This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft File: BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft (raw, json) Hash identifier: 3VxHmbvdM/ecGSHWdRpOuG7dnbzAgQe/IBCdZvlCIMw= Subject key identifier: 0C:E1:74:E7:DD:30:0B:35:AC:48:8F:4B:07:44:7F:AC:94:EA:6F:D1 Authority key identifier: 04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49 Certificate issuer: /CN=0471881778a1e12f6d97c5288efd4cb9563d1d49 Certificate serial: 019BD7A224800DEBCE1C69AB044FF8695EC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft Manifest number: 01AD Signing time: Mon 19 Jan 2026 19:01:26 +0000 Manifest this update: Mon 19 Jan 2026 19:01:26 +0000 Manifest next update: Tue 20 Jan 2026 19:01:26 +0000 Files and hashes: 1: BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl (hash: 5fjcW+8NaP6kGl7zRZ9xBM8PkIp7LvBidG8iRBCkCK4=) 2: eTOwOWQzkIQMSFcd7XvHaxwHhHg.roa (hash: wPtbDFR3QsqzxzI7/DNrIndvuS59lQkNZu8MuJSmfaE=) 3: hebM_59_tHRwgwIXMubQjV7ZKnA.roa (hash: 67WRXgG1YYYSINNxV4jZ+taQ8P62HynuQpfE/cUxzG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:a2:24:80:0d:eb:ce:1c:69:ab:04:4f:f8:69:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0471881778a1e12f6d97c5288efd4cb9563d1d49 Validity Not Before: Jan 19 19:01:26 2026 GMT Not After : Jan 20 19:01:26 2026 GMT Subject: CN=0ce174e7dd300b35ac488f4b07447fac94ea6fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:23:b7:ab:8c:a3:0f:83:c1:69:53:9a:52:a8: af:87:45:b9:6c:50:f7:bf:76:dd:ea:9d:4c:31:58: 4a:97:10:46:fa:90:a5:6a:b6:9d:7e:be:3c:62:5a: 08:0b:a7:1e:7e:8f:b3:8a:71:09:25:d6:db:f2:fc: 86:91:10:ae:3b:49:7c:f9:5a:dd:a3:41:97:35:24: a3:1d:d9:7d:10:4c:ea:0e:8f:b7:83:54:d0:0a:1a: 7c:58:52:fc:a2:6d:8d:79:78:b1:b4:b5:08:05:75: c4:d0:78:f2:c6:b5:29:a6:e7:ef:da:37:84:13:94: 30:91:c9:af:cd:2b:95:fd:c1:21:2b:6f:89:67:49: b1:33:02:a4:61:63:ff:00:78:af:6c:0f:54:d0:74: 1b:15:ec:ec:55:01:38:f7:44:58:cb:06:cb:1e:9c: 5b:6e:ac:26:64:44:d6:94:41:c2:21:99:3f:de:2e: 45:25:ac:3b:ce:47:de:0a:47:54:ab:2d:77:97:91: d4:19:76:ba:93:61:b7:fb:8f:e3:6a:7f:03:a5:8b: 9a:d3:a8:6e:aa:ba:35:d3:e1:41:8e:03:9c:2c:d9: 7f:b2:3f:bb:19:6c:93:35:86:70:c5:5e:24:a5:d9: fe:6d:b7:1e:90:df:1a:de:1b:90:a2:36:0c:64:32: 07:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E1:74:E7:DD:30:0B:35:AC:48:8F:4B:07:44:7F:AC:94:EA:6F:D1 X509v3 Authority Key Identifier: keyid:04:71:88:17:78:A1:E1:2F:6D:97:C5:28:8E:FD:4C:B9:56:3D:1D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHGIF3ih4S9tl8Uojv1MuVY9HUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4a8cfa-542b-40b2-8a08-42ea47b12537/1/BHGIF3ih4S9tl8Uojv1MuVY9HUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:e5:8b:d5:1d:c5:22:31:04:03:cf:99:e8:10:71:88:8e:c7: a2:b9:48:52:21:58:fa:26:e0:c9:3e:0a:df:b1:cb:47:f1:9c: 38:82:50:e9:12:cd:53:63:bf:c9:f3:28:2f:bd:43:7e:2c:b0: 32:29:3b:d8:b8:21:80:43:40:a6:0d:a9:07:44:50:47:51:a8: b8:10:b0:3e:8e:51:91:27:2f:b1:12:ad:75:ac:05:40:28:52: 74:c5:80:8c:64:39:65:f5:bb:69:59:3f:5e:5b:cd:08:9c:15: bb:5f:8c:38:5e:b2:fa:98:08:59:87:3e:ea:fb:8c:2e:4f:81: 9a:93:c5:35:31:3c:c1:9e:d0:db:c3:5a:31:06:e6:77:ba:72: b3:68:28:4a:72:dd:bb:97:96:c8:2e:dd:63:df:86:6c:02:60: ae:f6:6e:6f:4a:a2:ca:22:0e:f7:dd:d5:54:98:a6:dc:11:ea: 18:02:b3:1e:74:c4:c3:a3:19:62:41:dc:be:e5:6a:8b:18:d3: e6:2f:58:93:e0:af:ec:a8:44:b3:94:57:bd:03:f3:8d:37:87: f1:19:a2:46:36:57:e9:e1:aa:99:3b:55:f1:27:21:6b:aa:8c: 72:e9:00:96:9f:7d:66:8e:04:f1:d8:78:08:ca:b2:fc:b3:34: a5:94:65:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXoiSADevOHGmrBE/4aV7AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NzE4ODE3NzhhMWUxMmY2ZDk3YzUyODhlZmQ0Y2I5NTYz ZDFkNDkwHhcNMjYwMTE5MTkwMTI2WhcNMjYwMTIwMTkwMTI2WjAzMTEwLwYDVQQD EygwY2UxNzRlN2RkMzAwYjM1YWM0ODhmNGIwNzQ0N2ZhYzk0ZWE2ZmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyO3q4yjD4PBaVOaUqivh0W5bFD3 v3bd6p1MMVhKlxBG+pClaradfr48YloIC6cefo+zinEJJdbb8vyGkRCuO0l8+Vrd o0GXNSSjHdl9EEzqDo+3g1TQChp8WFL8om2NeXixtLUIBXXE0HjyxrUppufv2jeE E5QwkcmvzSuV/cEhK2+JZ0mxMwKkYWP/AHivbA9U0HQbFezsVQE490RYywbLHpxb bqwmZETWlEHCIZk/3i5FJaw7zkfeCkdUqy13l5HUGXa6k2G3+4/jan8DpYua06hu qro10+FBjgOcLNl/sj+7GWyTNYZwxV4kpdn+bbcekN8a3huQojYMZDIHnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAzhdOfdMAs1rEiPSwdEf6yU6m/RMB8GA1UdIwQY MBaAFARxiBd4oeEvbZfFKI79TLlWPR1JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgt NDJlYTQ3YjEyNTM3LzEvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy80YThjZmEtNTQyYi00MGIyLThhMDgtNDJlYTQ3YjEyNTM3 LzEvQkhHSUYzaWg0Uzl0bDhVb2p2MU11Vlk5SFVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx+WL1R3F IjEEA8+Z6BBxiI7HorlIUiFY+ibgyT4K37HLR/GcOIJQ6RLNU2O/yfMoL71Dfiyw Mik72LghgENApg2pB0RQR1GouBCwPo5RkScvsRKtdawFQChSdMWAjGQ5ZfW7aVk/ XlvNCJwVu1+MOF6y+pgIWYc+6vuMLk+BmpPFNTE8wZ7Q28NaMQbmd7pys2goSnLd u5eWyC7dY9+GbAJgrvZub0qiyiIO993VVJim3BHqGAKzHnTEw6MZYkHcvuVqixjT 5i9Yk+Cv7KhEs5RXvQPzjTeH8RmiRjZX6eGqmTtV8Scha6qMcukAlp99Zo4E8dh4 CMqy/LM0pZRlJA== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:51 2026 by rpki-client