This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json) Hash identifier: qdm36s0EuJplElVspffwnooCVN2K4JvROw74D0+D0k8= Subject key identifier: 59:BB:05:BE:30:C1:56:BD:E1:72:F1:2D:04:66:6C:51:3C:16:4F:ED Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12 Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612 Certificate serial: 019BF7D1F71FBC769F6E3BEB3DDFA5F3630A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft Manifest number: 1778 Signing time: Mon 26 Jan 2026 01:01:31 +0000 Manifest this update: Mon 26 Jan 2026 01:01:31 +0000 Manifest next update: Tue 27 Jan 2026 01:01:31 +0000 Files and hashes: 1: bXq5SBFXa74fH9hWZJ4SPjJEUDY.roa (hash: wECDbeffP8fSkj2EE1uRvP/uOND4sX/q6tlGIHgdMtk=) 2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: lLi3aR2HLg7z+A/tHcd8+gyaboyoSiHDzztg+fKno+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:f7:1f:bc:76:9f:6e:3b:eb:3d:df:a5:f3:63:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e94cdea9365612adf7611144668254b388fa612 Validity Not Before: Jan 26 01:01:31 2026 GMT Not After : Jan 27 01:01:31 2026 GMT Subject: CN=59bb05be30c156bde172f12d04666c513c164fed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:08:50:17:09:7b:e1:9f:dc:9e:62:ce:e4:5b: 9e:54:8c:42:43:fd:69:5c:de:d6:a8:81:bd:5a:4b: ee:2c:5f:b1:31:d2:53:5b:4a:12:f6:f1:1f:9f:95: 2a:b8:5b:d0:7b:52:07:b1:73:36:14:b7:aa:14:53: 00:00:b4:3f:6a:cf:a5:d8:60:07:1c:87:6e:91:06: 23:fd:a2:15:5c:d3:41:45:a6:40:88:0f:70:24:d1: 63:61:0e:e3:7b:89:fe:0c:19:86:3c:f6:11:c3:70: 6e:71:52:05:0c:f7:84:e3:02:9e:b4:8b:2c:06:27: 8f:b2:a8:b4:5e:7e:88:90:db:61:5f:04:fc:2b:25: 05:78:5b:50:57:fd:b9:3c:ab:11:f2:97:31:06:69: 6e:44:84:e6:90:4f:85:60:07:f2:c1:97:35:fa:f3: 4d:b2:87:dd:75:61:9e:e4:33:ec:88:e9:a8:c1:70: 78:ee:38:23:2c:26:d5:4f:ed:d4:31:48:a5:45:f5: 67:55:c3:4f:7d:af:71:ed:8b:f5:78:53:4e:ff:cc: fe:e2:04:26:07:43:77:b9:99:9d:8f:93:64:9a:8c: 5f:67:b4:c3:a8:b5:a8:33:95:e4:c0:0d:04:80:01: e8:4d:fc:53:6a:c2:89:65:db:92:62:15:89:3e:3d: 33:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BB:05:BE:30:C1:56:BD:E1:72:F1:2D:04:66:6C:51:3C:16:4F:ED X509v3 Authority Key Identifier: keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:5d:85:b9:8e:78:8a:81:5f:5e:96:fa:8a:29:44:f6:7d:ee: aa:5b:61:40:3b:09:fc:fa:9f:9a:01:a4:3a:8f:c8:b4:b8:6c: 8a:cd:f6:00:03:1c:2b:cd:1a:7c:81:89:31:3c:19:29:2c:4f: 34:8b:28:06:f4:a1:aa:ec:6d:66:32:a5:80:8d:79:6d:88:ad: b3:ec:8d:bb:6b:a0:07:5d:fb:fc:97:a2:b5:90:8d:5d:2c:86: 49:82:fb:c5:92:5b:1f:79:53:64:2a:cf:8f:b0:f3:6c:65:de: 1d:01:c7:ca:d3:51:68:de:22:8a:89:6c:c5:0a:30:74:15:c0: 8a:12:c3:2e:76:cc:35:66:03:0b:3e:54:54:21:74:cd:7a:92: da:07:51:a1:a0:16:8e:5f:1c:3a:c1:65:49:5b:8f:64:04:6a: 09:05:8a:93:fc:7e:1f:a1:f3:0c:83:86:2c:cf:04:76:cf:44: b0:d2:fd:59:5a:76:ae:88:c2:10:25:50:f3:21:8e:f8:f1:d1: b5:09:1a:0e:2d:5c:0a:55:c5:c0:cf:3f:54:e9:b2:25:1c:ca: 33:c0:fb:30:e9:d1:b3:b2:1a:e9:18:e1:16:2a:72:0d:9e:6f: 19:df:5b:15:ee:d1:13:f4:81:68:a8:43:68:21:58:41:d6:e5: 4c:a6:b8:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30fcfvHafbjvrPd+l82MKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlOTRjZGVhOTM2NTYxMmFkZjc2MTExNDQ2NjgyNTRiMzg4 ZmE2MTIwHhcNMjYwMTI2MDEwMTMxWhcNMjYwMTI3MDEwMTMxWjAzMTEwLwYDVQQD Eyg1OWJiMDViZTMwYzE1NmJkZTE3MmYxMmQwNDY2NmM1MTNjMTY0ZmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAhQFwl74Z/cnmLO5FueVIxCQ/1p XN7WqIG9WkvuLF+xMdJTW0oS9vEfn5UquFvQe1IHsXM2FLeqFFMAALQ/as+l2GAH HIdukQYj/aIVXNNBRaZAiA9wJNFjYQ7je4n+DBmGPPYRw3BucVIFDPeE4wKetIss BiePsqi0Xn6IkNthXwT8KyUFeFtQV/25PKsR8pcxBmluRITmkE+FYAfywZc1+vNN sofddWGe5DPsiOmowXB47jgjLCbVT+3UMUilRfVnVcNPfa9x7Yv1eFNO/8z+4gQm B0N3uZmdj5NkmoxfZ7TDqLWoM5XkwA0EgAHoTfxTasKJZduSYhWJPj0zdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFm7Bb4wwVa94XLxLQRmbFE8Fk/tMB8GA1UdIwQY MBaAFG6UzeqTZWEq33YRFEZoJUs4j6YSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnBUTjZwTmxZU3JmZGhFVVJtZ2xTemlQcGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zMzZkZGQtMzgzMy00YmIwLTg2Njgt OWFmN2QyYjU5YTRjLzEvYnBUTjZwTmxZU3JmZGhFVVJtZ2xTemlQcGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zMzZkZGQtMzgzMy00YmIwLTg2NjgtOWFmN2QyYjU5YTRj LzEvYnBUTjZwTmxZU3JmZGhFVVJtZ2xTemlQcGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXV2FuY54 ioFfXpb6iilE9n3uqlthQDsJ/PqfmgGkOo/ItLhsis32AAMcK80afIGJMTwZKSxP NIsoBvShquxtZjKlgI15bYits+yNu2ugB137/JeitZCNXSyGSYL7xZJbH3lTZCrP j7DzbGXeHQHHytNRaN4iiolsxQowdBXAihLDLnbMNWYDCz5UVCF0zXqS2gdRoaAW jl8cOsFlSVuPZARqCQWKk/x+H6HzDIOGLM8Eds9EsNL9WVp2rojCECVQ8yGO+PHR tQkaDi1cClXFwM8/VOmyJRzKM8D7MOnRs7Ia6RjhFipyDZ5vGd9bFe7RE/SBaKhD aCFYQdblTKa4hw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:18 2026 by rpki-client