This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json) Hash identifier: ATOe0Iq9Wp0eduPPnwzcbD0Kk/KXP13PybXl8qDx5g4= Subject key identifier: A6:99:88:F8:52:76:89:B4:C4:FB:1D:7C:D6:35:5E:14:FA:EE:10:D6 Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8 Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8 Certificate serial: 019BD68FAE99B7437346B3122789F511A8E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft Manifest number: 0DA2 Signing time: Mon 19 Jan 2026 14:01:39 +0000 Manifest this update: Mon 19 Jan 2026 14:01:39 +0000 Manifest next update: Tue 20 Jan 2026 14:01:39 +0000 Files and hashes: 1: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: 4lM40z9urTtEnVsc2tCjgU/Ywc2ChaH/+a3F3v5pNNg=) 2: fYQ8diFS0pMi17AAJonCpFXTGqg.roa (hash: IlQw7JdR5Y+EO+F9R5RY7SSoodskPtpA7HFrW9NLQp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d6:8f:ae:99:b7:43:73:46:b3:12:27:89:f5:11:a8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8 Validity Not Before: Jan 19 14:01:39 2026 GMT Not After : Jan 20 14:01:39 2026 GMT Subject: CN=a69988f8527689b4c4fb1d7cd6355e14faee10d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:db:16:52:4a:03:33:7c:b5:78:bf:27:a1: 2f:43:6c:a8:e8:e3:70:3a:86:dc:6a:d0:d5:36:c3: 48:f5:b8:25:2b:79:ef:74:d4:05:e2:11:25:0b:a1: 9f:7f:9e:33:08:12:4a:ec:ce:24:d0:82:94:97:f6: fa:de:85:e4:4e:5f:06:2a:c5:66:42:b8:5d:ef:6c: 95:84:d9:4b:59:bb:fa:7a:60:15:29:5c:27:c4:81: 30:fe:bf:05:93:e5:2c:12:c8:06:6c:7a:1a:87:81: a5:81:fb:57:27:be:34:5e:ed:e5:3c:4a:f6:f5:b2: 42:ed:c3:35:a4:0f:92:98:82:a7:c8:b2:08:63:56: 83:de:53:7c:f5:d1:f8:17:3c:aa:0e:24:27:e9:d5: da:03:78:16:45:50:e1:b4:3e:a1:30:e1:f3:93:db: a0:1e:63:50:3e:6d:dc:c8:92:fb:47:d6:d6:24:55: 5f:3e:d6:e9:05:bb:40:e5:08:58:c0:99:a8:37:d9: f2:62:75:7d:03:60:27:a1:12:2a:fc:ab:8a:52:6f: 45:c9:2a:ff:a9:86:b0:b9:97:9a:cb:bc:cd:bd:57: 46:32:19:df:a7:e5:20:56:23:ce:ad:7b:2c:99:a5: 7a:d7:d4:d3:0e:bd:9e:0b:e4:ad:7f:31:77:41:41: 4a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:99:88:F8:52:76:89:B4:C4:FB:1D:7C:D6:35:5E:14:FA:EE:10:D6 X509v3 Authority Key Identifier: keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f9:30:e7:6d:6a:8c:92:f5:7a:0a:3e:02:d1:91:f1:90:7e: 08:69:66:1c:41:16:19:b1:ef:6a:be:21:ba:34:db:ef:6b:19: 5f:0b:d8:b5:87:30:72:75:b3:4e:c8:49:e9:f3:80:0e:00:b6: 7f:71:85:e5:cf:34:10:a9:52:0b:f9:ce:60:26:e9:77:a5:3f: fb:d3:c2:49:7c:4d:9a:8f:9e:0d:63:5f:72:1a:95:8a:d5:44: b8:dd:f7:1f:db:4c:7a:91:02:6e:5f:d0:32:e3:ca:e6:4d:8e: 1c:49:b7:9d:2a:53:fc:6b:cd:ef:bf:d1:0c:11:7d:83:d7:a3: 57:7a:dc:87:c2:0f:a1:35:af:87:84:1e:f4:86:da:a8:2c:ec: 94:64:11:01:72:e8:ff:3e:9e:43:e4:3b:8f:74:d9:a0:6b:22: c8:8f:04:d5:9a:50:f9:56:ba:52:1b:e5:ee:4c:bb:a4:61:17: 33:e9:c5:9a:b2:f4:c4:1c:ab:b4:f0:df:7d:c3:64:73:45:67: 7d:e8:70:9b:e5:7b:0a:be:9e:04:b5:d6:92:0e:81:f7:06:cd: f9:a8:75:5a:07:d1:c0:a0:9e:73:f9:87:e8:d5:ee:28:41:cd: 81:c2:7d:ce:21:05:d4:c5:e3:36:a3:0f:b5:9b:54:14:5d:f8: 18:f0:e6:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvWj66Zt0NzRrMSJ4n1EajnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYTk0NGVhYTljN2Y2ZDQ1NzQwNmYxNDJjNmUyOGNmNWFj YzZhYzgwHhcNMjYwMTE5MTQwMTM5WhcNMjYwMTIwMTQwMTM5WjAzMTEwLwYDVQQD EyhhNjk5ODhmODUyNzY4OWI0YzRmYjFkN2NkNjM1NWUxNGZhZWUxMGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxXbFlJKAzN8tXi/J6EvQ2yo6ONw OobcatDVNsNI9bglK3nvdNQF4hElC6Gff54zCBJK7M4k0IKUl/b63oXkTl8GKsVm Qrhd72yVhNlLWbv6emAVKVwnxIEw/r8Fk+UsEsgGbHoah4GlgftXJ740Xu3lPEr2 9bJC7cM1pA+SmIKnyLIIY1aD3lN89dH4FzyqDiQn6dXaA3gWRVDhtD6hMOHzk9ug HmNQPm3cyJL7R9bWJFVfPtbpBbtA5QhYwJmoN9nyYnV9A2AnoRIq/KuKUm9FySr/ qYawuZeay7zNvVdGMhnfp+UgViPOrXssmaV619TTDr2eC+StfzF3QUFKrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaZiPhSdom0xPsdfNY1XhT67hDWMB8GA1UdIwQY MBaAFGypROqpx/bUV0BvFCxuKM9azGrIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYt M2RlNDRmYzhiM2I1LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8wZWRjMGItN2ViYi00NzBhLWIwNTYtM2RlNDRmYzhiM2I1 LzEvYktsRTZxbkg5dFJYUUc4VUxHNG96MXJNYXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvkw521q jJL1ego+AtGR8ZB+CGlmHEEWGbHvar4hujTb72sZXwvYtYcwcnWzTshJ6fOADgC2 f3GF5c80EKlSC/nOYCbpd6U/+9PCSXxNmo+eDWNfchqVitVEuN33H9tMepECbl/Q MuPK5k2OHEm3nSpT/GvN77/RDBF9g9ejV3rch8IPoTWvh4Qe9IbaqCzslGQRAXLo /z6eQ+Q7j3TZoGsiyI8E1ZpQ+Va6Uhvl7ky7pGEXM+nFmrL0xByrtPDffcNkc0Vn fehwm+V7Cr6eBLXWkg6B9wbN+ah1WgfRwKCec/mH6NXuKEHNgcJ9ziEF1MXjNqMP tZtUFF34GPDmdQ== -----END CERTIFICATE-----Generated at Mon Jan 19 18:20:31 2026 by rpki-client