This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft File: BmcU0ZkHp0vpXLsXN54Mihtag8o.mft (raw, json) Hash identifier: MB3SsdIbkqULgeLfo6FTLw2unPdjQ1HoGk4nfbgDJtQ= Subject key identifier: 9E:70:7E:6E:4F:21:B5:E8:AD:28:0E:FF:5B:45:85:61:2F:75:BE:6A Authority key identifier: 06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA Certificate issuer: /CN=066714d19907a74be95cbb17379e0c8a1b5a83ca Certificate serial: 019BF687FBD4DDA7C7DEF49B3EDF3BE20DEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft Manifest number: 076D Signing time: Sun 25 Jan 2026 19:01:05 +0000 Manifest this update: Sun 25 Jan 2026 19:01:05 +0000 Manifest next update: Mon 26 Jan 2026 19:01:05 +0000 Files and hashes: 1: BmcU0ZkHp0vpXLsXN54Mihtag8o.crl (hash: nqLZP9PniuY8ZToDVXSSYdFTyDxHM0tR077/DW5F8+g=) 2: sclym95paOJdvvvFhr-lWNlhbzg.roa (hash: +sl/bnIFSoKaaf5fH2CcAmUfZuUwLWKTgnEpXZ7dEQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:fb:d4:dd:a7:c7:de:f4:9b:3e:df:3b:e2:0d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=066714d19907a74be95cbb17379e0c8a1b5a83ca Validity Not Before: Jan 25 19:01:05 2026 GMT Not After : Jan 26 19:01:05 2026 GMT Subject: CN=9e707e6e4f21b5e8ad280eff5b4585612f75be6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:33:59:24:f2:43:8b:4d:0d:28:7e:ae:a8: 62:f7:4e:cd:b4:b0:f6:61:3d:7d:2e:3e:68:ae:5b: a8:7f:ac:72:03:69:4d:bb:26:b9:70:67:81:fb:16: 82:09:74:f9:52:b1:d1:92:4b:31:55:60:8b:a3:0c: 7e:8d:a8:c6:44:a7:c5:67:ff:15:2b:84:a2:a1:b2: 0f:5e:36:4f:25:ba:34:28:21:a0:ee:71:70:1c:dc: af:26:0b:6f:5b:91:21:ba:5f:88:8a:e4:5f:f1:ef: 63:5c:dc:50:d8:b2:e7:70:03:f9:c1:5c:71:5e:50: 30:91:46:e8:1f:06:51:29:bf:84:32:66:33:a1:07: 58:fc:fb:67:13:6c:4f:84:01:d5:70:e6:ac:44:14: d5:9e:ef:1f:49:07:d1:7a:0d:71:d3:76:d7:ed:e1: b1:51:d4:ff:24:14:ef:d3:69:4c:8f:2e:13:12:91: d8:1e:a2:2b:be:45:ff:08:ce:f1:db:d9:4e:22:1e: f4:d0:76:75:a5:2d:e1:2d:bf:61:8b:a6:a8:d9:40: 0e:7f:c6:ae:7b:b0:cf:e5:cf:83:63:a7:62:5c:f6: 5d:a8:13:a5:b8:0e:c1:d9:57:30:80:6f:e9:fb:b5: 23:e8:21:1d:11:b0:a3:10:01:f1:d8:ca:87:c5:bd: d7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:70:7E:6E:4F:21:B5:E8:AD:28:0E:FF:5B:45:85:61:2F:75:BE:6A X509v3 Authority Key Identifier: keyid:06:67:14:D1:99:07:A7:4B:E9:5C:BB:17:37:9E:0C:8A:1B:5A:83:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BmcU0ZkHp0vpXLsXN54Mihtag8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/7bff5b-2e95-464b-ab04-ff010e21233a/1/BmcU0ZkHp0vpXLsXN54Mihtag8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:58:3b:86:9a:2e:75:e3:f6:ce:2e:ca:5e:49:c9:2a:16:c5: ec:14:91:30:cc:a1:be:6f:95:c8:67:71:03:0c:59:b6:de:8a: 75:c8:d6:36:7e:3c:5e:e7:4b:dd:32:91:96:6f:5e:cb:1b:08: c9:a3:61:02:fe:11:6c:54:b8:c0:39:e8:64:ca:d3:3d:4f:fa: 69:cd:05:b3:e4:49:04:0d:86:1b:70:5a:ba:9a:80:b4:d3:52: 5d:09:b3:e9:bf:31:f5:e0:8f:a8:b4:d2:30:4e:5e:b4:7b:b2: c6:fa:90:c2:36:a6:32:7d:27:40:90:e5:9c:25:11:56:fd:ea: 41:5e:35:c3:01:a2:80:a1:e8:68:00:91:97:b2:af:81:b5:f1: b9:ba:c8:0d:ab:f2:e6:62:8b:1c:7d:9a:23:9b:f7:92:11:23: 47:28:f7:43:36:d4:31:aa:c2:87:8d:f1:51:10:08:82:5d:e2: 4c:28:84:c8:7c:0e:34:02:1e:5c:4c:7d:6a:cd:04:52:cb:56: f3:52:4e:cc:96:82:f6:16:85:a4:68:6c:fb:a1:64:71:de:f3: ba:a3:b7:97:66:bb:52:eb:02:f5:6b:33:80:c6:1f:8d:22:35: 86:67:b5:89:d9:ae:f0:39:40:8e:eb:11:30:76:fd:45:d7:79: 50:6c:4f:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h/vU3afH3vSbPt874g3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NjcxNGQxOTkwN2E3NGJlOTVjYmIxNzM3OWUwYzhhMWI1 YTgzY2EwHhcNMjYwMTI1MTkwMTA1WhcNMjYwMTI2MTkwMTA1WjAzMTEwLwYDVQQD Eyg5ZTcwN2U2ZTRmMjFiNWU4YWQyODBlZmY1YjQ1ODU2MTJmNzViZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni0zWSTyQ4tNDSh+rqhi907NtLD2 YT19Lj5orluof6xyA2lNuya5cGeB+xaCCXT5UrHRkksxVWCLowx+jajGRKfFZ/8V K4SiobIPXjZPJbo0KCGg7nFwHNyvJgtvW5Ehul+IiuRf8e9jXNxQ2LLncAP5wVxx XlAwkUboHwZRKb+EMmYzoQdY/PtnE2xPhAHVcOasRBTVnu8fSQfReg1x03bX7eGx UdT/JBTv02lMjy4TEpHYHqIrvkX/CM7x29lOIh700HZ1pS3hLb9hi6ao2UAOf8au e7DP5c+DY6diXPZdqBOluA7B2VcwgG/p+7Uj6CEdEbCjEAHx2MqHxb3XKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5wfm5PIbXorSgO/1tFhWEvdb5qMB8GA1UdIwQY MBaAFAZnFNGZB6dL6Vy7FzeeDIobWoPKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQt ZmYwMTBlMjEyMzNhLzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS83YmZmNWItMmU5NS00NjRiLWFiMDQtZmYwMTBlMjEyMzNh LzEvQm1jVTBaa0hwMHZwWExzWE41NE1paHRhZzhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH1g7hpou deP2zi7KXknJKhbF7BSRMMyhvm+VyGdxAwxZtt6KdcjWNn48XudL3TKRlm9eyxsI yaNhAv4RbFS4wDnoZMrTPU/6ac0Fs+RJBA2GG3BaupqAtNNSXQmz6b8x9eCPqLTS ME5etHuyxvqQwjamMn0nQJDlnCURVv3qQV41wwGigKHoaACRl7KvgbXxubrIDavy 5mKLHH2aI5v3khEjRyj3QzbUMarCh43xURAIgl3iTCiEyHwONAIeXEx9as0EUstW 81JOzJaC9haFpGhs+6Fkcd7zuqO3l2a7UusC9WszgMYfjSI1hme1idmu8DlAjusR MHb9Rdd5UGxPUQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:57:07 2026 by rpki-client