This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft File: x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json) Hash identifier: nA7tHbUfvSVAwC2+/NNdjg3du9AKb69gmSsGTJeX1KA= Subject key identifier: 98:A6:13:99:57:34:CF:0A:0E:0B:FC:E5:68:57:99:47:EB:21:08:D8 Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65 Certificate issuer: /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865 Certificate serial: 019BD9228D519742750DF7F7F529EB9F660A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft Manifest number: 107B Signing time: Tue 20 Jan 2026 02:01:18 +0000 Manifest this update: Tue 20 Jan 2026 02:01:18 +0000 Manifest next update: Wed 21 Jan 2026 02:01:18 +0000 Files and hashes: 1: Qt6UBSy6AyGq63QOVL4RXffcTic.roa (hash: DrxVhbMxa0VyjrLuDeUMjs53zIXiEcOYuKYWoHkcfHw=) 2: ap-XVBzw4zZPatC0RYn5qlV_mrQ.roa (hash: +C964lY3jvSC9YXuZCdEHQIGMY6YBYM0/bQTHHxKS1E=) 3: lJDrnLvMDgHk_fzThFsf8Cm6mX0.roa (hash: w3x9Am6AgVtB0uwWUskomuBF/D7slx352RaRjUM5kz4=) 4: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: nlgNLd50MXYQb3AMl+4llgid0262b+gtaMRuCc+T8mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:22:8d:51:97:42:75:0d:f7:f7:f5:29:eb:9f:66:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865 Validity Not Before: Jan 20 02:01:18 2026 GMT Not After : Jan 21 02:01:18 2026 GMT Subject: CN=98a613995734cf0a0e0bfce568579947eb2108d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3d:05:3a:36:71:14:d9:ce:26:d7:13:c6:06: 2a:ab:a3:07:4c:74:18:8d:da:1c:e0:f1:06:39:bc: c0:1b:78:98:5c:cd:04:2a:10:26:6f:0a:ca:95:ef: 1e:7f:41:06:e4:1b:a3:d1:d0:98:4f:87:46:bc:8f: 09:39:dd:56:a0:b4:76:0c:68:a0:0c:8d:6e:e3:04: e1:cb:01:6f:22:53:66:1e:2a:e1:be:dc:ee:90:69: f1:bf:08:fd:79:1c:b8:29:4c:92:1d:4c:a5:e7:64: 56:ac:0a:79:7f:13:31:33:b5:1b:92:20:3f:ae:de: 77:f6:a4:b3:4a:dd:d8:6d:f4:fe:79:f0:b9:db:ee: ac:df:56:1c:e5:bc:24:73:2d:ad:8a:3a:68:14:35: de:47:d7:87:db:4a:8d:d0:23:dc:6f:06:36:8c:30: 18:98:52:36:ab:a0:05:ff:00:0b:72:55:b0:8b:b5: 7f:76:89:67:53:bd:b0:00:9b:0b:56:f3:57:ea:65: 97:01:a8:06:8d:db:69:e6:f0:1e:4b:e6:35:ac:f7: 20:e3:0d:5f:c7:4b:0a:19:8c:6b:ad:0c:57:ed:5c: 6b:a7:c9:89:1a:eb:13:b3:92:c8:0b:50:42:c8:25: 17:f7:a1:72:2e:1a:89:db:b9:14:15:17:1b:b7:0a: 70:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A6:13:99:57:34:CF:0A:0E:0B:FC:E5:68:57:99:47:EB:21:08:D8 X509v3 Authority Key Identifier: keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:d8:53:9a:12:d4:38:66:4e:4f:0c:48:1e:4b:25:71:1d:b7: 2e:fe:b7:a8:59:a0:b9:e8:a0:99:36:48:e9:8f:aa:b2:2c:0c: 16:5d:17:f1:83:21:f4:03:52:d1:0c:e2:53:87:d5:91:73:08: 32:55:4e:7c:44:8a:cf:d6:e5:7b:de:f3:a0:8d:2e:bb:19:02: 46:39:9a:8c:4f:fb:6f:3d:b9:e3:a4:31:6f:2c:2a:42:5b:d5: 02:91:2d:2b:5b:fe:5c:30:1b:29:d3:5e:fc:b7:ad:49:53:76: d7:00:ce:77:2e:72:5e:8a:e2:a6:91:c9:e0:aa:5d:f0:f7:1e: 44:51:dd:52:50:6a:d2:99:cb:7b:1f:32:ac:60:b3:a0:0a:04: 60:04:29:02:60:d7:8c:83:41:ae:ee:d3:aa:c6:ee:bf:d6:85: 55:86:4f:58:a8:ea:d5:fb:ad:70:74:1d:c2:dd:39:3c:6c:0c: db:a8:46:97:ec:7f:a6:87:ce:91:c9:b0:61:3d:67:8c:9c:39: 54:3b:84:66:88:cf:75:f9:db:88:62:65:fb:a2:c1:6b:81:94: 69:64:68:96:58:2b:61:eb:64:9b:8b:ce:cc:c4:99:50:4b:da: 60:8f:63:75:ee:b9:97:e9:79:9e:a8:ed:fd:58:c6:6f:bc:1f: 2d:2f:42:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZIo1Rl0J1Dff39Snrn2YKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3ZjA0Yjc4YjJlZWRmOTk4ZWRkNWNjMWU4ODY3MWM4ZDEw ZjE4NjUwHhcNMjYwMTIwMDIwMTE4WhcNMjYwMTIxMDIwMTE4WjAzMTEwLwYDVQQD Eyg5OGE2MTM5OTU3MzRjZjBhMGUwYmZjZTU2ODU3OTk0N2ViMjEwOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvj0FOjZxFNnOJtcTxgYqq6MHTHQY jdoc4PEGObzAG3iYXM0EKhAmbwrKle8ef0EG5Buj0dCYT4dGvI8JOd1WoLR2DGig DI1u4wThywFvIlNmHirhvtzukGnxvwj9eRy4KUySHUyl52RWrAp5fxMxM7UbkiA/ rt539qSzSt3YbfT+efC52+6s31Yc5bwkcy2tijpoFDXeR9eH20qN0CPcbwY2jDAY mFI2q6AF/wALclWwi7V/dolnU72wAJsLVvNX6mWXAagGjdtp5vAeS+Y1rPcg4w1f x0sKGYxrrQxX7Vxrp8mJGusTs5LIC1BCyCUX96FyLhqJ27kUFRcbtwpw5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJimE5lXNM8KDgv85WhXmUfrIQjYMB8GA1UdIwQY MBaAFMfwS3iy7t+Zjt1cweiGccjRDxhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzct ZjQzNzgzOTA5NWQxLzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy80NzM5MjQtNmY5OS00NzNkLWEwNzctZjQzNzgzOTA5NWQx LzEveF9CTGVMTHUzNW1PM1Z6QjZJWnh5TkVQR0dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9hTmhLU OGZOTwxIHkslcR23Lv63qFmgueigmTZI6Y+qsiwMFl0X8YMh9ANS0QziU4fVkXMI MlVOfESKz9ble97zoI0uuxkCRjmajE/7bz2546QxbywqQlvVApEtK1v+XDAbKdNe /LetSVN21wDOdy5yXorippHJ4Kpd8PceRFHdUlBq0pnLex8yrGCzoAoEYAQpAmDX jINBru7Tqsbuv9aFVYZPWKjq1futcHQdwt05PGwM26hGl+x/pofOkcmwYT1njJw5 VDuEZojPdfnbiGJl+6LBa4GUaWRollgrYetkm4vOzMSZUEvaYI9jde65l+l5nqjt /VjGb7wfLS9CVg== -----END CERTIFICATE-----Generated at Tue Jan 20 09:27:41 2026 by rpki-client