This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft File: s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft (raw, json) Hash identifier: uJnan7FHu3RTmEY9+lATD9WOJXpS2XFj0dRce7R9jX8= Subject key identifier: 24:A1:83:23:D4:03:5F:ED:B1:53:F2:EA:7E:BE:EF:93:5A:2A:52:DC Authority key identifier: B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73 Certificate issuer: /CN=b3e064e17335fdeb83a09862a735a6e97762d973 Certificate serial: 019C010BB870D98D62B756B1D6AC331143EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft Manifest number: 135B Signing time: Tue 27 Jan 2026 20:01:11 +0000 Manifest this update: Tue 27 Jan 2026 20:01:11 +0000 Manifest next update: Wed 28 Jan 2026 20:01:11 +0000 Files and hashes: 1: VjVnMCIpJllowS-mUdPKmibH_s4.roa (hash: RkAjCgTxoEP9Ub/dSw/Wwxp7BKhfppLg+6NL3UVv1Zg=) 2: s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl (hash: xpjrp3XVEZYypADnBKn+iycxNCHawj1QVfigAL53bo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 15:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:01:0b:b8:70:d9:8d:62:b7:56:b1:d6:ac:33:11:43:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3e064e17335fdeb83a09862a735a6e97762d973 Validity Not Before: Jan 27 20:01:11 2026 GMT Not After : Jan 28 20:01:11 2026 GMT Subject: CN=24a18323d4035fedb153f2ea7ebeef935a2a52dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:62:bb:f9:8e:7e:4b:c7:72:58:b6:31:4d:ab: a1:8a:a5:7f:e2:74:3f:68:2d:20:1a:49:c3:46:ee: 92:2c:e2:91:9d:62:ac:ba:66:f6:8a:a5:a7:27:98: 6d:ce:eb:38:55:63:8f:1d:b1:16:9c:36:59:36:f8: 29:e6:70:3d:18:3c:c2:91:10:d9:8b:f6:29:db:1d: bf:e0:7e:75:65:6f:93:ed:a2:70:bd:96:d5:e2:e8: 0e:ed:9d:4d:ec:ea:6f:11:09:a9:05:51:98:91:1e: 16:ee:d9:8b:de:0b:9b:53:ba:2e:dd:c2:d1:7e:27: 03:41:b8:f7:1b:9f:67:3e:28:d8:ab:5e:e0:b5:5d: d8:b8:b8:39:1c:c4:79:66:7d:ef:15:94:37:fe:7a: f6:68:c5:d9:09:05:0f:c6:13:ec:5d:00:61:ae:48: c6:5a:eb:07:88:94:bb:f9:50:58:d7:fb:ea:10:c6: ab:5c:c8:c1:ca:4c:70:a7:f8:33:51:42:ec:cd:8d: 94:e6:27:4f:e2:4e:d9:f6:13:2c:9a:5e:f8:c8:1e: 35:bf:74:8e:99:77:87:0d:20:f3:4a:b1:fd:68:6c: f5:6b:3f:87:05:d5:6c:70:8c:82:5a:b0:28:9d:ad: b9:d1:62:30:95:6d:e4:75:99:bb:f1:23:2f:7d:c1: 88:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A1:83:23:D4:03:5F:ED:B1:53:F2:EA:7E:BE:EF:93:5A:2A:52:DC X509v3 Authority Key Identifier: keyid:B3:E0:64:E1:73:35:FD:EB:83:A0:98:62:A7:35:A6:E9:77:62:D9:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s-Bk4XM1_euDoJhipzWm6Xdi2XM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/219449-f243-46e3-bba7-1d5513bff4d6/1/s-Bk4XM1_euDoJhipzWm6Xdi2XM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c6:6b:8d:1a:35:73:db:7d:03:31:26:0b:7f:23:dc:a9:1c: 2e:d5:68:c3:6b:5a:06:d8:ad:af:56:f2:79:db:78:6e:2c:48: b9:bb:11:64:8d:89:5c:b3:97:74:36:0a:55:32:08:20:1a:6e: f9:d7:48:ae:c4:b7:5f:a0:c0:95:9c:fb:eb:d6:e1:6c:eb:29: 0a:34:26:30:39:0d:88:4c:c3:ee:d2:f5:46:64:d8:c1:1e:5d: 3f:2b:05:3f:be:00:23:9d:3c:39:d3:46:9a:82:7a:8f:86:61: b3:dc:99:12:3a:34:27:4e:4e:3e:12:17:3c:41:27:0e:09:58: dc:c3:ba:32:0a:8b:71:71:ef:70:82:14:b9:c3:e6:e7:1a:93: 4d:b3:c7:22:0f:d2:44:39:a0:42:6c:eb:fe:21:31:e5:bd:f5: 4e:bf:1b:69:71:e4:f9:27:20:17:65:49:b6:7a:e6:6c:ec:f6: e0:d7:7d:5c:16:1e:65:13:75:af:fb:96:3d:3f:03:46:ae:07: 99:1f:ef:34:e9:9b:11:c1:42:fe:dd:d9:e4:b8:08:7f:c0:e1: ee:f7:23:b9:94:5c:1b:69:45:d1:47:d4:2d:d6:39:8c:6b:7c: d4:cc:01:15:af:3c:ef:75:71:6a:8e:4b:7f:86:3b:e0:49:48: c4:25:be:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwBC7hw2Y1it1ax1qwzEUPuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZTA2NGUxNzMzNWZkZWI4M2EwOTg2MmE3MzVhNmU5Nzc2 MmQ5NzMwHhcNMjYwMTI3MjAwMTExWhcNMjYwMTI4MjAwMTExWjAzMTEwLwYDVQQD EygyNGExODMyM2Q0MDM1ZmVkYjE1M2YyZWE3ZWJlZWY5MzVhMmE1MmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2K7+Y5+S8dyWLYxTauhiqV/4nQ/ aC0gGknDRu6SLOKRnWKsumb2iqWnJ5htzus4VWOPHbEWnDZZNvgp5nA9GDzCkRDZ i/Yp2x2/4H51ZW+T7aJwvZbV4ugO7Z1N7OpvEQmpBVGYkR4W7tmL3gubU7ou3cLR ficDQbj3G59nPijYq17gtV3YuLg5HMR5Zn3vFZQ3/nr2aMXZCQUPxhPsXQBhrkjG WusHiJS7+VBY1/vqEMarXMjBykxwp/gzUULszY2U5idP4k7Z9hMsml74yB41v3SO mXeHDSDzSrH9aGz1az+HBdVscIyCWrAona250WIwlW3kdZm78SMvfcGIUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCShgyPUA1/tsVPy6n6+75NaKlLcMB8GA1UdIwQY MBaAFLPgZOFzNf3rg6CYYqc1pul3YtlzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTct MWQ1NTEzYmZmNGQ2LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8yMTk0NDktZjI0My00NmUzLWJiYTctMWQ1NTEzYmZmNGQ2 LzEvcy1CazRYTTFfZXVEb0poaXB6V202WGRpMlhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsZrjRo1 c9t9AzEmC38j3KkcLtVow2taBtitr1byedt4bixIubsRZI2JXLOXdDYKVTIIIBpu +ddIrsS3X6DAlZz769bhbOspCjQmMDkNiEzD7tL1RmTYwR5dPysFP74AI508OdNG moJ6j4Zhs9yZEjo0J05OPhIXPEEnDglY3MO6MgqLcXHvcIIUucPm5xqTTbPHIg/S RDmgQmzr/iEx5b31Tr8baXHk+ScgF2VJtnrmbOz24Nd9XBYeZRN1r/uWPT8DRq4H mR/vNOmbEcFC/t3Z5LgIf8Dh7vcjuZRcG2lF0UfULdY5jGt81MwBFa8873Vxao5L f4Y74ElIxCW+lw== -----END CERTIFICATE-----Generated at Tue Jan 27 23:18:06 2026 by rpki-client