This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
File: BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft (raw, json)
Hash identifier: DrQKfm2ZfEqHfxokodM4sGFhlZJedS30FMDAXC8LRgA=
Subject key identifier: 8E:D9:AC:11:B6:73:BB:01:59:36:EB:ED:04:F4:66:F5:18:A0:71:47
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019BF318BED7CFF2ACA3183EA062DB70660D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
Manifest number: 17EC
Signing time: Sun 25 Jan 2026 03:00:43 +0000
Manifest this update: Sun 25 Jan 2026 03:00:43 +0000
Manifest next update: Mon 26 Jan 2026 03:00:43 +0000
Files and hashes: 1: 0QB4hGdmgQ23kjW-TUuSRzgPgow.roa (hash: 6Se7JsiswvT1Isj5Z4FQYmLgX+k5jQ8Jw0+TE5Kr+c4=)
2: 3MEm9k86Krnq6wM36cluZIFqGPg.roa (hash: WOCoI9HcLnxBGRGXT70xKNe6H/yvXh7uvM6Oo5uJP3Q=)
3: 3yNd9VkULSQcG9kJM76wCWWOkVk.roa (hash: UTrG8pi1T1NYTtzshkel8Sz3UcEv2ZYniPPBW76pobo=)
4: 58Z_30RmGqTf6FCU3PrZd5bogs8.roa (hash: TXG7g3IJzMwe+V0RYfLs59E5lWWsjUfuIPwuhzRGQhQ=)
5: 5Njr2mqPF2SIUOGWRVBmVFry3-w.roa (hash: nHGTx1wNDs5K/IAjCY5ZwTLkqSDSDFcvxCbH3GdIFEY=)
6: 7RtMm2j-PlOCYgaaTNEF5okOR88.roa (hash: o9nbppRhQLGi1iXoR8bUr5miDVbhGF0IKswvoLQNlQM=)
7: BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl (hash: gh0ZkgxZGHvyWTeNj4zPiZkU7+YQfBXuzRPJEpqNDT4=)
8: EJLUutCnpxs2buS5GTPPkrccxLQ.roa (hash: Bg7r4OK7LAMvfuKSI5cI+lyL8O8THM0mepcAvupe9MY=)
9: R45A0fnYR44iqIervecEpC1ordo.roa (hash: aZsd9rhCHtUKSRJxzYhontkb9M1Vrxj8yjglwRZI5PQ=)
10: RToCJQ8Zab4JalWn6Lr2OlTkjew.roa (hash: a7mEGZfpxYM4XL6HEWYcs75/o/LzQJt7jAWEACQc+js=)
11: bsUz9cF8qY7V0b9wRwRaSnvK5Yg.roa (hash: 3c8/iFfmXp38D8OaIkv0JpI0gwPXq0roTqUMx6p8HGA=)
12: hMC8ouPga06DMuQ-1nVP3iL6_yU.roa (hash: bNzck35dxk6Gqi9cN9AAQtvE47sk8feFX04wDlazWdw=)
13: i-N27op-z7hkiqBEGNqq-kz27FM.roa (hash: rCF63L7W07eBpUJCTAH9Z0zj4zxOfcnsBXrV71Po2W0=)
14: lPSRXM3S12fXdtxx39QF8F0M4c0.roa (hash: /A9PCEl9b+e1T3TwSmFYBvVgodse+T5jSTXaVD1y3ew=)
15: mCIC92cl3T6GhQbTB55U2XIIpv8.roa (hash: BhbC6w4oNSw9OhA9aYn5uXWLSKczbBtQQF01ljl/Mwc=)
16: nqBVPA2mXnlOF1YEX2F0MS3qgNg.roa (hash: jpd/2EiqLqE6nX/flK1O6v0FBcAaum0uMoBRy0MGwis=)
17: u0kOnQHraAVT7o1gAfkttQSk4Bk.roa (hash: dgXDfIBoMWGFiXWqkB6XiT3zkjqB22mMq42VAOQ4S2Y=)
18: ump-T-Zk5smBJGROWuvq0wKLYtU.roa (hash: d7Jxavk2v4nvC9HxmOaWBHBF05sdZuO02u6a4JXxdtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:18:be:d7:cf:f2:ac:a3:18:3e:a0:62:db:70:66:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Jan 25 03:00:43 2026 GMT
Not After : Jan 26 03:00:43 2026 GMT
Subject: CN=8ed9ac11b673bb015936ebed04f466f518a07147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:06:46:c5:dd:c7:85:9f:76:23:48:45:0d:0d:
7e:17:26:a6:2d:8a:d2:cf:09:4b:56:d3:58:38:61:
f1:e4:05:19:55:b8:d5:c9:89:cc:5d:bf:b4:9e:3a:
f2:13:d7:34:3e:40:d5:26:be:3f:99:66:46:b9:36:
4f:50:13:51:f1:bc:af:fc:9d:a9:57:25:39:96:e4:
e9:0b:cf:2b:df:50:e2:d9:b0:e2:a0:eb:e9:c9:bd:
a7:79:ab:66:b6:dc:a0:13:f8:6d:28:cd:80:da:20:
8f:2c:b3:17:14:86:56:0a:f2:53:a6:4f:51:27:c5:
76:98:47:44:6d:e1:3a:50:29:a1:03:26:49:c5:eb:
50:46:64:8b:aa:81:cb:99:79:2e:9c:fb:f6:4c:03:
7d:82:ec:d2:5b:8a:86:d2:ad:3c:a5:1d:0c:3f:a3:
20:03:7d:1f:60:66:d7:d6:2f:7d:c9:25:4d:22:d7:
07:88:b5:f8:a7:fa:f3:51:6e:da:2e:ac:5d:89:7f:
f5:b2:19:69:ed:5d:e5:78:8c:01:61:a6:10:73:16:
87:ec:3c:14:27:45:62:77:e4:c1:85:33:3b:5e:33:
2f:67:a0:b2:cb:d1:bd:1e:3d:d4:a2:0f:3f:8a:ff:
6b:ba:6c:f9:2d:7e:59:92:ec:a7:bf:25:9a:33:45:
d3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D9:AC:11:B6:73:BB:01:59:36:EB:ED:04:F4:66:F5:18:A0:71:47
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:f9:a7:e5:c9:64:f6:fe:f5:58:ef:8b:24:1d:63:59:64:bf:
c4:8d:9e:f8:fd:03:81:cc:74:9b:a9:9f:8e:ff:c3:61:f3:1a:
a1:46:9d:52:67:aa:42:6a:34:55:24:d1:35:49:3e:5c:10:d1:
0c:fd:3b:27:c2:3d:a8:3c:68:2b:f4:4e:0b:7c:b0:6d:6c:fc:
5a:b4:96:72:25:cc:4f:47:4f:87:5e:e2:cc:92:5b:72:7e:53:
0c:dd:bb:b5:c3:0c:8c:f0:ef:18:e8:95:f9:56:67:fe:41:4e:
27:17:79:47:d3:0f:e4:c8:5b:8e:7f:34:21:9b:a4:33:7b:80:
41:d6:87:14:e6:af:c7:87:ab:1b:1f:1d:73:6a:9f:15:f4:12:
0f:6c:90:ed:64:a2:7c:b8:78:b6:08:db:c7:72:67:a2:36:df:
59:08:71:0d:63:80:24:77:7c:46:a0:04:6c:0d:b3:5d:60:53:
2b:72:0e:97:ca:c8:fe:7f:dd:1b:9b:d4:81:5d:3b:fd:91:a7:
fc:d5:09:ee:b1:e9:e0:73:2f:fa:b7:49:de:70:95:92:41:5d:
0d:71:54:1b:cf:d9:a9:c5:bf:1f:76:2d:df:41:e7:9c:07:b0:
f3:f4:14:5a:2a:42:d6:4b:b2:da:ba:da:40:ce:09:f2:ea:70:
e2:b2:d8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:49:26 2026 by rpki-client