This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft File: BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft (raw, json) Hash identifier: PGYPmok4H+Un0oaojAa0Bj1rZSnOV7/8bz6WCX5UvoE= Subject key identifier: 9E:25:A5:5E:F2:92:8E:7F:EF:D5:12:C7:14:60:14:89:0E:C2:A1:55 Authority key identifier: 05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 Certificate issuer: /CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Certificate serial: 019BF988B0A0577938150F759A78C7C83193 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 09:00:43 +0000 Manifest this update: Mon 26 Jan 2026 09:00:43 +0000 Manifest next update: Tue 27 Jan 2026 09:00:43 +0000 Files and hashes: 1: 2owrDtSSdVfxvYXAxMiLovDSXEU.roa (hash: 9L5ssgJ0+ShYxgpGMGCzPMDxEovXXE+mzE0m/NaKh/k=) 2: BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl (hash: Y04YytWj26MxYB0kBj+Xgb5xl0+A/1+MvzpYc+uivJo=) 3: W2dqeQoexNzO-eZu-b3E0MsHT4I.roa (hash: xbkqBY08vRM/01LJVRXUSH6oRqaCojszvq1SR3phsH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:88:b0:a0:57:79:38:15:0f:75:9a:78:c7:c8:31:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=050e3b7dfbd59910fe527cc7e29af64d53806c91 Validity Not Before: Jan 26 09:00:43 2026 GMT Not After : Jan 27 09:00:43 2026 GMT Subject: CN=9e25a55ef2928e7fefd512c7146014890ec2a155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e2:cd:90:e5:03:1e:23:b8:6c:02:77:6c:4e: d6:7a:d9:d1:d2:d2:02:26:2f:67:19:73:fc:ff:2c: ae:ea:a1:47:f5:2d:2f:91:c0:e6:6f:cc:dc:d8:97: 4b:99:18:c7:e9:52:0c:32:cc:59:35:ac:b1:78:58: 89:2c:07:41:15:7d:4e:d6:01:cb:6d:71:77:d1:7e: e3:77:26:99:4a:04:69:4e:d4:20:6d:84:bb:aa:5b: d2:5f:e5:49:8a:0d:ca:c5:c3:c9:c8:e7:fe:2e:10: 00:57:56:b0:a3:9c:eb:27:70:40:9a:fe:bd:bc:5f: c1:e1:74:95:e5:7e:21:38:0e:18:c5:8f:6d:73:0f: 36:b2:66:ef:e7:5a:a6:9b:d2:41:b7:ae:8c:38:6c: 4f:d1:cf:ec:d8:59:fb:a1:9a:f5:7b:35:6f:c6:3d: fa:3d:d4:be:40:f6:4f:7c:33:e6:d7:81:66:10:50: b0:75:45:dd:83:d5:86:ea:3e:5c:ab:0b:0e:87:12: 9b:ec:21:82:3a:07:81:50:98:8c:4b:9e:8e:22:8a: 1a:51:5b:c7:d3:29:c4:ab:40:31:b9:40:3e:02:53: 08:f1:74:32:f8:fb:f9:9d:8a:dc:d9:96:d1:35:d3: 65:d5:95:96:10:c0:c4:3f:b5:02:3c:58:f7:a0:f3: 8a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:25:A5:5E:F2:92:8E:7F:EF:D5:12:C7:14:60:14:89:0E:C2:A1:55 X509v3 Authority Key Identifier: keyid:05:0E:3B:7D:FB:D5:99:10:FE:52:7C:C7:E2:9A:F6:4D:53:80:6C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQ47ffvVmRD-UnzH4pr2TVOAbJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/9d960c-e234-4a05-aba2-4a8779e478c6/1/BQ47ffvVmRD-UnzH4pr2TVOAbJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4a:7f:4f:a5:8b:0b:0b:d2:4d:a6:2a:b9:e5:d3:2d:bf:e7: b4:b9:c5:be:af:98:c1:26:52:45:18:de:89:19:57:44:a8:39: bb:55:09:a7:2b:23:9a:b8:ce:18:bf:08:0d:4c:e1:62:70:31: b8:57:f7:e2:2c:48:97:75:7d:16:30:6c:a6:d0:9d:44:02:a0: 2c:8c:50:5c:9a:e0:5c:0a:9d:44:2b:55:fd:42:a0:af:ce:21: 98:28:42:14:34:48:1c:81:7e:ac:41:50:c7:68:0e:7f:15:69: 00:95:81:69:2f:08:ae:89:70:10:d4:a7:be:7d:c5:69:69:02: 99:e2:f2:98:e0:94:56:ec:41:b2:8d:ea:38:9f:ac:b3:1a:ac: 54:5d:10:d0:9a:45:0e:68:88:8d:95:03:99:da:d9:82:cf:14: fd:f2:bd:e2:9e:06:a6:26:61:78:53:9d:c6:6b:10:d9:35:4d: 2d:af:42:0b:bd:57:73:57:2f:41:b1:90:51:ef:14:d4:c2:c6: 50:03:2c:31:df:d7:54:31:73:2e:22:ab:4e:70:ce:5c:c5:0a: dc:2c:13:b9:62:7d:4e:b6:8b:df:7f:fd:1c:12:02:f5:4f:b9: cc:6e:f3:19:4f:c6:b5:77:b9:41:40:92:9e:b2:91:57:0a:0e: 9b:68:95:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5iLCgV3k4FQ91mnjHyDGTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MGUzYjdkZmJkNTk5MTBmZTUyN2NjN2UyOWFmNjRkNTM4 MDZjOTEwHhcNMjYwMTI2MDkwMDQzWhcNMjYwMTI3MDkwMDQzWjAzMTEwLwYDVQQD Eyg5ZTI1YTU1ZWYyOTI4ZTdmZWZkNTEyYzcxNDYwMTQ4OTBlYzJhMTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouLNkOUDHiO4bAJ3bE7WetnR0tIC Ji9nGXP8/yyu6qFH9S0vkcDmb8zc2JdLmRjH6VIMMsxZNayxeFiJLAdBFX1O1gHL bXF30X7jdyaZSgRpTtQgbYS7qlvSX+VJig3KxcPJyOf+LhAAV1awo5zrJ3BAmv69 vF/B4XSV5X4hOA4YxY9tcw82smbv51qmm9JBt66MOGxP0c/s2Fn7oZr1ezVvxj36 PdS+QPZPfDPm14FmEFCwdUXdg9WG6j5cqwsOhxKb7CGCOgeBUJiMS56OIooaUVvH 0ynEq0AxuUA+AlMI8XQy+Pv5nYrc2ZbRNdNl1ZWWEMDEP7UCPFj3oPOKRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4lpV7yko5/79USxxRgFIkOwqFVMB8GA1UdIwQY MBaAFAUOO3371ZkQ/lJ8x+Ka9k1TgGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTIt NGE4Nzc5ZTQ3OGM2LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi85ZDk2MGMtZTIzNC00YTA1LWFiYTItNGE4Nzc5ZTQ3OGM2 LzEvQlE0N2ZmdlZtUkQtVW56SDRwcjJUVk9BYkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhkp/T6WL CwvSTaYqueXTLb/ntLnFvq+YwSZSRRjeiRlXRKg5u1UJpysjmrjOGL8IDUzhYnAx uFf34ixIl3V9FjBsptCdRAKgLIxQXJrgXAqdRCtV/UKgr84hmChCFDRIHIF+rEFQ x2gOfxVpAJWBaS8IrolwENSnvn3FaWkCmeLymOCUVuxBso3qOJ+ssxqsVF0Q0JpF DmiIjZUDmdrZgs8U/fK94p4GpiZheFOdxmsQ2TVNLa9CC71Xc1cvQbGQUe8U1MLG UAMsMd/XVDFzLiKrTnDOXMUK3CwTuWJ9TraL33/9HBIC9U+5zG7zGU/GtXe5QUCS nrKRVwoOm2iVMg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:31 2026 by rpki-client