This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json) Hash identifier: AUZxMRN+kctBrfO9EXBqS7fAfxFfPBvmmlz9Mtqy6y8= Subject key identifier: 12:F0:6B:B2:9B:D2:B5:F8:31:AC:E7:B3:12:9C:0A:8D:9E:31:73:6E Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7 Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7 Certificate serial: 019BF72D8FD61015523CC996850671768A22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft Manifest number: 08D0 Signing time: Sun 25 Jan 2026 22:01:56 +0000 Manifest this update: Sun 25 Jan 2026 22:01:56 +0000 Manifest next update: Mon 26 Jan 2026 22:01:56 +0000 Files and hashes: 1: IfGCpj85Q4o-UGyQ31NliYn-gNM.roa (hash: x5pzaYdpKRd4mBuwlpRlCZ/BZdgSlAglcVpLNOFR9GU=) 2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: WQ8RPLbCdi4vE/8auPQnlkuWEYbobHZjZjjtkqOBw6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:8f:d6:10:15:52:3c:c9:96:85:06:71:76:8a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7 Validity Not Before: Jan 25 22:01:56 2026 GMT Not After : Jan 26 22:01:56 2026 GMT Subject: CN=12f06bb29bd2b5f831ace7b3129c0a8d9e31736e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a3:33:47:28:c0:2f:9a:21:49:85:f7:b9:e9: db:c1:cc:75:7b:f6:5d:a6:5c:b0:f1:94:9f:71:93: d3:50:1f:f1:14:63:f0:1e:84:ff:c7:0e:11:06:10: 8e:83:3f:2a:91:ee:c3:00:15:20:9a:72:26:61:1a: 87:1f:df:04:67:b8:6f:4b:25:9a:a0:fc:00:63:fa: 67:08:42:3d:7e:4b:16:e5:40:01:b1:17:e4:db:42: be:e6:bd:d9:9a:cf:b0:da:53:47:4f:28:ce:88:88: f0:30:ce:42:0d:cf:54:66:db:f8:2d:4f:bf:9f:c1: c5:03:d6:fb:81:7d:e4:bc:55:15:63:76:23:28:dd: d0:ad:9f:db:20:55:ec:87:70:47:df:1a:c8:a0:a8: 54:b4:d7:69:a9:a0:4e:e3:6c:52:f3:94:7f:27:a2: 18:4c:4e:23:e7:fa:3f:03:77:5d:07:87:c4:bd:0a: ad:c1:37:da:72:da:11:9f:4a:ed:45:ba:76:3d:84: 17:7e:94:dc:8a:1b:f6:9d:9e:b2:ce:b9:37:43:a4: ee:a6:47:f2:5f:67:39:75:1a:9c:ff:58:06:9c:32: e6:e4:a3:4c:fb:7f:39:4c:52:5d:c7:2f:d3:84:15: 0b:98:df:14:b2:fa:52:b7:fa:01:0a:1b:d9:a0:3d: 7c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:F0:6B:B2:9B:D2:B5:F8:31:AC:E7:B3:12:9C:0A:8D:9E:31:73:6E X509v3 Authority Key Identifier: keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:2a:85:91:a2:e5:a1:22:00:58:6b:28:19:dd:05:d9:a0:39: 33:5d:d9:7e:0b:59:25:a9:dc:3e:b6:3b:20:c2:4d:4e:06:ed: 96:a9:1d:c8:c7:c0:84:d1:5b:3b:f1:20:7a:eb:d0:e0:82:15: fa:15:3d:f4:09:95:ab:6f:08:86:c6:2d:8f:52:83:59:5e:43: f4:e6:66:ab:23:d2:9d:e9:15:b0:d8:15:a0:4b:20:31:e4:f4: 3b:7d:50:8b:1b:67:c7:6b:50:ee:b3:e6:78:62:63:41:77:ec: ca:0d:e4:5d:63:01:ba:75:9e:3a:1c:83:35:cb:9b:37:f3:3f: 82:e0:67:9c:42:4e:f5:9f:65:a6:18:ee:4b:9d:fa:ec:c9:f4: 18:54:ac:ce:95:9f:a5:a9:da:73:ea:7b:1f:fe:cc:7a:36:25: 2b:43:36:55:19:9f:1a:f8:d5:65:f5:7f:57:3b:4d:2b:16:15: fa:0b:9e:6f:9d:38:19:5e:c3:da:a6:7b:83:9c:b8:a5:48:0f: cb:ce:48:10:d7:fa:f9:92:66:2e:de:72:db:64:8b:32:3d:41: a1:3e:66:fc:8a:ce:2a:49:3f:5a:15:0d:8b:41:43:6d:21:40: de:99:10:00:75:65:46:b8:8d:c0:d3:5e:f5:a5:e9:42:3c:cc: 28:ed:3a:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LY/WEBVSPMmWhQZxdooiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGM5YTExMTdhYmQ1MmVjODAzNmI0ZjM3ODY0NGZhNzdh NGI4YTcwHhcNMjYwMTI1MjIwMTU2WhcNMjYwMTI2MjIwMTU2WjAzMTEwLwYDVQQD EygxMmYwNmJiMjliZDJiNWY4MzFhY2U3YjMxMjljMGE4ZDllMzE3MzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6MzRyjAL5ohSYX3uenbwcx1e/Zd plyw8ZSfcZPTUB/xFGPwHoT/xw4RBhCOgz8qke7DABUgmnImYRqHH98EZ7hvSyWa oPwAY/pnCEI9fksW5UABsRfk20K+5r3Zms+w2lNHTyjOiIjwMM5CDc9UZtv4LU+/ n8HFA9b7gX3kvFUVY3YjKN3QrZ/bIFXsh3BH3xrIoKhUtNdpqaBO42xS85R/J6IY TE4j5/o/A3ddB4fEvQqtwTfactoRn0rtRbp2PYQXfpTcihv2nZ6yzrk3Q6Tupkfy X2c5dRqc/1gGnDLm5KNM+385TFJdxy/ThBULmN8UsvpSt/oBChvZoD18dQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLwa7Kb0rX4MaznsxKcCo2eMXNuMB8GA1UdIwQY MBaAFG8MmhEXq9UuyANrTzeGRPp3pLinMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQt NGJlMTI3ZmEzMTE4LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8xMWE5YmEtOWQwZS00YzQ0LWFkYTQtNGJlMTI3ZmEzMTE4 LzEvYnd5YUVSZXIxUzdJQTJ0UE40WkUtbmVrdUtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkCqFkaLl oSIAWGsoGd0F2aA5M13ZfgtZJancPrY7IMJNTgbtlqkdyMfAhNFbO/EgeuvQ4IIV +hU99AmVq28IhsYtj1KDWV5D9OZmqyPSnekVsNgVoEsgMeT0O31Qixtnx2tQ7rPm eGJjQXfsyg3kXWMBunWeOhyDNcubN/M/guBnnEJO9Z9lphjuS5367Mn0GFSszpWf panac+p7H/7MejYlK0M2VRmfGvjVZfV/VztNKxYV+gueb504GV7D2qZ7g5y4pUgP y85IENf6+ZJmLt5y22SLMj1BoT5m/IrOKkk/WhUNi0FDbSFA3pkQAHVlRriNwNNe 9aXpQjzMKO06aQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:48:48 2026 by rpki-client