This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json) Hash identifier: sPV7a2aYUVKLxvvmu/bm3GO0PNb9CNGkZeSG6k+mZjo= Subject key identifier: FC:0A:E1:71:6A:D1:74:17:70:62:4C:D5:4A:C9:D5:FB:7A:B2:B2:90 Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75 Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675 Certificate serial: 019BF2AB40C4C0B374CA47B3BECAD25D1E88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft Manifest number: 0379 Signing time: Sun 25 Jan 2026 01:01:08 +0000 Manifest this update: Sun 25 Jan 2026 01:01:08 +0000 Manifest next update: Mon 26 Jan 2026 01:01:08 +0000 Files and hashes: 1: GCeDgCKOnbFY3U0olZ4r0yqAX7g.roa (hash: +SThIA5U78DHRFgrExpVjECZowaekUZ+Kqjt9wzZQWI=) 2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: ZZLAfZwFkldmeo8tlpFtefipqtvkNDmhvCsgp0/Kk5I=) 3: tglsOsq2MXVhhtPQ1fuHwjxCRDE.roa (hash: 8XEuad3zZxDli1a1G3vIehCptWc+Hmtp2zxnb2jVTdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:ab:40:c4:c0:b3:74:ca:47:b3:be:ca:d2:5d:1e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675 Validity Not Before: Jan 25 01:01:08 2026 GMT Not After : Jan 26 01:01:08 2026 GMT Subject: CN=fc0ae1716ad1741770624cd54ac9d5fb7ab2b290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:8c:c4:74:87:b3:4d:d9:72:6f:4a:e5:9b:65: 1a:17:1f:48:8d:93:72:8b:24:9e:fd:7f:82:a6:3f: 2f:12:30:e3:66:eb:a6:fc:fa:8e:df:3e:d6:d2:c4: 62:b6:49:6b:13:5d:d6:20:fc:f2:bf:ef:2e:6d:c7: 58:42:c4:e5:61:f5:8c:3c:14:14:5c:a3:23:a6:2b: e2:ba:1b:57:3f:1a:c9:2a:08:b5:ed:cc:fd:fe:e2: 12:ae:92:17:87:41:bd:da:a8:ae:81:13:3f:94:a6: 97:38:d3:d8:4a:da:b5:ea:f7:b5:20:80:4d:6a:1a: d7:9a:90:01:74:83:b2:c2:3d:43:2e:ba:6e:e4:92: 85:92:9b:29:a3:91:22:2b:6a:01:2d:d5:c1:cc:5e: 6d:eb:75:70:87:60:68:3a:a7:5b:2f:4b:2f:84:e8: 60:db:db:19:76:1d:70:1f:89:66:05:45:8b:0e:ea: e0:90:00:23:fa:2b:77:77:4c:c6:51:f2:d4:b4:04: 5a:82:da:97:df:da:28:e3:a5:fd:d7:0c:1e:76:0b: 58:d4:d7:43:8b:96:73:90:00:65:7c:9e:3c:84:93: c4:5b:61:e0:f6:4b:55:04:be:63:7d:f6:39:41:d6: 4e:a4:de:b6:6d:f3:ea:fa:e2:96:eb:01:73:f7:6c: f2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:0A:E1:71:6A:D1:74:17:70:62:4C:D5:4A:C9:D5:FB:7A:B2:B2:90 X509v3 Authority Key Identifier: keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:75:46:f9:81:13:67:f2:df:51:73:4d:c8:c0:c8:7b:7a:55: 20:52:eb:b0:5a:3e:19:0b:e5:1f:54:3b:d1:59:cb:7c:99:42: b1:dd:7d:bb:5b:90:7d:a8:f0:8c:2e:3a:a8:8a:2b:4f:35:b9: 8b:08:35:8f:df:e5:52:75:2d:08:45:10:64:d8:32:d7:70:17: 99:54:96:0c:e2:7e:b2:58:1b:a6:a3:b7:ae:2a:0b:e5:89:58: 42:78:98:8f:7e:b3:73:c2:69:18:cf:fe:c6:a0:75:71:0d:71: e5:09:c5:b8:87:f5:bb:25:52:02:8b:d9:8f:55:3d:7a:38:07: 6b:45:14:8c:54:be:f8:b2:1f:c4:60:8a:42:20:28:cc:34:a4: c0:dc:04:f1:6a:63:86:7a:20:be:a6:91:e6:83:0b:73:29:21: 42:93:9f:fd:4b:bb:71:32:95:ec:af:61:d1:b9:3a:61:17:a4: 76:15:20:fc:8f:7f:ca:ba:eb:96:ca:e9:7c:dc:47:28:16:d3: 87:b3:04:07:c8:7d:5e:b0:35:6f:fc:c2:c5:e7:67:fa:fd:ae: 69:5a:2f:db:d7:b6:87:16:22:ba:61:83:c9:e4:3e:4f:31:2e: 7d:ce:ac:e2:d4:f9:6e:7e:45:1e:9c:f4:27:27:e1:b7:4e:ee: 78:d8:2d:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyq0DEwLN0ykezvsrSXR6IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy N2Y2NzUwHhcNMjYwMTI1MDEwMTA4WhcNMjYwMTI2MDEwMTA4WjAzMTEwLwYDVQQD EyhmYzBhZTE3MTZhZDE3NDE3NzA2MjRjZDU0YWM5ZDVmYjdhYjJiMjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34zEdIezTdlyb0rlm2UaFx9IjZNy iySe/X+Cpj8vEjDjZuum/PqO3z7W0sRitklrE13WIPzyv+8ubcdYQsTlYfWMPBQU XKMjpiviuhtXPxrJKgi17cz9/uISrpIXh0G92qiugRM/lKaXONPYStq16ve1IIBN ahrXmpABdIOywj1DLrpu5JKFkpspo5EiK2oBLdXBzF5t63Vwh2BoOqdbL0svhOhg 29sZdh1wH4lmBUWLDurgkAAj+it3d0zGUfLUtARagtqX39oo46X91wwedgtY1NdD i5ZzkABlfJ48hJPEW2Hg9ktVBL5jffY5QdZOpN62bfPq+uKW6wFz92zydQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwK4XFq0XQXcGJM1UrJ1ft6srKQMB8GA1UdIwQY MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt OTRhYzhhZjFiZmNmLzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnVG+YET Z/LfUXNNyMDIe3pVIFLrsFo+GQvlH1Q70VnLfJlCsd19u1uQfajwjC46qIorTzW5 iwg1j9/lUnUtCEUQZNgy13AXmVSWDOJ+slgbpqO3rioL5YlYQniYj36zc8JpGM/+ xqB1cQ1x5QnFuIf1uyVSAovZj1U9ejgHa0UUjFS++LIfxGCKQiAozDSkwNwE8Wpj hnogvqaR5oMLcykhQpOf/Uu7cTKV7K9h0bk6YRekdhUg/I9/yrrrlsrpfNxHKBbT h7MEB8h9XrA1b/zCxedn+v2uaVov29e2hxYiumGDyeQ+TzEufc6s4tT5bn5FHpz0 Jyfht07ueNgtxA== -----END CERTIFICATE-----Generated at Sun Jan 25 10:46:21 2026 by rpki-client