This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft File: BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft (raw, json) Hash identifier: CiBG3WFTLL+pbzNijqAwkS9OEC/3A+T1gsPNs8zVD1o= Subject key identifier: 57:A3:0E:9A:B6:64:2E:DF:BA:83:B3:F0:49:7A:45:C8:3A:15:99:F4 Authority key identifier: 04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D Certificate issuer: /CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Certificate serial: 019BFA64DE3F67B1C96F4F87E9396EFA7709 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft Manifest number: 1133 Signing time: Mon 26 Jan 2026 13:01:12 +0000 Manifest this update: Mon 26 Jan 2026 13:01:12 +0000 Manifest next update: Tue 27 Jan 2026 13:01:12 +0000 Files and hashes: 1: 2LHgN_7jeOEmEp49TXPoGseMKE0.roa (hash: u3Ghkv3e1+pxpIVGrLETupfGggN3KGBiZERj/lx/mTg=) 2: BAmnsqa1Y3XwAhWIBdg_rlIiwQQ.roa (hash: CmXIqWWi6a32pBcCEhmjtOH3aPdFD9JpfLL82hDwVT8=) 3: BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl (hash: iGEGJl0Mo/0Lq4zo9H58/sY4HQBpfGlzfIqo5fFQqHQ=) 4: D0UZ3ILhNCgnCNWzBa3mcwr0Pno.roa (hash: 7TfPe1F/LyooXh4AcQzOEBSmrk6QV7hbqByjjSb/LoE=) 5: irmbqhZvbLwDaadAvsOuO73Fv60.roa (hash: slmG+791rR4vbKBt2GX9vt+pbLQ300ChM1656gXpasA=) 6: uF20gDelBhqD8H_SXBvP9wdoYdM.roa (hash: 5kyc2PB4MyCO3xQLXylbA12fI8U7MFXjthZystH1uCM=) 7: xNxFBI381uPH5ZExRW-GfLm6Rfg.roa (hash: vZwid8rlWfhpqTNd90KDkyYvVw1rv2g5tIEub9g+uLI=) 8: yuZ207ZJKtZoW9jfm_MLQlQ6DH0.roa (hash: YnYml4UkB8mK1DtGV4RcykMNaOP/4CH8hUy+LRFYkt8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:64:de:3f:67:b1:c9:6f:4f:87:e9:39:6e:fa:77:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a2ae2cd094333018c41daafb474c6cfa80d07d Validity Not Before: Jan 26 13:01:12 2026 GMT Not After : Jan 27 13:01:12 2026 GMT Subject: CN=57a30e9ab6642edfba83b3f0497a45c83a1599f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0a:31:e1:4c:c2:40:6a:81:db:9f:cd:15:d8: 42:2f:ca:1b:01:fe:d7:4a:a2:6b:7a:86:13:6e:be: d6:34:81:19:b1:5f:0e:73:d5:ee:13:9d:96:ba:e6: f6:8d:8f:05:cd:37:5d:55:17:53:a6:50:2a:32:34: 00:55:2e:d3:02:ab:90:0b:47:fc:bb:8e:a4:82:bf: eb:42:3d:8e:3c:21:fb:31:1e:24:1b:0c:66:09:e4: b0:e5:c6:ea:26:0d:5d:fe:34:36:42:36:07:49:58: 7f:2a:5d:75:1a:dd:52:6d:4b:0b:2b:3e:40:c1:30: 48:15:1c:5f:67:9f:5b:26:c1:c6:11:a5:27:1c:a2: 2c:e9:33:4b:ab:89:6f:11:9e:e1:b9:00:8d:52:44: 10:76:ab:58:bc:4b:e9:5e:56:cd:23:8a:6a:9a:d8: 28:7d:a0:2b:fd:eb:ba:cd:22:12:06:85:58:a4:19: e9:6e:df:61:36:3e:38:40:0e:a6:d0:ac:56:bb:0e: 8a:3c:62:64:b5:34:f0:7d:bb:ff:1c:12:e6:46:1d: f1:ec:6f:43:95:1f:4a:0d:e8:41:3e:a9:3e:b1:71: a7:a1:01:da:9b:ce:3c:db:93:fa:13:25:a9:04:ad: f3:6f:b2:28:42:1a:d4:6e:c3:b7:7f:b6:1e:04:45: 8a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A3:0E:9A:B6:64:2E:DF:BA:83:B3:F0:49:7A:45:C8:3A:15:99:F4 X509v3 Authority Key Identifier: keyid:04:A2:AE:2C:D0:94:33:30:18:C4:1D:AA:FB:47:4C:6C:FA:80:D0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKKuLNCUMzAYxB2q-0dMbPqA0H0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/634a12-e58c-455c-8933-6e6e8d9303e9/1/BKKuLNCUMzAYxB2q-0dMbPqA0H0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:7f:53:97:aa:68:31:1d:69:fc:01:8b:4b:98:34:23:ff:6c: 47:dc:0b:fa:41:24:76:98:7e:8c:6d:31:81:f1:2b:74:6d:98: 88:34:d6:99:23:d3:d2:71:c5:0d:1c:46:fe:51:13:46:2e:db: ab:b2:1a:37:da:dd:5f:2a:a9:5b:10:94:2e:28:63:9c:2a:f5: 78:72:a1:a9:0c:6f:ec:9a:4b:f1:d0:a3:6e:62:37:5e:28:c7: 53:90:26:68:9c:15:52:ee:1b:41:83:af:9c:9a:6c:d5:ce:69: 3b:3f:a2:ca:69:b2:06:9f:cf:8e:c6:c0:1c:95:58:d5:0f:f1: e7:e5:ed:ea:fe:f3:4c:be:26:ce:09:01:e0:e8:18:15:87:13: 3a:08:2d:02:3b:94:dc:63:67:8d:18:b8:5a:78:e9:28:22:31: 87:38:97:3d:5c:6f:ef:16:03:d0:c2:e8:d3:d5:f5:e6:75:a2: 3a:ba:4f:57:f0:de:09:9f:0e:cc:28:42:bc:eb:f1:02:ae:a9: 67:ed:d5:4b:74:7f:a6:e7:91:bc:77:de:a9:2c:b9:87:a7:30: 14:ca:7f:a0:07:58:d8:84:1b:ba:74:be:8d:29:82:1d:ae:2f: 1f:08:29:f1:41:08:9a:8d:21:84:da:f7:cd:12:c8:35:e1:59: e8:68:4c:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6ZN4/Z7HJb0+H6Tlu+ncJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTJhZTJjZDA5NDMzMzAxOGM0MWRhYWZiNDc0YzZjZmE4 MGQwN2QwHhcNMjYwMTI2MTMwMTEyWhcNMjYwMTI3MTMwMTEyWjAzMTEwLwYDVQQD Eyg1N2EzMGU5YWI2NjQyZWRmYmE4M2IzZjA0OTdhNDVjODNhMTU5OWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQox4UzCQGqB25/NFdhCL8obAf7X SqJreoYTbr7WNIEZsV8Oc9XuE52Wuub2jY8FzTddVRdTplAqMjQAVS7TAquQC0f8 u46kgr/rQj2OPCH7MR4kGwxmCeSw5cbqJg1d/jQ2QjYHSVh/Kl11Gt1SbUsLKz5A wTBIFRxfZ59bJsHGEaUnHKIs6TNLq4lvEZ7huQCNUkQQdqtYvEvpXlbNI4pqmtgo faAr/eu6zSISBoVYpBnpbt9hNj44QA6m0KxWuw6KPGJktTTwfbv/HBLmRh3x7G9D lR9KDehBPqk+sXGnoQHam84825P6EyWpBK3zb7IoQhrUbsO3f7YeBEWKvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFejDpq2ZC7fuoOz8El6Rcg6FZn0MB8GA1UdIwQY MBaAFASirizQlDMwGMQdqvtHTGz6gNB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMt NmU2ZThkOTMwM2U5LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS82MzRhMTItZTU4Yy00NTVjLTg5MzMtNmU2ZThkOTMwM2U5 LzEvQktLdUxOQ1VNekFZeEIycS0wZE1iUHFBMEgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjH9Tl6po MR1p/AGLS5g0I/9sR9wL+kEkdph+jG0xgfErdG2YiDTWmSPT0nHFDRxG/lETRi7b q7IaN9rdXyqpWxCULihjnCr1eHKhqQxv7JpL8dCjbmI3XijHU5AmaJwVUu4bQYOv nJps1c5pOz+iymmyBp/PjsbAHJVY1Q/x5+Xt6v7zTL4mzgkB4OgYFYcTOggtAjuU 3GNnjRi4WnjpKCIxhziXPVxv7xYD0MLo09X15nWiOrpPV/DeCZ8OzChCvOvxAq6p Z+3VS3R/pueRvHfeqSy5h6cwFMp/oAdY2IQbunS+jSmCHa4vHwgp8UEImo0hhNr3 zRLINeFZ6GhMSg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:18 2026 by rpki-client