This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json) Hash identifier: qsZ5Kyyvch0PbDPephAn9omDnlza82sKZ/xCctqNXiQ= Subject key identifier: C9:0A:89:6D:B0:2A:CC:0A:DA:2A:45:5E:A8:50:E4:1F:81:EA:CE:6D Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32 Certificate serial: 019BF9F69DD89423CC5C60CC98FB33E4E784 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 11:00:47 +0000 Manifest this update: Mon 26 Jan 2026 11:00:47 +0000 Manifest next update: Tue 27 Jan 2026 11:00:47 +0000 Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: dhv373sV61jIeHn91EI/5f5Nq0kVrRvhKpd7NT2nX30=) 2: Kykq1xGxMlT5a0eYnS1HXmTKDxA.roa (hash: +Eb/M7C3hM4Sh969DjZVwwfd7ldL2GxYpQACuuK/nSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:9d:d8:94:23:cc:5c:60:cc:98:fb:33:e4:e7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32 Validity Not Before: Jan 26 11:00:47 2026 GMT Not After : Jan 27 11:00:47 2026 GMT Subject: CN=c90a896db02acc0ada2a455ea850e41f81eace6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:98:61:71:aa:b6:c9:9f:99:b6:23:e7:8e:8a: 7c:a4:49:78:af:1b:e2:04:dd:ef:7f:1b:b6:d4:ec: 9f:4d:cd:c5:b1:ed:f7:95:0b:89:cd:5a:6d:82:df: 42:0a:8c:88:9f:ae:83:a3:93:35:7a:a1:28:89:4a: 80:43:ee:82:9e:b7:8c:95:19:37:68:7f:74:96:65: cf:e3:0b:86:32:21:28:0e:97:dd:fd:80:6e:a3:f0: c9:1c:53:19:cc:b4:cb:93:8f:3c:44:7d:d8:08:41: 56:a4:45:46:d1:78:a6:ad:d0:e0:41:9b:71:d2:12: 99:a2:66:e7:c9:2f:c0:24:13:60:71:50:a6:bb:0f: f7:26:85:ff:a1:c4:66:42:89:41:f6:9a:1f:ae:4e: 45:66:7e:2a:b1:6d:db:f0:03:80:68:0d:5e:f1:db: 05:18:c3:70:31:c2:b0:7e:07:48:b1:5c:b9:bd:2d: 9a:0e:cc:bb:e8:c3:41:95:7f:75:5a:45:ab:9d:0d: bb:89:3e:39:45:89:d2:71:64:b8:57:b3:49:6a:20: 06:2b:a1:ce:5c:6e:64:73:42:10:7d:12:b8:5f:e5: c5:98:b6:6d:4d:1c:00:3c:34:79:f1:2d:1a:4a:b5: 81:90:14:c4:c4:77:e4:74:7b:fd:b4:7f:ea:43:c5: 53:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0A:89:6D:B0:2A:CC:0A:DA:2A:45:5E:A8:50:E4:1F:81:EA:CE:6D X509v3 Authority Key Identifier: keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:58:c3:b3:c9:c6:cd:31:54:38:15:84:9e:9c:53:08:a4:50: 11:38:24:17:09:c6:c2:8d:d4:9f:3b:d5:70:6d:c3:5d:1a:12: a6:00:77:e3:5d:b4:d3:bf:8d:97:69:bf:ce:c5:4a:61:9c:e7: 69:f3:44:e2:c4:be:6f:89:6c:d2:6b:86:5a:1d:45:c1:8c:f4: 4e:06:f5:15:ca:44:da:24:f5:78:7a:68:ec:3c:27:b6:89:b4: 0e:55:23:47:7d:2d:21:d0:1c:89:57:5c:73:1c:8a:e0:b7:4f: ba:ea:a5:9c:c9:b2:20:c2:19:3f:76:1e:10:c3:72:3a:eb:88: df:82:86:b8:39:17:bd:e6:5a:62:7e:ab:f7:37:c5:8e:87:e6: e2:a0:18:7c:c9:e4:1c:24:04:b0:6d:ed:3d:e0:e1:c2:6d:26: 29:c8:62:9b:db:8c:78:3b:a7:65:79:f7:45:01:7c:04:86:33: 9d:20:53:f4:1f:12:75:26:20:60:d4:de:9c:38:d1:21:87:fb: be:8c:41:52:ee:49:ac:7c:30:d0:bc:43:00:75:48:eb:d6:17: 70:99:c9:45:88:cd:f2:88:b2:65:6d:ae:cf:6e:5d:ad:8c:ea: b5:d7:3b:67:29:8a:be:ed:15:0c:5e:53:a9:5a:f6:ac:b7:7d: 28:eb:39:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59p3YlCPMXGDMmPsz5OeEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZWE0ZTg4NDY2ZGU0Yzg5NjA5NDAyOGYxY2YwZGI2NjUz NjBkMzIwHhcNMjYwMTI2MTEwMDQ3WhcNMjYwMTI3MTEwMDQ3WjAzMTEwLwYDVQQD EyhjOTBhODk2ZGIwMmFjYzBhZGEyYTQ1NWVhODUwZTQxZjgxZWFjZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5hhcaq2yZ+ZtiPnjop8pEl4rxvi BN3vfxu21OyfTc3Fse33lQuJzVptgt9CCoyIn66Do5M1eqEoiUqAQ+6CnreMlRk3 aH90lmXP4wuGMiEoDpfd/YBuo/DJHFMZzLTLk488RH3YCEFWpEVG0XimrdDgQZtx 0hKZombnyS/AJBNgcVCmuw/3JoX/ocRmQolB9pofrk5FZn4qsW3b8AOAaA1e8dsF GMNwMcKwfgdIsVy5vS2aDsy76MNBlX91WkWrnQ27iT45RYnScWS4V7NJaiAGK6HO XG5kc0IQfRK4X+XFmLZtTRwAPDR58S0aSrWBkBTExHfkdHv9tH/qQ8VTwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkKiW2wKswK2ipFXqhQ5B+B6s5tMB8GA1UdIwQY MBaAFAfqTohGbeTIlglAKPHPDbZlNg0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2Yt MzFiMzZmNTc5ZjA2LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9mODAwZjEtNzRhZS00YzE5LWE3Y2YtMzFiMzZmNTc5ZjA2 LzEvQi1wT2lFWnQ1TWlXQ1VBbzhjOE50bVUyRFRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1jDs8nG zTFUOBWEnpxTCKRQETgkFwnGwo3UnzvVcG3DXRoSpgB3412007+Nl2m/zsVKYZzn afNE4sS+b4ls0muGWh1FwYz0Tgb1FcpE2iT1eHpo7Dwntom0DlUjR30tIdAciVdc cxyK4LdPuuqlnMmyIMIZP3YeEMNyOuuI34KGuDkXveZaYn6r9zfFjofm4qAYfMnk HCQEsG3tPeDhwm0mKchim9uMeDunZXn3RQF8BIYznSBT9B8SdSYgYNTenDjRIYf7 voxBUu5JrHww0LxDAHVI69YXcJnJRYjN8oiyZW2uz25drYzqtdc7ZymKvu0VDF5T qVr2rLd9KOs5Gg== -----END CERTIFICATE-----Generated at Mon Jan 26 19:15:21 2026 by rpki-client