This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft File: bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json) Hash identifier: zCoVmTutrIfZw67kbvSBkETaxK/GrbHs+3Es/2fz7xM= Subject key identifier: CD:BF:6A:11:93:31:6D:9D:0C:7F:32:FE:5F:4F:C4:7A:7B:2B:40:6D Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Certificate serial: 019BEDF24F0BAC3208379F444D2D094D6094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft Manifest number: 1015 Signing time: Sat 24 Jan 2026 03:00:38 +0000 Manifest this update: Sat 24 Jan 2026 03:00:38 +0000 Manifest next update: Sun 25 Jan 2026 03:00:38 +0000 Files and hashes: 1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=) 2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=) 3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=) 4: WgdXGCq5750IZB5Te3z2Ts4JuHo.roa (hash: BuQ1Y5enK/3DpIsodzPPjyugSuHNto6XMIOPzcMe6cQ=) 5: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: lkv3WwFQBbwkSoMfu+I0QiqkkQ8x4wStxRls7xt5IiE=) 6: iwnR0_v7DrZOMyhOwK5w8tNyMio.roa (hash: m9wlWVaLcH73FDQVsUWe6KN6JmhaiRLX69jEcq4ITXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 03:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ed:f2:4f:0b:ac:32:08:37:9f:44:4d:2d:09:4d:60:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Validity Not Before: Jan 24 03:00:38 2026 GMT Not After : Jan 25 03:00:38 2026 GMT Subject: CN=cdbf6a1193316d9d0c7f32fe5f4fc47a7b2b406d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:fa:13:9f:3f:4c:f3:6c:5e:24:d4:37:34: 5e:2b:61:8e:cc:ca:19:df:30:0a:e2:de:22:dc:01: e4:81:af:43:aa:b0:d8:f2:6f:79:35:1b:66:68:06: 65:b1:2f:98:a8:ab:d3:6b:49:19:45:59:18:bf:08: cd:bc:21:ee:d6:65:73:b2:c7:08:64:b4:f6:d5:e3: 56:67:16:61:4b:e8:1a:5b:5f:a7:eb:b6:fd:17:78: 81:b5:88:8b:28:94:9d:a3:5e:77:a6:e2:e7:32:0b: d9:f1:b1:61:13:46:f2:5f:cf:d6:e5:ee:5e:d1:8c: e7:9d:5f:d1:1c:28:03:24:c8:ea:41:ba:f1:b2:b8: 56:6d:ef:9c:9a:27:11:41:45:3d:50:53:c9:55:56: fa:09:d8:c6:77:69:ce:8f:76:24:f0:56:7e:82:49: cd:44:e0:12:63:eb:a7:ff:f2:69:0f:87:e2:2a:54: d3:b1:15:65:14:74:9b:66:e2:fd:09:9f:89:72:5f: 69:01:e9:f2:53:3a:c7:cb:1a:9d:48:86:75:c6:9a: 17:ac:69:23:e6:7a:bc:da:4a:b8:23:21:aa:db:0f: 64:b3:8b:6f:d7:84:fc:a3:12:66:c2:bc:f3:e8:c8: 1f:7f:ef:dd:d6:73:fa:93:d4:38:ee:12:35:d8:90: 22:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BF:6A:11:93:31:6D:9D:0C:7F:32:FE:5F:4F:C4:7A:7B:2B:40:6D X509v3 Authority Key Identifier: keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:33:94:ae:1e:b2:c8:1f:39:d4:44:61:7c:b3:e6:17:1b:74: 1d:10:b8:6a:56:2a:fd:ec:e6:af:7f:db:9d:88:fb:9f:89:d2: 86:b1:97:f9:cd:5f:74:a4:e1:44:13:5d:f5:1d:a7:24:70:95: bc:c6:2c:89:7e:03:39:6f:02:34:c0:63:c1:f5:3c:34:72:d8: 7e:63:56:b9:f8:55:a0:91:f8:3c:6e:8b:ba:17:06:f2:0c:fc: 78:96:06:83:b7:e4:03:6a:a5:98:9f:b5:bc:50:04:87:51:81: 72:be:9f:5d:d7:3d:aa:a9:d6:c3:09:2b:91:87:3d:4d:28:f3: 28:f5:90:17:06:40:7a:79:b5:ce:e9:d5:71:61:f8:aa:aa:87: 4b:ab:46:a5:e8:06:40:64:2a:0a:15:46:d7:e8:1a:c9:71:ff: 1a:7b:39:5b:e6:fe:ce:e2:78:c8:b9:4b:91:06:5b:cb:50:5c: 33:38:c7:79:7c:f0:96:53:8b:04:88:d6:6d:4f:0d:ab:47:7a: 21:f4:c2:90:99:02:cb:c1:3b:12:f1:95:b3:5b:3f:8b:35:ba: 08:d1:0b:db:90:15:44:a6:f7:8e:ab:13:b3:49:d7:d8:b1:7b: c7:d6:be:54:f8:ce:15:fe:14:56:12:e1:89:3f:0b:da:54:3b: 5b:32:a0:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvt8k8LrDIIN59ETS0JTWCUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx MmJiNjAwHhcNMjYwMTI0MDMwMDM4WhcNMjYwMTI1MDMwMDM4WjAzMTEwLwYDVQQD EyhjZGJmNmExMTkzMzE2ZDlkMGM3ZjMyZmU1ZjRmYzQ3YTdiMmI0MDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15L6E58/TPNsXiTUNzReK2GOzMoZ 3zAK4t4i3AHkga9DqrDY8m95NRtmaAZlsS+YqKvTa0kZRVkYvwjNvCHu1mVzsscI ZLT21eNWZxZhS+gaW1+n67b9F3iBtYiLKJSdo153puLnMgvZ8bFhE0byX8/W5e5e 0YznnV/RHCgDJMjqQbrxsrhWbe+cmicRQUU9UFPJVVb6CdjGd2nOj3Yk8FZ+gknN ROASY+un//JpD4fiKlTTsRVlFHSbZuL9CZ+Jcl9pAenyUzrHyxqdSIZ1xpoXrGkj 5nq82kq4IyGq2w9ks4tv14T8oxJmwrzz6Mgff+/d1nP6k9Q47hI12JAisQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2/ahGTMW2dDH8y/l9PxHp7K0BtMB8GA1UdIwQY MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQDOUrh6y yB851ERhfLPmFxt0HRC4alYq/ezmr3/bnYj7n4nShrGX+c1fdKThRBNd9R2nJHCV vMYsiX4DOW8CNMBjwfU8NHLYfmNWufhVoJH4PG6LuhcG8gz8eJYGg7fkA2qlmJ+1 vFAEh1GBcr6fXdc9qqnWwwkrkYc9TSjzKPWQFwZAenm1zunVcWH4qqqHS6tGpegG QGQqChVG1+gayXH/Gns5W+b+zuJ4yLlLkQZby1BcMzjHeXzwllOLBIjWbU8Nq0d6 IfTCkJkCy8E7EvGVs1s/izW6CNEL25AVRKb3jqsTs0nX2LF7x9a+VPjOFf4UVhLh iT8L2lQ7WzKgkg== -----END CERTIFICATE-----Generated at Sat Jan 24 10:36:43 2026 by rpki-client