This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft File: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json) Hash identifier: +YRvYlPTuuOXJV2/fQdlj34Vb8d1mpvs5h5ADb/kSsk= Subject key identifier: 12:2A:BD:66:CF:E6:18:D3:CF:C8:B9:8C:20:48:67:84:10:82:1C:FE Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54 Certificate issuer: /CN=6c895335ba98f7c626f0c819e9e2894c61d44754 Certificate serial: 019C1EDFB00064C7891988F52C2954A20B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft Manifest number: 0C35 Signing time: Mon 02 Feb 2026 15:01:41 +0000 Manifest this update: Mon 02 Feb 2026 15:01:41 +0000 Manifest next update: Tue 03 Feb 2026 15:01:41 +0000 Files and hashes: 1: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: KMhtk1s+BXn0SoFEagcIuSGEr3UGbbcRSQErYKB8sA0=) 2: g_yh8ATZEMhSBF0G1C4tLoFKgkU.roa (hash: Tk8GTttv9FTjfJX5sJv62gBRU6O1NMeWOJfwSexMHg8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:df:b0:00:64:c7:89:19:88:f5:2c:29:54:a2:0b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754 Validity Not Before: Feb 2 15:01:41 2026 GMT Not After : Feb 3 15:01:41 2026 GMT Subject: CN=122abd66cfe618d3cfc8b98c2048678410821cfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:fc:bc:2e:cb:7e:fd:1a:21:b2:7d:16:41:97: c9:21:56:05:41:67:d4:af:af:f7:03:f6:4d:77:cc: 8c:68:d3:c5:b6:2e:52:14:69:0e:48:59:71:b4:67: d8:b9:2b:9d:7b:6c:96:1b:84:a9:b1:40:bd:e5:42: 39:d2:c9:9e:3e:c0:e5:ad:b8:a5:b4:9c:09:07:13: 81:27:26:b2:12:51:26:2d:63:16:e5:18:2b:f3:7e: de:b4:1a:e0:d6:b7:52:73:e6:af:0d:78:30:01:87: e2:e0:bf:ae:40:67:57:e9:63:d1:50:81:26:8b:60: 9c:5f:cb:8a:94:89:7c:84:2c:ac:e0:41:32:6f:17: ca:77:c4:88:0a:be:47:31:06:34:3a:bf:bf:fe:2a: b7:6f:6d:6c:9f:6e:2d:0c:01:21:38:1c:8e:df:7b: 88:0c:95:de:55:d3:86:cc:93:4c:12:81:98:93:ef: 4b:c8:6b:a5:f4:d4:de:81:e4:02:9a:56:50:7e:d5: 1d:07:a8:a5:6c:92:96:48:93:3c:6d:ef:a7:a1:0b: 9f:71:8a:4d:e4:e1:dc:43:ea:b8:0b:fc:9a:62:f9: f9:c3:4a:f6:60:d1:7e:df:4c:8c:77:55:4c:be:17: e2:77:7b:0d:62:eb:41:a6:92:41:5f:39:eb:19:12: cf:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2A:BD:66:CF:E6:18:D3:CF:C8:B9:8C:20:48:67:84:10:82:1C:FE X509v3 Authority Key Identifier: keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:17:1e:35:f2:9a:27:41:e3:ec:e5:5e:66:b1:ad:28:ca:8c: a8:2a:21:39:4d:a2:6e:a4:4c:a1:17:f5:06:c1:f5:1e:65:8f: a3:0e:35:98:42:e9:f8:5b:1c:e7:73:70:ad:09:e8:cb:06:50: 64:5f:d2:7b:1d:fe:3b:80:cc:0d:45:fb:bc:ac:fa:c8:d2:52: fb:4b:30:75:f9:4a:56:8b:f0:0c:67:5d:d4:8a:57:a8:d7:24: e3:30:84:02:03:dd:16:d6:65:fb:81:ac:ae:7a:85:33:1f:e7: 16:1f:51:57:75:a6:f6:2b:6c:5b:91:21:10:f4:c5:f3:0a:69: a3:f3:3d:5c:ef:6f:a8:d3:22:3c:0d:22:6d:48:09:b9:c8:e7: f5:85:3d:28:6c:7a:8c:57:c4:f0:9c:ac:56:b5:71:80:5b:bb: c6:e5:d4:3e:dd:98:52:31:24:92:15:84:63:f7:02:0a:45:35: ad:2f:ad:b4:cb:f7:f4:59:85:a3:4e:c3:8c:b9:86:51:e5:39: 36:3c:13:a6:a9:94:3a:27:11:ef:6d:38:b1:7c:13:0e:5b:8e: aa:01:07:a2:ce:99:73:26:1b:ce:a2:04:97:75:74:aa:9e:ff: ad:6a:89:24:86:c9:da:4b:18:94:98:ab:ad:79:e2:bb:3d:b7: 5b:a6:77:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwe37AAZMeJGYj1LClUoguaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjODk1MzM1YmE5OGY3YzYyNmYwYzgxOWU5ZTI4OTRjNjFk NDQ3NTQwHhcNMjYwMjAyMTUwMTQxWhcNMjYwMjAzMTUwMTQxWjAzMTEwLwYDVQQD EygxMjJhYmQ2NmNmZTYxOGQzY2ZjOGI5OGMyMDQ4Njc4NDEwODIxY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfy8Lst+/Rohsn0WQZfJIVYFQWfU r6/3A/ZNd8yMaNPFti5SFGkOSFlxtGfYuSude2yWG4SpsUC95UI50smePsDlrbil tJwJBxOBJyayElEmLWMW5Rgr837etBrg1rdSc+avDXgwAYfi4L+uQGdX6WPRUIEm i2CcX8uKlIl8hCys4EEybxfKd8SICr5HMQY0Or+//iq3b21sn24tDAEhOByO33uI DJXeVdOGzJNMEoGYk+9LyGul9NTegeQCmlZQftUdB6ilbJKWSJM8be+noQufcYpN 5OHcQ+q4C/yaYvn5w0r2YNF+30yMd1VMvhfid3sNYutBppJBXznrGRLPDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIqvWbP5hjTz8i5jCBIZ4QQghz+MB8GA1UdIwQY MBaAFGyJUzW6mPfGJvDIGeniiUxh1EdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMt NzRlZTgzNzM2ZTk3LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMtNzRlZTgzNzM2ZTk3 LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmhceNfKa J0Hj7OVeZrGtKMqMqCohOU2ibqRMoRf1BsH1HmWPow41mELp+Fsc53NwrQnoywZQ ZF/Sex3+O4DMDUX7vKz6yNJS+0swdflKVovwDGdd1IpXqNck4zCEAgPdFtZl+4Gs rnqFMx/nFh9RV3Wm9itsW5EhEPTF8wppo/M9XO9vqNMiPA0ibUgJucjn9YU9KGx6 jFfE8JysVrVxgFu7xuXUPt2YUjEkkhWEY/cCCkU1rS+ttMv39FmFo07DjLmGUeU5 NjwTpqmUOicR7204sXwTDluOqgEHos6ZcyYbzqIEl3V0qp7/rWqJJIbJ2ksYlJir rXniuz23W6Z34Q== -----END CERTIFICATE-----Generated at Mon Feb 2 20:44:54 2026 by rpki-client