This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json) Hash identifier: Veu6HDOmmmBBH7dOBLWknyIjzbpiTipQOr6zgGolrqw= Subject key identifier: 8D:7D:99:44:AD:8C:08:A5:56:B6:CA:FE:A0:A6:F0:69:5F:47:6C:32 Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08 Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008 Certificate serial: 019BA26B19BA9DD286233FEC8E2867BBE0BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft Manifest number: 1026 Signing time: Fri 09 Jan 2026 11:01:26 +0000 Manifest this update: Fri 09 Jan 2026 11:01:26 +0000 Manifest next update: Sat 10 Jan 2026 11:01:26 +0000 Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: lzSqlkXxxDFEKe878OxE0Kco4+noyU3b1UPK12Y9ju8=) 2: dCctAo4cF_cQVF9v9iua88jVN3g.roa (hash: NqSK6SL1qTb0fxaxxTxRSRb53epcbkxkPGl7gPfChT0=) 3: klXO-sH0E69ctlYICKM2oEhYAk0.roa (hash: 8p7Dn973TTYNLcmIRozlh88axGubR0kxdQP115KfTHA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:6b:19:ba:9d:d2:86:23:3f:ec:8e:28:67:bb:e0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008 Validity Not Before: Jan 9 11:01:26 2026 GMT Not After : Jan 10 11:01:26 2026 GMT Subject: CN=8d7d9944ad8c08a556b6cafea0a6f0695f476c32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:80:b7:8a:a3:2a:9c:75:5a:a1:c3:da:68:fb: 47:fd:24:e8:1e:6c:44:8c:0c:27:d4:74:1e:e9:9b: 61:f9:a9:c8:99:a0:34:84:6b:f3:d1:75:dd:94:97: 86:af:fb:30:fb:50:c5:b5:08:2d:00:50:41:36:d4: 3d:c7:10:44:09:62:a2:b9:4d:07:e1:31:78:e5:38: 34:0a:09:38:ec:ad:7a:ed:a4:7f:29:46:08:01:82: 13:01:28:67:d2:3e:22:8f:09:84:92:78:2c:92:3f: 84:cf:df:e2:59:72:63:c9:d9:02:91:91:e5:5d:ca: 8f:44:5b:6b:33:e5:93:03:05:6c:cf:1a:d7:f2:f1: 9d:86:22:52:a9:37:00:bd:76:63:9b:16:2b:b5:82: 04:9a:83:f2:73:a8:b6:21:11:9f:5d:e3:14:15:ef: 38:00:52:91:0e:44:41:44:21:08:71:ac:73:11:fc: 31:71:68:bc:91:58:36:be:53:f0:f4:b0:6c:bc:b0: 0b:49:3e:5d:c0:4f:0d:cc:ae:58:54:77:5f:d9:8f: 2c:62:b7:f2:a6:5e:ac:e0:05:66:c8:e6:b3:94:09: 0d:a8:d3:be:32:9b:a9:ed:e3:e9:44:26:5b:f0:01: bd:04:68:d7:45:db:81:85:57:54:bd:98:f3:9d:53: 49:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:7D:99:44:AD:8C:08:A5:56:B6:CA:FE:A0:A6:F0:69:5F:47:6C:32 X509v3 Authority Key Identifier: keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:5f:da:81:9f:e0:8d:9e:d4:86:de:4a:de:d6:5d:41:fb:6c: bd:c8:20:6f:70:3d:7c:63:3e:f5:79:26:d1:d6:00:64:8d:d8: 89:e3:6a:09:6e:7e:23:5f:6c:c4:bd:01:6e:11:db:76:d7:b1: 41:cb:b5:29:3a:1c:4c:e8:5e:ef:2a:e6:78:67:61:ab:00:aa: ae:ed:6f:0c:5b:0c:46:40:3a:b2:c4:d4:d3:a6:31:33:9e:c5: ce:68:51:e1:4e:c4:cc:84:a0:07:b6:f6:86:a6:c0:d0:0e:36: b9:c3:33:48:44:0d:18:32:be:6c:f1:20:98:01:e5:25:ca:68: 57:7d:4d:5d:68:4a:88:4f:5d:8e:3f:53:e1:60:03:f3:0e:ea: 40:40:08:23:59:2e:5b:99:4d:88:02:e9:37:4e:a2:a2:d0:41: e1:54:54:11:92:9d:3b:8a:4e:7c:c8:e4:99:77:67:b3:77:9f: 2b:f4:2e:7d:81:a5:c7:9c:d2:30:a2:df:ad:d8:01:d4:9f:f0: 37:84:aa:9f:68:8a:e0:46:49:c6:d5:5c:3c:1e:65:7b:2d:c2: ee:2a:0c:25:e5:3e:c6:72:52:fd:ba:64:1b:d1:ad:b1:74:71: 1d:95:5a:59:cb:2e:74:d8:8f:a9:04:df:6a:4b:6f:3c:c0:0b: 8a:3e:04:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiaxm6ndKGIz/sjihnu+C+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYmM4NDAyZjA5MjM0M2I5YzAzZDM4NjA2OTcyOGY4OTgz ZTYwMDgwHhcNMjYwMTA5MTEwMTI2WhcNMjYwMTEwMTEwMTI2WjAzMTEwLwYDVQQD Eyg4ZDdkOTk0NGFkOGMwOGE1NTZiNmNhZmVhMGE2ZjA2OTVmNDc2YzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4IC3iqMqnHVaocPaaPtH/SToHmxE jAwn1HQe6Zth+anImaA0hGvz0XXdlJeGr/sw+1DFtQgtAFBBNtQ9xxBECWKiuU0H 4TF45Tg0Cgk47K167aR/KUYIAYITAShn0j4ijwmEkngskj+Ez9/iWXJjydkCkZHl XcqPRFtrM+WTAwVszxrX8vGdhiJSqTcAvXZjmxYrtYIEmoPyc6i2IRGfXeMUFe84 AFKRDkRBRCEIcaxzEfwxcWi8kVg2vlPw9LBsvLALST5dwE8NzK5YVHdf2Y8sYrfy pl6s4AVmyOazlAkNqNO+Mpup7ePpRCZb8AG9BGjXRduBhVdUvZjznVNJ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI19mUStjAilVrbK/qCm8GlfR2wyMB8GA1UdIwQY MBaAFGy8hALwkjQ7nAPThgaXKPiYPmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQt MjgwZjVhNGI1ZTAzLzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC85ZGI4N2YtYTMxYS00YjRkLTg2MjQtMjgwZjVhNGI1ZTAz LzEvYkx5RUF2Q1NORHVjQTlPR0JwY28tSmctWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASF/agZ/g jZ7Uht5K3tZdQftsvcggb3A9fGM+9Xkm0dYAZI3YieNqCW5+I19sxL0BbhHbdtex Qcu1KTocTOhe7yrmeGdhqwCqru1vDFsMRkA6ssTU06YxM57FzmhR4U7EzISgB7b2 hqbA0A42ucMzSEQNGDK+bPEgmAHlJcpoV31NXWhKiE9djj9T4WAD8w7qQEAII1ku W5lNiALpN06iotBB4VRUEZKdO4pOfMjkmXdns3efK/QufYGlx5zSMKLfrdgB1J/w N4Sqn2iK4EZJxtVcPB5ley3C7ioMJeU+xnJS/bpkG9GtsXRxHZVaWcsudNiPqQTf aktvPMALij4ECg== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:57 2026 by rpki-client