This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json) Hash identifier: dnDikei3AMRib0Cxjeao169uknCLb1watbW/zViFeTo= Subject key identifier: 5A:0E:40:09:B2:7C:01:AE:2D:8F:19:B3:E5:3E:0D:C9:F6:6C:76:44 Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51 Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051 Certificate serial: 019B9E57BD0EC0BD03CA686662CE7DFD4507 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft Manifest number: 17BE Signing time: Thu 08 Jan 2026 16:01:48 +0000 Manifest this update: Thu 08 Jan 2026 16:01:48 +0000 Manifest next update: Fri 09 Jan 2026 16:01:48 +0000 Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: cQHMslhMy3/F+wAGpUlFRZTNK8P2sm18lqbzByg/GDw=) 2: Eutl85DJa5Wvda8Ay8PusU7FvGw.roa (hash: 0UQ/kddOeRvGr5lY/YK4culyM9uyjud6DEWUEwmL8/g=) 3: QHBZT5kThtefU6Yue7jJobqw9JU.roa (hash: pRD253NVKbYirBHDkZVZG3Wa4gP+JVRS3M7a27XwU/U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:57:bd:0e:c0:bd:03:ca:68:66:62:ce:7d:fd:45:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051 Validity Not Before: Jan 8 16:01:48 2026 GMT Not After : Jan 9 16:01:48 2026 GMT Subject: CN=5a0e4009b27c01ae2d8f19b3e53e0dc9f66c7644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d2:4b:d1:91:50:31:85:17:d4:15:d1:16:1e: 2b:3f:27:5d:4a:d0:df:21:57:9c:22:f1:7e:5d:cf: f7:6f:77:a9:58:44:89:95:b7:bd:20:4e:a1:55:ed: 82:04:3c:14:b5:c1:8d:ea:3c:8c:4c:95:d2:6a:e5: be:68:52:5c:a3:47:d3:5d:78:73:3e:a9:cc:c0:75: 15:c9:e8:26:a0:32:4d:1f:78:ae:c5:42:87:c6:a9: 7b:4b:ad:5d:77:78:ff:75:12:2c:3e:da:80:ce:7c: d6:ca:3a:d4:bb:d7:0a:c4:ff:a9:9f:7e:89:0e:82: a1:84:7f:b7:b4:b7:c4:49:a3:47:74:17:6e:c2:6b: 4d:75:65:50:8e:8a:de:f9:c7:5c:32:3c:a8:33:73: bc:3f:13:93:1b:da:f3:0e:4e:46:ed:ef:cc:46:5f: 0e:29:39:a6:b9:c7:ee:8e:3c:0a:e4:55:90:45:ec: 5c:f4:15:86:9c:3d:32:01:ec:9c:cf:55:0c:0c:68: 33:72:0d:ac:d1:73:3b:03:22:e1:95:cc:fa:30:ee: 90:15:11:34:59:2e:06:31:66:62:66:b5:a6:7d:e4: 30:06:99:47:aa:06:a4:fb:5c:94:29:ce:7a:74:e9: e0:63:ea:ef:5f:30:ab:75:8c:44:17:1c:18:13:f3: 10:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:0E:40:09:B2:7C:01:AE:2D:8F:19:B3:E5:3E:0D:C9:F6:6C:76:44 X509v3 Authority Key Identifier: keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:04:6f:a6:57:36:ef:72:96:ff:e4:20:b6:12:db:5f:c6:b0: 52:77:24:59:56:ff:f0:f5:5c:03:28:bb:d2:3d:31:fd:22:57: 08:fe:31:17:58:8d:76:4c:c3:34:5b:70:ba:7d:48:8a:a7:8d: 21:7a:64:e4:df:e9:3b:54:a9:4f:a8:16:ee:37:46:e1:06:85: b4:af:71:4b:f4:79:4c:68:3d:86:1f:bb:a6:bd:14:ec:99:bd: 7c:44:bc:69:cc:ab:bf:65:15:5b:97:fe:50:f9:c9:aa:c1:80: 85:48:5a:5d:e0:bc:d4:96:1b:cc:72:9a:47:98:cd:ec:dd:7c: 9f:42:ce:4b:30:ae:01:59:9f:33:e8:dc:0f:c0:57:7c:b0:e9: 6b:0e:d2:f4:df:00:13:c4:70:70:1b:4d:40:96:1c:d8:5a:db: 17:1e:8d:ec:2c:d9:88:d2:25:ca:71:1d:13:9f:eb:fe:98:fc: d2:23:7a:40:80:b6:e1:fe:4f:a3:a7:f4:4a:c6:7f:5e:8e:55: 06:df:80:32:b4:01:fe:ae:c6:ed:0d:58:de:ab:50:68:70:2f: 91:37:8c:fd:fe:ee:a4:b0:78:23:ec:a6:34:18:20:97:2e:ed: c7:d9:8b:4b:dc:77:fd:05:90:fb:70:54:e8:00:cb:d8:a1:b5: 64:98:0e:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZueV70OwL0DymhmYs59/UUHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NGRjZDBlZTcwMTRlZmIyZTNiNTU0ZmJiNzA2Mzg0ZWYx MWQwNTEwHhcNMjYwMTA4MTYwMTQ4WhcNMjYwMTA5MTYwMTQ4WjAzMTEwLwYDVQQD Eyg1YTBlNDAwOWIyN2MwMWFlMmQ4ZjE5YjNlNTNlMGRjOWY2NmM3NjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNJL0ZFQMYUX1BXRFh4rPyddStDf IVecIvF+Xc/3b3epWESJlbe9IE6hVe2CBDwUtcGN6jyMTJXSauW+aFJco0fTXXhz PqnMwHUVyegmoDJNH3iuxUKHxql7S61dd3j/dRIsPtqAznzWyjrUu9cKxP+pn36J DoKhhH+3tLfESaNHdBduwmtNdWVQjore+cdcMjyoM3O8PxOTG9rzDk5G7e/MRl8O KTmmucfujjwK5FWQRexc9BWGnD0yAeycz1UMDGgzcg2s0XM7AyLhlcz6MO6QFRE0 WS4GMWZiZrWmfeQwBplHqgak+1yUKc56dOngY+rvXzCrdYxEFxwYE/MQCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoOQAmyfAGuLY8Zs+U+Dcn2bHZEMB8GA1UdIwQY MBaAFAZNzQ7nAU77LjtVT7twY4TvEdBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTkt ZmI0NzQwZmRhMjUwLzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9kY2IwOGMtNTUxNS00NDVjLWFkOTktZmI0NzQwZmRhMjUw LzEvQmszTkR1Y0JUdnN1TzFWUHUzQmpoTzhSMEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuwRvplc2 73KW/+QgthLbX8awUnckWVb/8PVcAyi70j0x/SJXCP4xF1iNdkzDNFtwun1IiqeN IXpk5N/pO1SpT6gW7jdG4QaFtK9xS/R5TGg9hh+7pr0U7Jm9fES8acyrv2UVW5f+ UPnJqsGAhUhaXeC81JYbzHKaR5jN7N18n0LOSzCuAVmfM+jcD8BXfLDpaw7S9N8A E8RwcBtNQJYc2FrbFx6N7CzZiNIlynEdE5/r/pj80iN6QIC24f5Po6f0SsZ/Xo5V Bt+AMrQB/q7G7Q1Y3qtQaHAvkTeM/f7upLB4I+ymNBggly7tx9mLS9x3/QWQ+3BU 6ADL2KG1ZJgOxg== -----END CERTIFICATE-----Generated at Thu Jan 8 23:56:19 2026 by rpki-client