This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft File: RBBkfZUukSEiD0FOiKXd1ivII3s.mft (raw, json) Hash identifier: XC21w0hbDYmW9qdvpp0CGFT0+0hEkOMioYZM3XpQ6aw= Subject key identifier: EA:B2:F3:F5:26:EB:35:2E:98:1D:88:E5:EB:B2:79:24:23:FF:7A:6F Authority key identifier: 44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B Certificate issuer: /CN=4410647d952e9121220f414e88a5ddd62bc8237b Certificate serial: 019BF7D15255261EDAEF30781137FC172B6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft Manifest number: 021D Signing time: Mon 26 Jan 2026 01:00:49 +0000 Manifest this update: Mon 26 Jan 2026 01:00:49 +0000 Manifest next update: Tue 27 Jan 2026 01:00:49 +0000 Files and hashes: 1: 9W2T6F7tOO8ptjkQDnIa84dNgjk.roa (hash: 7Q6b4TDkOCH4vZLEsdxeW12wMepLCVRM3purDPVlkFo=) 2: RBBkfZUukSEiD0FOiKXd1ivII3s.crl (hash: HLsxfhHivxgzc2qeAgq3/QG5ZZdqmgCEtNoSwuByXvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:52:55:26:1e:da:ef:30:78:11:37:fc:17:2b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4410647d952e9121220f414e88a5ddd62bc8237b Validity Not Before: Jan 26 01:00:49 2026 GMT Not After : Jan 27 01:00:49 2026 GMT Subject: CN=eab2f3f526eb352e981d88e5ebb2792423ff7a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f4:ca:eb:3e:38:b8:36:3b:6a:a1:de:f4:aa: 74:fb:64:73:a9:f1:f7:f9:9b:11:c3:48:0c:5b:7c: ce:4e:e0:b8:e2:9a:84:9f:b3:c8:ba:de:61:82:a2: 21:2a:9c:6b:e8:0f:bf:c5:f7:d1:a8:96:88:d7:ed: 19:64:1c:8e:24:04:97:be:56:3c:c7:55:b1:14:3d: 07:45:65:32:79:e1:a6:69:fb:ab:d7:a9:ca:54:ae: db:ec:3e:65:d6:f2:25:a2:a2:c5:6e:9d:73:88:71: 8f:19:32:19:86:c0:14:a5:ab:77:6d:c2:7f:b0:62: 55:36:a3:c0:75:e3:40:1a:3d:09:e3:0f:5a:7c:ff: 08:74:1a:b9:68:5f:58:cb:da:54:ed:66:ba:de:18: 54:d6:95:d2:d4:b1:2d:aa:fa:cd:f4:b5:f8:66:81: ab:cb:3c:ae:e7:00:8b:85:05:e0:0c:37:30:9c:89: c5:07:a0:ec:7c:3a:3b:e2:3a:af:fb:4b:6e:4f:0f: 4c:8b:65:8d:ad:d2:89:44:e2:f0:1c:cd:78:18:80: 1b:51:55:50:31:91:b9:f4:c2:e7:ed:44:3f:2d:09: 0a:e1:bf:00:e8:be:a7:d2:e5:bd:03:fe:a9:63:8f: 01:35:b5:6f:7e:51:40:51:63:05:98:3a:7a:40:5c: 4d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:B2:F3:F5:26:EB:35:2E:98:1D:88:E5:EB:B2:79:24:23:FF:7A:6F X509v3 Authority Key Identifier: keyid:44:10:64:7D:95:2E:91:21:22:0F:41:4E:88:A5:DD:D6:2B:C8:23:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBBkfZUukSEiD0FOiKXd1ivII3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/17b88d-1afc-4407-b018-545dca80bf49/1/RBBkfZUukSEiD0FOiKXd1ivII3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ff:98:cc:b5:a5:66:2a:ff:e0:87:44:c3:96:84:0e:53:ba: 21:74:c1:8e:1d:35:d5:ac:0b:49:f2:3d:39:1c:8b:40:73:77: 72:f5:97:4c:10:b7:1c:97:fb:75:cb:d0:d3:29:e7:14:f9:eb: 09:c8:28:34:ad:6e:14:2c:0a:dd:6b:03:5d:8e:e2:1b:98:24: ec:3b:7c:40:34:20:dc:b3:7c:f4:6f:fb:e1:a9:81:b1:ca:fe: 5a:5b:fa:10:27:0e:5b:77:e0:fe:03:5f:2a:ff:cc:81:00:47: be:7d:c1:71:ba:65:2f:9e:e6:a6:ce:d1:b7:88:e8:c1:18:6f: 08:b1:7a:a8:f6:93:20:b5:72:f9:db:2d:21:ce:e5:4c:08:32: a8:ed:3e:b5:0a:95:17:42:08:01:2b:4b:f1:dd:cf:87:9b:1a: b1:b2:0d:17:55:32:34:eb:15:e7:45:e5:d3:41:cd:77:d9:07: 81:ba:a1:6a:41:d3:4a:50:8e:22:95:a4:c7:ec:22:10:5a:57: f8:43:d5:92:78:2e:9b:c1:7b:a3:59:ae:b2:36:03:e3:c8:44: ed:18:9b:15:b8:a8:d6:9a:05:72:7a:65:8a:63:2f:a2:ba:d7: 1c:7d:cf:90:05:5d:6b:a4:eb:4a:eb:a8:62:3c:5f:0b:3d:4c: b9:5f:d0:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30VJVJh7a7zB4ETf8FytsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0MTA2NDdkOTUyZTkxMjEyMjBmNDE0ZTg4YTVkZGQ2MmJj ODIzN2IwHhcNMjYwMTI2MDEwMDQ5WhcNMjYwMTI3MDEwMDQ5WjAzMTEwLwYDVQQD EyhlYWIyZjNmNTI2ZWIzNTJlOTgxZDg4ZTVlYmIyNzkyNDIzZmY3YTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/TK6z44uDY7aqHe9Kp0+2RzqfH3 +ZsRw0gMW3zOTuC44pqEn7PIut5hgqIhKpxr6A+/xffRqJaI1+0ZZByOJASXvlY8 x1WxFD0HRWUyeeGmafur16nKVK7b7D5l1vIloqLFbp1ziHGPGTIZhsAUpat3bcJ/ sGJVNqPAdeNAGj0J4w9afP8IdBq5aF9Yy9pU7Wa63hhU1pXS1LEtqvrN9LX4ZoGr yzyu5wCLhQXgDDcwnInFB6DsfDo74jqv+0tuTw9Mi2WNrdKJROLwHM14GIAbUVVQ MZG59MLn7UQ/LQkK4b8A6L6n0uW9A/6pY48BNbVvflFAUWMFmDp6QFxNBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqy8/Um6zUumB2I5euyeSQj/3pvMB8GA1UdIwQY MBaAFEQQZH2VLpEhIg9BToil3dYryCN7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8xN2I4OGQtMWFmYy00NDA3LWIwMTgt NTQ1ZGNhODBiZjQ5LzEvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi8xN2I4OGQtMWFmYy00NDA3LWIwMTgtNTQ1ZGNhODBiZjQ5 LzEvUkJCa2ZaVXVrU0VpRDBGT2lLWGQxaXZJSTNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQP+YzLWl Zir/4IdEw5aEDlO6IXTBjh011awLSfI9ORyLQHN3cvWXTBC3HJf7dcvQ0ynnFPnr CcgoNK1uFCwK3WsDXY7iG5gk7Dt8QDQg3LN89G/74amBscr+Wlv6ECcOW3fg/gNf Kv/MgQBHvn3BcbplL57mps7Rt4jowRhvCLF6qPaTILVy+dstIc7lTAgyqO0+tQqV F0IIAStL8d3Ph5sasbINF1UyNOsV50Xl00HNd9kHgbqhakHTSlCOIpWkx+wiEFpX +EPVkngum8F7o1musjYD48hE7RibFbio1poFcnplimMvorrXHH3PkAVda6TrSuuo YjxfCz1MuV/QIw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:11 2026 by rpki-client