This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json) Hash identifier: gAQlE/IOSclcHr/3xbsL+2TBs+edB+M5pBumfGOm8Ps= Subject key identifier: DC:02:F0:8D:BB:14:DA:C8:85:26:3F:7C:31:DB:4A:C3:0B:AF:F8:FE Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a Certificate serial: 019BF6BF5DEDB8A1F342FC2982BBD24A1936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft Manifest number: 0957 Signing time: Sun 25 Jan 2026 20:01:35 +0000 Manifest this update: Sun 25 Jan 2026 20:01:35 +0000 Manifest next update: Mon 26 Jan 2026 20:01:35 +0000 Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=) 2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: 9US98f+2gUU2/fBY+N6tvS87gGLAV0KADISFSFBu+Es=) 3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:5d:ed:b8:a1:f3:42:fc:29:82:bb:d2:4a:19:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a Validity Not Before: Jan 25 20:01:35 2026 GMT Not After : Jan 26 20:01:35 2026 GMT Subject: CN=dc02f08dbb14dac885263f7c31db4ac30baff8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:7e:83:f4:01:7d:2d:42:fe:82:48:a7:48:a1: 09:cf:24:bc:70:bf:f1:96:7d:a3:b7:84:70:3a:eb: db:f3:5f:12:97:61:c2:23:93:2e:ed:92:75:f2:80: 06:04:d0:c7:95:36:0c:fd:92:11:ee:8c:d3:40:78: 40:66:e2:ea:92:5d:03:49:d3:51:d7:e6:e8:d5:bd: 83:62:ef:c9:b9:aa:3a:2a:ba:38:67:a3:f4:70:d3: 17:40:b6:b7:6a:1a:9c:3b:57:d6:bc:8f:66:70:96: 59:49:f3:f4:9e:d1:88:21:87:ba:89:c3:88:66:37: f2:ce:f1:5f:2e:e4:83:f4:6b:4e:3b:5f:c2:7b:70: 52:de:2a:d9:77:cc:a1:b8:1a:81:f1:1a:f3:a0:59: 3b:d8:68:f8:d4:77:56:44:0f:a1:5e:da:e5:c5:87: 23:d1:83:a2:21:22:6a:45:c4:f2:a8:d4:f1:c4:a4: 4b:f3:55:3f:27:86:1a:32:6c:c6:fb:f8:fa:fe:a5: 4e:ab:2d:94:03:e6:3e:96:25:d9:a4:b8:d3:3f:00: a5:b7:d0:2d:ff:1b:8c:6b:4f:f2:d4:61:05:4e:07: 05:15:10:6c:9a:80:f0:0c:df:cf:7a:d0:7a:42:62: 56:c8:42:73:00:86:cb:55:ec:97:5d:bc:c2:9a:2a: c8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:02:F0:8D:BB:14:DA:C8:85:26:3F:7C:31:DB:4A:C3:0B:AF:F8:FE X509v3 Authority Key Identifier: keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:ad:ab:18:c5:f4:24:2c:9f:a1:f0:f9:43:3b:5b:1b:ac:78: f5:f9:8d:c4:71:72:06:13:3e:1e:ff:9a:30:e5:35:84:f9:77: ec:d8:43:bc:8c:7c:70:c4:ed:c5:86:8c:a2:65:a9:66:65:e6: e9:e1:af:e7:c1:e6:ca:7d:dd:45:24:ba:08:af:62:f2:5f:88: 72:0b:31:b2:95:0e:70:15:7d:ac:75:6e:c1:d8:b6:1d:05:47: d9:5a:95:4e:44:8b:e2:57:ef:04:ca:8b:6b:c2:f6:77:12:1c: 22:32:1a:fd:55:b8:66:6c:92:3a:9a:0b:d6:0e:66:45:d1:27: 27:56:00:9f:ce:5c:67:f6:38:4b:07:17:76:c2:c5:55:b6:dc: 6e:6a:65:39:20:cd:22:a5:ff:22:fd:7a:22:71:de:6e:46:27: 38:64:46:35:2e:76:b2:69:12:28:77:45:60:c6:48:4f:01:f1: 89:b7:cc:47:79:a8:16:07:77:55:3c:f8:ea:e0:4a:0a:21:8d: fb:c8:ed:d2:3e:5f:8a:c5:43:e3:0e:a0:38:2a:85:21:81:84: 95:f4:ca:87:aa:3f:6e:02:37:c0:88:a2:e5:d1:f7:03:47:15: 87:3f:69:c3:a4:98:b1:fb:be:bf:07:56:f6:ce:bb:1e:8b:70: b0:4b:ae:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v13tuKHzQvwpgrvSShk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNTM3N2JiOWRhNDFjYWExMTc2ZjQzMjI2MmRjYWE5OWM0 NzZmOWEwHhcNMjYwMTI1MjAwMTM1WhcNMjYwMTI2MjAwMTM1WjAzMTEwLwYDVQQD EyhkYzAyZjA4ZGJiMTRkYWM4ODUyNjNmN2MzMWRiNGFjMzBiYWZmOGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X6D9AF9LUL+gkinSKEJzyS8cL/x ln2jt4RwOuvb818Sl2HCI5Mu7ZJ18oAGBNDHlTYM/ZIR7ozTQHhAZuLqkl0DSdNR 1+bo1b2DYu/Juao6Kro4Z6P0cNMXQLa3ahqcO1fWvI9mcJZZSfP0ntGIIYe6icOI ZjfyzvFfLuSD9GtOO1/Ce3BS3irZd8yhuBqB8RrzoFk72Gj41HdWRA+hXtrlxYcj 0YOiISJqRcTyqNTxxKRL81U/J4YaMmzG+/j6/qVOqy2UA+Y+liXZpLjTPwClt9At /xuMa0/y1GEFTgcFFRBsmoDwDN/PetB6QmJWyEJzAIbLVeyXXbzCmirIDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwC8I27FNrIhSY/fDHbSsMLr/j+MB8GA1UdIwQY MBaAFGxTd7udpByqEXb0MiYtyqmcR2+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2It NmVkMTBlYmI5MzNmLzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2ItNmVkMTBlYmI5MzNm LzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAra2rGMX0 JCyfofD5QztbG6x49fmNxHFyBhM+Hv+aMOU1hPl37NhDvIx8cMTtxYaMomWpZmXm 6eGv58Hmyn3dRSS6CK9i8l+IcgsxspUOcBV9rHVuwdi2HQVH2VqVTkSL4lfvBMqL a8L2dxIcIjIa/VW4ZmySOpoL1g5mRdEnJ1YAn85cZ/Y4SwcXdsLFVbbcbmplOSDN IqX/Iv16InHebkYnOGRGNS52smkSKHdFYMZITwHxibfMR3moFgd3VTz46uBKCiGN +8jt0j5fisVD4w6gOCqFIYGElfTKh6o/bgI3wIii5dH3A0cVhz9pw6SYsfu+vwdW 9s67HotwsEuuiA== -----END CERTIFICATE-----Generated at Mon Jan 26 02:26:42 2026 by rpki-client