This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft File: B2X29feTbbg1Ggo5PPBppRjldEU.mft (raw, json) Hash identifier: ALtZsdfywI+k1TLfdtOWEUhoapvSgHOjbdJVEXJg9Cw= Subject key identifier: 2D:AE:41:99:CA:64:6B:E3:2D:FF:D9:73:AD:AC:25:F5:EA:F7:7C:C0 Authority key identifier: 07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45 Certificate issuer: /CN=0765f6f5f7936db8351a0a393cf069a518e57445 Certificate serial: 019BFCF80F24C9D24ABB7F9EC633D5FA6AB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft Manifest number: 0947 Signing time: Tue 27 Jan 2026 01:01:13 +0000 Manifest this update: Tue 27 Jan 2026 01:01:13 +0000 Manifest next update: Wed 28 Jan 2026 01:01:13 +0000 Files and hashes: 1: B2X29feTbbg1Ggo5PPBppRjldEU.crl (hash: 4gY5LToCTLeM6m0siOwhj6xPTsYDsQQscBqODZh5BuU=) 2: wPl7ynnI5jX4tx7pSw6wN-FRjIs.roa (hash: Wc0jszL4Hb97uhnMz/zMSryxca7jN11EVHOmQGyZa3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 01:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:0f:24:c9:d2:4a:bb:7f:9e:c6:33:d5:fa:6a:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0765f6f5f7936db8351a0a393cf069a518e57445 Validity Not Before: Jan 27 01:01:13 2026 GMT Not After : Jan 28 01:01:13 2026 GMT Subject: CN=2dae4199ca646be32dffd973adac25f5eaf77cc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:c5:16:e7:69:28:82:47:00:17:70:35:5e: d3:b5:41:bd:78:b9:ac:9d:3e:28:04:9f:a1:d6:2f: 7c:15:ea:94:0d:06:77:ee:9c:05:13:59:07:36:3e: 0b:51:61:c5:52:7d:4b:f2:75:7e:74:5f:ea:76:aa: f1:0b:98:f4:ff:0c:89:35:52:e2:4c:32:62:14:3b: cb:79:49:dd:11:a7:d3:b1:80:e7:3e:9b:8a:77:b3: f2:cf:ca:ff:d4:eb:d9:55:c9:1d:a1:be:86:9d:71: 9e:d6:9d:32:93:91:f0:4e:dd:72:ec:af:86:a8:4d: a3:57:02:33:00:33:83:d9:0b:83:c8:e5:77:1f:a4: 58:8d:09:60:2e:cc:97:72:d9:da:e5:e9:07:19:1d: ce:cb:97:82:ba:7f:ea:22:c5:85:32:b9:87:76:45: 92:db:a8:00:90:1d:61:c4:cc:0d:cb:0b:4a:76:9d: 70:59:b0:f1:7f:ab:a2:3b:49:be:50:a1:c6:23:22: 64:b5:fc:52:77:8c:55:6b:8b:31:d2:c1:e8:27:e6: fb:54:b2:79:d4:32:0c:c7:c6:46:44:a0:c3:95:4b: 1e:08:19:0d:71:9a:a0:d5:e9:f6:26:cd:49:98:92: 39:37:a2:1b:6e:80:b8:84:0e:5e:3b:da:59:6a:c6: 8b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:AE:41:99:CA:64:6B:E3:2D:FF:D9:73:AD:AC:25:F5:EA:F7:7C:C0 X509v3 Authority Key Identifier: keyid:07:65:F6:F5:F7:93:6D:B8:35:1A:0A:39:3C:F0:69:A5:18:E5:74:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2X29feTbbg1Ggo5PPBppRjldEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9a6655-1d2c-45cb-ada1-f46b46d53800/1/B2X29feTbbg1Ggo5PPBppRjldEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:93:51:c6:c1:cd:f1:d0:ff:84:f9:1b:5b:c9:b4:e8:5b:2d: de:5e:5d:8f:ee:d3:c1:56:e6:0d:3c:22:8c:0d:82:c6:78:a1: f6:ac:2c:cb:15:6c:40:cd:6a:05:ca:04:35:a5:6a:7c:f7:fb: 30:a4:8e:93:8f:0c:8a:55:e4:26:a7:4c:e2:83:54:19:5d:75: a4:38:cd:89:f0:33:fd:ee:1b:8e:55:86:53:ef:88:64:79:bc: 73:ab:73:9e:31:e2:59:0e:99:1c:85:75:79:e3:8d:5b:98:fd: ea:c8:a6:6c:24:bb:4d:01:79:ac:5a:0b:06:3a:46:0a:da:d1: 41:61:b2:42:6f:9c:10:d9:32:d3:87:a2:66:ab:f1:9a:84:4b: c3:a6:0e:f4:d4:58:8b:8f:7e:06:51:17:ed:7b:0d:9c:4a:13: e2:f9:fb:e4:2f:28:06:3a:28:40:28:5c:ac:db:ef:b5:88:fd: 8a:79:1d:ca:19:5f:2e:15:22:eb:7d:f0:83:c4:17:9c:b8:0b: 79:e8:36:9b:8d:ea:52:57:2c:c2:f4:1b:49:dc:f3:31:de:97: 66:b3:24:dd:6a:e8:0d:34:65:3d:0f:62:99:f0:d3:57:0e:0c: dd:c7:cc:4e:f4:8c:a1:b8:b0:d1:03:0e:04:01:87:58:d0:e2: cb:5c:94:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+A8kydJKu3+exjPV+mqwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NjVmNmY1Zjc5MzZkYjgzNTFhMGEzOTNjZjA2OWE1MThl NTc0NDUwHhcNMjYwMTI3MDEwMTEzWhcNMjYwMTI4MDEwMTEzWjAzMTEwLwYDVQQD EygyZGFlNDE5OWNhNjQ2YmUzMmRmZmQ5NzNhZGFjMjVmNWVhZjc3Y2MwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+PFFudpKIJHABdwNV7TtUG9eLms nT4oBJ+h1i98FeqUDQZ37pwFE1kHNj4LUWHFUn1L8nV+dF/qdqrxC5j0/wyJNVLi TDJiFDvLeUndEafTsYDnPpuKd7Pyz8r/1OvZVckdob6GnXGe1p0yk5HwTt1y7K+G qE2jVwIzADOD2QuDyOV3H6RYjQlgLsyXctna5ekHGR3Oy5eCun/qIsWFMrmHdkWS 26gAkB1hxMwNywtKdp1wWbDxf6uiO0m+UKHGIyJktfxSd4xVa4sx0sHoJ+b7VLJ5 1DIMx8ZGRKDDlUseCBkNcZqg1en2Js1JmJI5N6IbboC4hA5eO9pZasaL2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2uQZnKZGvjLf/Zc62sJfXq93zAMB8GA1UdIwQY MBaAFAdl9vX3k224NRoKOTzwaaUY5XRFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEt ZjQ2YjQ2ZDUzODAwLzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy85YTY2NTUtMWQyYy00NWNiLWFkYTEtZjQ2YjQ2ZDUzODAw LzEvQjJYMjlmZVRiYmcxR2dvNVBQQnBwUmpsZEVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATZNRxsHN 8dD/hPkbW8m06Fst3l5dj+7TwVbmDTwijA2Cxnih9qwsyxVsQM1qBcoENaVqfPf7 MKSOk48MilXkJqdM4oNUGV11pDjNifAz/e4bjlWGU++IZHm8c6tznjHiWQ6ZHIV1 eeONW5j96simbCS7TQF5rFoLBjpGCtrRQWGyQm+cENky04eiZqvxmoRLw6YO9NRY i49+BlEX7XsNnEoT4vn75C8oBjooQChcrNvvtYj9inkdyhlfLhUi633wg8QXnLgL eeg2m43qUlcswvQbSdzzMd6XZrMk3WroDTRlPQ9imfDTVw4M3cfMTvSMobiw0QMO BAGHWNDiy1yUaw== -----END CERTIFICATE-----Generated at Tue Jan 27 11:52:25 2026 by rpki-client