This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: ilj8nwa30b6BbwZtvUY6ZofJRNxYmjS3CCBgJVLAX18= Subject key identifier: 80:83:18:69:55:AC:8E:05:94:82:C4:B8:56:72:5D:DF:9D:0E:B6:E0 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019BE481911D4A384E3730FD60043492305F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 17E0 Signing time: Thu 22 Jan 2026 07:00:55 +0000 Manifest this update: Thu 22 Jan 2026 07:00:55 +0000 Manifest next update: Fri 23 Jan 2026 07:00:55 +0000 Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: CI291wz5lP7CSzvHBKN9bOCnTmzTTZFmnyLZUx5mo7E=) 2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=) 3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=) 4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=) 5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=) 6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e4:81:91:1d:4a:38:4e:37:30:fd:60:04:34:92:30:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Jan 22 07:00:55 2026 GMT Not After : Jan 23 07:00:55 2026 GMT Subject: CN=8083186955ac8e059482c4b856725ddf9d0eb6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:79:a2:54:cf:c7:81:64:f4:3f:0b:43:68:af: af:dd:f7:28:dc:0f:e3:fd:92:78:08:2e:b1:2d:25: cd:32:bc:03:c7:d3:83:39:ad:91:7e:4a:09:d0:03: 28:c7:f9:d4:48:d3:5c:33:56:8f:11:5a:1f:42:30: 19:15:62:2d:6c:63:70:8b:42:e7:54:b2:c1:32:d4: 76:8c:c3:b9:6f:19:7d:83:83:0c:75:9f:92:26:07: fb:cd:d6:04:12:52:cd:be:48:8d:11:d6:1e:fd:e7: e6:66:4b:34:44:33:76:c5:d2:dc:4b:70:91:ad:31: d2:93:7a:b2:58:35:4b:3e:48:dd:cc:a6:a9:20:98: 46:59:8c:36:16:f7:e4:27:3d:c4:82:8c:aa:2e:19: c8:84:af:a8:46:40:38:1b:4f:56:6f:96:c7:35:e6: 0e:38:18:0f:93:89:08:f3:7c:b7:86:23:e1:a9:b7: 65:74:04:5b:b8:4f:73:98:d3:43:06:39:1c:67:60: f0:89:c0:d6:75:7e:94:35:ca:d6:d5:32:76:b4:d2: 23:93:9d:98:f5:08:ef:2e:5b:27:e0:76:d9:69:8e: 57:ad:f2:b9:3d:90:8d:76:5c:60:73:0c:db:d2:92: bc:14:59:aa:1a:97:d5:37:c2:43:9b:f9:da:86:d0: c2:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:83:18:69:55:AC:8E:05:94:82:C4:B8:56:72:5D:DF:9D:0E:B6:E0 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:61:8f:4c:a5:db:93:16:27:59:08:f1:a2:eb:b1:49:cc:09: 77:1b:d9:b5:19:99:25:21:7d:69:4e:2e:f7:54:02:c4:df:10: ad:ff:f1:30:78:05:d1:67:f8:a6:ca:5f:f7:3f:e6:a2:2d:e9: a3:ed:27:6d:1a:bf:f8:74:e1:cb:85:7d:df:c4:0c:c1:8e:cf: 72:06:5f:65:6f:28:ee:6f:52:02:28:16:79:e5:db:4d:fd:2c: a7:73:dc:13:42:0b:0e:6a:81:70:0b:3a:01:a3:02:a8:42:7c: a1:43:6f:fd:65:77:c1:69:78:ad:c8:ab:ff:d8:b4:37:79:6c: f5:0a:53:71:da:db:37:48:80:26:02:d1:2f:43:cc:28:98:36: b2:1b:98:af:d4:1c:0e:00:aa:3f:82:f0:8e:03:d6:cc:b7:05: 17:b2:10:ca:ff:91:f8:ae:5d:d3:22:a8:91:05:46:65:47:b1: 94:5c:d2:45:ea:6b:fc:1c:89:f8:a2:45:95:0b:9d:82:d4:1a: 5c:29:1b:18:ac:b8:f3:ba:79:85:e1:af:44:ec:58:75:1f:fe: 9e:8f:d6:ab:5c:5b:b0:ce:74:40:8c:2e:11:85:f6:5e:53:7d: a8:27:2f:d8:d7:b8:0b:91:eb:c1:13:51:5f:42:1c:19:c3:6f: c9:d5:66:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvkgZEdSjhONzD9YAQ0kjBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjYwMTIyMDcwMDU1WhcNMjYwMTIzMDcwMDU1WjAzMTEwLwYDVQQD Eyg4MDgzMTg2OTU1YWM4ZTA1OTQ4MmM0Yjg1NjcyNWRkZjlkMGViNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03miVM/HgWT0PwtDaK+v3fco3A/j /ZJ4CC6xLSXNMrwDx9ODOa2RfkoJ0AMox/nUSNNcM1aPEVofQjAZFWItbGNwi0Ln VLLBMtR2jMO5bxl9g4MMdZ+SJgf7zdYEElLNvkiNEdYe/efmZks0RDN2xdLcS3CR rTHSk3qyWDVLPkjdzKapIJhGWYw2FvfkJz3EgoyqLhnIhK+oRkA4G09Wb5bHNeYO OBgPk4kI83y3hiPhqbdldARbuE9zmNNDBjkcZ2DwicDWdX6UNcrW1TJ2tNIjk52Y 9QjvLlsn4HbZaY5XrfK5PZCNdlxgcwzb0pK8FFmqGpfVN8JDm/nahtDCcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICDGGlVrI4FlILEuFZyXd+dDrbgMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImGPTKXb kxYnWQjxouuxScwJdxvZtRmZJSF9aU4u91QCxN8Qrf/xMHgF0Wf4pspf9z/moi3p o+0nbRq/+HThy4V938QMwY7PcgZfZW8o7m9SAigWeeXbTf0sp3PcE0ILDmqBcAs6 AaMCqEJ8oUNv/WV3wWl4rcir/9i0N3ls9QpTcdrbN0iAJgLRL0PMKJg2shuYr9Qc DgCqP4LwjgPWzLcFF7IQyv+R+K5d0yKokQVGZUexlFzSRepr/ByJ+KJFlQudgtQa XCkbGKy487p5heGvROxYdR/+no/Wq1xbsM50QIwuEYX2XlN9qCcv2Ne4C5HrwRNR X0IcGcNvydVmxA== -----END CERTIFICATE-----Generated at Thu Jan 22 09:34:18 2026 by rpki-client