This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft File: BwSD09YvGcCDV0bctyHIgyw7eSY.mft (raw, json) Hash identifier: xLdj/FLk6cCHYL//LIHIBLkJehwA7EWo2xT+mh8xlRA= Subject key identifier: 49:F8:E7:02:5D:43:63:77:D8:25:27:58:31:7C:09:C7:8E:2A:C6:0E Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26 Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926 Certificate serial: 019BDDDB80E655895E2C3A4C4E247B933943 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft Manifest number: 1373 Signing time: Wed 21 Jan 2026 00:01:48 +0000 Manifest this update: Wed 21 Jan 2026 00:01:48 +0000 Manifest next update: Thu 22 Jan 2026 00:01:48 +0000 Files and hashes: 1: 64ihED3jNS0XaSeuUSeyFg_2bZM.roa (hash: /BfCWPD85MIAwhiqpxCqxKLQ9kOdpzvT6SrltrLnWac=) 2: BwSD09YvGcCDV0bctyHIgyw7eSY.crl (hash: 3ipl32/cLK+1ORCLtj5m0HoxshgJ6UBnzrjD+b8JBlQ=) 3: U_IVMG7bQBnJVGDLyXYBpWOHB2A.roa (hash: q/ZezPb+HqhfJjhS/MThIaBJugpttbjehqzX0ZM2VRQ=) 4: Y28x5IzUI42VFOBvke09KYzr7_U.roa (hash: hhVaUfCtGXTnfymIDdR8UxHA+TnCtopLvOzuoWmW+28=) 5: bLR2p3__awZBusTPsasm4YiUzOA.roa (hash: kbNkczFSH4sSNGYoqWKL5gjy1l744pKUP8ECezyOvL0=) 6: rJY5TcCiuq04IdP2xEDQUAGD_Vc.roa (hash: Rb/TbhBXQKzjnpKo+twePuPCv4XuT1hR1nvFOWeVlNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:db:80:e6:55:89:5e:2c:3a:4c:4e:24:7b:93:39:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926 Validity Not Before: Jan 21 00:01:48 2026 GMT Not After : Jan 22 00:01:48 2026 GMT Subject: CN=49f8e7025d436377d8252758317c09c78e2ac60e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9e:dd:38:66:f0:e6:7f:cf:eb:84:6c:3c:a3: 07:77:af:ae:39:8d:08:68:ab:ae:63:a1:53:22:13: b6:4c:9e:e0:6a:c3:66:a7:36:47:13:58:4c:45:c2: 58:72:29:f7:5a:5d:97:f9:39:8f:2f:77:7f:6e:1f: 07:fb:2f:a0:c5:b9:bf:c9:6e:dc:62:bd:f9:b6:55: 94:c2:70:64:9b:8c:84:87:c3:87:46:52:51:36:36: 5c:0a:b9:68:c1:f0:86:94:4c:22:cb:eb:12:99:2f: f1:68:30:01:51:d0:b3:57:af:aa:fe:6b:93:b6:7f: 10:be:14:07:90:25:29:2c:ce:73:4d:da:36:1c:83: 57:12:1d:82:ce:35:16:e1:03:f2:24:21:ca:12:76: 4f:04:de:b3:d6:68:46:f2:6e:15:65:ce:e9:61:22: 86:2b:ff:88:c8:d9:74:25:73:59:2f:3b:72:26:e8: ad:c5:f8:44:8f:de:a6:1a:53:40:4f:e4:19:22:fb: e8:de:d4:d0:54:3e:a4:71:7d:2b:17:6b:0f:9a:7d: d6:a9:89:71:66:6d:9a:fd:88:f1:76:a5:fa:09:75: 94:06:a5:c9:50:39:86:1f:db:18:fd:a5:83:92:e1: 0f:e7:89:34:41:da:d9:25:35:82:7f:b8:7e:f7:c6: e6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F8:E7:02:5D:43:63:77:D8:25:27:58:31:7C:09:C7:8E:2A:C6:0E X509v3 Authority Key Identifier: keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cd:7b:7b:87:ba:86:c5:d2:70:ba:9e:2f:11:cc:6d:c8:e5: eb:8f:d0:01:23:93:f0:67:93:d9:1b:71:9f:de:58:e4:b9:87: 5a:f5:23:38:43:7e:d9:75:2e:4e:fe:3c:78:54:42:8a:ba:4e: 67:2b:ea:7f:c0:da:bb:80:5e:62:89:d7:ba:1b:94:ae:50:d6: 86:4d:cf:f0:c0:8e:c2:61:00:ba:a3:08:1a:61:d2:ae:b6:58: af:b7:84:3b:d4:47:0c:4a:28:41:d7:68:d3:71:40:e4:4a:44: 43:18:95:ab:a8:34:35:da:4e:c0:84:2e:bf:63:1b:5d:fc:be: 98:00:75:a9:2b:45:bc:9f:50:3e:99:5a:89:f5:70:67:64:f9: bf:a7:20:45:18:d8:c4:48:50:04:d4:5c:e5:df:b5:f1:c8:6d: 6e:dd:83:b3:27:c6:db:d2:0b:8f:71:9b:97:9a:fc:48:64:c3: bb:fa:84:b5:9f:e0:a2:71:06:2f:3f:58:d6:e8:6f:fc:f0:c5: 17:e0:cf:26:e4:26:ce:5b:f7:c5:05:93:9a:3a:1e:94:25:a9: 65:fd:87:17:81:76:ff:6b:bd:40:fe:fc:d0:ff:cc:bc:cb:70: e0:74:90:23:45:2c:41:fb:10:78:f0:72:b9:a7:2a:5c:05:2e: c2:10:25:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvd24DmVYleLDpMTiR7kzlDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDQ4M2QzZDYyZjE5YzA4MzU3NDZkY2I3MjFjODgzMmMz Yjc5MjYwHhcNMjYwMTIxMDAwMTQ4WhcNMjYwMTIyMDAwMTQ4WjAzMTEwLwYDVQQD Eyg0OWY4ZTcwMjVkNDM2Mzc3ZDgyNTI3NTgzMTdjMDljNzhlMmFjNjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ7dOGbw5n/P64RsPKMHd6+uOY0I aKuuY6FTIhO2TJ7gasNmpzZHE1hMRcJYcin3Wl2X+TmPL3d/bh8H+y+gxbm/yW7c Yr35tlWUwnBkm4yEh8OHRlJRNjZcCrlowfCGlEwiy+sSmS/xaDABUdCzV6+q/muT tn8QvhQHkCUpLM5zTdo2HINXEh2CzjUW4QPyJCHKEnZPBN6z1mhG8m4VZc7pYSKG K/+IyNl0JXNZLztyJuitxfhEj96mGlNAT+QZIvvo3tTQVD6kcX0rF2sPmn3WqYlx Zm2a/YjxdqX6CXWUBqXJUDmGH9sY/aWDkuEP54k0QdrZJTWCf7h+98bmxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEn45wJdQ2N32CUnWDF8CceOKsYOMB8GA1UdIwQY MBaAFAcEg9PWLxnAg1dG3LchyIMsO3kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAt ZDQ0MmM0ZjllOWJkLzEvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAtZDQ0MmM0ZjllOWJk LzEvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGs17e4e6 hsXScLqeLxHMbcjl64/QASOT8GeT2Rtxn95Y5LmHWvUjOEN+2XUuTv48eFRCirpO Zyvqf8Dau4BeYonXuhuUrlDWhk3P8MCOwmEAuqMIGmHSrrZYr7eEO9RHDEooQddo 03FA5EpEQxiVq6g0NdpOwIQuv2MbXfy+mAB1qStFvJ9QPplaifVwZ2T5v6cgRRjY xEhQBNRc5d+18chtbt2DsyfG29ILj3Gbl5r8SGTDu/qEtZ/gonEGLz9Y1uhv/PDF F+DPJuQmzlv3xQWTmjoelCWpZf2HF4F2/2u9QP780P/MvMtw4HSQI0UsQfsQePBy uacqXAUuwhAlTg== -----END CERTIFICATE-----Generated at Wed Jan 21 06:27:25 2026 by rpki-client