This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft File: BZT0qba3_YLdby_b85Or6t00f9E.mft (raw, json) Hash identifier: o3fu4Ae1nx7GMz9UeqjQl/vwCRds9ZQHbW7XBuSuYEc= Subject key identifier: A5:E4:1A:41:C8:61:52:BC:E6:A0:95:22:73:9A:B3:A6:8A:E9:64:B1 Authority key identifier: 05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1 Certificate issuer: /CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1 Certificate serial: 019BFE0B18D1457F569590E88E6DE036B161 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft Manifest number: 17F4 Signing time: Tue 27 Jan 2026 06:01:38 +0000 Manifest this update: Tue 27 Jan 2026 06:01:38 +0000 Manifest next update: Wed 28 Jan 2026 06:01:38 +0000 Files and hashes: 1: BZT0qba3_YLdby_b85Or6t00f9E.crl (hash: QHRmJZz3Bw/HYCVJSiVsjBKU0TdOhcAEpP8L4ltl/vA=) 2: Qh3-2TMMaClcKooNJ3fndADjiYo.roa (hash: OrsiroKPXNo2SdBOxZVVTepz1ZwF+w/R3aYOwgk/QnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0b:18:d1:45:7f:56:95:90:e8:8e:6d:e0:36:b1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0594f4a9b6b7fd82dd6f2fdbf393abeadd347fd1 Validity Not Before: Jan 27 06:01:38 2026 GMT Not After : Jan 28 06:01:38 2026 GMT Subject: CN=a5e41a41c86152bce6a09522739ab3a68ae964b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:5c:67:a6:fd:5b:ab:31:2e:75:f8:b7:26: d3:13:5b:75:16:ec:9b:7c:f7:6c:4c:22:50:32:3a: 54:fc:4b:00:01:bd:1d:32:84:89:11:20:e1:d0:b0: 70:d8:94:71:56:73:77:8b:4c:ee:73:b2:85:5b:8f: 17:1c:02:e6:a6:52:6b:94:bc:74:9f:e9:27:ff:4e: 42:40:4b:a6:88:54:0c:ed:8d:1a:98:02:1d:d2:53: e3:00:fe:38:a1:40:0a:9a:a7:81:ec:63:70:11:08: 44:b9:d0:f9:8f:86:ad:b0:d0:cd:7d:0e:ac:82:27: e3:9a:93:3a:20:f2:e3:cb:26:b0:11:98:10:8f:01: 5d:4c:ab:e7:0d:89:4c:3a:bb:ea:91:8a:3c:ad:c6: 1b:75:57:88:6a:53:c3:15:ca:38:a8:fe:1c:ac:40: 34:9a:0c:dc:06:b1:c9:a3:b1:f9:95:7e:87:de:90: 2b:57:5a:58:87:d9:19:8d:8e:48:7e:10:36:22:cf: 7a:9a:8b:45:b4:f3:2b:c8:7f:f4:94:1e:e9:7e:0e: 30:37:56:6d:c9:b2:7e:7e:d2:1f:e1:92:e8:15:d9: 9b:5f:b0:10:bc:e0:5e:c1:c0:83:05:43:b7:53:d3: 1c:3c:f7:65:9c:d1:15:fd:81:ed:ba:35:4a:16:b4: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:E4:1A:41:C8:61:52:BC:E6:A0:95:22:73:9A:B3:A6:8A:E9:64:B1 X509v3 Authority Key Identifier: keyid:05:94:F4:A9:B6:B7:FD:82:DD:6F:2F:DB:F3:93:AB:EA:DD:34:7F:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZT0qba3_YLdby_b85Or6t00f9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f343a9-4489-457c-92c1-b6cc4d57117e/1/BZT0qba3_YLdby_b85Or6t00f9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:34:b2:35:25:85:88:51:ef:b6:2a:96:d9:a9:a0:8c:f4:98: ed:7c:ae:dd:d3:21:33:0b:e6:c8:b8:fb:9a:73:0a:b4:7a:b1: 3c:f9:da:03:ec:31:00:88:d2:ca:7b:36:db:b1:26:64:ca:cb: 31:a1:db:49:48:b8:8b:7b:be:f3:66:54:da:ee:e7:f7:3e:49: 4b:3a:0c:06:b0:dd:61:c3:51:5d:5c:eb:fb:7f:a9:22:0c:14: b4:1e:5a:22:f5:dd:6f:b1:28:c5:db:5d:52:a1:2c:6c:4d:62: 24:6a:ab:5f:49:39:68:60:dc:d9:b7:9b:0c:74:63:3a:73:af: 91:53:28:5d:b6:2c:4c:2b:ea:f2:0e:68:5e:32:f9:eb:e2:6e: 9f:b3:7a:54:4a:4b:7b:ba:ee:b1:7a:bb:af:77:b4:10:4f:57: 19:d7:7c:1c:be:56:66:35:c0:50:3c:94:fc:70:74:f7:49:20: e0:ea:64:64:f0:38:fb:1b:18:67:a7:1e:2f:1f:55:ea:55:1a: 9b:9b:dc:be:42:a8:84:84:0a:e6:51:e0:93:66:55:f0:58:91: 0b:de:1c:76:10:64:0d:ea:3e:bf:38:f5:02:bf:9a:d3:c9:3d: 59:8f:87:49:1d:15:4e:29:9c:62:8b:43:86:07:da:99:eb:e7: 40:6d:d0:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CxjRRX9WlZDojm3gNrFhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTRmNGE5YjZiN2ZkODJkZDZmMmZkYmYzOTNhYmVhZGQz NDdmZDEwHhcNMjYwMTI3MDYwMTM4WhcNMjYwMTI4MDYwMTM4WjAzMTEwLwYDVQQD EyhhNWU0MWE0MWM4NjE1MmJjZTZhMDk1MjI3MzlhYjNhNjhhZTk2NGIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgJcZ6b9W6sxLnX4tybTE1t1Fuyb fPdsTCJQMjpU/EsAAb0dMoSJESDh0LBw2JRxVnN3i0zuc7KFW48XHALmplJrlLx0 n+kn/05CQEumiFQM7Y0amAId0lPjAP44oUAKmqeB7GNwEQhEudD5j4atsNDNfQ6s gifjmpM6IPLjyyawEZgQjwFdTKvnDYlMOrvqkYo8rcYbdVeIalPDFco4qP4crEA0 mgzcBrHJo7H5lX6H3pArV1pYh9kZjY5IfhA2Is96motFtPMryH/0lB7pfg4wN1Zt ybJ+ftIf4ZLoFdmbX7AQvOBewcCDBUO3U9McPPdlnNEV/YHtujVKFrTX+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXkGkHIYVK85qCVInOas6aK6WSxMB8GA1UdIwQY MBaAFAWU9Km2t/2C3W8v2/OTq+rdNH/RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mMzQzYTktNDQ4OS00NTdjLTkyYzEt YjZjYzRkNTcxMTdlLzEvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9mMzQzYTktNDQ4OS00NTdjLTkyYzEtYjZjYzRkNTcxMTdl LzEvQlpUMHFiYTNfWUxkYnlfYjg1T3I2dDAwZjlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzSyNSWF iFHvtiqW2amgjPSY7Xyu3dMhMwvmyLj7mnMKtHqxPPnaA+wxAIjSyns227EmZMrL MaHbSUi4i3u+82ZU2u7n9z5JSzoMBrDdYcNRXVzr+3+pIgwUtB5aIvXdb7Eoxdtd UqEsbE1iJGqrX0k5aGDc2bebDHRjOnOvkVMoXbYsTCvq8g5oXjL56+Jun7N6VEpL e7rusXq7r3e0EE9XGdd8HL5WZjXAUDyU/HB090kg4OpkZPA4+xsYZ6ceLx9V6lUa m5vcvkKohIQK5lHgk2ZV8FiRC94cdhBkDeo+vzj1Ar+a08k9WY+HSR0VTimcYotD hgfamevnQG3QYA== -----END CERTIFICATE-----Generated at Tue Jan 27 08:29:38 2026 by rpki-client