This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft File: BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft (raw, json) Hash identifier: b+UzFay78P6vNRL4ZLBs3HHk89cAvVi+PDCFKanMrF0= Subject key identifier: FB:06:04:F2:D9:3C:3D:D8:B7:C1:F8:21:58:51:30:E9:9E:A1:D8:89 Authority key identifier: 06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9 Certificate issuer: /CN=06a757442e47f82608bef423dac344c25358dbf9 Certificate serial: 019BD733A3DB7546F466F6A4DFB06CE399B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft Manifest number: 0D32 Signing time: Mon 19 Jan 2026 17:00:44 +0000 Manifest this update: Mon 19 Jan 2026 17:00:44 +0000 Manifest next update: Tue 20 Jan 2026 17:00:44 +0000 Files and hashes: 1: BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl (hash: 0cLihW+f5X1Io0wtuBoZmzKinfzyt1o+p0dTXSn3vKc=) 2: qPxd8qMxhd6Yq15uwp5rXHAxZ2E.roa (hash: 7ZX3c0L8iUXI21GiIPtHoJrfkVa81NDxH/D4ulRW6l0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:33:a3:db:75:46:f4:66:f6:a4:df:b0:6c:e3:99:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a757442e47f82608bef423dac344c25358dbf9 Validity Not Before: Jan 19 17:00:44 2026 GMT Not After : Jan 20 17:00:44 2026 GMT Subject: CN=fb0604f2d93c3dd8b7c1f821585130e99ea1d889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:97:68:e5:00:37:9f:d2:42:d1:ec:a3:31:14: ce:17:82:27:7d:95:5d:73:7e:48:91:21:14:b2:43: 90:e8:db:c7:0c:ae:60:e8:7d:ec:9d:dd:95:c7:f5: 96:22:bb:49:3c:66:82:85:e1:a1:af:70:a1:4f:6b: d9:45:e0:04:b8:5d:fb:f7:cc:30:e5:2f:eb:d3:f4: 2c:d3:c3:41:80:fe:dd:31:d7:ec:a5:30:a2:46:55: cf:f0:75:63:4a:14:c3:1a:26:cb:f7:43:93:5b:1f: 8e:2d:10:2a:c7:6c:73:fc:9e:3d:d9:70:a2:3b:78: 44:29:6f:bd:12:f1:54:e1:bd:c1:30:54:40:66:54: c4:27:1e:2c:9d:ea:52:25:4a:62:ec:2f:aa:bd:98: 97:f0:ec:27:09:0f:2c:28:5a:09:f5:4f:db:35:82: b8:76:50:1b:26:43:e3:ca:7e:b6:f0:b2:bd:bb:7e: a6:ca:69:09:32:31:05:49:86:0d:a6:96:04:32:78: b5:a5:c6:1c:2e:bb:9d:07:39:08:69:b0:db:e7:c9: 29:71:9e:bf:b7:05:b1:89:db:3e:20:5b:f1:2e:b3: d3:6b:27:78:77:78:df:0b:ec:04:62:63:b0:2e:d6: a2:43:ec:a8:c0:71:9c:34:ac:f3:80:70:8b:b5:f2: c6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:06:04:F2:D9:3C:3D:D8:B7:C1:F8:21:58:51:30:E9:9E:A1:D8:89 X509v3 Authority Key Identifier: keyid:06:A7:57:44:2E:47:F8:26:08:BE:F4:23:DA:C3:44:C2:53:58:DB:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqdXRC5H-CYIvvQj2sNEwlNY2_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b1e012-12d0-44a3-a6af-b25a67b2eb4a/1/BqdXRC5H-CYIvvQj2sNEwlNY2_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:27:b9:62:8c:64:ea:64:68:57:4a:e5:5b:c9:13:38:3a:a4: 40:26:00:22:80:2c:cf:89:fb:be:97:63:87:fd:71:6e:58:12: 59:51:1e:93:12:7c:76:f8:1a:96:08:10:49:24:fd:3b:3a:99: f6:64:7e:4a:c7:fa:59:0e:2a:c9:85:dd:98:04:a1:62:d7:e4: 51:98:5c:e1:04:0c:3b:26:da:60:7d:56:8b:f5:58:19:43:95: 4a:ec:4b:87:4d:56:37:69:d7:7d:97:3e:3c:25:d3:25:8e:18: f2:4a:71:71:af:bc:ba:34:27:89:28:f1:4c:b5:1a:50:b9:61: 95:87:d6:db:fc:07:e2:fa:a4:e0:e0:af:6a:3b:38:48:4d:94: d0:f9:61:fe:ca:76:f5:3f:a4:07:10:c7:88:93:7d:12:6d:d7: ea:9e:47:08:8a:68:32:5b:4c:90:18:11:c2:39:f7:3a:dd:bb: 08:33:ce:82:a4:ce:47:a5:39:2c:96:c5:2a:45:33:0b:5c:07: c1:80:5d:1d:32:ad:ee:2a:5f:91:85:f7:03:5f:22:51:2b:95: 2e:1e:2e:3f:fe:67:4e:ed:39:af:72:41:42:5c:06:cb:38:28: ad:ba:4c:40:35:2f:79:07:92:55:0b:52:e2:89:ff:b5:bc:d6: af:d3:a4:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXM6PbdUb0Zvak37Bs45mzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTc1NzQ0MmU0N2Y4MjYwOGJlZjQyM2RhYzM0NGMyNTM1 OGRiZjkwHhcNMjYwMTE5MTcwMDQ0WhcNMjYwMTIwMTcwMDQ0WjAzMTEwLwYDVQQD EyhmYjA2MDRmMmQ5M2MzZGQ4YjdjMWY4MjE1ODUxMzBlOTllYTFkODg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5do5QA3n9JC0eyjMRTOF4InfZVd c35IkSEUskOQ6NvHDK5g6H3snd2Vx/WWIrtJPGaCheGhr3ChT2vZReAEuF3798ww 5S/r0/Qs08NBgP7dMdfspTCiRlXP8HVjShTDGibL90OTWx+OLRAqx2xz/J492XCi O3hEKW+9EvFU4b3BMFRAZlTEJx4snepSJUpi7C+qvZiX8OwnCQ8sKFoJ9U/bNYK4 dlAbJkPjyn628LK9u36mymkJMjEFSYYNppYEMni1pcYcLrudBzkIabDb58kpcZ6/ twWxids+IFvxLrPTayd4d3jfC+wEYmOwLtaiQ+yowHGcNKzzgHCLtfLGKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPsGBPLZPD3Yt8H4IVhRMOmeodiJMB8GA1UdIwQY MBaAFAanV0QuR/gmCL70I9rDRMJTWNv5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iMWUwMTItMTJkMC00NGEzLWE2YWYt YjI1YTY3YjJlYjRhLzEvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9iMWUwMTItMTJkMC00NGEzLWE2YWYtYjI1YTY3YjJlYjRh LzEvQnFkWFJDNUgtQ1lJdnZRajJzTkV3bE5ZMl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALie5Yoxk 6mRoV0rlW8kTODqkQCYAIoAsz4n7vpdjh/1xblgSWVEekxJ8dvgalggQSST9OzqZ 9mR+Ssf6WQ4qyYXdmAShYtfkUZhc4QQMOybaYH1Wi/VYGUOVSuxLh01WN2nXfZc+ PCXTJY4Y8kpxca+8ujQniSjxTLUaULlhlYfW2/wH4vqk4OCvajs4SE2U0Plh/sp2 9T+kBxDHiJN9Em3X6p5HCIpoMltMkBgRwjn3Ot27CDPOgqTOR6U5LJbFKkUzC1wH wYBdHTKt7ipfkYX3A18iUSuVLh4uP/5nTu05r3JBQlwGyzgorbpMQDUveQeSVQtS 4on/tbzWr9OkpA== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:14 2026 by rpki-client