This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft File: bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json) Hash identifier: IOAJsYgLBvsauGdh89h03vFKfyMklytot66XLK2XiMY= Subject key identifier: 82:A9:67:9E:9C:B1:7C:AD:E2:78:A1:27:3B:8C:46:7A:73:96:2C:0D Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Certificate serial: 019BC9417293B9EFDAFA8E60B308D4F2EC7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft Manifest number: 1002 Signing time: Sat 17 Jan 2026 00:01:08 +0000 Manifest this update: Sat 17 Jan 2026 00:01:08 +0000 Manifest next update: Sun 18 Jan 2026 00:01:08 +0000 Files and hashes: 1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=) 2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=) 3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=) 4: WgdXGCq5750IZB5Te3z2Ts4JuHo.roa (hash: BuQ1Y5enK/3DpIsodzPPjyugSuHNto6XMIOPzcMe6cQ=) 5: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: KhpOEO9kLPG3r8uREELDFUSSjKYkzh8zGVF5rXQAyAI=) 6: iwnR0_v7DrZOMyhOwK5w8tNyMio.roa (hash: m9wlWVaLcH73FDQVsUWe6KN6JmhaiRLX69jEcq4ITXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 00:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c9:41:72:93:b9:ef:da:fa:8e:60:b3:08:d4:f2:ec:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60 Validity Not Before: Jan 17 00:01:08 2026 GMT Not After : Jan 18 00:01:08 2026 GMT Subject: CN=82a9679e9cb17cade278a1273b8c467a73962c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9a:f1:10:da:bf:c4:c1:8e:c8:b7:01:59:9e: 61:b4:b9:49:4c:af:8b:8e:8b:bd:28:0a:d8:fa:2e: 42:93:7d:a0:bc:72:ab:1a:33:91:34:cb:ec:6a:21: ef:02:94:bf:3c:85:09:73:92:1a:73:5b:76:f9:46: 0b:91:39:e2:9b:5e:af:a8:b7:2f:ca:96:29:ab:b3: 09:c0:96:ef:82:df:0a:fb:f4:aa:88:73:e1:7f:40: 64:af:07:00:3c:a1:69:6a:6e:f5:44:fe:0b:64:be: cd:78:61:f6:f8:67:71:e8:76:19:49:88:cb:cc:01: 7e:ee:06:f7:12:9d:9c:da:3b:30:93:5d:f3:a2:fb: f4:26:6b:35:67:19:15:a1:bd:68:08:92:67:b6:b3: 03:a8:47:e8:f4:0d:4d:80:68:d6:66:19:9f:2c:02: c9:94:12:31:00:9f:ca:ad:c0:11:c3:ed:5e:a1:ab: 6c:1d:44:a7:ae:91:71:70:23:68:37:cd:f5:b1:50: 00:51:ab:ac:3b:08:cb:ac:9e:55:40:f8:18:68:68: 44:5c:fd:10:bb:f8:a7:6d:2a:e1:e6:7c:17:cb:2f: 91:56:61:ca:97:93:c6:60:9b:af:60:e8:90:3a:a0: b7:ff:e4:14:5e:7d:1b:a4:fe:01:f0:48:94:60:6b: 32:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A9:67:9E:9C:B1:7C:AD:E2:78:A1:27:3B:8C:46:7A:73:96:2C:0D X509v3 Authority Key Identifier: keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:82:f8:a6:8c:04:b9:85:30:b8:83:c5:7e:ea:c9:ed:54:ad: 0f:f4:a2:7d:e7:21:70:7b:2a:7f:4f:9c:66:ef:b5:a0:e7:07: 78:f8:51:37:65:dd:83:31:06:08:c3:91:22:73:a3:e4:74:fd: 41:80:5a:43:42:39:97:10:91:f9:8b:17:bf:32:2a:30:e4:b4: 2e:42:9b:1c:1d:88:ff:ec:68:e2:3a:e7:06:b5:a5:00:f3:8b: 3f:03:65:4a:58:c8:20:5c:83:1e:fe:23:3b:e1:b3:00:5a:20: c2:c7:18:d9:2f:64:64:1a:e0:64:74:c8:cd:94:df:b9:38:76: 1f:5b:e2:88:58:9b:d0:cf:5a:9e:54:a0:3e:e9:a6:89:fd:bb: 4e:6d:0f:8c:3e:65:f4:f0:02:25:65:0c:1e:50:8f:7d:fd:c7: 92:90:4d:3b:a2:31:50:16:2a:c1:36:31:7c:65:27:22:e5:b6: a3:fe:5a:7e:d9:7d:df:01:c0:39:cd:92:7e:05:3e:67:a0:fa: 23:fc:11:ec:48:7a:50:2e:6f:2c:bf:e9:2f:c1:36:64:a2:98: 1a:39:16:ad:02:8e:d4:7c:84:e8:41:fa:c0:fb:14:cc:96:a0: be:0d:0b:e8:a9:2b:80:58:07:61:7a:e6:b8:50:72:5f:c9:5f: 9c:75:6d:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvJQXKTue/a+o5gswjU8ux+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMGIxNTE5MzgxNmZkMTVkY2ZkMDQ3ZGI0ZWVjYTY3Mjkx MmJiNjAwHhcNMjYwMTE3MDAwMTA4WhcNMjYwMTE4MDAwMTA4WjAzMTEwLwYDVQQD Eyg4MmE5Njc5ZTljYjE3Y2FkZTI3OGExMjczYjhjNDY3YTczOTYyYzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5rxENq/xMGOyLcBWZ5htLlJTK+L jou9KArY+i5Ck32gvHKrGjORNMvsaiHvApS/PIUJc5Iac1t2+UYLkTnim16vqLcv ypYpq7MJwJbvgt8K+/SqiHPhf0BkrwcAPKFpam71RP4LZL7NeGH2+Gdx6HYZSYjL zAF+7gb3Ep2c2jswk13zovv0Jms1ZxkVob1oCJJntrMDqEfo9A1NgGjWZhmfLALJ lBIxAJ/KrcARw+1eoatsHUSnrpFxcCNoN831sVAAUausOwjLrJ5VQPgYaGhEXP0Q u/inbSrh5nwXyy+RVmHKl5PGYJuvYOiQOqC3/+QUXn0bpP4B8EiUYGsyvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKpZ56csXyt4nihJzuMRnpzliwNMB8GA1UdIwQY MBaAFG8LFRk4Fv0V3P0EfbTuymcpErtgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYt OWNmODQzZjA1NjcwLzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS85NTg4NDEtZjZiMC00MjQ5LTgwNDYtOWNmODQzZjA1Njcw LzEvYndzVkdUZ1dfUlhjX1FSOXRPN0taeWtTdTJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoL4powE uYUwuIPFfurJ7VStD/SifechcHsqf0+cZu+1oOcHePhRN2XdgzEGCMORInOj5HT9 QYBaQ0I5lxCR+YsXvzIqMOS0LkKbHB2I/+xo4jrnBrWlAPOLPwNlSljIIFyDHv4j O+GzAFogwscY2S9kZBrgZHTIzZTfuTh2H1viiFib0M9anlSgPummif27Tm0PjD5l 9PACJWUMHlCPff3HkpBNO6IxUBYqwTYxfGUnIuW2o/5aftl93wHAOc2SfgU+Z6D6 I/wR7Eh6UC5vLL/pL8E2ZKKYGjkWrQKO1HyE6EH6wPsUzJagvg0L6KkrgFgHYXrm uFByX8lfnHVtKg== -----END CERTIFICATE-----Generated at Sat Jan 17 09:17:17 2026 by rpki-client