This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft File: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json) Hash identifier: ydifz3Zdey8MRTFoKEPQhc4W9juB3Kd//tUAcVtjibI= Subject key identifier: F7:D7:23:CA:26:52:FC:66:D3:41:84:AE:26:C0:D7:34:31:65:86:94 Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f Certificate serial: 019BF350A0BCE8C2FB635E3FBC68C12F28C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 04:01:46 +0000 Manifest this update: Sun 25 Jan 2026 04:01:46 +0000 Manifest next update: Mon 26 Jan 2026 04:01:46 +0000 Files and hashes: 1: STaAwjJw5o5YD77UFMiE3P3OF-8.roa (hash: ZyDnnvOoabqOZyAYi7oZ+XdKWhqE0mG6Qq6YUwDEsw0=) 2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: wGtRUUuf3F6j0aGr3R8Wjt3yPmi9M20eG3vS17cIe8Q=) 3: bscFx-8WZDo1BLtY9Qu-MWUUme0.roa (hash: +4tdj917MYxkU3jVhML6xKHXxs+Te1nlf+Ukm7WotRQ=) 4: s4d1WKYP4Jxij26Bj_2PiI6IzLU.roa (hash: DVgyuxaELvhEOBhDUYXg4JM856u4ROpCMZfu6veKFDA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:a0:bc:e8:c2:fb:63:5e:3f:bc:68:c1:2f:28:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f Validity Not Before: Jan 25 04:01:46 2026 GMT Not After : Jan 26 04:01:46 2026 GMT Subject: CN=f7d723ca2652fc66d34184ae26c0d73431658694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:38:00:74:bb:c9:6c:de:e6:4b:3f:3d:c2:37: 76:25:35:4c:4a:c0:47:84:ff:7d:3e:1a:4a:ba:6d: e6:83:a9:66:4f:61:17:00:69:4b:d3:22:e5:32:34: dd:08:25:e6:b6:5e:66:6a:7e:72:0a:18:36:a5:1e: 61:e1:96:73:57:44:81:18:6d:8f:3f:4e:ad:a4:a1: 96:bd:33:70:8e:9b:a2:c8:5b:07:0c:eb:0d:39:b5: d6:3d:67:bc:da:52:60:c1:fc:1e:43:1b:22:05:e1: 06:94:33:30:35:ae:98:c0:c2:8d:4f:66:1c:72:1b: 7b:00:75:4e:24:1d:63:2a:0b:15:12:81:6e:71:99: 15:5c:80:e6:7e:48:02:aa:b5:2d:a2:b9:03:7d:eb: bd:b5:3c:f1:a0:91:d0:b6:55:33:50:78:51:c2:bc: b2:1e:13:7b:c5:b5:90:1b:a1:ab:a6:b2:d1:5b:0b: ad:28:9b:c8:32:3f:cf:ba:e3:a5:63:40:62:d9:a1: 88:21:b8:16:17:de:c1:8d:7d:51:2f:47:02:bb:b1: a2:58:bb:ec:7f:3d:53:af:0e:54:55:7d:61:ce:2d: e6:f5:43:a8:33:08:85:f4:13:96:4c:42:0b:ad:a1: 40:8c:54:72:de:ab:47:5c:5a:07:a3:59:29:38:ca: 3b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D7:23:CA:26:52:FC:66:D3:41:84:AE:26:C0:D7:34:31:65:86:94 X509v3 Authority Key Identifier: keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:38:e4:9a:8e:b1:ac:a2:10:30:5f:0e:f2:f0:02:88:18:71: f3:ca:c0:36:af:2b:f8:6e:cc:b2:c9:16:7c:76:33:94:ee:83: a3:e6:3c:b4:31:5e:3c:d7:8c:f2:2a:8e:a6:02:6d:90:46:f8: 0d:82:ea:9c:50:3c:36:a3:c8:0f:b2:d5:9c:44:0a:f6:22:b1: fd:0e:73:86:30:f7:d5:91:53:63:0c:40:1a:36:45:8a:5b:0a: c0:6d:9a:bb:12:46:8b:c6:6d:a3:ac:29:10:f4:67:16:b5:08: 2a:d9:78:9f:2c:e4:5f:ea:00:95:88:72:88:52:65:2b:5c:b1: 56:49:4e:97:51:bc:26:2f:f2:b3:7d:92:ae:78:ae:3c:fd:c2: b2:5a:7b:af:fb:54:e0:ec:cd:c7:60:32:13:b4:ad:a1:89:9e: 2c:6c:b3:fe:c5:eb:8f:6e:11:76:27:f6:19:38:20:74:f0:0b: 0a:d6:12:45:93:33:e2:9a:68:18:f5:78:16:ed:de:b7:d9:44: dd:93:92:e3:5d:2d:03:45:2f:f4:e4:d7:6f:17:ad:88:96:1c: 75:fb:41:a8:30:d2:c7:17:76:01:d9:a8:bc:4e:36:96:f6:30: b9:0c:51:3c:0a:06:e7:da:98:77:f9:08:72:7d:7d:30:f8:90: 94:e7:c2:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUKC86ML7Y14/vGjBLyjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZjJmYjBmYTUyZGUxM2MzMzY2ODljZjNmNDgyOWQ2MzUw Njc1MGYwHhcNMjYwMTI1MDQwMTQ2WhcNMjYwMTI2MDQwMTQ2WjAzMTEwLwYDVQQD EyhmN2Q3MjNjYTI2NTJmYzY2ZDM0MTg0YWUyNmMwZDczNDMxNjU4Njk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jgAdLvJbN7mSz89wjd2JTVMSsBH hP99PhpKum3mg6lmT2EXAGlL0yLlMjTdCCXmtl5man5yChg2pR5h4ZZzV0SBGG2P P06tpKGWvTNwjpuiyFsHDOsNObXWPWe82lJgwfweQxsiBeEGlDMwNa6YwMKNT2Yc cht7AHVOJB1jKgsVEoFucZkVXIDmfkgCqrUtorkDfeu9tTzxoJHQtlUzUHhRwryy HhN7xbWQG6GrprLRWwutKJvIMj/PuuOlY0Bi2aGIIbgWF97BjX1RL0cCu7GiWLvs fz1Trw5UVX1hzi3m9UOoMwiF9BOWTEILraFAjFRy3qtHXFoHo1kpOMo7PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfXI8omUvxm00GEribA1zQxZYaUMB8GA1UdIwQY MBaAFGzy+w+lLeE8M2aJzz9IKdY1BnUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTkt NmVjOTgyOTUxY2Y3LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC9jZjA3MTUtYjk5My00MzQ4LTk3ZTktNmVjOTgyOTUxY2Y3 LzEvYlBMN0Q2VXQ0VHd6Wm9uUFAwZ3AxalVHZFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALTjkmo6x rKIQMF8O8vACiBhx88rANq8r+G7MsskWfHYzlO6Do+Y8tDFePNeM8iqOpgJtkEb4 DYLqnFA8NqPID7LVnEQK9iKx/Q5zhjD31ZFTYwxAGjZFilsKwG2auxJGi8Zto6wp EPRnFrUIKtl4nyzkX+oAlYhyiFJlK1yxVklOl1G8Ji/ys32SrniuPP3Cslp7r/tU 4OzNx2AyE7StoYmeLGyz/sXrj24Rdif2GTggdPALCtYSRZMz4ppoGPV4Fu3et9lE 3ZOS410tA0Uv9OTXbxetiJYcdftBqDDSxxd2AdmovE42lvYwuQxRPAoG59qYd/kI cn19MPiQlOfCEA== -----END CERTIFICATE-----Generated at Sun Jan 25 13:52:47 2026 by rpki-client