This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json) Hash identifier: gVoYJdA0rKsNyF8L5+G5rMR5yJaRclda5x7v6jMUy8o= Subject key identifier: F5:09:81:E0:A6:37:9D:A7:F0:5B:91:11:2D:FF:4E:0E:F0:CF:4B:D5 Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019BF53EE909A8191856D237BEFB5A89FED4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft Manifest number: 1085 Signing time: Sun 25 Jan 2026 13:01:39 +0000 Manifest this update: Sun 25 Jan 2026 13:01:39 +0000 Manifest next update: Mon 26 Jan 2026 13:01:39 +0000 Files and hashes: 1: 01O1H3vr-Xg2_Kt_tRxOoSePvYw.roa (hash: DTK4FxlalSIuFNse2BYUOpmcSGMhnqSmE/87aEUEtrg=) 2: 1-EqD6vgoA3IVAsjiLQYVEyyKW0U.roa (hash: Of+IRZAD6r3ftFWFR7yxzKwNLfYZjre35Dmg5UJV5ds=) 3: 3oqgYKPHjP4c1L0WVBDxXqGTNKs.roa (hash: PdT5GAbt00ZEVCyICmg6bHJkYgLa1nkpbJxhAhA4vnk=) 4: HB0FIxc95bfbXI-7nw5kY1VNoMs.roa (hash: 236zwT5kbl7DOv0ChJB+B8PFAcfi388Ks1QJGiJxQlM=) 5: RSEZnKImClpjfvRbvyGXO7YCT30.roa (hash: nbl9nzX5UblCyKX8B1eZxPxYHLEkClkhmOAKVpl4rkY=) 6: TCGXmp-ZcJuoO-eDyOqbUVRKJXI.roa (hash: zb8J86h3WDmjGOxtQQnoZ3rsuxycMmwLx3S1o5snyrE=) 7: XR-EYzoeTJi_gNpw5v85R8iIDCI.roa (hash: hr4Ank/yR0Q5kl1E1WgAYLVhDPaCeCKIZMYB9E/hjDs=) 8: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: LctN7VgRglx5QjKIgdCRYLwycCi+5SwDzDGkww+gIHI=) 9: fv8hSy-qTmyzkAkKRiqf7Cbw4Q8.roa (hash: JVsfqbqPGUHeKikh7Yf/w82XL596L03oNIzuxFbcXEQ=) 10: ngXBDJqFRHqY02oCl22jHBT8QTU.roa (hash: J4yIx0/GQQvuBdXMZZvAxL9Vevspg59Zpn25unHuRA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:e9:09:a8:19:18:56:d2:37:be:fb:5a:89:fe:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Jan 25 13:01:39 2026 GMT Not After : Jan 26 13:01:39 2026 GMT Subject: CN=f50981e0a6379da7f05b91112dff4e0ef0cf4bd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:50:d9:2a:b0:fb:26:cc:b9:d2:17:ed:e0: 21:6b:55:4d:bb:dc:d9:7d:1f:66:26:ea:b5:0e:46: 8a:af:ea:db:be:3d:31:78:46:28:b9:d9:a7:e0:b2: b3:ec:f0:23:0f:59:8b:75:3d:6c:fb:71:8c:12:15: 24:32:9c:1a:fe:b3:ed:30:70:f0:c4:0e:09:fc:c2: b0:bf:6d:f2:0a:cc:2e:fe:39:2f:87:50:c1:03:5d: 55:75:d4:dd:bf:71:c4:93:14:73:53:0b:f6:e0:81: 8b:62:af:b0:f0:04:c2:fe:9f:43:39:88:e0:99:a7: 8e:db:63:71:72:c9:da:df:69:17:60:4f:b1:ac:15: 8d:8f:32:c6:96:d3:0d:9a:54:58:45:cc:66:36:37: cc:6d:a9:b7:35:df:04:60:16:5d:53:22:b9:ec:14: 9c:50:39:a4:28:36:d6:0d:34:ff:18:7d:34:c2:f7: ef:30:a7:5b:d0:82:28:09:45:20:7d:1d:76:a0:9d: 8f:43:3c:ed:88:de:05:09:57:0d:f8:6f:d5:e5:b0: 74:2b:fe:d4:ea:02:a8:9d:55:d5:5b:77:4b:10:0a: d0:6f:1a:ac:fc:b8:46:fa:83:60:24:86:f2:4d:25: e7:0c:4b:34:be:55:31:48:00:77:27:dc:19:e8:3d: 4d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:09:81:E0:A6:37:9D:A7:F0:5B:91:11:2D:FF:4E:0E:F0:CF:4B:D5 X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:84:05:e1:49:72:3f:97:ac:d2:a8:5d:4d:c4:e7:a6:d0:e7: a2:05:29:d0:e4:fa:66:6b:c3:24:bd:a6:d4:ed:f3:7a:fe:a3: 07:92:ff:66:12:9f:3c:3b:8a:90:04:d7:b2:48:29:29:5c:2e: 5c:be:a4:77:a0:21:f1:01:b3:79:12:3e:48:01:8a:ff:ec:db: 58:11:d0:39:1b:48:be:12:9b:8b:96:81:d3:ac:b1:89:be:b1: 87:00:71:00:31:1d:b1:ee:da:77:ab:36:29:64:af:f3:4a:2c: 27:15:b3:7a:bc:53:7d:20:60:b4:70:22:8f:12:ad:c3:62:e6: 60:eb:3a:cc:12:07:85:78:33:a7:8a:42:09:7c:27:69:2a:87: 14:82:7a:db:83:0b:84:3a:7c:cf:4b:3f:bf:74:f1:b3:51:7c: 58:cc:84:0a:96:a4:e4:44:81:52:89:c2:65:d6:e6:43:40:ff: db:fe:6a:4f:5b:01:37:7b:eb:36:1e:0d:77:a1:42:ac:f9:93: 32:79:85:5f:4f:6e:38:a9:9d:03:30:8f:8b:28:26:c4:bd:b5: d3:bf:55:bd:c6:3c:be:5f:16:43:ee:79:6a:e6:6e:3c:82:b1: 11:ff:17:d8:dc:57:e6:32:db:39:88:f4:3a:fe:3d:a3:55:e4: d8:f7:e2:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PukJqBkYVtI3vvtaif7UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwMTI1MTMwMTM5WhcNMjYwMTI2MTMwMTM5WjAzMTEwLwYDVQQD EyhmNTA5ODFlMGE2Mzc5ZGE3ZjA1YjkxMTEyZGZmNGUwZWYwY2Y0YmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0tQ2Sqw+ybMudIX7eAha1VNu9zZ fR9mJuq1DkaKr+rbvj0xeEYoudmn4LKz7PAjD1mLdT1s+3GMEhUkMpwa/rPtMHDw xA4J/MKwv23yCswu/jkvh1DBA11VddTdv3HEkxRzUwv24IGLYq+w8ATC/p9DOYjg maeO22Nxcsna32kXYE+xrBWNjzLGltMNmlRYRcxmNjfMbam3Nd8EYBZdUyK57BSc UDmkKDbWDTT/GH00wvfvMKdb0IIoCUUgfR12oJ2PQzztiN4FCVcN+G/V5bB0K/7U 6gKonVXVW3dLEArQbxqs/LhG+oNgJIbyTSXnDEs0vlUxSAB3J9wZ6D1NVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUJgeCmN52n8FuRES3/Tg7wz0vVMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARIQF4Uly P5es0qhdTcTnptDnogUp0OT6ZmvDJL2m1O3zev6jB5L/ZhKfPDuKkATXskgpKVwu XL6kd6Ah8QGzeRI+SAGK/+zbWBHQORtIvhKbi5aB06yxib6xhwBxADEdse7ad6s2 KWSv80osJxWzerxTfSBgtHAijxKtw2LmYOs6zBIHhXgzp4pCCXwnaSqHFIJ624ML hDp8z0s/v3Txs1F8WMyECpak5ESBUonCZdbmQ0D/2/5qT1sBN3vrNh4Nd6FCrPmT MnmFX09uOKmdAzCPiygmxL21079VvcY8vl8WQ+55auZuPIKxEf8X2NxX5jLbOYj0 Ov49o1Xk2PfiSA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:24:34 2026 by rpki-client