This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft File: BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft (raw, json) Hash identifier: 1oj/JWmsjIYVWalA/ECQNSyVaKDl1m3mVoW8FOMhygo= Subject key identifier: B7:E0:8E:0B:7A:75:DC:8E:0C:FC:5F:5B:01:3B:19:C0:80:5C:08:8C Authority key identifier: 04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20 Certificate issuer: /CN=04268ae40737536a464c28493eaf503db9a18f20 Certificate serial: 019BF38712B3622EFC04CD09D48298AEA439 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft Manifest number: 1727 Signing time: Sun 25 Jan 2026 05:01:14 +0000 Manifest this update: Sun 25 Jan 2026 05:01:14 +0000 Manifest next update: Mon 26 Jan 2026 05:01:14 +0000 Files and hashes: 1: 1HpVkB_jbLhmzmxBwUx9bssht30.roa (hash: zCHbybFcXq0qDlNR99yqu6g+oFdwplvbb6MafSX5AMs=) 2: BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl (hash: g2C7VySuexgfIs9snRxbvpm+5ngmceCBTHkh2Z6PFVI=) 3: TgYSgtEo4dSznEstSh4wl1Lb_yg.roa (hash: nniijit4FyrPMtz8C+vav/OxG7xVfSAPSwIGynyNP+Q=) 4: XXDxWPYvJwQEEoD1ZkxghR4ET40.roa (hash: kPDCqZ/ABCjh6D3pWOnBRlSEdw9IBPT/5sVK336dTdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:87:12:b3:62:2e:fc:04:cd:09:d4:82:98:ae:a4:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04268ae40737536a464c28493eaf503db9a18f20 Validity Not Before: Jan 25 05:01:14 2026 GMT Not After : Jan 26 05:01:14 2026 GMT Subject: CN=b7e08e0b7a75dc8e0cfc5f5b013b19c0805c088c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:23:c5:a0:7e:6f:4b:4c:99:8f:d6:86:1b:cc: ef:6d:ac:02:ec:76:0e:14:dd:6b:8a:98:9d:bd:f0: bb:6d:b1:3f:13:93:d5:1d:ab:03:08:e4:f7:dd:42: 53:7c:0a:99:33:3d:30:7b:6e:e8:89:c0:cb:cc:36: 40:9c:b2:3c:be:47:1b:41:d9:4b:b2:ad:57:21:97: de:0a:97:42:7d:52:e8:a6:00:0d:1e:3e:9c:a3:77: bd:8d:ec:3f:03:62:bf:7e:64:5e:1e:df:99:7b:08: cf:14:0d:f5:b0:a1:eb:a8:6d:59:14:92:b9:fe:54: 44:b3:7e:27:cd:3a:41:be:6b:19:5a:72:40:37:90: e1:2d:d7:ff:bb:44:d0:c2:8e:de:f1:08:02:fd:d9: 16:b2:ba:80:ac:86:eb:cf:62:f2:f0:db:d8:8c:c9: 8b:5b:90:de:b8:00:57:c8:92:46:0f:a4:6d:78:a9: eb:4d:61:81:6b:79:78:b4:2f:44:1f:58:95:10:1f: 8d:e9:d4:e2:b5:59:2c:bb:98:8e:82:a8:39:02:39: 95:9a:e2:6a:2f:d7:12:fd:c9:1a:f0:a8:a4:ef:68: 10:68:d1:1f:2f:4d:96:ce:44:c5:df:41:d9:97:c7: 70:de:ca:45:5e:6c:10:92:8b:cd:e9:2e:02:fc:2e: 60:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E0:8E:0B:7A:75:DC:8E:0C:FC:5F:5B:01:3B:19:C0:80:5C:08:8C X509v3 Authority Key Identifier: keyid:04:26:8A:E4:07:37:53:6A:46:4C:28:49:3E:AF:50:3D:B9:A1:8F:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BCaK5Ac3U2pGTChJPq9QPbmhjyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/796823-6d81-4d91-b664-e0abd4d84571/1/BCaK5Ac3U2pGTChJPq9QPbmhjyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:85:80:86:ad:d6:df:7d:f4:30:54:5b:1c:b9:6b:ec:a2:ff: be:09:28:7f:0d:37:04:69:dd:74:52:22:89:e2:2b:9a:70:8d: 31:b4:f2:4e:b7:89:d7:9b:a2:84:a3:67:53:95:db:f1:00:c9: 55:7d:70:8f:c4:85:82:1f:5d:02:c5:9e:b1:2c:ea:78:1c:b1: 13:85:9f:5d:65:b6:8d:34:ec:d2:fb:b3:f8:ce:cd:bd:a4:94: c7:ce:32:a1:17:7c:45:3d:5a:8b:85:9c:b2:41:5a:73:b4:13: 5d:63:8d:54:4b:a5:32:b0:5d:85:ad:66:f1:27:11:20:d1:7d: 00:b4:87:7c:ac:6d:a6:c0:72:0d:ee:5b:3e:aa:80:50:ab:b7: 48:65:1d:94:84:11:08:29:c3:56:a9:be:25:02:9a:3b:02:97: 19:8d:7a:b3:15:05:9d:bf:6f:6b:ec:8c:e5:73:05:25:cb:f3: 74:28:d9:02:f7:33:7e:5b:67:9e:84:f7:6c:0c:68:f4:a1:ad: b1:83:73:87:07:44:71:7e:19:0f:a6:ee:72:e5:23:94:bd:a1: 28:f0:01:cc:60:2d:85:24:3f:01:0a:78:37:97:ae:d8:52:e0: a7:81:8b:cf:dc:42:79:f2:34:40:90:83:63:6d:16:6d:36:66: 09:3f:45:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhxKzYi78BM0J1IKYrqQ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MjY4YWU0MDczNzUzNmE0NjRjMjg0OTNlYWY1MDNkYjlh MThmMjAwHhcNMjYwMTI1MDUwMTE0WhcNMjYwMTI2MDUwMTE0WjAzMTEwLwYDVQQD EyhiN2UwOGUwYjdhNzVkYzhlMGNmYzVmNWIwMTNiMTljMDgwNWMwODhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCPFoH5vS0yZj9aGG8zvbawC7HYO FN1ripidvfC7bbE/E5PVHasDCOT33UJTfAqZMz0we27oicDLzDZAnLI8vkcbQdlL sq1XIZfeCpdCfVLopgANHj6co3e9jew/A2K/fmReHt+ZewjPFA31sKHrqG1ZFJK5 /lREs34nzTpBvmsZWnJAN5DhLdf/u0TQwo7e8QgC/dkWsrqArIbrz2Ly8NvYjMmL W5DeuABXyJJGD6RteKnrTWGBa3l4tC9EH1iVEB+N6dTitVksu5iOgqg5AjmVmuJq L9cS/cka8Kik72gQaNEfL02WzkTF30HZl8dw3spFXmwQkovN6S4C/C5glwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLfgjgt6ddyODPxfWwE7GcCAXAiMMB8GA1UdIwQY MBaAFAQmiuQHN1NqRkwoST6vUD25oY8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQt ZTBhYmQ0ZDg0NTcxLzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy83OTY4MjMtNmQ4MS00ZDkxLWI2NjQtZTBhYmQ0ZDg0NTcx LzEvQkNhSzVBYzNVMnBHVENoSlBxOVFQYm1oanlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4WAhq3W 3330MFRbHLlr7KL/vgkofw03BGnddFIiieIrmnCNMbTyTreJ15uihKNnU5Xb8QDJ VX1wj8SFgh9dAsWesSzqeByxE4WfXWW2jTTs0vuz+M7NvaSUx84yoRd8RT1ai4Wc skFac7QTXWONVEulMrBdha1m8ScRINF9ALSHfKxtpsByDe5bPqqAUKu3SGUdlIQR CCnDVqm+JQKaOwKXGY16sxUFnb9va+yM5XMFJcvzdCjZAvczfltnnoT3bAxo9KGt sYNzhwdEcX4ZD6bucuUjlL2hKPABzGAthSQ/AQp4N5eu2FLgp4GLz9xCefI0QJCD Y20WbTZmCT9FZQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:58:29 2026 by rpki-client