This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft File: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft (raw, json) Hash identifier: o80vvU4muWbWjPFALYObViOIHAGC0/enkEy8Ntcndto= Subject key identifier: 7E:63:0D:ED:94:57:1D:3E:44:F0:2A:AA:3D:AE:FB:FF:A6:6E:5B:13 Authority key identifier: 04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4 Certificate issuer: /CN=0438e64299e545d3637074cb946b400f7990ecf4 Certificate serial: 019BD08CC60895EA7E3471CA19B042D7848D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft Manifest number: 17D5 Signing time: Sun 18 Jan 2026 10:00:45 +0000 Manifest this update: Sun 18 Jan 2026 10:00:45 +0000 Manifest next update: Mon 19 Jan 2026 10:00:45 +0000 Files and hashes: 1: BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl (hash: VkQdSv1IXHLB/OWzLeZDsBDvKH+r55zuluYpwUw2H9Q=) 2: MJnpHwqWRCcgwA2k13dIsZbF1wg.roa (hash: PFwAyy/D0gAKEytNprzS6x7dl1CAJgdTy4faTQEJoSw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d0:8c:c6:08:95:ea:7e:34:71:ca:19:b0:42:d7:84:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0438e64299e545d3637074cb946b400f7990ecf4 Validity Not Before: Jan 18 10:00:45 2026 GMT Not After : Jan 19 10:00:45 2026 GMT Subject: CN=7e630ded94571d3e44f02aaa3daefbffa66e5b13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6f:21:d2:ac:62:a4:04:ff:bd:83:ce:e2:c3: a2:9a:d8:07:af:f0:17:b5:b1:ca:ea:03:ae:83:1b: fa:0b:b0:ee:c3:24:56:b7:e5:86:77:9b:42:4b:0d: 03:e7:79:92:47:b4:a1:ca:f2:af:a4:20:3c:b2:d8: 6a:ef:9f:94:c5:42:f1:02:95:20:b4:d8:ea:1c:d9: 7a:12:c0:45:35:92:d1:81:ca:77:ee:e7:92:f2:3a: b7:a6:18:56:d2:80:b0:57:7b:fa:1b:cc:ad:bd:60: 26:2f:ed:8c:4a:83:9c:43:ca:c6:5f:1e:d9:ac:77: 67:14:e2:99:c8:73:48:9b:08:3e:4f:94:0c:08:c7: 48:db:61:99:10:13:b6:8d:42:75:43:ca:0f:7d:18: 07:19:bd:70:9c:59:dc:6d:b0:6d:6e:26:3a:34:67: d6:e0:ac:c5:c5:5b:05:b6:c2:b7:88:87:d4:dd:d6: 13:e6:34:99:f7:e0:0e:08:6b:30:40:fa:27:0f:a3: e7:02:ee:93:15:c1:1e:dd:ce:03:5e:ee:d9:22:95: 0f:0b:c8:bc:01:57:fa:57:11:f3:2e:16:e1:78:6b: 29:24:3b:5b:34:5c:50:0a:a4:6d:cd:67:d3:c9:b5: e2:2e:f1:f8:52:61:24:bb:ce:38:74:11:5d:b4:ed: 2e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:63:0D:ED:94:57:1D:3E:44:F0:2A:AA:3D:AE:FB:FF:A6:6E:5B:13 X509v3 Authority Key Identifier: keyid:04:38:E6:42:99:E5:45:D3:63:70:74:CB:94:6B:40:0F:79:90:EC:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/c6f56b-bf22-417e-b11b-c6dc58137d07/1/BDjmQpnlRdNjcHTLlGtAD3mQ7PQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e6:5f:fb:fe:2c:bd:94:8c:f2:dd:a4:7d:60:aa:ae:79:5f: 7c:55:e2:77:d7:9a:e3:01:33:10:46:27:91:5f:6c:01:01:3a: 7b:ea:6f:89:8c:21:b5:60:85:5d:6b:00:bf:a2:94:cf:24:d9: e1:42:e0:11:76:bc:53:a1:cb:c5:6b:a0:dd:d0:6d:9c:2c:d5: f1:e5:6d:a3:7a:ec:33:f1:70:b8:7d:a7:e3:38:28:2a:ff:dd: ee:d1:5b:ee:b8:c8:00:cf:82:7d:fb:b3:39:81:0a:5e:9b:92: 7b:03:4e:37:f2:e2:b1:8f:86:c7:6a:e6:c8:d5:91:98:cf:61: 24:1f:95:fc:cd:2e:b2:b3:dc:1a:6f:39:7c:78:82:67:df:c5: 2e:dc:44:53:5d:40:5b:1b:54:0e:26:08:93:29:0d:30:3f:32: 48:34:d4:8f:e5:e6:6e:ce:b4:76:e0:c2:22:53:aa:54:d9:c4: c7:9d:2d:1a:d4:b0:1a:77:0d:6d:45:9c:79:6e:8d:e7:5e:07: cc:a7:4e:c4:db:88:f1:68:e8:e3:b0:65:3b:12:30:74:0a:f8: 3b:9e:88:7f:48:d0:06:a2:f3:48:6d:d1:7d:ce:6d:7c:df:1f: e7:57:c9:e1:e4:0c:6a:1a:70:68:5c:e2:a2:02:7a:f9:da:26: 2d:02:76:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvQjMYIlep+NHHKGbBC14SNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzhlNjQyOTllNTQ1ZDM2MzcwNzRjYjk0NmI0MDBmNzk5 MGVjZjQwHhcNMjYwMTE4MTAwMDQ1WhcNMjYwMTE5MTAwMDQ1WjAzMTEwLwYDVQQD Eyg3ZTYzMGRlZDk0NTcxZDNlNDRmMDJhYWEzZGFlZmJmZmE2NmU1YjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG8h0qxipAT/vYPO4sOimtgHr/AX tbHK6gOugxv6C7DuwyRWt+WGd5tCSw0D53mSR7ShyvKvpCA8sthq75+UxULxApUg tNjqHNl6EsBFNZLRgcp37ueS8jq3phhW0oCwV3v6G8ytvWAmL+2MSoOcQ8rGXx7Z rHdnFOKZyHNImwg+T5QMCMdI22GZEBO2jUJ1Q8oPfRgHGb1wnFncbbBtbiY6NGfW 4KzFxVsFtsK3iIfU3dYT5jSZ9+AOCGswQPonD6PnAu6TFcEe3c4DXu7ZIpUPC8i8 AVf6VxHzLhbheGspJDtbNFxQCqRtzWfTybXiLvH4UmEku844dBFdtO0u1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5jDe2UVx0+RPAqqj2u+/+mblsTMB8GA1UdIwQY MBaAFAQ45kKZ5UXTY3B0y5RrQA95kOz0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWIt YzZkYzU4MTM3ZDA3LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9jNmY1NmItYmYyMi00MTdlLWIxMWItYzZkYzU4MTM3ZDA3 LzEvQkRqbVFwbmxSZE5qY0hUTGxHdEFEM21RN1BRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeZf+/4s vZSM8t2kfWCqrnlffFXid9ea4wEzEEYnkV9sAQE6e+pviYwhtWCFXWsAv6KUzyTZ 4ULgEXa8U6HLxWug3dBtnCzV8eVto3rsM/FwuH2n4zgoKv/d7tFb7rjIAM+Cffuz OYEKXpuSewNON/LisY+Gx2rmyNWRmM9hJB+V/M0usrPcGm85fHiCZ9/FLtxEU11A WxtUDiYIkykNMD8ySDTUj+Xmbs60duDCIlOqVNnEx50tGtSwGncNbUWceW6N514H zKdOxNuI8Wjo47BlOxIwdAr4O56If0jQBqLzSG3Rfc5tfN8f51fJ4eQMahpwaFzi ogJ6+domLQJ2SA== -----END CERTIFICATE-----Generated at Sun Jan 18 17:58:35 2026 by rpki-client