This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft File: bacdwHnJ2MLSAprWQOejv5f03O0.mft (raw, json) Hash identifier: h//gYErHWI6NvxEtInaQhI9fj1TyRWyaZqIoiyxkkrc= Subject key identifier: 87:F6:B8:42:F5:D8:76:CD:6C:D9:90:11:10:FD:52:7A:10:D3:18:C8 Authority key identifier: 6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED Certificate issuer: /CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced Certificate serial: 019BF42BB43B26287848F2C14885685A33A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft Manifest number: 38 Signing time: Sun 25 Jan 2026 08:01:03 +0000 Manifest this update: Sun 25 Jan 2026 08:01:03 +0000 Manifest next update: Mon 26 Jan 2026 08:01:03 +0000 Files and hashes: 1: bacdwHnJ2MLSAprWQOejv5f03O0.crl (hash: AuHbvhwwW/NZVcnP/ibIt69csiKS/3eUylhEgx/sVW8=) 2: yrzn6Y2tA0RegmyWuqXrLhnCjFk.asa (hash: CO4rC9oL7L+NGPB2CWOrIlYqlgFoVTfF6SHqEbozoRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:b4:3b:26:28:78:48:f2:c1:48:85:68:5a:33:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced Validity Not Before: Jan 25 08:01:03 2026 GMT Not After : Jan 26 08:01:03 2026 GMT Subject: CN=87f6b842f5d876cd6cd9901110fd527a10d318c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ae:ec:f9:d2:56:38:4b:d4:01:71:53:7c:52: a5:3d:e2:00:c5:ac:94:64:0b:5e:e9:df:39:dc:43: b7:77:50:c9:25:34:aa:c1:98:e5:b6:fe:e7:cc:31: 81:4d:94:62:a9:35:cb:28:fc:b8:4b:8a:8d:7e:83: fb:ef:5f:a9:46:f9:b3:55:75:9a:65:5a:59:fc:1f: fd:fe:fe:c0:f6:8e:ed:2f:48:0d:d7:63:91:b5:e6: c8:4d:ae:3d:73:59:9a:d8:f5:46:1b:2b:e3:35:40: 9b:65:45:ea:47:eb:3a:b5:fe:f2:67:a6:a3:55:a2: 5b:26:0d:e6:67:4f:cc:78:d0:e5:bc:46:3c:10:d7: 61:a4:a1:64:86:6e:d3:2e:0a:24:b9:1d:b9:9e:e9: b4:26:7d:5a:10:94:69:43:9d:69:2c:02:3a:7e:96: 7a:5c:e9:e8:80:6b:17:18:b7:91:a3:6f:b1:9b:4e: 1f:2a:9a:61:4b:5f:e8:2e:cb:47:72:9c:5e:5b:65: cc:d6:b5:c1:15:05:06:57:ad:2d:2c:1f:c2:8d:2b: 68:c6:c3:40:f7:a6:74:5b:22:31:9a:c8:ab:53:99: d9:f7:0e:64:ff:f5:dd:1e:c1:a8:b6:79:f4:85:ee: 2b:94:40:b6:03:e6:fd:3e:2a:c2:52:e3:bb:3b:ef: e0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F6:B8:42:F5:D8:76:CD:6C:D9:90:11:10:FD:52:7A:10:D3:18:C8 X509v3 Authority Key Identifier: keyid:6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:32:14:02:5b:d6:6f:7d:63:ef:c6:1c:10:d9:24:e7:4b:fa: a8:ec:aa:32:05:0c:10:d0:2a:31:ea:7c:73:ef:25:04:c6:76: 2f:ee:5e:a9:c4:47:80:72:72:20:6f:9c:ac:ef:bb:f0:f0:c4: 72:f8:3f:c0:84:6d:6e:ba:c1:32:30:bd:f6:ae:47:9d:55:c3: e6:c2:a1:92:36:b0:ee:97:48:a7:ca:99:cc:f7:1d:73:7a:77: 9d:7f:1b:6b:e9:40:da:05:a4:30:eb:4b:00:dc:81:61:5d:2f: 4b:ac:79:28:d1:3d:b3:93:a1:74:bb:51:c9:15:d3:d6:5b:bb: f5:b1:16:a4:98:7a:72:d6:2e:52:db:77:29:5f:71:3a:fd:a7: af:46:1c:e5:b4:6e:df:0b:64:7e:69:f7:db:e8:fe:fb:7e:bb: 9a:2b:b8:3d:d3:74:b4:85:b3:a5:cc:77:5e:47:ab:85:75:5a: c9:66:3e:90:1b:12:c4:bb:a1:12:e4:e7:ea:76:bf:7d:8a:c0: f4:1f:f2:4a:9c:dd:17:85:66:fa:4d:92:9e:7a:e4:50:0e:64: 03:00:04:86:83:aa:46:62:12:f4:66:9a:cb:d4:d2:99:94:f3: 57:3e:fc:6a:07:5b:4d:bc:2b:a2:49:87:54:80:e1:58:91:e1: 95:a6:e8:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K7Q7Jih4SPLBSIVoWjOhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYTcxZGMwNzljOWQ4YzJkMjAyOWFkNjQwZTdhM2JmOTdm NGRjZWQwHhcNMjYwMTI1MDgwMTAzWhcNMjYwMTI2MDgwMTAzWjAzMTEwLwYDVQQD Eyg4N2Y2Yjg0MmY1ZDg3NmNkNmNkOTkwMTExMGZkNTI3YTEwZDMxOGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q7s+dJWOEvUAXFTfFKlPeIAxayU ZAte6d853EO3d1DJJTSqwZjltv7nzDGBTZRiqTXLKPy4S4qNfoP771+pRvmzVXWa ZVpZ/B/9/v7A9o7tL0gN12ORtebITa49c1ma2PVGGyvjNUCbZUXqR+s6tf7yZ6aj VaJbJg3mZ0/MeNDlvEY8ENdhpKFkhm7TLgokuR25num0Jn1aEJRpQ51pLAI6fpZ6 XOnogGsXGLeRo2+xm04fKpphS1/oLstHcpxeW2XM1rXBFQUGV60tLB/CjStoxsNA 96Z0WyIxmsirU5nZ9w5k//XdHsGotnn0he4rlEC2A+b9PirCUuO7O+/gpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIf2uEL12HbNbNmQERD9UnoQ0xjIMB8GA1UdIwQY MBaAFG2nHcB5ydjC0gKa1kDno7+X9NztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmFjZHdIbkoyTUxTQXByV1FPZWp2NWYwM08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81OTgzYWUtZjQzZi00Y2Y3LTkzNTIt NjA4NTdmNjg4Y2Y3LzEvYmFjZHdIbkoyTUxTQXByV1FPZWp2NWYwM08wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi81OTgzYWUtZjQzZi00Y2Y3LTkzNTItNjA4NTdmNjg4Y2Y3 LzEvYmFjZHdIbkoyTUxTQXByV1FPZWp2NWYwM08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzIUAlvW b31j78YcENkk50v6qOyqMgUMENAqMep8c+8lBMZ2L+5eqcRHgHJyIG+crO+78PDE cvg/wIRtbrrBMjC99q5HnVXD5sKhkjaw7pdIp8qZzPcdc3p3nX8ba+lA2gWkMOtL ANyBYV0vS6x5KNE9s5OhdLtRyRXT1lu79bEWpJh6ctYuUtt3KV9xOv2nr0Yc5bRu 3wtkfmn32+j++367miu4PdN0tIWzpcx3XkerhXVayWY+kBsSxLuhEuTn6na/fYrA 9B/ySpzdF4Vm+k2SnnrkUA5kAwAEhoOqRmIS9Gaay9TSmZTzVz78agdbTbwrokmH VIDhWJHhlaboIw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:35 2026 by rpki-client