This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json) Hash identifier: n+ogo6EFgv2YnZSLIFcSmojwZnY0zQasQm3wY8r5UkY= Subject key identifier: B4:F5:BE:4F:79:CB:BE:04:D0:20:97:1D:10:86:90:8D:A9:AF:51:91 Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d Certificate serial: 019BF8AD3A6CFF11E970D951D78E516193DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 05:01:00 +0000 Manifest this update: Mon 26 Jan 2026 05:01:00 +0000 Manifest next update: Tue 27 Jan 2026 05:01:00 +0000 Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: 8ntYIxl5aEMIPm57IallxclGZTJxqN7xI9gJiuOFZf4=) 2: gAFSZzKTjEVRf47WvbPQw9RuhoM.roa (hash: jPokL5/z/e0Il4m/WG56yEQQsrUzjo4pjF7u6A/T3a4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:3a:6c:ff:11:e9:70:d9:51:d7:8e:51:61:93:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d Validity Not Before: Jan 26 05:01:00 2026 GMT Not After : Jan 27 05:01:00 2026 GMT Subject: CN=b4f5be4f79cbbe04d020971d1086908da9af5191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cd:c2:4c:cf:a1:ff:03:46:4a:87:55:59:c2: c7:06:3b:20:8b:f2:33:2c:75:74:f1:43:ad:d0:3a: f9:40:10:0c:d8:33:1f:09:25:f9:29:62:1a:78:33: 1e:f5:a0:9c:2b:27:7e:da:92:10:5c:af:90:45:90: e0:cc:84:65:0d:07:b6:eb:8e:1c:8d:d7:2c:fe:9b: de:6b:56:68:99:dc:cc:de:35:2e:d3:b9:e1:b0:21: bd:f8:6d:1b:95:ec:88:1a:92:74:0d:f4:1f:5f:38: 65:c4:7b:0b:53:1f:c5:b8:64:b7:3c:dd:59:27:4f: 1a:66:f0:05:5d:7b:ac:81:3d:49:f0:e3:d1:e0:83: 45:08:32:61:d8:43:dd:95:07:51:d2:e5:dd:f5:be: 08:9d:4e:0e:4a:3f:2d:47:26:f0:68:a4:04:0e:4c: 33:02:2a:08:4d:41:f6:53:24:67:dc:70:22:66:3c: 43:82:ed:d5:df:24:c0:d7:3a:25:e0:98:91:2f:91: 1b:1c:ac:db:90:e7:c0:ae:8c:a8:11:a3:38:8e:1f: f6:8c:89:b6:e1:f6:f0:82:ca:7b:a3:1e:2b:58:ad: 05:9c:5b:66:8a:a0:dd:01:a5:69:71:28:ab:54:63: c6:bd:67:fc:08:e7:e9:83:b1:c5:59:fc:eb:5e:da: 08:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:F5:BE:4F:79:CB:BE:04:D0:20:97:1D:10:86:90:8D:A9:AF:51:91 X509v3 Authority Key Identifier: keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:b6:f4:90:36:67:90:6c:aa:4a:a2:9b:6b:76:f9:5d:d3:4c: 6c:5c:d0:fc:67:de:d7:b1:ba:4f:17:a0:32:af:6c:c0:3b:0d: 73:8d:95:ab:a2:00:63:8a:c0:cc:d8:75:e2:49:f6:4f:bf:be: 01:d9:0d:af:b6:50:90:1f:13:24:c6:25:21:a9:2e:f6:fc:d2: 09:ef:1a:30:a5:92:da:78:dc:4e:73:0d:0d:ad:ee:60:23:81: b6:49:78:cf:97:22:b8:16:ab:75:d9:c3:37:85:73:fe:1a:7a: 5c:34:15:17:6c:61:85:58:4c:19:02:5a:8c:5b:12:20:34:fb: 30:08:39:9c:0f:7d:8f:cc:48:d6:d5:89:d2:43:ec:e7:6d:61: 8b:cc:66:dd:cd:44:dc:56:f2:8f:2a:5d:29:2a:5e:96:ed:c7: ed:a1:0b:92:fb:71:0f:5e:32:d3:73:77:d1:77:be:56:d2:00: 0e:af:57:e4:46:48:a2:05:2a:6e:b1:0f:0c:49:bb:dc:20:68: 84:bc:07:8e:75:a1:ae:0d:2b:6e:20:1e:c6:29:7f:d5:24:1f: 52:89:c1:7b:ba:eb:76:13:5d:6e:50:d8:fe:91:b0:e5:c0:12: 1d:7f:2c:f1:87:4f:b9:f2:e4:c5:fc:6c:1c:71:df:a0:e3:c8: f5:a9:d5:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rTps/xHpcNlR145RYZPbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOTFkN2Q1ZjVjZTU3OTI2YzkwMzk3M2VjYmYxMTJiZmFl MTUzMGQwHhcNMjYwMTI2MDUwMTAwWhcNMjYwMTI3MDUwMTAwWjAzMTEwLwYDVQQD EyhiNGY1YmU0Zjc5Y2JiZTA0ZDAyMDk3MWQxMDg2OTA4ZGE5YWY1MTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1c3CTM+h/wNGSodVWcLHBjsgi/Iz LHV08UOt0Dr5QBAM2DMfCSX5KWIaeDMe9aCcKyd+2pIQXK+QRZDgzIRlDQe2644c jdcs/pvea1ZomdzM3jUu07nhsCG9+G0bleyIGpJ0DfQfXzhlxHsLUx/FuGS3PN1Z J08aZvAFXXusgT1J8OPR4INFCDJh2EPdlQdR0uXd9b4InU4OSj8tRybwaKQEDkwz AioITUH2UyRn3HAiZjxDgu3V3yTA1zol4JiRL5EbHKzbkOfAroyoEaM4jh/2jIm2 4fbwgsp7ox4rWK0FnFtmiqDdAaVpcSirVGPGvWf8COfpg7HFWfzrXtoI0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLT1vk95y74E0CCXHRCGkI2pr1GRMB8GA1UdIwQY MBaAFGyR19X1zleSbJA5c+y/ESv64VMNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9kZDNmYzgtNDdkYy00YTM2LTg3MzQt NDVkODRkYTM5ODc0LzEvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9kZDNmYzgtNDdkYy00YTM2LTg3MzQtNDVkODRkYTM5ODc0 LzEvYkpIWDFmWE9WNUpza0RsejdMOFJLX3JoVXcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrb0kDZn kGyqSqKba3b5XdNMbFzQ/Gfe17G6TxegMq9swDsNc42Vq6IAY4rAzNh14kn2T7++ AdkNr7ZQkB8TJMYlIaku9vzSCe8aMKWS2njcTnMNDa3uYCOBtkl4z5ciuBarddnD N4Vz/hp6XDQVF2xhhVhMGQJajFsSIDT7MAg5nA99j8xI1tWJ0kPs521hi8xm3c1E 3FbyjypdKSpelu3H7aELkvtxD14y03N30Xe+VtIADq9X5EZIogUqbrEPDEm73CBo hLwHjnWhrg0rbiAexil/1SQfUonBe7rrdhNdblDY/pGw5cASHX8s8YdPufLkxfxs HHHfoOPI9anVtg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:44 2026 by rpki-client