This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json) Hash identifier: TGQKvk5wo4i0xcaX/2d2Utdys9+gPjmm5xvdywZO0Oo= Subject key identifier: A4:7F:7A:D4:9F:11:2A:2D:03:1C:4F:48:C7:79:20:C7:C9:FB:31:C8 Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a Certificate serial: 019C1C83FBA68E02D317B8401219580C003E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft Manifest number: 0BC1 Signing time: Mon 02 Feb 2026 04:02:17 +0000 Manifest this update: Mon 02 Feb 2026 04:02:17 +0000 Manifest next update: Tue 03 Feb 2026 04:02:17 +0000 Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: X6yQBVbCxck6CmJTQwNHqudK1Ze183BvBXugDt6B5qY=) 2: gq6lk47TA17e6REZA-zN8if3ODs.roa (hash: j1zLYjz1yht8bRIjCyc5xCvjTG5lN3f/7Pg2PlyRjnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 04:02:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:83:fb:a6:8e:02:d3:17:b8:40:12:19:58:0c:00:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a Validity Not Before: Feb 2 04:02:17 2026 GMT Not After : Feb 3 04:02:17 2026 GMT Subject: CN=a47f7ad49f112a2d031c4f48c77920c7c9fb31c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e4:2b:b0:93:68:59:f3:60:c6:72:c7:6e:86: 63:7f:97:af:9d:a3:00:a4:02:d1:bc:18:06:f5:ff: 74:e3:69:4f:70:ae:62:d1:53:63:09:87:12:43:69: 22:18:6f:3a:c6:4f:92:1e:b1:68:f3:a9:d0:91:88: ed:4f:69:52:a6:1c:a0:57:3c:33:7a:88:fd:f8:70: d0:ac:45:1d:9b:2f:ba:e3:b2:c2:e8:ea:71:6e:9b: 6c:86:df:42:b3:7f:72:2f:aa:42:05:3d:93:7c:87: 36:f6:19:0d:af:ac:f5:8f:be:81:a7:dc:86:ff:c8: aa:c7:36:00:74:9e:6d:87:c7:86:fe:25:a6:9c:19: eb:d6:d3:e0:69:2b:be:21:b5:86:2d:36:c3:b9:42: 16:fa:4e:b0:47:8a:01:9a:29:ea:a9:f5:f6:53:7a: f6:6f:cc:64:59:cb:2e:23:72:c9:c1:2e:f9:6d:cf: ec:60:da:33:a0:f9:35:1d:fb:85:b7:95:41:27:fb: d5:92:79:8a:19:ef:38:38:bb:c7:b1:71:31:9d:67: b2:1d:29:eb:0d:63:8c:fc:d8:19:bf:4c:d5:13:0a: db:a5:b5:b2:e6:0d:4d:22:cb:0e:7f:44:71:05:ed: 3a:2c:6b:9c:67:e3:16:da:a4:0f:96:5d:37:48:5a: bf:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7F:7A:D4:9F:11:2A:2D:03:1C:4F:48:C7:79:20:C7:C9:FB:31:C8 X509v3 Authority Key Identifier: keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:6a:47:7d:e7:4a:b8:5c:a4:32:35:0f:b9:c9:3c:26:24:fa: b4:60:01:46:44:63:92:f5:1f:3f:14:fc:69:6e:be:e7:07:fd: a0:67:43:6b:a8:fc:b9:38:77:1b:5b:58:5d:55:c6:e9:c9:0f: e1:f1:6f:42:40:3a:77:5e:a8:d2:63:11:4c:7c:17:ee:07:56: a6:66:5c:71:a9:06:9a:77:64:d5:0d:de:bf:5e:1c:83:c6:a7: 45:d2:29:fa:82:05:87:1e:17:a2:d0:fb:ff:e5:45:57:6c:a0: 31:f3:9f:33:6a:c4:e2:9d:44:2d:30:81:26:fa:cd:f6:33:96: 79:bd:3b:38:e2:8f:1a:8d:a1:92:69:d2:ef:0b:e3:d6:a7:ef: 50:b0:a8:a4:27:76:6a:cd:9e:46:27:a2:83:57:bf:ff:92:fa: 0d:32:13:c2:9a:b9:85:77:65:db:7a:b3:01:42:03:46:59:a3: c3:95:aa:60:a3:bd:1e:3b:b1:82:c5:56:2b:64:01:57:4b:4b: 48:a9:6a:85:1d:c1:a5:21:86:96:b1:7b:37:f2:51:88:1e:8a: a4:1c:78:05:70:84:dc:9e:39:86:d9:06:3c:70:13:e4:0d:91: 7d:10:25:d9:87:c5:d7:10:56:ed:5a:a6:c7:ea:09:19:97:4a: a2:0f:0d:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcg/umjgLTF7hAEhlYDAA+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWYxNmRjYzU1MGNmODFlY2YwZjgxOTUyMTc5YTA0ODEz MDg3N2EwHhcNMjYwMjAyMDQwMjE3WhcNMjYwMjAzMDQwMjE3WjAzMTEwLwYDVQQD EyhhNDdmN2FkNDlmMTEyYTJkMDMxYzRmNDhjNzc5MjBjN2M5ZmIzMWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OQrsJNoWfNgxnLHboZjf5evnaMA pALRvBgG9f9042lPcK5i0VNjCYcSQ2kiGG86xk+SHrFo86nQkYjtT2lSphygVzwz eoj9+HDQrEUdmy+647LC6Opxbptsht9Cs39yL6pCBT2TfIc29hkNr6z1j76Bp9yG /8iqxzYAdJ5th8eG/iWmnBnr1tPgaSu+IbWGLTbDuUIW+k6wR4oBminqqfX2U3r2 b8xkWcsuI3LJwS75bc/sYNozoPk1HfuFt5VBJ/vVknmKGe84OLvHsXExnWeyHSnr DWOM/NgZv0zVEwrbpbWy5g1NIssOf0RxBe06LGucZ+MW2qQPll03SFq/SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKR/etSfESotAxxPSMd5IMfJ+zHIMB8GA1UdIwQY MBaAFG6vFtzFUM+B7PD4GVIXmgSBMId6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEt NGZhMzQ4MWE0N2UxLzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEtNGZhMzQ4MWE0N2Ux LzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdWpHfedK uFykMjUPuck8JiT6tGABRkRjkvUfPxT8aW6+5wf9oGdDa6j8uTh3G1tYXVXG6ckP 4fFvQkA6d16o0mMRTHwX7gdWpmZccakGmndk1Q3ev14cg8anRdIp+oIFhx4XotD7 /+VFV2ygMfOfM2rE4p1ELTCBJvrN9jOWeb07OOKPGo2hkmnS7wvj1qfvULCopCd2 as2eRieig1e//5L6DTITwpq5hXdl23qzAUIDRlmjw5WqYKO9HjuxgsVWK2QBV0tL SKlqhR3BpSGGlrF7N/JRiB6KpBx4BXCE3J45htkGPHAT5A2RfRAl2YfF1xBW7Vqm x+oJGZdKog8NwQ== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:11 2026 by rpki-client