This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft File: u0bPvakj-gZmDXLLwPIyBdweG5M.mft (raw, json) Hash identifier: 5QVuMnmpeOuOPps4M941TTT5+X1fZU/L2M3e24Us5to= Subject key identifier: C8:E1:08:1E:9D:84:33:D5:1E:65:DF:3E:38:71:04:F4:0A:CD:26:85 Authority key identifier: BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93 Certificate issuer: /CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93 Certificate serial: 019BF72C8A85C2BD5A9F7795F31F4F35359D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft Manifest number: 20 Signing time: Sun 25 Jan 2026 22:00:49 +0000 Manifest this update: Sun 25 Jan 2026 22:00:49 +0000 Manifest next update: Mon 26 Jan 2026 22:00:49 +0000 Files and hashes: 1: Hr8okjlDTXsaje7Sx72N3GRcbxM.asa (hash: 1WlYfyugkGAuTp87DQNXe7Jdk25v+OmNqOxOuJn5VHg=) 2: u0bPvakj-gZmDXLLwPIyBdweG5M.crl (hash: 6YcecGgXmTBJRkvj21/B5M3gofS9bjh+fhvKnXy8kSc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:8a:85:c2:bd:5a:9f:77:95:f3:1f:4f:35:35:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb46cfbda923fa06660d72cbc0f23205dc1e1b93 Validity Not Before: Jan 25 22:00:49 2026 GMT Not After : Jan 26 22:00:49 2026 GMT Subject: CN=c8e1081e9d8433d51e65df3e387104f40acd2685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1f:33:28:39:42:18:c1:a4:c9:d0:d3:2a:da: 13:71:be:33:5c:91:6d:c5:2d:86:94:10:66:64:b2: b5:7f:c8:d5:4b:98:81:6b:b6:b3:6d:6a:79:08:bc: 65:e4:6a:4c:eb:a5:a8:45:6e:79:7a:86:f0:34:dd: d6:4a:cb:79:8d:99:b0:da:db:7b:49:05:da:48:c6: d9:28:34:97:51:5e:1b:62:33:42:00:59:ed:4c:c1: fc:8a:7e:c6:1f:06:3c:54:ac:6b:67:77:96:59:6c: 12:ea:48:c8:f4:ed:be:44:c9:48:9c:d2:bd:4c:ab: d5:55:2b:e5:30:92:1b:a4:17:06:ca:13:31:46:5c: bc:92:3a:83:84:52:50:35:6a:44:2d:b3:98:25:ed: 97:bf:d5:69:84:a2:3e:39:7d:d0:ed:30:00:c7:e1: b2:84:58:a5:c2:76:e8:60:a3:d6:ba:9f:28:08:e2: 96:92:ec:59:75:ea:41:26:f3:77:d6:27:7f:60:54: 43:fd:8a:37:6e:a7:25:13:be:49:d2:66:ec:a6:64: 6a:d7:0e:0b:1b:1e:8d:2f:1d:8b:a4:d0:6b:25:a2: e4:26:4a:a5:6d:02:3d:47:95:c7:58:49:62:00:e1: c0:9d:83:56:72:b6:0f:64:c2:60:ee:5d:f4:89:49: 22:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:E1:08:1E:9D:84:33:D5:1E:65:DF:3E:38:71:04:F4:0A:CD:26:85 X509v3 Authority Key Identifier: keyid:BB:46:CF:BD:A9:23:FA:06:66:0D:72:CB:C0:F2:32:05:DC:1E:1B:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0bPvakj-gZmDXLLwPIyBdweG5M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/acf93d-a458-4219-bca9-89c5d6d8dcc0/1/u0bPvakj-gZmDXLLwPIyBdweG5M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:06:ad:c1:fb:0e:f7:fb:05:b6:a2:36:20:92:b9:4c:e8:92: f3:3f:18:b1:f1:2d:6f:16:f5:18:99:7f:b3:88:04:3b:a1:aa: 94:d6:fa:b1:8d:39:68:15:9e:eb:f7:4a:66:27:58:98:25:85: 04:ea:3c:e9:dc:0f:48:da:61:e9:e5:eb:8c:0f:fc:28:fa:3a: 2d:f4:38:da:9c:61:ed:6d:4b:ec:d5:19:af:fa:39:80:a8:f1: 93:d6:cb:8e:3b:32:93:77:d2:94:90:3d:c1:46:51:e2:65:9b: 72:04:1e:37:9a:a5:f9:1c:7e:eb:9a:9a:aa:aa:9c:96:a1:40: 7a:82:0d:9c:ed:18:d6:0a:c8:d1:ef:16:6f:ef:f9:f0:dc:f7: f5:bf:b9:2d:0d:9e:23:38:62:d6:f0:37:5d:7f:6e:7a:3d:9c: 93:f7:12:6b:65:9f:52:45:f5:3a:b0:71:a8:46:3d:84:d4:23: 4e:3a:52:15:d4:94:cc:6c:04:f8:0b:77:0f:e4:31:83:4b:5d: 3f:0a:13:be:ff:ad:a6:75:ce:2c:b6:d6:1c:dd:86:28:27:aa: c0:33:03:40:6c:96:4f:61:5a:7e:c3:6e:37:ca:90:b8:fe:bd: 33:4a:b1:e2:6f:e6:99:58:4e:f7:94:28:2b:f4:c3:36:8a:74: 05:ad:67:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LIqFwr1an3eV8x9PNTWdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNDZjZmJkYTkyM2ZhMDY2NjBkNzJjYmMwZjIzMjA1ZGMx ZTFiOTMwHhcNMjYwMTI1MjIwMDQ5WhcNMjYwMTI2MjIwMDQ5WjAzMTEwLwYDVQQD EyhjOGUxMDgxZTlkODQzM2Q1MWU2NWRmM2UzODcxMDRmNDBhY2QyNjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth8zKDlCGMGkydDTKtoTcb4zXJFt xS2GlBBmZLK1f8jVS5iBa7azbWp5CLxl5GpM66WoRW55eobwNN3WSst5jZmw2tt7 SQXaSMbZKDSXUV4bYjNCAFntTMH8in7GHwY8VKxrZ3eWWWwS6kjI9O2+RMlInNK9 TKvVVSvlMJIbpBcGyhMxRly8kjqDhFJQNWpELbOYJe2Xv9VphKI+OX3Q7TAAx+Gy hFilwnboYKPWup8oCOKWkuxZdepBJvN31id/YFRD/Yo3bqclE75J0mbspmRq1w4L Gx6NLx2LpNBrJaLkJkqlbQI9R5XHWEliAOHAnYNWcrYPZMJg7l30iUkiKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMjhCB6dhDPVHmXfPjhxBPQKzSaFMB8GA1UdIwQY MBaAFLtGz72pI/oGZg1yy8DyMgXcHhuTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9hY2Y5M2QtYTQ1OC00MjE5LWJjYTkt ODljNWQ2ZDhkY2MwLzEvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9hY2Y5M2QtYTQ1OC00MjE5LWJjYTktODljNWQ2ZDhkY2Mw LzEvdTBiUHZha2otZ1ptRFhMTHdQSXlCZHdlRzVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgatwfsO 9/sFtqI2IJK5TOiS8z8YsfEtbxb1GJl/s4gEO6GqlNb6sY05aBWe6/dKZidYmCWF BOo86dwPSNph6eXrjA/8KPo6LfQ42pxh7W1L7NUZr/o5gKjxk9bLjjsyk3fSlJA9 wUZR4mWbcgQeN5ql+Rx+65qaqqqclqFAeoINnO0Y1grI0e8Wb+/58Nz39b+5LQ2e Izhi1vA3XX9uej2ck/cSa2WfUkX1OrBxqEY9hNQjTjpSFdSUzGwE+At3D+Qxg0td PwoTvv+tpnXOLLbWHN2GKCeqwDMDQGyWT2FafsNuN8qQuP69M0qx4m/mmVhO95Qo K/TDNop0Ba1njw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:54 2026 by rpki-client