This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json) Hash identifier: EHEVFambRFfYZgI2SPn3gbbTfaKEdU6f77/N7EnNTt0= Subject key identifier: FD:7F:4C:1F:07:27:88:EF:12:2C:35:1D:51:F7:20:80:54:7B:6E:27 Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af Certificate serial: 019BF72D1A7B365DB4D676E04E45FFCFC879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft Manifest number: 17EE Signing time: Sun 25 Jan 2026 22:01:26 +0000 Manifest this update: Sun 25 Jan 2026 22:01:26 +0000 Manifest next update: Mon 26 Jan 2026 22:01:26 +0000 Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: MityTQpQw/X0muPrnrFyD00XLL7jWITkb8Omu3cX6/o=) 2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:1a:7b:36:5d:b4:d6:76:e0:4e:45:ff:cf:c8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af Validity Not Before: Jan 25 22:01:26 2026 GMT Not After : Jan 26 22:01:26 2026 GMT Subject: CN=fd7f4c1f072788ef122c351d51f72080547b6e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:6b:f2:82:a1:d3:d6:9e:06:1a:9f:61:7c: 3c:04:5a:88:aa:e4:06:f5:a4:a9:f0:10:13:a5:96: 4c:8a:2f:d7:0d:63:47:24:cf:56:c3:48:b8:dd:ea: 47:52:5a:14:88:a0:ab:89:d3:bd:0d:3a:58:05:bc: e4:5c:92:24:a8:a8:ae:cc:2e:eb:ec:91:e6:12:ec: 63:9e:ef:ba:5c:90:5a:de:8b:56:64:98:73:1d:6e: 01:3f:56:0e:97:e6:18:a6:ae:4b:e3:87:6b:67:d9: 28:fb:33:74:81:da:bc:19:a8:e1:f2:be:08:92:1c: ed:a4:eb:65:d5:50:3d:af:a4:be:db:03:9d:81:28: 4b:71:3b:ca:6e:db:86:bd:a5:78:75:b5:7e:4d:d2: 06:1e:60:3f:15:d3:6e:58:62:27:58:b3:cc:21:5b: 1b:38:73:a3:aa:79:56:58:81:78:d7:fd:04:b7:51: 68:b1:4e:e1:5c:58:f7:4e:2d:8e:88:1c:cb:50:11: 6d:c9:ed:74:9c:38:8f:7b:ca:d2:e7:da:c3:98:b5: 89:6b:59:ef:ca:51:f2:22:bc:83:10:24:8f:de:2d: 01:82:22:62:bf:c9:ee:59:a5:92:0b:bf:18:12:2a: dd:38:7f:6e:0b:24:ba:36:75:91:58:0f:5e:4d:cb: c9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7F:4C:1F:07:27:88:EF:12:2C:35:1D:51:F7:20:80:54:7B:6E:27 X509v3 Authority Key Identifier: keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:57:64:8b:d0:b9:62:38:24:c7:00:44:da:6a:95:cc:67:48: 3d:90:fe:27:fb:38:47:82:a5:98:e7:e0:97:56:02:d0:29:ff: 17:8e:d1:d8:3f:d6:ec:06:e7:45:fb:ca:38:75:59:46:a7:cf: 7c:5e:3e:2b:9d:b2:cc:c9:e8:6e:28:f5:d3:b8:3d:57:3f:1f: 64:76:9c:94:74:a6:d9:f2:d3:fa:41:18:e1:e1:ab:da:04:75: e5:7b:0b:26:09:82:33:e3:c0:d2:6b:ad:ea:ee:2d:5b:0c:97: 0d:d9:d9:d2:4b:3e:8c:c2:36:1a:d8:8e:39:93:7e:6a:b0:32: 0d:7b:cd:91:30:b2:82:6a:96:1d:c3:d2:c1:cd:66:e3:4d:19: 6b:27:70:83:77:c1:2f:07:d1:c9:88:33:ea:54:c5:37:94:0b: 21:96:b2:84:4f:9f:7c:cf:70:48:a6:6c:9c:ac:32:df:1e:fb: 86:ce:82:dc:d8:7f:3d:0c:fd:cd:fa:af:33:c7:b7:37:51:73: ae:a7:ec:ed:4b:f1:76:00:35:d6:f2:ec:05:e8:a2:07:29:04: 83:a6:cb:7b:52:7b:83:8c:ae:f0:51:39:8e:7c:1a:2e:72:1c: 1b:bd:be:a4:c3:a8:16:e4:25:45:d5:a2:a9:99:e8:13:74:83: f4:4a:e2:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LRp7Nl201nbgTkX/z8h5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMTUwYjQzOGNjNjhmNjJkYzE1ZDM1OTU5MzE2MWY3OTlk ZTUzYWYwHhcNMjYwMTI1MjIwMTI2WhcNMjYwMTI2MjIwMTI2WjAzMTEwLwYDVQQD EyhmZDdmNGMxZjA3Mjc4OGVmMTIyYzM1MWQ1MWY3MjA4MDU0N2I2ZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqctr8oKh09aeBhqfYXw8BFqIquQG 9aSp8BATpZZMii/XDWNHJM9Ww0i43epHUloUiKCridO9DTpYBbzkXJIkqKiuzC7r 7JHmEuxjnu+6XJBa3otWZJhzHW4BP1YOl+YYpq5L44drZ9ko+zN0gdq8Gajh8r4I khztpOtl1VA9r6S+2wOdgShLcTvKbtuGvaV4dbV+TdIGHmA/FdNuWGInWLPMIVsb OHOjqnlWWIF41/0Et1FosU7hXFj3Ti2OiBzLUBFtye10nDiPe8rS59rDmLWJa1nv ylHyIryDECSP3i0BgiJiv8nuWaWSC78YEirdOH9uCyS6NnWRWA9eTcvJwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1/TB8HJ4jvEiw1HVH3IIBUe24nMB8GA1UdIwQY MBaAFG0VC0OMxo9i3BXTWVkxYfeZ3lOvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQt MWIzZDk4YmVmMWU5LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8yZmE4NmYtN2Y0ZS00YWFiLTlkZmQtMWIzZDk4YmVmMWU5 LzEvYlJVTFE0ekdqMkxjRmROWldURmg5NW5lVTY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVldki9C5 YjgkxwBE2mqVzGdIPZD+J/s4R4KlmOfgl1YC0Cn/F47R2D/W7AbnRfvKOHVZRqfP fF4+K52yzMnobij107g9Vz8fZHaclHSm2fLT+kEY4eGr2gR15XsLJgmCM+PA0mut 6u4tWwyXDdnZ0ks+jMI2GtiOOZN+arAyDXvNkTCygmqWHcPSwc1m400Zaydwg3fB LwfRyYgz6lTFN5QLIZayhE+ffM9wSKZsnKwy3x77hs6C3Nh/PQz9zfqvM8e3N1Fz rqfs7UvxdgA11vLsBeiiBykEg6bLe1J7g4yu8FE5jnwaLnIcG72+pMOoFuQlRdWi qZnoE3SD9EribA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:55:04 2026 by rpki-client