This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json) Hash identifier: RCBpZWAN5vrMlqzixRbOErlvLN9dwWj9TKBN3qo1YBE= Subject key identifier: 3D:43:A4:25:01:44:47:DA:34:9E:77:D5:D7:89:56:76:F9:38:4C:97 Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78 Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978 Certificate serial: 019BFE419701D90CF5A76546397AFB6E8AEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft Manifest number: 16EF Signing time: Tue 27 Jan 2026 07:01:09 +0000 Manifest this update: Tue 27 Jan 2026 07:01:09 +0000 Manifest next update: Wed 28 Jan 2026 07:01:09 +0000 Files and hashes: 1: 7ekKRg8g8HrfOcB9YF4-OtPsRQs.roa (hash: yMXJseso0YF/5O/OMhuQoK6YA8+AHyLDCsIrCokdoMw=) 2: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: /ofVqK9lKRShaFA63NBnPaOgISSegV2jX9MQy7TEtPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:41:97:01:d9:0c:f5:a7:65:46:39:7a:fb:6e:8a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978 Validity Not Before: Jan 27 07:01:09 2026 GMT Not After : Jan 28 07:01:09 2026 GMT Subject: CN=3d43a425014447da349e77d5d7895676f9384c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:73:76:1f:25:55:9a:94:9b:eb:b2:7b:50: a8:f8:c9:66:fb:42:d9:d5:3a:31:52:b0:74:35:46: 6f:96:05:26:ef:35:b6:31:68:d5:4e:14:84:80:f1: 24:c6:89:9f:21:c8:cc:ec:7f:a0:2f:eb:3d:37:45: 26:4e:65:53:c6:5f:de:6b:cb:77:7d:cf:7e:a9:88: 1c:a3:b6:98:e8:76:25:8e:18:75:64:0f:b1:57:b4: 31:12:9b:f0:b8:7c:e1:08:41:6a:46:f8:a0:fd:09: f9:42:d0:50:35:9a:56:6d:2c:1a:a1:76:45:01:22: a3:8c:82:77:d0:d9:e9:06:e5:69:7a:97:41:fa:7a: 15:50:9e:78:c4:ef:93:07:2c:70:44:f7:7b:53:c8: 14:b2:26:c8:82:02:18:fd:b4:ad:80:e3:73:d7:7a: 51:f1:e9:f8:b7:bf:30:40:d1:5d:5c:1c:2b:73:97: 2b:6d:ee:49:a1:4d:55:1e:e4:25:7a:ac:51:8d:a4: e3:c1:87:01:c6:a4:58:84:9b:ba:bc:b9:e8:2c:40: 34:64:82:cd:b8:b8:98:39:bc:da:08:66:fa:64:40: ab:93:a3:b0:49:c5:de:90:01:97:3b:72:0f:dd:ab: ab:1d:45:1f:b1:d2:5f:e3:1d:33:de:7b:87:aa:1d: dc:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:43:A4:25:01:44:47:DA:34:9E:77:D5:D7:89:56:76:F9:38:4C:97 X509v3 Authority Key Identifier: keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:02:ec:8c:c4:3b:5c:e9:df:2f:61:2a:71:11:65:75:89:43: 15:b0:1a:30:59:1d:e4:83:07:8c:8d:6d:cb:c4:d9:42:fd:61: 95:a8:84:a8:8f:fd:16:d0:49:ea:78:cb:16:0e:03:f6:f0:87: 1c:fa:e0:2a:3e:18:f6:00:14:0b:be:1c:41:a7:54:37:0c:2f: a8:97:91:f5:3f:7c:12:13:9f:7d:84:24:82:46:de:54:c7:43: 66:2e:19:18:b3:9d:b1:80:36:47:ae:40:20:13:a0:04:3d:49: 43:d9:66:e4:89:5c:89:93:a8:94:3a:81:15:47:d2:4c:5b:43: c3:5b:0d:d8:44:0e:70:fa:3b:21:58:16:da:4d:0b:64:f5:8c: 1c:2f:8b:b8:5e:1d:63:90:24:9b:e2:44:18:2f:fb:58:96:ea: d5:27:7e:6b:9a:bf:81:70:cd:10:21:6b:c8:16:f1:61:41:2f: c8:59:a0:61:df:2d:61:7c:55:00:c7:99:2f:ec:7b:b3:62:40: 60:ee:73:d0:e7:1b:34:09:64:91:d4:d5:9a:3b:04:a0:67:f7: cb:4a:04:fd:ac:4f:2a:1d:9c:eb:a7:62:2b:5d:d2:8c:3b:67: 72:10:88:a6:7d:c9:70:3a:04:6b:dc:25:90:71:28:7f:f8:89: e4:43:04:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+QZcB2Qz1p2VGOXr7borqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjM2E2M2M1MzFjZWU0MWIzYmVkODczMDBlNDU5ZTQ1ZmI5 ZTg5NzgwHhcNMjYwMTI3MDcwMTA5WhcNMjYwMTI4MDcwMTA5WjAzMTEwLwYDVQQD EygzZDQzYTQyNTAxNDQ0N2RhMzQ5ZTc3ZDVkNzg5NTY3NmY5Mzg0Yzk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrhzdh8lVZqUm+uye1Co+Mlm+0LZ 1ToxUrB0NUZvlgUm7zW2MWjVThSEgPEkxomfIcjM7H+gL+s9N0UmTmVTxl/ea8t3 fc9+qYgco7aY6HYljhh1ZA+xV7QxEpvwuHzhCEFqRvig/Qn5QtBQNZpWbSwaoXZF ASKjjIJ30NnpBuVpepdB+noVUJ54xO+TByxwRPd7U8gUsibIggIY/bStgONz13pR 8en4t78wQNFdXBwrc5crbe5JoU1VHuQleqxRjaTjwYcBxqRYhJu6vLnoLEA0ZILN uLiYObzaCGb6ZECrk6OwScXekAGXO3IP3aurHUUfsdJf4x0z3nuHqh3cNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1DpCUBREfaNJ531deJVnb5OEyXMB8GA1UdIwQY MBaAFGw6Y8UxzuQbO+2HMA5FnkX7nol4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDct YjlmM2M2MzUxMjI1LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC9mNWVhMTMtODI3YS00YWNkLWEyMDctYjlmM2M2MzUxMjI1 LzEvYkRwanhUSE81QnM3N1ljd0RrV2VSZnVlaVhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmALsjMQ7 XOnfL2EqcRFldYlDFbAaMFkd5IMHjI1ty8TZQv1hlaiEqI/9FtBJ6njLFg4D9vCH HPrgKj4Y9gAUC74cQadUNwwvqJeR9T98EhOffYQkgkbeVMdDZi4ZGLOdsYA2R65A IBOgBD1JQ9lm5IlciZOolDqBFUfSTFtDw1sN2EQOcPo7IVgW2k0LZPWMHC+LuF4d Y5Akm+JEGC/7WJbq1Sd+a5q/gXDNECFryBbxYUEvyFmgYd8tYXxVAMeZL+x7s2JA YO5z0OcbNAlkkdTVmjsEoGf3y0oE/axPKh2c66diK13SjDtnchCIpn3JcDoEa9wl kHEof/iJ5EMERg== -----END CERTIFICATE-----Generated at Tue Jan 27 10:00:36 2026 by rpki-client