This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft File: 1-BjewyV4QBB3SCAJDo4KCD3d29w.mft (raw, json) Hash identifier: DKUi+UK/taVHBUGKMzgJSQ2nKCQIM2aX22SFmdKKlIc= Subject key identifier: 8F:93:64:35:7F:48:82:56:FD:8B:35:4D:A5:D2:26:45:F1:84:9C:92 Authority key identifier: F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC Certificate issuer: /CN=f818dec325784010774820090e8e0a083ddddbdc Certificate serial: 019BFB09D34EBAC086FE29971A8931AE0302 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft Manifest number: 14F0 Signing time: Mon 26 Jan 2026 16:01:23 +0000 Manifest this update: Mon 26 Jan 2026 16:01:23 +0000 Manifest next update: Tue 27 Jan 2026 16:01:23 +0000 Files and hashes: 1: 1-BjewyV4QBB3SCAJDo4KCD3d29w.crl (hash: eLxcZaws0/U45rqgY7rp05RUXFNItL1NV9cXmKvkQ30=) 2: 81F_eaaYYwg-TBBVI21_-TaNtg8.roa (hash: JIil97IYlVS9Me8r6kdazWxkET1WTS6YlZIPPN8PnVc=) 3: lbOnHNG0FresIDmGPUuzesyYT-o.roa (hash: b+2ke50tajYGGpfMuZhD+Z3HQLQKW1cFa2Jp2QUJP2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:d3:4e:ba:c0:86:fe:29:97:1a:89:31:ae:03:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f818dec325784010774820090e8e0a083ddddbdc Validity Not Before: Jan 26 16:01:23 2026 GMT Not After : Jan 27 16:01:23 2026 GMT Subject: CN=8f9364357f488256fd8b354da5d22645f1849c92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:46:0a:7d:31:45:9c:47:d4:11:f7:64:3e:2b: 67:5e:52:8c:cc:2b:4d:2f:02:e4:ea:ce:f7:bf:bc: e3:d6:5b:a4:89:55:38:b2:be:92:c5:d4:19:0e:bf: 56:41:8b:8b:ef:0a:e5:30:f1:22:10:40:ef:a5:fe: 03:90:88:c1:51:9b:c7:14:eb:4a:04:1b:03:18:d7: c1:b2:4a:d9:62:5a:d0:71:81:b1:31:2c:de:73:1d: cb:c1:b9:5f:c0:89:d0:49:a1:ee:7e:34:fc:85:6c: d3:e5:92:dd:37:53:12:9c:b1:6f:6c:33:f8:1b:8c: 7d:c6:f9:42:0c:d8:90:6b:ac:52:96:b0:8d:40:f0: cd:2e:72:aa:f5:26:06:5a:54:8c:0e:19:0f:f2:15: 62:79:4f:4a:9d:fa:dd:60:69:70:5f:50:50:08:1e: 85:00:fd:e5:ab:6a:f1:2a:e5:50:75:7b:dd:7e:87: 8f:a4:b1:c1:e9:71:e1:a2:68:4f:87:38:a9:6a:09: 8c:12:d5:f0:17:78:aa:06:97:98:5f:d3:cf:3d:26: 82:5a:c6:a7:2f:d8:5b:76:5e:e0:fa:00:35:90:29: 43:c7:d7:a8:12:84:c2:3d:f6:5d:b1:05:ad:3d:92: de:1f:26:da:07:0e:e6:aa:f7:12:e1:64:30:52:c4: 37:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:93:64:35:7F:48:82:56:FD:8B:35:4D:A5:D2:26:45:F1:84:9C:92 X509v3 Authority Key Identifier: keyid:F8:18:DE:C3:25:78:40:10:77:48:20:09:0E:8E:0A:08:3D:DD:DB:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BjewyV4QBB3SCAJDo4KCD3d29w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2959fb-88f6-49b5-bb00-83a0d9efec2d/1/1-BjewyV4QBB3SCAJDo4KCD3d29w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:87:ea:22:f8:4e:60:56:0c:89:e3:0b:4b:d3:02:5f:d9:47: 84:60:b6:be:8f:65:68:91:84:60:01:c6:53:93:05:bd:c0:b6: 35:6d:98:5c:cc:7a:c9:77:59:6c:52:05:2d:a1:6d:7f:68:64: ba:82:26:16:f6:71:b0:56:47:be:0d:0d:8b:81:f4:7b:bb:59: 76:bf:05:4e:4a:a9:70:f9:b2:f9:18:27:1c:55:00:01:85:c4: 0e:be:1c:e6:1b:76:d3:16:89:fc:96:d1:c3:1b:de:16:32:0f: a8:71:c8:9b:cb:5f:a9:a1:a8:8f:80:40:69:85:1c:6f:44:ea: e5:92:bd:55:38:e2:54:26:81:8c:21:c6:2a:42:62:0b:1c:7f: a0:ff:5c:bf:db:a5:b3:91:51:41:98:1f:31:18:c4:72:b6:9c: 40:54:f9:d4:db:43:36:ca:83:33:ae:5f:94:d4:af:6f:d0:af: a1:c8:eb:2e:e4:7c:27:cc:b4:37:7b:f9:c0:58:8c:97:55:50: b5:cd:2f:ef:e6:b6:8f:ff:8f:75:2b:f3:83:4b:f1:8f:90:1f: 0a:27:03:90:d4:23:32:80:26:b5:3c:2b:82:94:55:7f:2a:78: ba:9d:0a:20:2d:08:65:c4:35:2b:88:f9:76:6f:c1:1a:20:a8: d9:72:4b:23 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZv7CdNOusCG/imXGokxrgMCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MThkZWMzMjU3ODQwMTA3NzQ4MjAwOTBlOGUwYTA4M2Rk ZGRiZGMwHhcNMjYwMTI2MTYwMTIzWhcNMjYwMTI3MTYwMTIzWjAzMTEwLwYDVQQD Eyg4ZjkzNjQzNTdmNDg4MjU2ZmQ4YjM1NGRhNWQyMjY0NWYxODQ5YzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUYKfTFFnEfUEfdkPitnXlKMzCtN LwLk6s73v7zj1lukiVU4sr6SxdQZDr9WQYuL7wrlMPEiEEDvpf4DkIjBUZvHFOtK BBsDGNfBskrZYlrQcYGxMSzecx3LwblfwInQSaHufjT8hWzT5ZLdN1MSnLFvbDP4 G4x9xvlCDNiQa6xSlrCNQPDNLnKq9SYGWlSMDhkP8hVieU9KnfrdYGlwX1BQCB6F AP3lq2rxKuVQdXvdfoePpLHB6XHhomhPhzipagmMEtXwF3iqBpeYX9PPPSaCWsan L9hbdl7g+gA1kClDx9eoEoTCPfZdsQWtPZLeHybaBw7mqvcS4WQwUsQ36QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFI+TZDV/SIJW/Ys1TaXSJkXxhJySMB8GA1UdIwQY MBaAFPgY3sMleEAQd0ggCQ6OCgg93dvcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1CamV3eVY0UUJCM1NDQUpEbzRLQ0QzZDI5dy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjkvMjk1OWZiLTg4ZjYtNDliNS1iYjAw LTgzYTBkOWVmZWMyZC8xLzEtQmpld3lWNFFCQjNTQ0FKRG80S0NEM2QyOXcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY5LzI5NTlmYi04OGY2LTQ5YjUtYmIwMC04M2EwZDllZmVj MmQvMS8xLUJqZXd5VjRRQkIzU0NBSkRvNEtDRDNkMjl3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYofq IvhOYFYMieMLS9MCX9lHhGC2vo9laJGEYAHGU5MFvcC2NW2YXMx6yXdZbFIFLaFt f2hkuoImFvZxsFZHvg0Ni4H0e7tZdr8FTkqpcPmy+RgnHFUAAYXEDr4c5ht20xaJ /JbRwxveFjIPqHHIm8tfqaGoj4BAaYUcb0Tq5ZK9VTjiVCaBjCHGKkJiCxx/oP9c v9uls5FRQZgfMRjEcracQFT51NtDNsqDM65flNSvb9CvocjrLuR8J8y0N3v5wFiM l1VQtc0v7+a2j/+PdSvzg0vxj5AfCicDkNQjMoAmtTwrgpRVfyp4up0KIC0IZcQ1 K4j5dm/BGiCo2XJLIw== -----END CERTIFICATE-----Generated at Mon Jan 26 22:27:42 2026 by rpki-client