This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json) Hash identifier: ZGJ5uhIJBbpwl7Y4bIxmup2IPEprR7uKsO/Q8N5jQko= Subject key identifier: F9:A0:C3:35:16:57:66:F0:C2:B5:E8:5C:D7:FA:5E:37:39:78:E1:BA Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Certificate serial: 019BF688517632DEDF4891F91989C01C20D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 19:01:27 +0000 Manifest this update: Sun 25 Jan 2026 19:01:27 +0000 Manifest next update: Mon 26 Jan 2026 19:01:27 +0000 Files and hashes: 1: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (hash: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA=) 2: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: ypBjB/KjkJxLvobH8xLZdg50m77eq3fovmFLC+GIcl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:88:51:76:32:de:df:48:91:f9:19:89:c0:1c:20:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Validity Not Before: Jan 25 19:01:27 2026 GMT Not After : Jan 26 19:01:27 2026 GMT Subject: CN=f9a0c335165766f0c2b5e85cd7fa5e373978e1ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:23:03:73:b1:e1:da:0f:38:59:85:bc:14:f0: 0f:ee:02:37:61:88:c0:ee:71:73:5d:ad:2b:23:eb: 65:8f:3d:61:ca:db:6d:3f:78:35:75:fd:f7:78:62: 1a:c7:e9:64:71:b1:be:bc:a6:aa:b0:2a:2e:71:73: 4c:82:da:06:c1:09:0d:6f:9d:81:6f:27:75:01:d2: 24:5c:01:9d:be:23:97:61:f6:92:4a:92:a2:09:4e: ed:52:40:84:46:b6:81:f3:ce:5b:c2:04:d4:7b:75: 14:ee:20:ca:c0:f3:4b:da:49:42:f5:18:c5:9d:d2: 14:00:c7:68:0b:ed:33:4b:79:91:0b:e3:70:e8:77: 7e:02:49:19:4b:9e:66:62:15:e8:9c:b3:d5:ad:41: bc:4f:16:38:eb:aa:d3:56:74:8d:0b:4b:c2:f0:91: 9a:09:4d:b6:56:38:6c:4d:64:15:cb:99:1d:68:0d: 25:39:58:dc:72:28:ac:bf:67:33:f4:dd:28:7f:4c: b7:a6:66:b1:4e:dd:3a:b8:4f:b4:66:5e:dd:ef:63: db:0d:3e:75:0e:6a:0b:38:36:5a:a4:03:69:54:75: a5:ea:58:d1:b0:d6:c9:81:e4:f5:79:4d:5a:88:ee: 6c:e0:9f:65:b8:c5:04:db:16:6d:a0:6f:48:d2:01: c4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A0:C3:35:16:57:66:F0:C2:B5:E8:5C:D7:FA:5E:37:39:78:E1:BA X509v3 Authority Key Identifier: keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:3f:0e:bd:1c:72:61:7f:4c:b9:74:0c:ea:33:3a:f5:9b:e9: 6b:ff:61:f3:f1:02:0f:c7:09:29:e2:78:21:c0:c3:2b:9d:fd: 0d:71:8e:89:89:c4:b2:05:83:0e:94:37:ef:ba:c6:8c:17:b2: de:aa:3d:fa:45:6d:ad:0c:d1:14:cb:91:90:02:71:e6:87:b0: 91:85:8f:c8:7b:1b:82:6f:6b:99:f1:61:3c:be:ea:01:24:e4: 64:df:4e:fe:aa:6b:e9:81:8f:aa:44:7d:d9:4d:a9:4e:f8:96: 10:3b:1e:8e:1a:d6:b1:0f:9e:91:53:a6:12:3a:05:85:3f:8a: d6:e3:7d:01:ec:d1:06:08:2b:90:2a:22:87:1f:b5:d2:99:a5: f2:99:ec:d7:9f:f5:47:34:cd:a1:44:22:52:46:93:d7:d8:24: b0:fe:cf:39:8e:57:3e:8e:1c:fa:93:42:f4:27:56:c3:85:e0: 02:ad:77:38:f6:40:8f:c6:9e:10:9a:47:9c:bf:4b:eb:8b:4c: a3:16:e3:b8:e8:68:6e:bd:18:84:ca:90:b4:88:1f:cc:d7:af: fd:98:82:e7:13:b7:e0:7d:20:84:5b:e8:e7:38:18:8d:82:9b: bd:bc:ba:06:d4:a7:c1:cf:43:24:4b:ab:fd:0a:8b:cd:55:47: 88:b3:b6:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2iFF2Mt7fSJH5GYnAHCDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5 Y2RiZmUwHhcNMjYwMTI1MTkwMTI3WhcNMjYwMTI2MTkwMTI3WjAzMTEwLwYDVQQD EyhmOWEwYzMzNTE2NTc2NmYwYzJiNWU4NWNkN2ZhNWUzNzM5NzhlMWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSMDc7Hh2g84WYW8FPAP7gI3YYjA 7nFzXa0rI+tljz1hytttP3g1df33eGIax+lkcbG+vKaqsCoucXNMgtoGwQkNb52B byd1AdIkXAGdviOXYfaSSpKiCU7tUkCERraB885bwgTUe3UU7iDKwPNL2klC9RjF ndIUAMdoC+0zS3mRC+Nw6Hd+AkkZS55mYhXonLPVrUG8TxY466rTVnSNC0vC8JGa CU22VjhsTWQVy5kdaA0lOVjcciisv2cz9N0of0y3pmaxTt06uE+0Zl7d72PbDT51 DmoLODZapANpVHWl6ljRsNbJgeT1eU1aiO5s4J9luMUE2xZtoG9I0gHEWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmgwzUWV2bwwrXoXNf6Xjc5eOG6MB8GA1UdIwQY MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt ODczYzE4OWZjNDlmLzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApT8OvRxy YX9MuXQM6jM69Zvpa/9h8/ECD8cJKeJ4IcDDK539DXGOiYnEsgWDDpQ377rGjBey 3qo9+kVtrQzRFMuRkAJx5oewkYWPyHsbgm9rmfFhPL7qASTkZN9O/qpr6YGPqkR9 2U2pTviWEDsejhrWsQ+ekVOmEjoFhT+K1uN9AezRBggrkCoihx+10pml8pns15/1 RzTNoUQiUkaT19gksP7POY5XPo4c+pNC9CdWw4XgAq13OPZAj8aeEJpHnL9L64tM oxbjuOhobr0YhMqQtIgfzNev/ZiC5xO34H0ghFvo5zgYjYKbvby6BtSnwc9DJEur /QqLzVVHiLO2EQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:48:11 2026 by rpki-client