This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft File: btA5KsdmC9FGD6HVAx0YQNAblBI.mft (raw, json) Hash identifier: JpikQ4hRftJzkQOyCIppLMIaw1mos4sGWWCZnazHTA4= Subject key identifier: A7:3E:F5:ED:B6:50:30:4D:96:9C:83:8A:9E:DF:2C:1B:57:8A:8B:73 Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Certificate serial: 019BD7343AB5E63C60167FCA8F55D935F2F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft Manifest number: 17DD Signing time: Mon 19 Jan 2026 17:01:22 +0000 Manifest this update: Mon 19 Jan 2026 17:01:22 +0000 Manifest next update: Tue 20 Jan 2026 17:01:22 +0000 Files and hashes: 1: 3Sd_E0C1oX2RqU6W4LHvfrEc8Pk.roa (hash: JOAPphyKGHtaN5RBXbSkEoVhSl4RF7JIChX5DcnMdOU=) 2: 84qtyRzdn5we4xBoW1LVDrbiPAw.roa (hash: JOwq7LPQbha4BiSwQqjqrt8Dw3BVTVdv+eQ1EbJP8Xk=) 3: KP_tbT0Qmi1tnDPEODrACpxcWfw.roa (hash: qrmp+XIBJirdSX0KfQasdEnzbFKy2Ws2ewUMN1w4pqw=) 4: amzi7HtQV9_v7w8hHHWKukbKI-U.roa (hash: cjyKi8MyZ6FA0LhuL8RVz7jOZxAcNj3RS515aaG3koA=) 5: btA5KsdmC9FGD6HVAx0YQNAblBI.crl (hash: s6CsFjDBv8kCBQrhW5CeRymKNJayVx0MDT7+DhvQ3JM=) 6: o3XguBAxPy4O_M2ZGJ9x_WlZz5o.roa (hash: owX02IIlFf0zejISt6InVdkADT+vNDORi+UnG+uZ9z4=) 7: x-Z6tL-vvX_mJLHlb9B7x-d3eps.roa (hash: zHvZuxQOM2V/TXUiqeY3qlcrNS+y8gi7iI41siwUvv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:34:3a:b5:e6:3c:60:16:7f:ca:8f:55:d9:35:f2:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412 Validity Not Before: Jan 19 17:01:22 2026 GMT Not After : Jan 20 17:01:22 2026 GMT Subject: CN=a73ef5edb650304d969c838a9edf2c1b578a8b73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:f1:48:31:2c:0d:06:dc:52:95:d8:f3:75: a7:67:b3:76:7a:04:26:03:c7:56:84:ef:a2:f4:9d: ed:b3:22:02:ae:59:2e:f9:e5:94:f4:ed:06:7c:bb: a1:2c:1c:54:22:6f:1b:85:43:06:2e:53:f0:11:5d: b6:25:03:08:09:43:3e:81:3c:df:3e:7f:20:56:10: 2c:54:a9:93:ae:d2:fc:72:b4:ec:c4:0c:cc:7d:a3: 80:5b:ab:6b:03:c6:a0:bd:e0:1f:31:e9:dc:79:fe: a4:5e:36:78:2b:46:bf:91:3f:2d:98:03:de:88:af: b4:55:a5:e5:3b:09:56:4b:cf:df:ce:5c:28:a1:cd: 18:71:6c:f2:e5:f7:30:19:48:37:69:b9:92:e7:9e: eb:1b:02:15:da:ab:e2:6b:c0:6b:46:45:3e:34:5b: d7:3b:31:2f:f6:cf:a5:3a:36:49:e2:4a:63:e4:df: 9a:1c:80:3d:f3:ed:7f:20:48:f0:a4:8b:22:21:9d: 6f:b1:57:58:f1:97:9b:a1:c4:77:93:c3:e6:47:f4: 99:b3:1e:de:43:9d:49:ff:59:a4:3f:e3:74:07:9f: ee:77:6d:b3:fd:e0:72:89:7f:ae:59:38:9d:2e:5e: 58:97:4c:95:f2:40:b3:1d:4d:80:34:30:3d:8f:01: 26:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:3E:F5:ED:B6:50:30:4D:96:9C:83:8A:9E:DF:2C:1B:57:8A:8B:73 X509v3 Authority Key Identifier: keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:45:dc:e8:bb:e0:f6:be:80:ec:09:8b:a1:b6:8e:54:48:fc: f5:72:b5:38:8a:bc:ae:e7:9a:09:da:cd:ce:5b:54:c8:17:14: de:33:1d:1a:0b:8b:0a:90:2b:c1:b5:03:f6:e2:6c:ea:d4:5a: f4:3a:2a:d2:bf:47:54:f8:27:c1:36:10:2f:2d:16:b0:08:9c: 90:7c:80:53:ad:79:37:84:b2:15:8d:19:a8:06:0a:b7:e9:65: 0d:40:8f:91:92:07:7c:a5:28:a8:c2:90:b5:63:73:bd:04:2a: ca:2a:af:68:f9:36:e1:2a:12:eb:55:4d:e1:ac:39:e1:58:99: 1f:f8:73:5d:f7:5a:86:3e:e1:07:04:91:f0:2f:bc:0e:0b:63: 80:93:3a:1e:4e:b6:44:53:1b:8f:25:f8:33:e4:78:2a:cd:1b: 07:84:69:6b:e6:6e:ba:ef:2a:86:30:31:4b:0d:50:41:58:b3: d0:44:d8:3a:62:d5:0c:be:f5:6b:e8:d9:5d:2b:ff:d8:86:42: 7c:3f:06:81:80:71:98:62:b6:49:a0:3e:c3:37:68:d1:23:a1: 47:9b:28:59:0a:3e:be:d9:0c:5f:1a:18:7d:b1:28:52:cf:75: 63:76:0e:12:09:59:19:b3:27:23:61:73:ad:3a:aa:cd:86:aa: 7b:a9:85:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXNDq15jxgFn/Kj1XZNfL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzOTJhYzc2NjBiZDE0NjBmYTFkNTAzMWQxODQwZDAx Yjk0MTIwHhcNMjYwMTE5MTcwMTIyWhcNMjYwMTIwMTcwMTIyWjAzMTEwLwYDVQQD EyhhNzNlZjVlZGI2NTAzMDRkOTY5YzgzOGE5ZWRmMmMxYjU3OGE4YjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxazxSDEsDQbcUpXY83WnZ7N2egQm A8dWhO+i9J3tsyICrlku+eWU9O0GfLuhLBxUIm8bhUMGLlPwEV22JQMICUM+gTzf Pn8gVhAsVKmTrtL8crTsxAzMfaOAW6trA8agveAfMencef6kXjZ4K0a/kT8tmAPe iK+0VaXlOwlWS8/fzlwooc0YcWzy5fcwGUg3abmS557rGwIV2qvia8BrRkU+NFvX OzEv9s+lOjZJ4kpj5N+aHIA98+1/IEjwpIsiIZ1vsVdY8ZebocR3k8PmR/SZsx7e Q51J/1mkP+N0B5/ud22z/eByiX+uWTidLl5Yl0yV8kCzHU2ANDA9jwEmgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKc+9e22UDBNlpyDip7fLBtXiotzMB8GA1UdIwQY MBaAFG7QOSrHZgvRRg+h1QMdGEDQG5QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQt ZThiYWY5ZmZhZGY4LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQtZThiYWY5ZmZhZGY4 LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQEXc6Lvg 9r6A7AmLobaOVEj89XK1OIq8rueaCdrNzltUyBcU3jMdGguLCpArwbUD9uJs6tRa 9Doq0r9HVPgnwTYQLy0WsAickHyAU615N4SyFY0ZqAYKt+llDUCPkZIHfKUoqMKQ tWNzvQQqyiqvaPk24SoS61VN4aw54ViZH/hzXfdahj7hBwSR8C+8DgtjgJM6Hk62 RFMbjyX4M+R4Ks0bB4Rpa+Zuuu8qhjAxSw1QQViz0ETYOmLVDL71a+jZXSv/2IZC fD8GgYBxmGK2SaA+wzdo0SOhR5soWQo+vtkMXxoYfbEoUs91Y3YOEglZGbMnI2Fz rTqqzYaqe6mFTQ== -----END CERTIFICATE-----Generated at Mon Jan 19 18:38:24 2026 by rpki-client