This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json) Hash identifier: dzhKIfWVWOUYbX4TsrX5mpwyUuS18xxT6cVceDIkh0o= Subject key identifier: 64:99:A6:83:A3:EA:61:6E:5F:52:A1:C0:8A:07:AB:C3:86:E6:D5:C8 Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7 Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7 Certificate serial: 019BFC52A5C369FB10E820C85C0AE3F6E52F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft Manifest number: 10FA Signing time: Mon 26 Jan 2026 22:00:33 +0000 Manifest this update: Mon 26 Jan 2026 22:00:33 +0000 Manifest next update: Tue 27 Jan 2026 22:00:33 +0000 Files and hashes: 1: YcaaAclAYCZA0bQEtArsD3C2cfU.roa (hash: 7YmlJQnQIkOS++HCP7NR3QXbRt39kMWOkSZeS0idrew=) 2: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: BSBnrkCk9hzTYUM6DEn+0Lff5i+yxB8ucBX6EQQlb7w=) 3: ml5DwiSOSMrQdu0mHLbNMRyQ_ps.roa (hash: 6bGrtUpm4h7WPij2cFakh2HSrOrr1AUT7tkPDjd7biE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:52:a5:c3:69:fb:10:e8:20:c8:5c:0a:e3:f6:e5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7 Validity Not Before: Jan 26 22:00:33 2026 GMT Not After : Jan 27 22:00:33 2026 GMT Subject: CN=6499a683a3ea616e5f52a1c08a07abc386e6d5c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:36:fb:ca:c0:67:e7:e7:d0:2c:d3:df:48:9b: c7:7a:fa:e2:f5:2b:bb:45:e5:cf:b0:82:1e:b6:2d: 7e:4e:7d:c4:97:fe:0d:65:46:63:83:ec:97:b0:11: 80:e6:8e:57:fd:22:a0:67:be:da:40:c2:69:46:6c: 50:c9:20:bd:15:db:25:93:9f:f0:09:6e:82:bc:f1: 22:77:c8:f9:ac:7a:83:34:2b:2f:cc:c9:3f:27:ab: cb:1e:7b:7f:c9:07:4f:44:b8:60:d8:b2:12:a8:4b: d4:3f:a8:62:8d:30:a7:8e:e8:35:55:71:df:da:eb: c6:0b:da:b7:b1:85:9a:a6:49:5e:b2:7d:58:64:5d: 83:c1:1b:c4:5a:b7:83:9a:68:55:6e:ad:d8:30:17: b5:0f:7f:11:1e:02:96:d2:12:f2:87:a3:35:1a:a3: 47:ac:e0:bb:22:64:45:39:2b:80:d5:50:31:b4:3c: 0b:d9:e5:59:00:3d:5d:7f:37:05:34:34:e3:b8:2d: 8f:5b:8c:d5:bf:f3:ac:86:5d:2d:21:2c:83:a7:7f: e7:f9:77:df:2a:bf:c4:08:92:b7:60:50:dc:30:50: 09:c7:29:04:6b:03:f2:7c:30:02:68:67:87:1e:a3: 6b:a0:b0:db:38:3c:82:37:6c:d2:a9:aa:3f:44:6c: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:99:A6:83:A3:EA:61:6E:5F:52:A1:C0:8A:07:AB:C3:86:E6:D5:C8 X509v3 Authority Key Identifier: keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:6f:b2:c3:0e:2a:e5:a4:05:93:63:c9:32:59:3b:2a:5c:b8: 69:c8:f1:5c:b2:29:34:a8:02:5c:83:81:b5:ee:01:18:4d:52: c0:63:b4:6a:3d:d6:59:92:3b:9a:d1:2d:46:41:c6:f0:69:72: 10:18:3b:45:a3:6c:66:6f:b4:7a:1b:53:26:f6:3b:c3:cf:06: 39:50:c2:28:75:2d:a3:5c:82:ff:9a:ef:d1:3d:72:d6:5a:6a: 94:e4:4e:8b:af:eb:64:fc:ed:91:49:8c:e8:67:94:da:61:d9: e0:88:be:ff:71:e6:64:fe:26:ab:13:fe:76:d3:47:db:73:1d: 58:54:8a:29:7b:9e:22:18:93:c9:38:25:b5:8f:bb:d0:66:cf: af:25:86:10:10:b3:81:62:e0:91:d1:08:41:df:b1:40:77:12: e9:6f:8f:4f:11:16:b2:71:ed:8d:89:54:f6:9c:b7:01:ba:4d: 69:ad:77:bc:1e:2b:c4:72:f7:49:d2:8c:ef:04:84:11:2a:8f: e5:17:45:bd:53:2f:aa:11:d2:df:fb:0a:bc:08:75:90:31:93: ec:8f:bd:7e:0a:b5:94:80:95:5d:18:56:a3:52:dc:b6:d6:63: 5c:67:ad:8e:6a:e1:b6:70:54:7b:a2:8d:ca:f1:70:5d:61:d3: f4:b4:4f:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8UqXDafsQ6CDIXArj9uUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYmQ1Y2IyOTk0MGFjMmE4NTUzYjZlYzBhOGNlYzdjMjA5 ZjdjZTcwHhcNMjYwMTI2MjIwMDMzWhcNMjYwMTI3MjIwMDMzWjAzMTEwLwYDVQQD Eyg2NDk5YTY4M2EzZWE2MTZlNWY1MmExYzA4YTA3YWJjMzg2ZTZkNWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzb7ysBn5+fQLNPfSJvHevri9Su7 ReXPsIIeti1+Tn3El/4NZUZjg+yXsBGA5o5X/SKgZ77aQMJpRmxQySC9Fdslk5/w CW6CvPEid8j5rHqDNCsvzMk/J6vLHnt/yQdPRLhg2LISqEvUP6hijTCnjug1VXHf 2uvGC9q3sYWapklesn1YZF2DwRvEWreDmmhVbq3YMBe1D38RHgKW0hLyh6M1GqNH rOC7ImRFOSuA1VAxtDwL2eVZAD1dfzcFNDTjuC2PW4zVv/Oshl0tISyDp3/n+Xff Kr/ECJK3YFDcMFAJxykEawPyfDACaGeHHqNroLDbODyCN2zSqao/RGyG5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSZpoOj6mFuX1KhwIoHq8OG5tXIMB8GA1UdIwQY MBaAFG29XLKZQKwqhVO27AqM7Hwgn3znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEt MmZkZTgwNDM1ZjRkLzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC82MTRiMDUtNzQ0NS00MDQ2LTlmYjEtMmZkZTgwNDM1ZjRk LzEvYmIxY3NwbEFyQ3FGVTdic0NvenNmQ0NmZk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVG+yww4q 5aQFk2PJMlk7Kly4acjxXLIpNKgCXIOBte4BGE1SwGO0aj3WWZI7mtEtRkHG8Gly EBg7RaNsZm+0ehtTJvY7w88GOVDCKHUto1yC/5rv0T1y1lpqlOROi6/rZPztkUmM 6GeU2mHZ4Ii+/3HmZP4mqxP+dtNH23MdWFSKKXueIhiTyTgltY+70GbPryWGEBCz gWLgkdEIQd+xQHcS6W+PTxEWsnHtjYlU9py3AbpNaa13vB4rxHL3SdKM7wSEESqP 5RdFvVMvqhHS3/sKvAh1kDGT7I+9fgq1lICVXRhWo1LcttZjXGetjmrhtnBUe6KN yvFwXWHT9LRPRQ== -----END CERTIFICATE-----Generated at Tue Jan 27 07:39:59 2026 by rpki-client