This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft File: BiFu7FFLB9zinTAToZCy7l_LH5Q.mft (raw, json) Hash identifier: q4dk9rTgNDZP4cbm4ZJ5hvg/AOfCUkhP7nFcvkpXD7E= Subject key identifier: EA:6A:D1:68:DA:10:27:E5:6F:24:2E:4F:1A:1D:7D:D1:4B:51:18:E5 Authority key identifier: 06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94 Certificate issuer: /CN=06216eec514b07dce29d3013a190b2ee5fcb1f94 Certificate serial: 019C039ED8C216668B04F757C7285EAD4936 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft Manifest number: 0B2C Signing time: Wed 28 Jan 2026 08:01:07 +0000 Manifest this update: Wed 28 Jan 2026 08:01:07 +0000 Manifest next update: Thu 29 Jan 2026 08:01:07 +0000 Files and hashes: 1: BiFu7FFLB9zinTAToZCy7l_LH5Q.crl (hash: Lbw5z51QBxuN/S99KUt88K6ilTNzV9qBVn2l5cVSI98=) 2: Is7C3W26lEw15lD5VhKPKWdkM8M.roa (hash: OE4K7vc1yucd3jpu96y3uZHtADB9bFEDzoGvFJGStC4=) 3: cqEx3z1wzl-0mdtNpY4AnTyAIMc.roa (hash: GFZBmF6WdLGeI9dqHrnwm1HNWHgZhg1gZ+mGTpe3Vfo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:03:9e:d8:c2:16:66:8b:04:f7:57:c7:28:5e:ad:49:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06216eec514b07dce29d3013a190b2ee5fcb1f94 Validity Not Before: Jan 28 08:01:07 2026 GMT Not After : Jan 29 08:01:07 2026 GMT Subject: CN=ea6ad168da1027e56f242e4f1a1d7dd14b5118e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:80:a5:48:7b:69:61:98:ea:2b:75:dc:12:35: 0a:94:54:b3:7d:cd:2f:3d:77:b5:b6:ac:1f:36:2e: 7e:72:10:8e:8c:0b:29:30:00:d8:94:cd:f7:8e:5f: eb:6c:cf:f2:d4:cd:ee:63:98:75:75:dd:1a:fe:5c: 77:6f:d1:a7:f8:df:8b:01:7f:d4:72:37:ac:91:48: db:2d:9a:3a:4d:86:54:07:e8:a8:c0:66:e2:29:9d: 6f:06:84:0e:1f:79:88:65:48:34:8f:77:76:f3:79: 8e:7b:ca:ed:2a:eb:81:d1:3b:09:c2:67:ed:3a:35: 73:a3:1b:05:87:8b:47:f7:e6:5c:89:8b:01:b8:e3: 2f:73:a6:56:66:9d:8e:36:df:25:aa:51:77:bb:e3: 9e:a8:9b:2b:d8:0e:ac:87:9a:9b:46:71:4b:48:cd: d0:5a:93:cc:87:49:62:cf:46:a3:7a:26:e1:c5:81: 20:d8:53:1c:4d:8c:6d:9b:9e:fb:af:5d:28:8d:64: e4:9d:2a:0c:8a:e0:29:6a:59:bc:1c:34:2a:f9:26: 00:e4:e4:5e:a9:f0:ea:e3:31:08:95:aa:e0:00:c7: 9d:93:aa:93:9b:2a:8a:10:7f:84:6f:92:2b:f0:2e: e7:f5:99:19:ae:e4:a1:8e:0b:d2:ac:67:ba:79:97: b6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:6A:D1:68:DA:10:27:E5:6F:24:2E:4F:1A:1D:7D:D1:4B:51:18:E5 X509v3 Authority Key Identifier: keyid:06:21:6E:EC:51:4B:07:DC:E2:9D:30:13:A1:90:B2:EE:5F:CB:1F:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiFu7FFLB9zinTAToZCy7l_LH5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1868ee-51a8-4619-9143-188dcff0e405/1/BiFu7FFLB9zinTAToZCy7l_LH5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:9b:b1:75:7e:cf:c7:f1:3b:35:12:b3:d7:64:04:90:8a:11: e4:b6:3a:24:df:ab:d8:73:85:b5:3b:19:38:9a:30:24:80:e9: a8:21:93:32:88:c7:e6:64:54:5e:aa:68:2a:b7:38:fc:6e:eb: 8a:70:de:ab:f5:ff:4c:0e:84:29:50:46:c9:14:ec:e7:63:e0: 44:e7:1c:51:4f:05:21:4f:4f:57:de:ad:22:d4:77:91:48:bf: 31:91:7e:a3:d1:0d:8e:bb:02:64:5b:c8:a3:c4:c4:dc:ea:2c: fe:62:68:61:48:9d:e9:44:19:d5:e8:44:f7:c4:56:dc:9d:07: 99:b7:ee:73:b8:05:5e:8f:dd:a0:3f:a6:98:2c:d7:cb:65:02: 48:ec:b1:64:42:18:a3:d9:c4:1a:6b:88:a8:e7:85:55:e3:03: 07:ce:02:f5:e0:c4:bc:07:6e:4a:82:e3:4f:b4:0e:8a:66:29: 4f:8b:7c:dc:80:8c:30:51:43:cc:89:55:ac:56:23:67:37:b5: 5f:6e:e8:d1:62:3a:8d:71:0d:85:bf:c0:38:05:e2:b3:1f:6c: af:44:f4:31:15:2d:29:0b:c2:2a:a7:23:ad:fc:f7:bc:7d:06: 3e:f1:6f:29:64:1d:91:e2:57:e3:73:6f:75:a1:54:be:45:4d: 37:72:fd:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwDntjCFmaLBPdXxyherUk2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MjE2ZWVjNTE0YjA3ZGNlMjlkMzAxM2ExOTBiMmVlNWZj YjFmOTQwHhcNMjYwMTI4MDgwMTA3WhcNMjYwMTI5MDgwMTA3WjAzMTEwLwYDVQQD EyhlYTZhZDE2OGRhMTAyN2U1NmYyNDJlNGYxYTFkN2RkMTRiNTExOGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oClSHtpYZjqK3XcEjUKlFSzfc0v PXe1tqwfNi5+chCOjAspMADYlM33jl/rbM/y1M3uY5h1dd0a/lx3b9Gn+N+LAX/U cjeskUjbLZo6TYZUB+iowGbiKZ1vBoQOH3mIZUg0j3d283mOe8rtKuuB0TsJwmft OjVzoxsFh4tH9+ZciYsBuOMvc6ZWZp2ONt8lqlF3u+OeqJsr2A6sh5qbRnFLSM3Q WpPMh0liz0ajeibhxYEg2FMcTYxtm577r10ojWTknSoMiuApalm8HDQq+SYA5ORe qfDq4zEIlargAMedk6qTmyqKEH+Eb5Ir8C7n9ZkZruShjgvSrGe6eZe2xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOpq0WjaECflbyQuTxodfdFLURjlMB8GA1UdIwQY MBaAFAYhbuxRSwfc4p0wE6GQsu5fyx+UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmlGdTdGRkxCOXppblRBVG9aQ3k3bF9MSDVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xODY4ZWUtNTFhOC00NjE5LTkxNDMt MTg4ZGNmZjBlNDA1LzEvQmlGdTdGRkxCOXppblRBVG9aQ3k3bF9MSDVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8xODY4ZWUtNTFhOC00NjE5LTkxNDMtMTg4ZGNmZjBlNDA1 LzEvQmlGdTdGRkxCOXppblRBVG9aQ3k3bF9MSDVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5uxdX7P x/E7NRKz12QEkIoR5LY6JN+r2HOFtTsZOJowJIDpqCGTMojH5mRUXqpoKrc4/G7r inDeq/X/TA6EKVBGyRTs52PgROccUU8FIU9PV96tItR3kUi/MZF+o9ENjrsCZFvI o8TE3Oos/mJoYUid6UQZ1ehE98RW3J0Hmbfuc7gFXo/doD+mmCzXy2UCSOyxZEIY o9nEGmuIqOeFVeMDB84C9eDEvAduSoLjT7QOimYpT4t83ICMMFFDzIlVrFYjZze1 X27o0WI6jXENhb/AOAXisx9sr0T0MRUtKQvCKqcjrfz3vH0GPvFvKWQdkeJX43Nv daFUvkVNN3L97w== -----END CERTIFICATE-----Generated at Wed Jan 28 18:35:03 2026 by rpki-client