This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: FEYbt8as0QCRYbHmJ5HcBv6oIc5anK3iVyuNTpgm+7w= Subject key identifier: A6:37:E6:FE:46:FE:E3:B5:D3:E9:C4:93:D3:E0:DE:D4:77:DC:2B:FE Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019BF9F6E7A95404613D20B2D8118DB89BB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 18A4 Signing time: Mon 26 Jan 2026 11:01:06 +0000 Manifest this update: Mon 26 Jan 2026 11:01:06 +0000 Manifest next update: Tue 27 Jan 2026 11:01:06 +0000 Files and hashes: 1: 1-T2ZYMPKiBruESoAmH7Wwl9yq20.roa (hash: q7HWgyE7yd60WRqAoHlyuMAcwhALB0o3MA1S/JRjlcw=) 2: 1-zPv1sLkAImPDaF-sFx3J1tBqrg.roa (hash: lfy4SNV7N7tKzhQrJTRx4OtE/ViL7Dd59Cz+B5EnHRw=) 3: 1jmcz7jOlOGdcGXRNMnzsRu-6UU.roa (hash: fnm0p7VwPd/SE7t1j+KRSTaDum9eHMNM4fCSS//G4c8=) 4: F7PDvpn2QT60u98U-B9_BniGv6I.roa (hash: o6+nW99K+UNhSND42qU+AfPD+43WdjVx5KouvSDpigQ=) 5: IachUPTX_993yJEpQF0wVvXQlj0.roa (hash: +E7fJxAVDf8rQHDt1qq8WPbiZjHDDTDf+pccnAqllfE=) 6: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 7: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 8: RyOLum9WBpYD9XcaEtkq5xfJ-pw.roa (hash: QzwPO43PsmmF8A/TIkYS8Xm7a8SUbYZr7awJYHHN8bU=) 9: WVsmjCPefs7KHXgZz-bbNTXjMD0.roa (hash: YEl+2qT+1mBtx3DZ1sJncN0pILC1ehBn3WioOm4CV4c=) 10: XAVkFwFmyvY57lfSqibKjz6KeDU.roa (hash: li7XdxNnJr0ELrCqRVp6PQTgumqBLnv4y+xurqiiRuc=) 11: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 12: ZZyP39YfrFZakvmamSZHAuuUmuo.roa (hash: oJUOWdsz49JPJgOt3JQE1/P2uFWb5ZrW3kNy78Vrsv0=) 13: bEw5sCgCycmnwH0jvM4nquRCY3I.roa (hash: 3QaZNtqof+lUOH/KwwyaVDyzs65OBWvVZmx9SV9wg/A=) 14: bJpd8Oj5rzvFy2hgHwNUQ_tzjy4.roa (hash: izLdFM9N1wbZbR37d7jbsfqm2J2WRyeSpB6evgH/KdE=) 15: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: TOWvAaTQe6jNmxyYpEyeS8e+fzNvJvHf+JIiWccNJsc=) 16: en-Q7yeb2Z7kIhNbVjOcGbm5MIc.roa (hash: rXbw78vAg5cjNMmUQ0XTeSV5YcEgAXrrBnTa2Pbv9+k=) 17: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 18: hKSSu2G6xdGNtuk4KP9e-c-JuWM.roa (hash: 8+i8iJBk47mdia5rlvNl4a1wcChvvNLCljBmtQLLZ/8=) 19: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 20: rGlCDR1TNPy04YNRQwGPMqm4A1Q.roa (hash: JVwYAPtjzB0NRTvep3F6wBq3/yhmRQHEO5qI0A2SfVg=) 21: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 22: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) 23: yOLP8JGsQMCFzWngfeM-F2G3Csc.roa (hash: qUYYxQQnFX6MaYW1jl8K4rrQJvoPXd0mpK3gIXiWjkc=) 24: yfuTkFQKjPgCxkciPRz1HIUo6Gw.roa (hash: V/g6j3QRRQ10jRrTt5T1G9dqYBUtdzYwy5fiLM0sH2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:e7:a9:54:04:61:3d:20:b2:d8:11:8d:b8:9b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Jan 26 11:01:06 2026 GMT Not After : Jan 27 11:01:06 2026 GMT Subject: CN=a637e6fe46fee3b5d3e9c493d3e0ded477dc2bfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:36:d3:a4:69:a3:b9:b0:48:3e:90:bb:02:84: 94:87:4d:2c:58:7d:68:c6:ee:27:8a:e5:09:6b:a1: 96:31:98:8f:15:9f:ca:a0:45:29:a1:ae:9f:b3:3d: c0:1a:ed:78:a3:bd:57:9a:ee:ae:e1:93:87:82:6b: 21:3f:ed:bd:f8:88:94:8b:bd:52:e6:60:54:ff:d0: 43:74:32:e9:44:0b:0f:28:52:f0:be:be:9c:f2:22: cf:8a:ce:ab:30:e1:fb:aa:d8:86:08:fe:39:5f:df: d8:a2:b3:61:7f:80:5d:84:ba:5b:ef:4e:62:b0:00: 61:57:b4:9e:9d:a6:19:a7:e8:bf:93:a3:1e:6a:50: 38:68:83:7c:23:4e:7e:c1:3c:a2:27:c7:b2:b7:22: b8:96:7f:f6:ea:19:fc:f4:0b:6d:7b:1a:77:77:59: e7:0b:0b:cf:49:31:4e:42:23:fa:c2:1a:97:cb:44: ed:e8:c0:e7:f2:16:45:64:56:68:55:13:5a:f9:60: 32:19:f1:61:88:cd:a4:61:d7:06:18:a2:79:94:5b: 8d:ec:49:85:f5:fc:d9:03:ef:ee:81:6e:05:3d:32: 5f:5b:ff:b3:db:e5:51:66:62:5b:ca:d0:3f:27:40: 49:fb:ee:c1:18:34:89:90:eb:d8:26:5d:ed:a8:7e: 18:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:37:E6:FE:46:FE:E3:B5:D3:E9:C4:93:D3:E0:DE:D4:77:DC:2B:FE X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:1a:0a:e1:2c:9b:43:65:5d:a5:d0:bb:8c:b3:66:c7:5b:42: 0e:77:f1:99:48:c8:b7:cc:48:6e:e1:4a:e8:45:96:77:50:d0: 08:7c:99:51:b1:40:93:19:c8:5b:9d:d4:b7:be:3a:fa:5e:56: 24:bf:6e:ef:54:66:8c:0c:aa:de:1b:88:ee:3c:cb:90:7a:3e: 7a:04:03:ac:fd:49:3a:ab:62:13:ac:12:16:36:ed:1b:a4:14: 82:3d:9f:8c:4e:f3:f2:4c:cf:de:f1:6b:ca:7a:f0:79:81:05: ed:ba:fd:b5:06:53:71:6e:8e:45:e2:83:2a:ca:e9:83:f5:30: 77:26:8d:4a:98:6e:c5:48:58:92:c2:3d:cb:cf:f7:56:ce:8e: da:40:b6:18:04:38:83:73:ef:65:c5:c0:15:74:e3:7b:5b:2b: 3f:95:76:75:ad:1e:d0:45:d0:72:12:27:82:18:83:af:5f:72: 30:e3:28:37:26:81:30:57:f8:a3:89:97:50:e5:39:99:ca:e8: 07:35:d1:ae:32:0c:1d:20:b6:80:ce:be:2a:a4:f6:44:96:0c: 2c:16:00:1c:51:ed:f2:f2:a8:2c:04:9b:74:7a:44:c8:13:62: e6:f0:17:99:7b:48:38:5f:09:72:8f:46:c5:5e:5e:df:08:2d: ca:cb:f4:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59uepVARhPSCy2BGNuJu3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwMTI2MTEwMTA2WhcNMjYwMTI3MTEwMTA2WjAzMTEwLwYDVQQD EyhhNjM3ZTZmZTQ2ZmVlM2I1ZDNlOWM0OTNkM2UwZGVkNDc3ZGMyYmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDbTpGmjubBIPpC7AoSUh00sWH1o xu4niuUJa6GWMZiPFZ/KoEUpoa6fsz3AGu14o71Xmu6u4ZOHgmshP+29+IiUi71S 5mBU/9BDdDLpRAsPKFLwvr6c8iLPis6rMOH7qtiGCP45X9/YorNhf4BdhLpb705i sABhV7SenaYZp+i/k6MealA4aIN8I05+wTyiJ8eytyK4ln/26hn89Attexp3d1nn CwvPSTFOQiP6whqXy0Tt6MDn8hZFZFZoVRNa+WAyGfFhiM2kYdcGGKJ5lFuN7EmF 9fzZA+/ugW4FPTJfW/+z2+VRZmJbytA/J0BJ++7BGDSJkOvYJl3tqH4Y7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKY35v5G/uO10+nEk9Pg3tR33Cv+MB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhoK4Syb Q2VdpdC7jLNmx1tCDnfxmUjIt8xIbuFK6EWWd1DQCHyZUbFAkxnIW53Ut746+l5W JL9u71RmjAyq3huI7jzLkHo+egQDrP1JOqtiE6wSFjbtG6QUgj2fjE7z8kzP3vFr ynrweYEF7br9tQZTcW6OReKDKsrpg/UwdyaNSphuxUhYksI9y8/3Vs6O2kC2GAQ4 g3PvZcXAFXTje1srP5V2da0e0EXQchInghiDr19yMOMoNyaBMFf4o4mXUOU5mcro BzXRrjIMHSC2gM6+KqT2RJYMLBYAHFHt8vKoLASbdHpEyBNi5vAXmXtIOF8Jco9G xV5e3wgtysv0NQ== -----END CERTIFICATE-----Generated at Mon Jan 26 20:12:37 2026 by rpki-client