This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json) Hash identifier: iRl+BK9gBYWBHWtBffNQXjZ+Omc2gX/zzTmmjjBnyuM= Subject key identifier: 81:A4:52:5C:5E:89:2C:CA:8F:16:16:F6:D9:88:95:1B:34:7E:F2:50 Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43 Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43 Certificate serial: 019BF7638719F36AD75BA2246B05CB4CC244 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft Manifest number: 1348 Signing time: Sun 25 Jan 2026 23:00:53 +0000 Manifest this update: Sun 25 Jan 2026 23:00:53 +0000 Manifest next update: Mon 26 Jan 2026 23:00:53 +0000 Files and hashes: 1: IrZ58C8B6buvLlSyOFv3Wo1OkFM.roa (hash: o2L90zF16GoErXoUlB+6z8RKE6i50ZTOjxl70b94zb4=) 2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: H+Q95ch1tDnkIU+9NtKL7vaWxTMm8NDls8800IjIYL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:87:19:f3:6a:d7:5b:a2:24:6b:05:cb:4c:c2:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43 Validity Not Before: Jan 25 23:00:53 2026 GMT Not After : Jan 26 23:00:53 2026 GMT Subject: CN=81a4525c5e892cca8f1616f6d988951b347ef250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5d:3c:c0:73:bc:56:ee:63:8a:56:ce:e7:ea: 6d:64:ee:5f:c4:e8:7c:f5:ef:87:4c:c6:33:68:84: cd:88:ce:90:6b:62:3a:0c:a7:88:79:20:24:b6:8b: da:62:6c:ad:0f:3f:44:c4:44:b9:1b:28:15:20:2c: e3:55:88:d5:9e:e8:6d:64:6f:30:d4:c8:f1:28:5b: f6:07:da:14:16:1d:c4:9c:98:04:c9:81:7b:63:68: 55:26:bc:ee:46:3a:82:4b:97:16:07:ec:54:b8:36: bd:0f:cd:14:00:22:d6:af:d4:28:aa:d5:e9:81:9a: 42:b7:a6:d5:5b:f6:fc:3e:fa:43:67:fb:59:34:85: fd:18:20:ce:f8:19:93:87:2d:3a:9f:58:52:ce:ef: 66:1b:4c:02:9f:20:32:f7:c9:15:32:d4:59:28:7c: 25:58:e5:23:53:87:36:91:fd:81:d4:50:97:84:f0: 0c:98:ca:e1:83:60:64:8b:db:0a:e7:48:95:f0:78: d4:11:04:6a:8b:da:59:ab:17:1f:4d:d4:db:32:d6: df:1d:75:10:e8:93:c9:b7:16:74:9b:22:6c:b0:ee: 3e:c9:8e:0d:53:38:4b:5f:bd:c3:83:7d:65:98:80: 5f:71:b6:32:36:72:07:29:4c:2f:eb:ea:4f:92:c2: e7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A4:52:5C:5E:89:2C:CA:8F:16:16:F6:D9:88:95:1B:34:7E:F2:50 X509v3 Authority Key Identifier: keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:96:a6:14:6a:7f:41:dc:80:c2:18:07:34:79:40:f9:47:a7: 9d:4d:19:cd:27:eb:ed:17:5d:c8:d9:1c:3b:88:ee:86:97:5b: 9f:4a:9a:f4:b9:ed:c2:5e:14:91:17:ff:77:2f:bb:29:02:77: 05:3e:75:83:f3:e3:fe:7f:26:4a:68:79:d2:ab:46:c7:dd:b6: 88:0c:88:1a:e2:98:ab:d6:f4:36:e2:44:18:8f:74:fb:b9:3a: d6:be:01:8b:09:e6:c9:03:46:b6:9e:4f:5e:bc:cd:9b:85:0a: 38:5a:f3:b4:b4:8c:05:3d:59:ef:58:32:a1:6d:c5:d7:a8:3c: 57:cd:1d:42:83:b4:b6:bb:54:8f:c7:e4:7b:fb:48:9b:a4:05: f1:c0:be:5a:f6:29:40:4a:6a:89:1b:36:db:8b:db:aa:55:6e: 3f:02:b9:bb:78:ca:3a:65:24:61:97:21:bb:0a:66:b3:1e:d1: 3c:fe:ef:fa:1b:83:f2:5a:1a:bf:08:fa:53:0b:cf:6a:c9:04: 3d:1a:ff:7c:6c:af:90:bf:8f:a8:2e:85:c4:51:7b:24:9f:02: 93:52:c2:53:3b:be:7b:d4:9e:f7:99:7a:7e:56:2e:bd:26:32: 84:5f:04:75:14:6d:0b:86:85:42:2e:8c:41:2c:f2:d2:03:b3: 90:ad:94:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y4cZ82rXW6IkawXLTMJEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkODAyM2EzODE3ZDUwMjE1MWZiZDA0ODQ0YTdjM2MzNWVl OTliNDMwHhcNMjYwMTI1MjMwMDUzWhcNMjYwMTI2MjMwMDUzWjAzMTEwLwYDVQQD Eyg4MWE0NTI1YzVlODkyY2NhOGYxNjE2ZjZkOTg4OTUxYjM0N2VmMjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArl08wHO8Vu5jilbO5+ptZO5fxOh8 9e+HTMYzaITNiM6Qa2I6DKeIeSAktovaYmytDz9ExES5GygVICzjVYjVnuhtZG8w 1MjxKFv2B9oUFh3EnJgEyYF7Y2hVJrzuRjqCS5cWB+xUuDa9D80UACLWr9QoqtXp gZpCt6bVW/b8PvpDZ/tZNIX9GCDO+BmThy06n1hSzu9mG0wCnyAy98kVMtRZKHwl WOUjU4c2kf2B1FCXhPAMmMrhg2Bki9sK50iV8HjUEQRqi9pZqxcfTdTbMtbfHXUQ 6JPJtxZ0myJssO4+yY4NUzhLX73Dg31lmIBfcbYyNnIHKUwv6+pPksLnqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIGkUlxeiSzKjxYW9tmIlRs0fvJQMB8GA1UdIwQY MBaAFG2AI6OBfVAhUfvQSESnw8Ne6ZtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEt YjUwOTQ0OTEzYWJmLzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi80ZDk0MjQtMDZlOC00YmM2LWI1ZWEtYjUwOTQ0OTEzYWJm LzEvYllBam80RjlVQ0ZSLTlCSVJLZkR3MTdwbTBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJamFGp/ QdyAwhgHNHlA+UennU0ZzSfr7RddyNkcO4juhpdbn0qa9Lntwl4UkRf/dy+7KQJ3 BT51g/Pj/n8mSmh50qtGx922iAyIGuKYq9b0NuJEGI90+7k61r4BiwnmyQNGtp5P XrzNm4UKOFrztLSMBT1Z71gyoW3F16g8V80dQoO0trtUj8fke/tIm6QF8cC+WvYp QEpqiRs224vbqlVuPwK5u3jKOmUkYZchuwpmsx7RPP7v+huD8loavwj6UwvPaskE PRr/fGyvkL+PqC6FxFF7JJ8Ck1LCUzu+e9Se95l6flYuvSYyhF8EdRRtC4aFQi6M QSzy0gOzkK2UPw== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:58 2026 by rpki-client