This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json) Hash identifier: /VR9wckUeZ1q1NCG/ssv8BEu4x+Tx6tHHYy5kpEKS9M= Subject key identifier: 05:55:50:8A:BA:7B:39:4E:72:79:6D:FA:5F:1F:9F:32:AD:B9:6F:6F Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca Certificate serial: 019BF876511DA71A9EDB9CE358B34624E42B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft Manifest number: 076E Signing time: Mon 26 Jan 2026 04:01:02 +0000 Manifest this update: Mon 26 Jan 2026 04:01:02 +0000 Manifest next update: Tue 27 Jan 2026 04:01:02 +0000 Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: q9TFmfPwZ+6KDBHgjh+OykTuAsUl6a4wEGHmdIM8kf0=) 2: sclym95paOJdvvvFhr-lWNlhbzg.roa (hash: +sl/bnIFSoKaaf5fH2CcAmUfZuUwLWKTgnEpXZ7dEQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:51:1d:a7:1a:9e:db:9c:e3:58:b3:46:24:e4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca Validity Not Before: Jan 26 04:01:02 2026 GMT Not After : Jan 27 04:01:02 2026 GMT Subject: CN=0555508aba7b394e72796dfa5f1f9f32adb96f6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ea:23:0e:a2:69:a9:b0:66:10:05:a0:01:d5: db:69:13:df:2a:08:35:22:e4:40:a0:99:fd:00:37: 43:f4:8f:d2:92:eb:64:e1:4b:36:79:41:67:c8:67: a8:94:60:d4:da:6c:a7:53:24:87:56:5b:f9:ac:f3: 32:64:6d:36:94:f5:a0:f2:f9:77:22:de:1f:9e:09: 17:bd:89:41:95:a2:78:a4:5b:01:fa:be:63:71:ad: 97:7c:f9:04:71:3b:2c:34:19:f6:44:a1:cb:37:22: af:0a:ee:9b:89:f5:ee:0d:a2:8b:8d:b9:f7:b1:0d: b7:88:9a:ff:09:44:d7:cf:c5:90:19:9b:c4:bb:b2: 40:ad:4f:b6:ca:50:c5:60:ac:2d:ad:8b:74:e0:59: 0e:6b:75:30:09:86:69:ac:0f:80:43:73:5f:e7:3a: 77:8c:de:7d:10:3c:00:66:e8:a8:8d:51:b3:a5:de: 3b:f6:14:10:94:29:2d:c8:0e:be:2e:df:e3:2d:2a: 73:36:97:de:11:2e:39:fc:f1:fe:cb:2b:d1:24:6e: 88:b7:d1:4e:10:bd:40:88:34:4d:cb:24:c8:71:c5: 71:d9:6f:86:0a:de:41:68:6a:f0:02:2d:2e:0b:7b: fd:d7:d1:2d:f4:09:f4:93:b9:a1:c1:ed:00:17:ee: 44:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:55:50:8A:BA:7B:39:4E:72:79:6D:FA:5F:1F:9F:32:AD:B9:6F:6F X509v3 Authority Key Identifier: keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bf:2d:7a:80:3f:a9:a7:ea:02:c5:db:4f:bb:7d:8e:6c:46: f1:8c:cf:1b:d4:4f:f3:84:ae:db:27:2c:03:d0:9f:06:56:4f: 43:e1:42:55:46:27:51:11:82:bb:93:84:f4:af:49:a5:e6:6d: 0b:8b:44:68:35:20:14:07:dc:45:ef:07:82:46:34:9d:b6:d0: ae:27:9c:72:b1:d1:ee:38:32:56:32:08:34:ef:31:4d:93:a3: 1f:5d:97:fb:9b:36:ed:24:43:2d:01:a2:6e:d6:ff:79:20:08: 52:5b:67:93:05:25:8b:fa:53:85:1d:f4:1f:25:3f:5e:14:18: 91:53:23:50:f5:9f:2e:a6:86:e0:8b:a6:f3:ce:39:1b:cf:cf: b9:45:b7:ce:e4:d5:38:e1:b2:eb:b1:a2:d3:a4:ba:d4:4d:88: e3:8e:6b:52:16:74:96:cf:d1:64:7d:77:ed:6c:4a:9b:e2:31: 9a:91:56:f2:cd:cb:7e:fb:cd:72:63:35:ba:e9:b5:76:44:80: ef:83:74:c9:13:f9:09:c8:e2:64:71:e4:6f:83:38:00:52:38: 49:b7:d9:fd:1f:20:21:17:3d:8d:7d:ec:1a:a1:bf:6c:d0:4b: 71:0c:68:8e:4e:d9:79:06:ec:fd:aa:78:88:6d:a3:d4:34:4f: 43:e2:cf:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dlEdpxqe25zjWLNGJOQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjcxNGQxOTkwN2E3NGJlOTVjYmIxNzM3OWUwYzhhMWI1 YTgzY2EwHhcNMjYwMTI2MDQwMTAyWhcNMjYwMTI3MDQwMTAyWjAzMTEwLwYDVQQD EygwNTU1NTA4YWJhN2IzOTRlNzI3OTZkZmE1ZjFmOWYzMmFkYjk2ZjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleojDqJpqbBmEAWgAdXbaRPfKgg1 IuRAoJn9ADdD9I/Skutk4Us2eUFnyGeolGDU2mynUySHVlv5rPMyZG02lPWg8vl3 It4fngkXvYlBlaJ4pFsB+r5jca2XfPkEcTssNBn2RKHLNyKvCu6bifXuDaKLjbn3 sQ23iJr/CUTXz8WQGZvEu7JArU+2ylDFYKwtrYt04FkOa3UwCYZprA+AQ3Nf5zp3 jN59EDwAZuiojVGzpd479hQQlCktyA6+Lt/jLSpzNpfeES45/PH+yyvRJG6It9FO EL1AiDRNyyTIccVx2W+GCt5BaGrwAi0uC3v919Et9An0k7mhwe0AF+5E4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVVUIq6ezlOcnlt+l8fnzKtuW9vMB8GA1UdIwQY MBaAFAZnFNGZB6dL6Vy7FzeeDIobWoPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQt ZmYwMTBlMjEyMzNhLzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQtZmYwMTBlMjEyMzNh LzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG78teoA/ qafqAsXbT7t9jmxG8YzPG9RP84Su2ycsA9CfBlZPQ+FCVUYnURGCu5OE9K9JpeZt C4tEaDUgFAfcRe8HgkY0nbbQrieccrHR7jgyVjIINO8xTZOjH12X+5s27SRDLQGi btb/eSAIUltnkwUli/pThR30HyU/XhQYkVMjUPWfLqaG4Ium8845G8/PuUW3zuTV OOGy67Gi06S61E2I445rUhZ0ls/RZH137WxKm+IxmpFW8s3LfvvNcmM1uum1dkSA 74N0yRP5CcjiZHHkb4M4AFI4SbfZ/R8gIRc9jX3sGqG/bNBLcQxojk7ZeQbs/ap4 iG2j1DRPQ+LPVQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:04 2026 by rpki-client