This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft (raw, json) Hash identifier: VA7MsoVlz4iZPjqgK2CNwKovmp0o874N9vQR/pRofS8= Subject key identifier: BD:81:3C:DE:CE:20:55:AC:C1:0C:66:50:B1:1D:BB:5E:DB:0D:55:B6 Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46 Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246 Certificate serial: 019BF91BCD8B0CCAA4318A5E3F953AF9A121 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 07:01:47 +0000 Manifest this update: Mon 26 Jan 2026 07:01:47 +0000 Manifest next update: Tue 27 Jan 2026 07:01:47 +0000 Files and hashes: 1: 5m_InO5efONFexzhF-_Y4dsckvs.roa (hash: DF7lJ/dCG+dhIBZ+nMmrOz3NJFFNvDYBu1Y3GE+A3bs=) 2: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl (hash: Te3rc01YglvNg0c+10DCPikzESj+GRPkth6lJy96lt0=) 3: vVDi20bHMoC03V5FcKtnGRsb-n4.roa (hash: 9y0Pdw7eSSnlr9N2FaW5ofUjImQ4cs+gWa1KqzGqscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:cd:8b:0c:ca:a4:31:8a:5e:3f:95:3a:f9:a1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246 Validity Not Before: Jan 26 07:01:47 2026 GMT Not After : Jan 27 07:01:47 2026 GMT Subject: CN=bd813cdece2055acc10c6650b11dbb5edb0d55b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:0b:05:ac:a1:55:6d:87:ca:2e:93:6c:33:c2: 9a:f5:9b:d8:0c:1c:e9:da:d1:4f:8a:44:e9:42:a3: 8e:36:b9:a1:05:11:3f:cc:f8:14:a6:6c:f9:e4:ba: a4:68:9d:bb:98:8e:03:a5:45:05:9a:ff:59:cc:10: c7:ed:dd:9d:0c:e6:71:e2:ee:fd:61:dc:c0:55:b0: f0:e5:05:4d:2c:57:a7:d9:4f:1d:67:ae:3f:4a:0b: 6a:5b:75:05:27:e9:fb:28:e6:70:dc:32:3f:83:70: 5c:8b:03:3a:33:3b:b8:d5:53:c3:68:b8:c1:34:e7: bc:04:bd:9d:4e:0b:07:2e:a2:de:32:43:c8:55:26: eb:a7:92:9c:65:1e:cf:38:bb:af:eb:dd:e7:e8:95: a9:d1:9d:21:e4:48:d5:ce:73:91:7e:da:f2:e7:ad: b0:f6:04:7d:62:a4:5d:5c:61:f4:84:5f:25:84:fe: 3a:b7:da:3a:8f:d4:a8:48:81:4d:08:bc:86:49:51: 0c:82:87:19:bc:7d:11:cc:a3:c1:ea:92:e6:9b:39: 71:5f:1d:e6:a8:e4:72:fb:60:da:40:88:df:27:f6: 3d:99:ef:67:5d:fc:e2:2d:44:09:56:5e:1f:32:41: e0:2f:26:54:a5:d6:a9:bf:68:b0:c2:7c:df:4c:8f: 4e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:81:3C:DE:CE:20:55:AC:C1:0C:66:50:B1:1D:BB:5E:DB:0D:55:B6 X509v3 Authority Key Identifier: keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:1d:35:56:14:bf:36:a8:8a:6a:35:1c:52:0d:4c:7e:09:72: 10:8c:ea:f8:7a:be:3b:7a:51:49:c2:23:4d:42:9a:1f:54:f0: 87:b4:9e:06:a0:0c:1b:af:2f:21:30:0c:ba:16:b0:6a:06:c4: dc:49:4b:fb:ac:01:95:16:53:ba:13:d8:52:16:b5:87:c4:d0: fe:6d:e1:89:e4:3d:4a:f6:43:a6:72:8e:1f:dc:ab:c9:68:ff: 96:c3:67:88:bc:eb:bd:7d:b2:cd:2e:38:42:a3:36:c0:2b:25: aa:60:1e:b7:b0:c1:74:a8:ad:96:21:e9:31:c6:3c:cb:55:9c: 59:d6:64:9a:c3:af:8c:45:11:a8:8b:9e:72:70:66:e8:c2:e9: b6:af:9d:25:bb:2e:39:ac:8a:e7:ab:93:29:d0:a6:45:e9:1a: 8f:db:b6:46:eb:cd:93:da:6e:f1:f0:a4:55:db:19:46:14:09: c3:aa:0f:d8:83:6d:23:d9:1a:0b:fb:23:38:ea:1b:aa:8d:13: c9:af:b1:c8:6e:de:d2:ca:4a:8d:31:84:eb:3e:35:98:cc:94: 1e:b6:55:7c:a8:6b:31:00:12:1c:8b:bf:0a:7a:b0:8c:0c:2e: a4:b4:62:90:d1:7c:23:7e:42:7e:6c:1b:c6:d9:8e:2b:80:63: af:60:b8:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G82LDMqkMYpeP5U6+aEhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODVhNGQ1NjQyODNhN2ZkZGY2MzQ1Njk3ZDZiYzMzNzNh MzIyNDYwHhcNMjYwMTI2MDcwMTQ3WhcNMjYwMTI3MDcwMTQ3WjAzMTEwLwYDVQQD EyhiZDgxM2NkZWNlMjA1NWFjYzEwYzY2NTBiMTFkYmI1ZWRiMGQ1NWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QsFrKFVbYfKLpNsM8Ka9ZvYDBzp 2tFPikTpQqOONrmhBRE/zPgUpmz55LqkaJ27mI4DpUUFmv9ZzBDH7d2dDOZx4u79 YdzAVbDw5QVNLFen2U8dZ64/SgtqW3UFJ+n7KOZw3DI/g3BciwM6Mzu41VPDaLjB NOe8BL2dTgsHLqLeMkPIVSbrp5KcZR7POLuv693n6JWp0Z0h5EjVznORftry562w 9gR9YqRdXGH0hF8lhP46t9o6j9SoSIFNCLyGSVEMgocZvH0RzKPB6pLmmzlxXx3m qORy+2DaQIjfJ/Y9me9nXfziLUQJVl4fMkHgLyZUpdapv2iwwnzfTI9O4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2BPN7OIFWswQxmULEdu17bDVW2MB8GA1UdIwQY MBaAFG+FpNVkKDp/3fY0VpfWvDNzoyJGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQt MDYxZmMxYWViMTU4LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC85OGRmZmEtODEwYi00OWI1LWFkZGQtMDYxZmMxYWViMTU4 LzEvYjRXazFXUW9Pbl9kOWpSV2w5YThNM09qSWtZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASx01VhS/ NqiKajUcUg1MfglyEIzq+Hq+O3pRScIjTUKaH1Twh7SeBqAMG68vITAMuhawagbE 3ElL+6wBlRZTuhPYUha1h8TQ/m3hieQ9SvZDpnKOH9yryWj/lsNniLzrvX2yzS44 QqM2wCslqmAet7DBdKitliHpMcY8y1WcWdZkmsOvjEURqIuecnBm6MLptq+dJbsu OayK56uTKdCmRekaj9u2RuvNk9pu8fCkVdsZRhQJw6oP2INtI9kaC/sjOOobqo0T ya+xyG7e0spKjTGE6z41mMyUHrZVfKhrMQASHIu/CnqwjAwupLRikNF8I35Cfmwb xtmOK4Bjr2C4ww== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:09 2026 by rpki-client