This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json) Hash identifier: scmiasB+RGNyVbtgFSHkWze/9LRjW/UlV3qSL5JGOno= Subject key identifier: F1:B0:E6:7C:29:F9:7F:A1:11:7F:0C:85:E4:A4:EB:ED:2B:2E:C7:6D Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53 Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53 Certificate serial: 019BF72CAB4153CE4F9927E26FF0D3179A97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 22:00:58 +0000 Manifest this update: Sun 25 Jan 2026 22:00:58 +0000 Manifest next update: Mon 26 Jan 2026 22:00:58 +0000 Files and hashes: 1: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: gcWTUC6Fvtwg3W6QMNwFdgU86CqF/z5jDr4sjT/mlYc=) 2: rLpRZvFN9tLJOZKsRQ2iN0bOTkA.roa (hash: 7Y/pwxfKMpnXy8fpQNc1oxHBEDERRxAILiQLxs4GnLU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2c:ab:41:53:ce:4f:99:27:e2:6f:f0:d3:17:9a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53 Validity Not Before: Jan 25 22:00:58 2026 GMT Not After : Jan 26 22:00:58 2026 GMT Subject: CN=f1b0e67c29f97fa1117f0c85e4a4ebed2b2ec76d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c1:9b:af:92:3b:f3:f6:19:47:fc:c6:2e:29: 0b:ab:c8:a8:7a:45:f9:16:25:cb:94:76:e8:52:5f: 61:ed:9e:3e:fc:10:81:93:94:2e:d1:de:6a:f9:df: 4a:f0:ad:ab:19:5b:c4:5e:19:51:af:8a:7e:d7:10: 7e:9b:2d:4e:57:b8:a8:d3:1c:7b:bd:58:26:32:79: 03:92:81:56:26:20:c8:6c:70:24:3f:3e:44:31:f8: e8:d7:e5:e6:be:d9:76:09:bb:41:2d:79:9d:26:be: 88:27:f6:21:d3:74:06:37:b1:90:96:99:65:8a:c4: 52:84:27:b5:bd:59:a6:ff:f7:e2:90:7f:24:fc:cc: 7a:dd:76:56:b1:5d:82:be:7e:31:19:26:25:3c:53: 57:71:a3:ab:b2:ea:bc:07:83:7d:1a:01:4b:55:9c: bb:07:6d:d5:06:80:f7:5d:54:37:4d:42:66:a1:0c: fe:0e:fe:b8:51:53:13:5a:e8:9f:1c:cb:38:76:84: 38:67:cc:91:37:2c:49:83:a3:c4:12:fd:42:68:47: d5:be:5c:eb:04:8b:1e:26:5d:14:90:7c:dc:d4:fc: 92:77:67:42:bc:27:9f:b5:e7:74:63:e6:74:c8:d1: 67:e2:af:72:80:89:0e:4d:f5:ce:1f:7e:85:f3:1b: 29:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:B0:E6:7C:29:F9:7F:A1:11:7F:0C:85:E4:A4:EB:ED:2B:2E:C7:6D X509v3 Authority Key Identifier: keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:37:71:d7:40:5c:a7:30:39:5d:05:80:cc:8e:74:38:64:e6: 62:ce:29:b9:9f:cd:79:7b:68:0d:a8:d8:67:71:66:d8:df:5d: ed:8e:ae:0d:b6:e5:fc:b5:36:64:2f:45:96:85:1a:ff:eb:83: 61:66:e0:34:af:90:a3:e3:d2:ff:bc:eb:3b:48:49:21:61:d4: 70:30:31:c2:6b:5a:2c:aa:ef:92:21:07:22:b8:57:27:64:0f: 18:83:08:46:4b:2e:b4:32:e1:bd:5d:ef:15:05:10:16:1e:01: 07:51:5b:9d:b4:d0:e0:00:89:7e:55:14:da:a2:50:ce:fe:5e: a4:6b:85:f8:a0:aa:c9:a3:53:09:33:b2:46:d3:37:53:af:1e: 53:69:85:0c:c0:27:62:e6:50:66:73:1a:40:ef:56:f1:9b:39: 60:ce:9c:56:87:2e:87:4e:65:bf:3e:f2:9e:7c:90:c4:d3:aa: 14:9d:14:90:b7:4a:3c:f2:b0:e8:3d:03:0e:96:05:57:e5:8d: f8:69:84:c3:4e:dc:ef:70:4b:f5:d9:77:01:07:6c:cb:30:aa: 7f:a2:5f:ed:a3:7d:d2:bd:48:6e:df:be:ce:ec:76:87:21:0b: 4a:26:03:d3:dd:b3:b1:cb:9d:97:0d:0b:8d:ab:c0:c9:f4:22: 1a:72:d8:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LKtBU85PmSfib/DTF5qXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkOTM5ZWI3NGFiYmNkMjIyN2MyMTkyYWEyYTM3ZTZkY2I4 OThlNTMwHhcNMjYwMTI1MjIwMDU4WhcNMjYwMTI2MjIwMDU4WjAzMTEwLwYDVQQD EyhmMWIwZTY3YzI5Zjk3ZmExMTE3ZjBjODVlNGE0ZWJlZDJiMmVjNzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38Gbr5I78/YZR/zGLikLq8ioekX5 FiXLlHboUl9h7Z4+/BCBk5Qu0d5q+d9K8K2rGVvEXhlRr4p+1xB+my1OV7io0xx7 vVgmMnkDkoFWJiDIbHAkPz5EMfjo1+Xmvtl2CbtBLXmdJr6IJ/Yh03QGN7GQlpll isRShCe1vVmm//fikH8k/Mx63XZWsV2Cvn4xGSYlPFNXcaOrsuq8B4N9GgFLVZy7 B23VBoD3XVQ3TUJmoQz+Dv64UVMTWuifHMs4doQ4Z8yRNyxJg6PEEv1CaEfVvlzr BIseJl0UkHzc1PySd2dCvCefted0Y+Z0yNFn4q9ygIkOTfXOH36F8xsp2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGw5nwp+X+hEX8MheSk6+0rLsdtMB8GA1UdIwQY MBaAFG2TnrdKu80iJ8IZKqKjfm3LiY5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTIt ZTk1ZTJkM2QyM2UwLzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTItZTk1ZTJkM2QyM2Uw LzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkzdx10Bc pzA5XQWAzI50OGTmYs4puZ/NeXtoDajYZ3Fm2N9d7Y6uDbbl/LU2ZC9FloUa/+uD YWbgNK+Qo+PS/7zrO0hJIWHUcDAxwmtaLKrvkiEHIrhXJ2QPGIMIRksutDLhvV3v FQUQFh4BB1FbnbTQ4ACJflUU2qJQzv5epGuF+KCqyaNTCTOyRtM3U68eU2mFDMAn YuZQZnMaQO9W8Zs5YM6cVocuh05lvz7ynnyQxNOqFJ0UkLdKPPKw6D0DDpYFV+WN +GmEw07c73BL9dl3AQdsyzCqf6Jf7aN90r1Ibt++zux2hyELSiYD092zscudlw0L javAyfQiGnLYWg== -----END CERTIFICATE-----Generated at Mon Jan 26 00:26:57 2026 by rpki-client