1EF4180C9C333DE8F229B43526B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft Manifest number: 10F7 Signing time: Sun 25 Jan 2026 19:01:02 +0000 Manifest this update: Sun 25 Jan 2026 19:01:02 +0000 Manifest next update: Mon 26 Jan 2026 19:01:02 +0000 Files and hashes: 1: YcaaAclAYCZA0bQEtArsD3C2cfU.roa (hash: 7YmlJQnQIkOS++HCP7NR3QXbRt39kMWOkSZeS0idrew=) 2: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: h70N4NWPw62B+s/1b5C7W+cjQITGBbGpFMnkafBAXFc=) 3: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (hash: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:f1:ef:41:80:c9:c3:33:de:8f:22:9b:43:52:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7 Validity Not Before: Jan 25 19:01:02 2026 GMT Not After : Jan 26 19:01:02 2026 GMT Subject: CN=87d60e086fbdf63220437ee58f726b6227f6177a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1c:7b:37:08:d6:0f:79:1b:64:0a:0e:a3:56: 00:ab:bd:6d:25:7f:41:18:e8:66:0d:db:39:85:0f: 33:6d:27:ed:17:d6:47:ff:66:75:c1:24:af:01:58: d2:1e:a6:89:4e:5d:54:4b:73:8a:ec:42:e9:f2:ba: 3b:83:0d:f4:8c:41:a9:e1:43:21:a2:0d:33:e5:44: cc:43:50:3b:b7:03:fe:a5:c2:42:fe:c6:cc:d0:4c: 41:a9:b6:f3:a2:9a:b9:c0:16:2c:a2:36:4d:6a:ba: 9e:18:bc:cd:d0:19:ab:ba:1c:02:b6:30:9a:51:d9: cb:58:f9:e5:aa:54:0d:26:1a:d2:3c:de:fc:ea:ce: 4a:1a:16:4e:40:8a:f7:65:6c:d2:ce:6a:3b:bc:d2: 8a:02:f3:7f:74:31:f1:f8:35:7c:cf:c5:0f:01:a4: f2:06:b4:7b:f5:f8:5f:ec:75:5b:30:8d:90:38:5f: 40:aa:e6:fd:ab:40:d7:54:80:eb:f2:3d:76:92:99: 6d:8a:77:75:51:7a:9e:30:1c:49:42:c3:db:e7:36: 76:56:35:7b:31:ee:c1:6b:60:4c:dc:72:13:a8:86: ec:c3:8a:ea:94:95:1f:b4:a8:57:f1:71:82:79:68: 21:b5:ee:af:d2:0e:84:c6:cb:bb:bd:d0:46:80:db: 7f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D6:0E:08:6F:BD:F6:32:20:43:7E:E5:8F:72:6B:62:27:F6:17:7A X509v3 Authority Key Identifier: keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:ad:2e:bd:a5:c9:91:98:20:a4:19:29:c6:26:9f:73:16:bf: b8:2f:73:ff:73:d8:cc:aa:f9:2e:d8:eb:b3:81:da:d1:a4:62: 79:07:35:96:9d:c1:20:79:2f:88:cb:9d:23:30:51:a6:f3:28: b7:0e:fb:df:5d:ab:5f:e5:48:64:fc:14:7a:d9:eb:a5:c4:1e: 49:b2:c1:35:fa:9c:50:00:09:35:33:60:8e:a7:3a:ea:a4:90: f3:22:e5:e0:b1:7d:39:80:84:a2:1f:da:dc:ea:0e:86:0a:6d: d4:ba:83:1c:b3:2a:55:3d:99:b8:f3:be:1a:0a:d9:f5:f4:e4: dc:4e:37:28:13:f9:78:5f:bd:79:bd:21:14:6f:6d:dd:17:08: 9f:e7:04:85:d1:be:84:cc:17:26:62:33:e4:9d:21:01:70:e7: 03:b4:be:50:91:bf:1d:8b:d5:a6:4a:0f:ce:29:1c:6a:f5:19: ea:13:bf:0a:bb:48:4e:aa:5a:7a:87:2a:5c:f2:16:ae:1a:14: 96:a9:ae:b0:86:85:e3:39:d4:50:0e:2f:9f:3e:ce:50:d0:d4: 05:a8:54:8f:2b:56:47:06:0d:23:2a:17:d7:f5:83:08:9b:ef: 11:c9:f6:52:9b:18:6c:8a:23:ee:a1:07:20:ca:4b:13:5f:0d: 0b:15:17:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/HvQYDJwzPejyKbQ1JrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmQ1Y2IyOTk0MGFjMmE4NTUzYjZlYzBhOGNlYzdjMjA5 ZjdjZTcwHhcNMjYwMTI1MTkwMTAyWhcNMjYwMTI2MTkwMTAyWjAzMTEwLwYDVQQD Eyg4N2Q2MGUwODZmYmRmNjMyMjA0MzdlZTU4ZjcyNmI2MjI3ZjYxNzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhx7NwjWD3kbZAoOo1YAq71tJX9B GOhmDds5hQ8zbSftF9ZH/2Z1wSSvAVjSHqaJTl1US3OK7ELp8ro7gw30jEGp4UMh og0z5UTMQ1A7twP+pcJC/sbM0ExBqbbzopq5wBYsojZNarqeGLzN0BmruhwCtjCa UdnLWPnlqlQNJhrSPN786s5KGhZOQIr3ZWzSzmo7vNKKAvN/dDHx+DV8z8UPAaTy BrR79fhf7HVbMI2QOF9Aqub9q0DXVIDr8j12kpltind1UXqeMBxJQsPb5zZ2VjV7 Me7Ba2BM3HITqIbsw4rqlJUftKhX8XGCeWghte6v0g6Exsu7vdBGgNt/8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIfWDghvvfYyIEN+5Y9ya2In9hd6MB8GA1UdIwQY MBaAFG29XLKZQKwqhVO27AqM7Hwgn3znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEt MmZkZTgwNDM1ZjRkLzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEtMmZkZTgwNDM1ZjRk LzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKq0uvaXJ kZggpBkpxiafcxa/uC9z/3PYzKr5Ltjrs4Ha0aRieQc1lp3BIHkviMudIzBRpvMo tw77312rX+VIZPwUetnrpcQeSbLBNfqcUAAJNTNgjqc66qSQ8yLl4LF9OYCEoh/a 3OoOhgpt1LqDHLMqVT2ZuPO+GgrZ9fTk3E43KBP5eF+9eb0hFG9t3RcIn+cEhdG+ hMwXJmIz5J0hAXDnA7S+UJG/HYvVpkoPzikcavUZ6hO/CrtITqpaeocqXPIWrhoU lqmusIaF4znUUA4vnz7OUNDUBahUjytWRwYNIyoX1/WDCJvvEcn2UpsYbIoj7qEH IMpLE18NCxUXWw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:35:05 2026 by rpki-client