This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json) Hash identifier: skVt5+D/Kh0t4s2aX99LvI91Ts/5hTPIeqezXtfeBZI= Subject key identifier: DA:E9:18:72:9B:8F:F9:52:4A:24:72:AE:D3:62:96:F4:71:AC:F2:97 Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05 Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05 Certificate serial: 019B9EC522E2626A448DA0638D0EADE94908 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft Manifest number: 0B3A Signing time: Thu 08 Jan 2026 18:01:18 +0000 Manifest this update: Thu 08 Jan 2026 18:01:18 +0000 Manifest next update: Fri 09 Jan 2026 18:01:18 +0000 Files and hashes: 1: 7nGRBNjM5j5eNDqYz-TSSv94j7Q.roa (hash: nhAdafWlc+OQ8H28KfWJebfO4dsqekDq134e+O9NNS4=) 2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: MlPGas7+jhE9GFdatcEFtZfREDeZfN08rA03qvbOyO4=) 3: yIFLl4MVGF9mjpKNHCzeQGsD2Qo.roa (hash: 7+aiKFdw/abreb0Y89Vdn5Q4kSAU0SOcU2BQF5q2AZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9e:c5:22:e2:62:6a:44:8d:a0:63:8d:0e:ad:e9:49:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05 Validity Not Before: Jan 8 18:01:18 2026 GMT Not After : Jan 9 18:01:18 2026 GMT Subject: CN=dae918729b8ff9524a2472aed36296f471acf297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:20:ce:4a:74:be:42:55:d6:1a:98:49:52:c1: 8f:b4:a4:08:c1:32:0a:b1:44:67:d1:b5:01:1e:e2: 99:4d:2d:8b:0e:35:ef:00:32:e6:c5:52:2c:4f:4a: c7:9d:fd:02:51:7e:e5:9e:c7:93:de:7d:cb:b2:c4: b0:06:4c:63:c8:ec:67:23:84:79:4f:1d:55:75:4e: 48:d6:30:a3:e7:dc:39:68:48:48:c4:3d:88:64:77: 7c:a3:3f:34:99:b0:c9:ec:96:d2:c4:f8:09:25:c7: 17:23:ce:7e:5c:18:23:11:6f:3b:03:9b:0c:a8:01: 7d:9f:41:57:2a:bc:9b:cb:f4:88:e4:f6:67:da:0e: 20:ed:60:8a:ca:8d:6d:f4:e8:af:35:07:fa:02:1d: d8:96:d4:8a:af:85:98:6b:35:61:4d:a1:d5:52:72: 69:b3:b0:2d:a1:3a:d3:5a:55:3f:fc:fb:42:7b:a1: 61:36:0b:4f:b2:3b:5d:17:75:7b:9e:d3:69:6e:8a: b8:73:9a:98:af:bc:8f:b4:74:39:86:64:de:6d:1a: 94:3e:fc:cc:9b:a0:db:cb:5b:ce:5b:4d:2a:7b:75: fe:7b:e2:fc:a6:ba:4f:9f:e4:f4:58:d6:c3:29:43: 0f:77:7a:99:36:47:73:02:83:a8:ab:dd:e6:f2:04: 84:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E9:18:72:9B:8F:F9:52:4A:24:72:AE:D3:62:96:F4:71:AC:F2:97 X509v3 Authority Key Identifier: keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:fd:bf:18:bd:a3:41:15:e4:17:42:34:4b:e2:0f:f1:b7:50: b8:a3:d6:d3:65:84:80:3c:e2:d9:0c:1c:49:3d:13:e6:3d:64: 8f:dc:27:c1:7f:fa:13:b2:41:8a:8b:79:93:01:cd:88:16:9a: ef:66:e8:07:8b:14:40:f9:ac:78:7a:71:dc:df:73:16:9d:7a: 09:fc:ef:48:25:97:36:4a:0e:cd:f9:55:66:06:01:bf:de:70: b7:3e:0d:a0:3f:01:b1:a9:c1:96:2c:ad:97:ae:d2:a7:4f:a3: ff:c6:eb:09:4c:1f:a0:76:d6:b7:91:e9:09:f6:f0:8a:e9:11: 46:93:18:f2:49:f7:43:a5:18:cb:f9:5d:e5:4f:fa:b0:50:d5: 09:61:e1:e6:1b:a7:6b:69:27:d7:69:15:11:74:f3:4c:5b:53: 41:bd:b7:ca:52:00:cb:a0:66:e0:5b:79:1a:b7:85:e3:f1:0b: bf:85:08:14:1e:22:1d:03:e9:b6:46:bf:40:2c:b6:78:c2:3a: 86:24:dd:d0:e5:55:43:ac:db:93:ce:b0:d2:36:bc:01:a1:64: 5c:a0:37:07:ea:ef:e0:5e:05:ca:b4:06:90:40:d8:4b:c0:e1: f6:3c:5c:8e:4b:ed:59:0d:8d:be:c8:b6:79:76:71:c5:e4:8e: 65:f3:f4:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuexSLiYmpEjaBjjQ6t6UkIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MWUyNTU0ZTUyMDM3NzgxZDEwN2M4ZjgzMTljOTNlNTk5 ODZmMDUwHhcNMjYwMTA4MTgwMTE4WhcNMjYwMTA5MTgwMTE4WjAzMTEwLwYDVQQD EyhkYWU5MTg3MjliOGZmOTUyNGEyNDcyYWVkMzYyOTZmNDcxYWNmMjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yDOSnS+QlXWGphJUsGPtKQIwTIK sURn0bUBHuKZTS2LDjXvADLmxVIsT0rHnf0CUX7lnseT3n3LssSwBkxjyOxnI4R5 Tx1VdU5I1jCj59w5aEhIxD2IZHd8oz80mbDJ7JbSxPgJJccXI85+XBgjEW87A5sM qAF9n0FXKryby/SI5PZn2g4g7WCKyo1t9OivNQf6Ah3YltSKr4WYazVhTaHVUnJp s7AtoTrTWlU//PtCe6FhNgtPsjtdF3V7ntNpboq4c5qYr7yPtHQ5hmTebRqUPvzM m6Dby1vOW00qe3X+e+L8prpPn+T0WNbDKUMPd3qZNkdzAoOoq93m8gSEGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrpGHKbj/lSSiRyrtNilvRxrPKXMB8GA1UdIwQY MBaAFAYeJVTlIDd4HRB8j4MZyT5ZmG8FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mYTZmNDMtN2RkMS00MDViLThkY2Ut MjliMDM4MDg0YWE2LzEvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9mYTZmNDMtN2RkMS00MDViLThkY2UtMjliMDM4MDg0YWE2 LzEvQmg0bFZPVWdOM2dkRUh5UGd4bkpQbG1ZYndVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAv2/GL2j QRXkF0I0S+IP8bdQuKPW02WEgDzi2QwcST0T5j1kj9wnwX/6E7JBiot5kwHNiBaa 72boB4sUQPmseHpx3N9zFp16CfzvSCWXNkoOzflVZgYBv95wtz4NoD8BsanBliyt l67Sp0+j/8brCUwfoHbWt5HpCfbwiukRRpMY8kn3Q6UYy/ld5U/6sFDVCWHh5hun a2kn12kVEXTzTFtTQb23ylIAy6Bm4Ft5GreF4/ELv4UIFB4iHQPptka/QCy2eMI6 hiTd0OVVQ6zbk86w0ja8AaFkXKA3B+rv4F4FyrQGkEDYS8Dh9jxcjkvtWQ2Nvsi2 eXZxxeSOZfP0ZQ== -----END CERTIFICATE-----Generated at Fri Jan 9 00:54:01 2026 by rpki-client