This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft File: BHMrmF-PY_-K6OrHxwgyswzugK0.mft (raw, json) Hash identifier: LBpDRNudqNwBJsccykDnxbsXa7PVywUzu23wx2d/maw= Subject key identifier: 8F:8F:8C:AE:C5:C1:9F:B4:EE:36:99:48:35:A2:7A:45:04:10:A3:AC Authority key identifier: 04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD Certificate issuer: /CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad Certificate serial: 019C0556A8EEC93A2A7D2A25D5E6E90C5158 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft Manifest number: 17F3 Signing time: Wed 28 Jan 2026 16:01:31 +0000 Manifest this update: Wed 28 Jan 2026 16:01:31 +0000 Manifest next update: Thu 29 Jan 2026 16:01:31 +0000 Files and hashes: 1: BHMrmF-PY_-K6OrHxwgyswzugK0.crl (hash: 6mm0vyt7B70+FguNoxcdo6NGUsnrgMUDXPGFSZPPs54=) 2: EFVOpOWZdKE35rgrU-jtXznNsuI.roa (hash: ZDYIfdybtLAlDhDDvMoU7cKEH+7IKf7xCd7YYsfpSC0=) 3: RnV5hShXIae0lSnUpt8VMyIMXCE.roa (hash: pVuZiXTymWxhDl4KCEyg8IDZADRSqa60wrD/ltLvlBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 16:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:05:56:a8:ee:c9:3a:2a:7d:2a:25:d5:e6:e9:0c:51:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04732b985f8f63ff8ae8eac7c70832b30cee80ad Validity Not Before: Jan 28 16:01:31 2026 GMT Not After : Jan 29 16:01:31 2026 GMT Subject: CN=8f8f8caec5c19fb4ee36994835a27a450410a3ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:76:87:99:f5:d2:26:97:86:16:90:ba:79:ce: 5a:d5:00:ae:85:d4:fc:41:15:35:ec:43:3c:15:2d: 25:41:9d:2e:4a:c4:2e:8a:39:65:2c:d8:97:08:55: a7:c6:2a:e9:2c:94:07:23:68:22:8d:0c:e7:e1:2c: 8e:e7:4f:d9:cd:3d:14:36:88:44:ca:04:8b:9e:28: 0d:d8:4b:1b:63:0a:b0:e2:17:71:2a:f0:23:e7:64: 15:bd:22:e6:e9:f2:18:d2:2b:48:5d:6c:9b:85:dc: ab:0c:c2:f7:97:7b:bf:1c:bc:39:8e:8c:cf:78:b2: 81:64:67:e8:06:3e:cf:b5:b9:54:d7:e9:2a:b5:c9: 37:f1:14:fc:60:e3:89:6c:be:4d:4f:b6:52:66:42: e1:3f:19:13:a1:c5:ce:8e:57:13:20:7d:33:e3:0b: a2:c3:d4:f7:f9:87:d1:80:a1:28:89:e0:a3:79:81: bc:27:1b:ea:54:1b:b2:28:3d:95:19:58:e0:ea:50: 47:e5:48:eb:5d:73:72:f6:5c:c7:41:82:9b:d9:b7: 48:fb:0c:b5:3b:67:06:96:1f:b4:ec:05:05:bf:a3: aa:6c:c6:9b:85:45:d2:ec:f1:07:d9:f1:b2:45:66: fe:2c:44:62:bb:13:0b:c1:1f:7d:c9:02:5f:c4:1b: a4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:8F:8C:AE:C5:C1:9F:B4:EE:36:99:48:35:A2:7A:45:04:10:A3:AC X509v3 Authority Key Identifier: keyid:04:73:2B:98:5F:8F:63:FF:8A:E8:EA:C7:C7:08:32:B3:0C:EE:80:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHMrmF-PY_-K6OrHxwgyswzugK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6da0aa-1327-4fa6-a947-ada270825218/1/BHMrmF-PY_-K6OrHxwgyswzugK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:af:6a:e6:26:02:05:60:01:95:b7:cb:d4:3a:d2:59:67:19: a2:e0:1c:f1:c5:e1:13:26:7c:6b:13:6b:11:63:89:37:db:db: fe:ca:73:0d:6b:3d:9e:63:c6:9f:eb:14:9e:c2:36:42:b3:9e: cb:16:2b:d7:b5:4e:83:ae:72:0f:59:c0:54:38:3c:f7:a4:6b: 2c:cc:75:cc:92:e9:7b:0d:56:d4:36:1b:3a:78:1b:ad:bf:f2: eb:d5:82:29:91:35:d4:a4:a6:d1:ea:a2:75:7b:e8:b8:65:d7: de:0e:82:fa:b6:fc:34:c2:f4:ec:3d:3d:e9:70:ae:b4:0b:57: fd:f0:6f:e5:fa:0c:da:57:6e:e8:95:46:41:35:6b:3f:08:c4: 99:42:74:b1:1c:25:62:71:ec:06:ab:db:3f:92:ec:55:21:7b: 05:6f:5a:11:a9:b9:2a:32:3f:28:b9:24:26:49:a9:3f:89:53: e6:6a:4b:c7:05:d5:96:64:19:d9:0a:af:7c:af:58:c8:58:da: 87:8e:36:27:b5:59:e9:a5:2e:8e:8e:17:f6:00:19:75:a4:28: 92:55:e0:ec:31:d6:60:76:22:ee:fd:b8:5a:35:0b:5a:1d:48: 55:29:ad:4a:dc:be:2d:0a:31:7b:e6:55:bf:80:a0:5d:ab:23: 1f:4d:62:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwFVqjuyToqfSol1ebpDFFYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NzMyYjk4NWY4ZjYzZmY4YWU4ZWFjN2M3MDgzMmIzMGNl ZTgwYWQwHhcNMjYwMTI4MTYwMTMxWhcNMjYwMTI5MTYwMTMxWjAzMTEwLwYDVQQD Eyg4ZjhmOGNhZWM1YzE5ZmI0ZWUzNjk5NDgzNWEyN2E0NTA0MTBhM2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnaHmfXSJpeGFpC6ec5a1QCuhdT8 QRU17EM8FS0lQZ0uSsQuijllLNiXCFWnxirpLJQHI2gijQzn4SyO50/ZzT0UNohE ygSLnigN2EsbYwqw4hdxKvAj52QVvSLm6fIY0itIXWybhdyrDML3l3u/HLw5jozP eLKBZGfoBj7PtblU1+kqtck38RT8YOOJbL5NT7ZSZkLhPxkTocXOjlcTIH0z4wui w9T3+YfRgKEoieCjeYG8JxvqVBuyKD2VGVjg6lBH5UjrXXNy9lzHQYKb2bdI+wy1 O2cGlh+07AUFv6OqbMabhUXS7PEH2fGyRWb+LERiuxMLwR99yQJfxBukhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+PjK7FwZ+07jaZSDWiekUEEKOsMB8GA1UdIwQY MBaAFARzK5hfj2P/iujqx8cIMrMM7oCtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDct YWRhMjcwODI1MjE4LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82ZGEwYWEtMTMyNy00ZmE2LWE5NDctYWRhMjcwODI1MjE4 LzEvQkhNcm1GLVBZXy1LNk9ySHh3Z3lzd3p1Z0swLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAea9q5iYC BWABlbfL1DrSWWcZouAc8cXhEyZ8axNrEWOJN9vb/spzDWs9nmPGn+sUnsI2QrOe yxYr17VOg65yD1nAVDg896RrLMx1zJLpew1W1DYbOngbrb/y69WCKZE11KSm0eqi dXvouGXX3g6C+rb8NML07D096XCutAtX/fBv5foM2ldu6JVGQTVrPwjEmUJ0sRwl YnHsBqvbP5LsVSF7BW9aEam5KjI/KLkkJkmpP4lT5mpLxwXVlmQZ2QqvfK9YyFja h442J7VZ6aUujo4X9gAZdaQoklXg7DHWYHYi7v24WjULWh1IVSmtSty+LQoxe+ZV v4CgXasjH01iQQ== -----END CERTIFICATE-----Generated at Thu Jan 29 01:22:13 2026 by rpki-client