This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: 31vNtA/3Ei9YnesSqRQrbBTQu0fl+94YruXlDNyZT6c= Subject key identifier: E8:33:C1:AC:FA:52:EB:F7:28:47:03:CE:31:47:31:24:C1:D5:D5:18 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 019BF3F4CD95FF3B644FCAA9666CA7BE8E62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 14A8 Signing time: Sun 25 Jan 2026 07:01:05 +0000 Manifest this update: Sun 25 Jan 2026 07:01:05 +0000 Manifest next update: Mon 26 Jan 2026 07:01:05 +0000 Files and hashes: 1: 1-0M2Obo2Q8e967SGkmQDEfXZayM.roa (hash: fDXFZQjR8P2lB0fAkk+7Ytji6EhqtxGESPHwfw5J/OQ=) 2: 2wVSH7DbbBFamwMCif6XQUtTxIk.roa (hash: nRU5pIxzuuO27+LNhKgzJMI29vhQdEwZEamj8NL3TdU=) 3: 6iXU8EKk2ZvUEM-SfuUbb38nhQg.roa (hash: 5E//lm7xuj1KLaKmwKuy2vDVf/O+b6mxnpSRAQt5Fb0=) 4: 9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa (hash: tmNVZ8FS/BqbujEOEGH/IyBGDDmBs9A8TZDITWSm8kc=) 5: Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa (hash: Eb0kwzwy039z3kdPuDAhVSjmubzFKvvOj2jQKrMMEP8=) 6: TELMN1j3BWZ-Y7ZZjfQBqUpiQng.roa (hash: md2tirz0mP2OIU0FtRsAw71+7MT16uq7hTVoqxoBwJg=) 7: XtYBo7scN26cbmzcEVBSKA0js4k.roa (hash: V1uChYYVpkx2xi1qTYcQbi6Z/gGYxugEuQ9a8AaoEE4=) 8: ZiR6ZrA3XKmOMdSYn1nbkvoJfuc.roa (hash: H0dHPUEpABR63APcnlQrAzJqRe+rMqjbSQQKwlGf7xo=) 9: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: Vmz892ML9kqOjmdHUPjPTvBvPNsGddhSB8YpLz9x0mA=) 10: nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa (hash: NjUVAsdLKWryk+3mwcD6964vU7goGX2Nf5HmoKEaetY=) 11: pEwiJAxkdxYz4y1_Eiyjt4HD-LQ.roa (hash: zNntPypAc/BTNmseu/NbwtVTxUXTvODLDW5Dni3vOfo=) 12: q2PFrb86M-sx3oGt2HPK3a2tuMo.roa (hash: dRMMjShGGPzyUsWgtJ/udfTIxmOFqTOi+aPEPCOEsA8=) 13: sflx_C0NTLGDBGXbovVvVoJubd0.roa (hash: 6zPtQTreVgkFM6C6TvdscESKrFS1e5qwp4OWXjvVi+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:f4:cd:95:ff:3b:64:4f:ca:a9:66:6c:a7:be:8e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Jan 25 07:01:05 2026 GMT Not After : Jan 26 07:01:05 2026 GMT Subject: CN=e833c1acfa52ebf7284703ce31473124c1d5d518 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bf:8a:c1:39:ca:cb:b0:07:6f:76:78:98:1a: c5:83:4f:37:6d:ee:e9:be:75:3f:05:74:56:c1:51: 34:ed:5d:98:ae:ff:0e:df:5e:25:af:32:b5:99:93: 7e:6b:43:33:a8:69:c8:a9:b0:c7:3d:b6:13:ee:ab: 21:04:d8:e8:e9:21:78:1f:72:65:13:77:6d:34:93: 3e:26:7d:81:1b:bd:d5:a4:7a:0f:09:ad:bf:c2:bd: 14:3d:41:bb:fa:29:0c:0e:f5:07:ed:3d:76:18:70: cf:ab:3a:ea:99:c9:70:97:54:d8:8c:25:ee:7d:9a: 1d:19:2b:9b:b4:34:7a:a4:e9:e7:d2:d0:d1:85:8c: ad:4b:68:60:3a:24:0a:5d:4a:0e:7e:f5:7a:6a:21: d7:48:1b:fb:fb:23:6d:b5:e1:ee:72:5e:9e:9a:13: 7d:d0:8f:44:64:4b:1f:b1:b8:dd:62:d9:a6:6a:f4: 2f:45:20:ed:23:7a:a5:4f:88:db:c5:ae:26:16:f9: 36:e4:ce:51:95:53:b5:68:d3:65:a5:bd:c3:80:3e: fd:35:00:64:aa:3d:06:9c:56:eb:bd:3a:25:34:30: e6:9e:08:8b:46:3a:8c:1e:44:99:7e:69:92:a2:2c: e9:10:25:45:4a:54:b0:cb:96:56:eb:dd:6f:d0:f9: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:33:C1:AC:FA:52:EB:F7:28:47:03:CE:31:47:31:24:C1:D5:D5:18 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:66:99:ab:3c:3d:65:21:3a:7e:35:86:3e:13:74:4a:02:10: 32:88:5a:b5:41:c4:52:4d:dc:e0:14:8c:fd:c4:e6:b0:72:7e: 1b:d0:e5:45:a5:85:60:00:b9:4c:e2:8e:a7:e0:0a:b3:d2:72: 0c:90:39:d1:8e:2a:3b:80:fb:62:34:47:7d:64:fd:b0:d8:99: 4b:35:ce:5d:85:6b:ff:aa:16:c0:34:aa:9a:df:55:91:9e:cb: 11:d9:ce:8d:39:62:02:90:c2:2b:3f:41:bb:8d:78:51:03:05: 01:ea:8c:3e:c1:86:f3:d3:fd:42:dd:6b:3b:76:94:ed:58:cb: 67:ba:7d:31:91:c2:a2:20:69:a4:01:7c:3f:c9:f1:4d:3b:f4: d5:dd:4e:ec:28:b8:59:0d:9a:e7:0d:5a:a7:34:6b:be:17:73: 1c:d0:9c:fa:28:cf:f4:fa:fb:4c:c7:61:c1:7c:c7:ee:2b:86: ad:bf:22:82:9c:b2:a4:0d:94:14:aa:12:dc:91:30:d6:25:21: a8:61:41:30:dc:3b:4f:15:ad:61:fa:b0:82:a3:cd:7a:b6:fd: b6:bc:34:51:6d:79:ab:5d:88:83:37:f0:9a:25:0c:59:51:84: 75:be:19:ee:22:d0:f6:5e:ab:bf:de:87:07:9e:dc:5f:5e:c2: c1:1c:8f:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvz9M2V/ztkT8qpZmynvo5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwMTI1MDcwMTA1WhcNMjYwMTI2MDcwMTA1WjAzMTEwLwYDVQQD EyhlODMzYzFhY2ZhNTJlYmY3Mjg0NzAzY2UzMTQ3MzEyNGMxZDVkNTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr+KwTnKy7AHb3Z4mBrFg083be7p vnU/BXRWwVE07V2Yrv8O314lrzK1mZN+a0MzqGnIqbDHPbYT7qshBNjo6SF4H3Jl E3dtNJM+Jn2BG73VpHoPCa2/wr0UPUG7+ikMDvUH7T12GHDPqzrqmclwl1TYjCXu fZodGSubtDR6pOnn0tDRhYytS2hgOiQKXUoOfvV6aiHXSBv7+yNtteHucl6emhN9 0I9EZEsfsbjdYtmmavQvRSDtI3qlT4jbxa4mFvk25M5RlVO1aNNlpb3DgD79NQBk qj0GnFbrvTolNDDmngiLRjqMHkSZfmmSoizpECVFSlSwy5ZW691v0PmJSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgzwaz6Uuv3KEcDzjFHMSTB1dUYMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw2aZqzw9 ZSE6fjWGPhN0SgIQMohatUHEUk3c4BSM/cTmsHJ+G9DlRaWFYAC5TOKOp+AKs9Jy DJA50Y4qO4D7YjRHfWT9sNiZSzXOXYVr/6oWwDSqmt9VkZ7LEdnOjTliApDCKz9B u414UQMFAeqMPsGG89P9Qt1rO3aU7VjLZ7p9MZHCoiBppAF8P8nxTTv01d1O7Ci4 WQ2a5w1apzRrvhdzHNCc+ijP9Pr7TMdhwXzH7iuGrb8igpyypA2UFKoS3JEw1iUh qGFBMNw7TxWtYfqwgqPNerb9trw0UW15q12IgzfwmiUMWVGEdb4Z7iLQ9l6rv96H B57cX17CwRyPEw== -----END CERTIFICATE-----Generated at Sun Jan 25 11:46:25 2026 by rpki-client