This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft File: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft (raw, json) Hash identifier: zu4e23EKQqRVwGNEg7G889Fn5jLommQKGSmw303EFHM= Subject key identifier: B0:DF:05:46:18:79:80:0F:90:61:5F:19:EE:17:D6:AA:3D:4D:82:FA Authority key identifier: D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D Certificate issuer: /CN=d346e5d46291f6bc53b965865051ba399749eb2d Certificate serial: 019BF574FB34C21DF6022BB94DAF267AF8DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft Manifest number: 0390 Signing time: Sun 25 Jan 2026 14:00:42 +0000 Manifest this update: Sun 25 Jan 2026 14:00:42 +0000 Manifest next update: Mon 26 Jan 2026 14:00:42 +0000 Files and hashes: 1: 00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl (hash: HyRheRlmoDr0cAwbl3Org/hD5aLGqnNsJG2SbnKdrTc=) 2: 6P5TrCrBMBOzWPp7NfkTPVfGFC0.roa (hash: sSdGu5Xuxs0f7WjvG48kyrMaNHwDQMDfZZyHNGWz4mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:fb:34:c2:1d:f6:02:2b:b9:4d:af:26:7a:f8:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d346e5d46291f6bc53b965865051ba399749eb2d Validity Not Before: Jan 25 14:00:42 2026 GMT Not After : Jan 26 14:00:42 2026 GMT Subject: CN=b0df05461879800f90615f19ee17d6aa3d4d82fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8b:3d:0d:0f:4f:c7:f6:52:9a:51:b1:23:5d: 50:89:b0:c0:b0:b9:73:86:84:1e:38:49:c2:37:68: 54:53:24:86:51:34:0b:5b:1b:9c:94:15:40:eb:8e: b3:77:68:04:45:03:f1:20:a9:f8:0b:7e:9f:9d:b3: db:eb:56:ad:91:ac:16:03:45:8c:37:99:2f:4e:b5: 70:c5:3a:ef:99:e9:12:ec:72:0c:ff:a1:6a:b5:6a: ce:c1:c0:3a:2d:3a:33:5f:58:d7:74:ba:b8:67:17: 6e:07:d0:16:89:c2:47:b6:48:5c:d3:38:60:0a:d2: 39:97:c0:ec:79:f8:0c:e7:12:2c:fc:58:0c:f7:45: 21:c0:49:ef:12:b1:e3:c2:9a:5d:eb:d2:85:9b:ad: b0:fe:11:72:17:32:3a:ec:81:a6:c5:22:e7:1b:d5: b3:38:6f:71:b4:e6:15:b4:25:5a:e8:33:f2:50:a4: 81:83:da:db:ff:62:fc:8a:8b:3d:08:1f:97:2f:b7: 8e:a5:de:cc:bf:f4:18:76:1a:73:ca:82:db:92:2c: 95:49:13:bf:f2:dd:fe:46:02:4d:46:e5:cd:64:b9: 27:f7:47:08:85:97:38:35:2f:13:09:ee:8d:38:73: 3f:e7:8e:68:1a:fd:c4:12:ff:79:ce:a2:65:40:6e: a2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DF:05:46:18:79:80:0F:90:61:5F:19:EE:17:D6:AA:3D:4D:82:FA X509v3 Authority Key Identifier: keyid:D3:46:E5:D4:62:91:F6:BC:53:B9:65:86:50:51:BA:39:97:49:EB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00bl1GKR9rxTuWWGUFG6OZdJ6y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/7c8e9c-ec48-4a90-86e5-3e943f97ff31/1/00bl1GKR9rxTuWWGUFG6OZdJ6y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:bd:ec:f0:49:f0:dc:7d:c9:55:fe:10:54:9e:0d:4f:6a:9d: 35:ab:61:b3:da:d7:3a:45:91:b6:a6:a5:ee:09:f1:59:74:c9: 05:2a:85:de:8a:d3:63:3d:9e:14:0c:de:df:0a:b4:31:58:d4: 6d:52:d2:cd:1b:9d:53:9a:ba:be:9f:38:36:f3:ee:d0:8d:9b: 12:5a:79:a3:11:e4:ab:72:ba:f8:5d:5e:22:97:65:17:20:96: b3:bf:46:57:72:dd:69:56:a7:ff:0e:e6:29:ae:03:06:3d:08: 2a:a1:f2:d3:48:b7:10:79:be:ec:5a:f1:48:7e:a8:40:d9:d8: ad:60:45:bb:c9:b4:40:1d:58:a4:12:5b:11:74:c9:5a:63:0e: 42:ec:76:40:93:8d:3d:f8:6e:ce:b6:f2:ab:04:a7:5f:e0:67: a1:a7:75:33:69:92:a8:ab:ed:18:2d:bb:39:ed:9a:ea:a0:0b: fb:8b:af:4d:16:22:76:bf:8d:19:a4:15:21:c7:cb:a5:d6:b2: 1d:dc:de:bd:51:58:36:4f:89:e2:e1:f5:6c:dc:ef:45:a0:95: 88:f8:a5:a9:88:71:19:27:aa:4b:ca:46:63:f3:28:ce:59:31: be:67:bb:c8:ee:52:a7:d6:2a:25:30:dc:e1:f1:aa:2e:e9:d6: 01:5f:b1:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dPs0wh32Aiu5Ta8mevjbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNDZlNWQ0NjI5MWY2YmM1M2I5NjU4NjUwNTFiYTM5OTc0 OWViMmQwHhcNMjYwMTI1MTQwMDQyWhcNMjYwMTI2MTQwMDQyWjAzMTEwLwYDVQQD EyhiMGRmMDU0NjE4Nzk4MDBmOTA2MTVmMTllZTE3ZDZhYTNkNGQ4MmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuos9DQ9Px/ZSmlGxI11QibDAsLlz hoQeOEnCN2hUUySGUTQLWxuclBVA646zd2gERQPxIKn4C36fnbPb61atkawWA0WM N5kvTrVwxTrvmekS7HIM/6FqtWrOwcA6LTozX1jXdLq4ZxduB9AWicJHtkhc0zhg CtI5l8DsefgM5xIs/FgM90UhwEnvErHjwppd69KFm62w/hFyFzI67IGmxSLnG9Wz OG9xtOYVtCVa6DPyUKSBg9rb/2L8ios9CB+XL7eOpd7Mv/QYdhpzyoLbkiyVSRO/ 8t3+RgJNRuXNZLkn90cIhZc4NS8TCe6NOHM/545oGv3EEv95zqJlQG6iWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDfBUYYeYAPkGFfGe4X1qo9TYL6MB8GA1UdIwQY MBaAFNNG5dRikfa8U7llhlBRujmXSestMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC83YzhlOWMtZWM0OC00YTkwLTg2ZTUt M2U5NDNmOTdmZjMxLzEvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC83YzhlOWMtZWM0OC00YTkwLTg2ZTUtM2U5NDNmOTdmZjMx LzEvMDBibDFHS1I5cnhUdVdXR1VGRzZPWmRKNnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF73s8Enw 3H3JVf4QVJ4NT2qdNaths9rXOkWRtqal7gnxWXTJBSqF3orTYz2eFAze3wq0MVjU bVLSzRudU5q6vp84NvPu0I2bElp5oxHkq3K6+F1eIpdlFyCWs79GV3LdaVan/w7m Ka4DBj0IKqHy00i3EHm+7FrxSH6oQNnYrWBFu8m0QB1YpBJbEXTJWmMOQux2QJON PfhuzrbyqwSnX+Bnoad1M2mSqKvtGC27Oe2a6qAL+4uvTRYidr+NGaQVIcfLpday HdzevVFYNk+J4uH1bNzvRaCViPilqYhxGSeqS8pGY/Mozlkxvme7yO5Sp9YqJTDc 4fGqLunWAV+xeQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:36:44 2026 by rpki-client