This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json) Hash identifier: zw012Pq3KT5tUO7/icI51xzkSuBOplnf5DpZPh8VY/M= Subject key identifier: 88:1E:0A:D4:6F:2B:02:79:3D:E8:6C:B5:B1:EE:B7:39:4F:86:33:D7 Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb Certificate serial: 019BFC1CBEA0C51C115591110C0D0613A23E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft Manifest number: 0251 Signing time: Mon 26 Jan 2026 21:01:40 +0000 Manifest this update: Mon 26 Jan 2026 21:01:40 +0000 Manifest next update: Tue 27 Jan 2026 21:01:40 +0000 Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: DvUMNPQHcK3oEaEMC1Q8V26EULcbdETmEMXBK8jZ5V8=) 2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:be:a0:c5:1c:11:55:91:11:0c:0d:06:13:a2:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=073848d8281be439e77750885b547a28152801bb Validity Not Before: Jan 26 21:01:40 2026 GMT Not After : Jan 27 21:01:40 2026 GMT Subject: CN=881e0ad46f2b02793de86cb5b1eeb7394f8633d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:a1:2b:15:96:c4:c1:32:71:30:aa:7e:64: 2e:2d:75:70:5b:ef:01:64:b3:80:c7:dc:57:c5:38: 66:78:76:e1:54:5e:4f:4d:c7:be:63:c0:da:86:17: bb:e8:96:ef:e3:b9:e1:e3:9b:84:28:b7:d3:29:40: 62:45:b7:d0:a4:bd:a2:7c:04:e1:67:bc:da:26:a0: 69:dd:79:08:ca:0e:da:d3:83:58:03:b3:0c:39:b6: bc:6d:bd:9f:7c:ad:df:36:d9:a3:71:d2:85:1e:b1: d5:69:2f:fd:12:9e:4f:33:1a:43:d3:50:aa:8c:46: aa:59:d0:09:3a:65:b2:5c:90:10:2e:51:b4:1a:9d: a6:3b:ce:ac:96:27:59:3e:57:4c:8d:79:05:14:7c: 20:e6:60:27:6a:1b:b8:8f:05:fe:81:74:3d:dc:fe: e8:8d:4f:fc:14:90:ff:9f:b1:c4:3a:0c:3c:6c:e9: 92:cb:85:a2:22:ab:c1:10:29:a5:7c:28:f8:13:ec: ad:dd:00:11:84:35:7f:19:5a:58:de:0e:19:0a:c9: b8:01:56:f4:39:0c:32:3e:8a:ee:85:08:3b:1a:b7: cf:a7:1b:33:6b:00:1c:85:68:0b:1b:69:9d:ef:27: f9:87:7d:fc:bf:3c:ae:28:47:ff:ff:57:d5:50:5f: 44:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:1E:0A:D4:6F:2B:02:79:3D:E8:6C:B5:B1:EE:B7:39:4F:86:33:D7 X509v3 Authority Key Identifier: keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:b1:42:96:e1:28:bd:c3:1b:d1:12:12:80:50:10:2e:f5:71: 09:99:dc:23:a8:bb:62:d1:2e:59:fe:bb:c2:db:64:ec:81:2d: ab:f9:a8:16:02:ce:23:43:2b:be:24:a3:f7:2c:b3:29:61:55: ce:ed:45:95:21:e4:5f:49:27:50:73:fb:d0:d9:fd:c8:95:90: 65:4a:55:61:23:3d:17:ab:84:0e:46:e6:46:8f:43:14:72:c7: 47:e8:fd:5b:32:07:da:6c:a1:be:0b:3b:20:39:db:01:b7:08: 98:cc:40:62:df:63:5e:13:80:e1:7d:f4:da:e7:a3:6d:9e:71: 09:1e:3f:d8:f2:94:21:e1:3f:21:ce:f9:d8:2b:f8:cc:80:ea: 9e:17:05:87:aa:1a:de:db:bc:ee:ba:5c:5b:11:24:f9:11:86: a5:d8:28:61:ae:7a:bf:82:cf:b7:01:71:5d:8c:b3:e4:98:4b: 82:fe:9f:50:f4:bd:53:84:46:2e:28:6a:b7:89:b8:1a:93:6c: ba:b6:ab:da:f7:d2:57:53:1b:b5:70:0f:bf:3d:31:e1:5c:87: b0:1d:71:7a:a2:6c:ae:3a:8e:b0:53:42:2e:ed:45:c8:d6:55: 16:33:be:e9:8d:ab:34:dc:d6:85:64:96:09:70:e3:c7:b0:d1: ea:69:8e:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HL6gxRwRVZERDA0GE6I+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3Mzg0OGQ4MjgxYmU0MzllNzc3NTA4ODViNTQ3YTI4MTUy ODAxYmIwHhcNMjYwMTI2MjEwMTQwWhcNMjYwMTI3MjEwMTQwWjAzMTEwLwYDVQQD Eyg4ODFlMGFkNDZmMmIwMjc5M2RlODZjYjViMWVlYjczOTRmODYzM2Q3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdShKxWWxMEycTCqfmQuLXVwW+8B ZLOAx9xXxThmeHbhVF5PTce+Y8Dahhe76Jbv47nh45uEKLfTKUBiRbfQpL2ifATh Z7zaJqBp3XkIyg7a04NYA7MMOba8bb2ffK3fNtmjcdKFHrHVaS/9Ep5PMxpD01Cq jEaqWdAJOmWyXJAQLlG0Gp2mO86slidZPldMjXkFFHwg5mAnahu4jwX+gXQ93P7o jU/8FJD/n7HEOgw8bOmSy4WiIqvBECmlfCj4E+yt3QARhDV/GVpY3g4ZCsm4AVb0 OQwyPoruhQg7GrfPpxszawAchWgLG2md7yf5h338vzyuKEf//1fVUF9EBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgeCtRvKwJ5PehstbHutzlPhjPXMB8GA1UdIwQY MBaAFAc4SNgoG+Q553dQiFtUeigVKAG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMt NGM1YjIwMGI2NzA5LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMtNGM1YjIwMGI2NzA5 LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwLFCluEo vcMb0RISgFAQLvVxCZncI6i7YtEuWf67wttk7IEtq/moFgLOI0MrviSj9yyzKWFV zu1FlSHkX0knUHP70Nn9yJWQZUpVYSM9F6uEDkbmRo9DFHLHR+j9WzIH2myhvgs7 IDnbAbcImMxAYt9jXhOA4X302uejbZ5xCR4/2PKUIeE/Ic752Cv4zIDqnhcFh6oa 3tu87rpcWxEk+RGGpdgoYa56v4LPtwFxXYyz5JhLgv6fUPS9U4RGLihqt4m4GpNs urar2vfSV1MbtXAPvz0x4VyHsB1xeqJsrjqOsFNCLu1FyNZVFjO+6Y2rNNzWhWSW CXDjx7DR6mmOeQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:51 2026 by rpki-client