This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: 6OAh1wZi5UWqwypIRB3q4/7tzIlm83IziHFvsCl3dOA= Subject key identifier: FE:77:A2:1B:40:9D:C9:34:62:1F:C5:BC:F9:40:8D:6F:5B:B4:7C:B0 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019BCF42D623BF72CF5AE11F49001697856B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 17D5 Signing time: Sun 18 Jan 2026 04:00:22 +0000 Manifest this update: Sun 18 Jan 2026 04:00:22 +0000 Manifest next update: Mon 19 Jan 2026 04:00:22 +0000 Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: 7XrsbPobOPF3KPWCpF2lrdYTnMnCSLyXbf54uy/ow9U=) 2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=) 3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=) 4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=) 5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=) 6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:cf:42:d6:23:bf:72:cf:5a:e1:1f:49:00:16:97:85:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Jan 18 04:00:22 2026 GMT Not After : Jan 19 04:00:22 2026 GMT Subject: CN=fe77a21b409dc934621fc5bcf9408d6f5bb47cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:36:50:8b:f6:9d:0b:65:9e:03:ca:3c:af:d7: fd:02:03:7f:93:d4:d9:f4:50:0f:cf:55:d8:a4:13: a3:74:27:6a:9d:e3:50:4a:c5:d2:1a:d8:c3:fd:41: 12:c3:28:53:4e:2c:3c:95:d1:50:c6:fc:32:d8:b6: 4c:39:02:79:fd:9b:9d:91:33:80:94:fb:8e:31:16: 15:49:47:87:19:f4:2e:6e:29:ad:02:30:9f:30:9e: fc:57:c7:ba:1e:14:31:0d:ef:2b:98:55:6c:2a:57: 1f:3f:ee:0c:05:5b:63:87:61:61:bf:54:da:ab:18: 88:27:d9:ab:a1:2c:6a:cb:b6:82:d3:30:ae:5d:95: 63:c0:fa:7f:5a:ae:6f:76:4b:7e:14:38:fa:1d:25: e0:b6:33:19:26:d4:fa:21:16:29:3f:a0:5b:a8:de: 57:0e:2e:ec:d9:07:53:ee:d7:dd:4a:1d:6e:52:21: 12:b1:ac:33:c4:d2:f5:7e:51:47:ed:0a:23:a0:bb: b9:0f:28:78:af:8d:3a:91:1c:b6:18:bc:8d:b1:18: 2d:e1:c5:58:9c:e7:46:5d:6a:e7:af:1c:5f:d6:c7: 52:ea:3a:a5:88:00:67:28:1d:0c:d5:38:49:7c:79: 6d:97:3b:a5:54:36:8b:87:08:14:16:73:d0:48:13: 42:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:77:A2:1B:40:9D:C9:34:62:1F:C5:BC:F9:40:8D:6F:5B:B4:7C:B0 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:f9:e4:68:16:98:ba:f9:0a:42:28:e3:83:22:e4:cf:e2:0c: 9b:88:03:a3:07:ff:bd:4d:f2:79:3e:01:38:18:28:7d:c9:26: 08:e3:6d:22:6d:51:71:be:f0:af:e0:cc:06:71:63:20:e4:95: 81:bb:6e:2a:fc:8e:91:51:44:46:2b:f0:82:4e:cf:ce:71:b6: 45:66:70:25:0f:1e:3f:f3:68:ca:2b:61:8e:cd:50:65:f4:ab: 39:f3:22:6a:a3:b3:eb:9d:60:a1:00:38:aa:84:be:8a:d2:05: c1:58:80:cf:ab:89:9c:6d:c5:a1:db:a2:62:28:04:99:bb:9c: f5:40:28:c9:7c:f1:85:76:32:eb:a3:b6:a7:89:8d:a1:b6:64: ff:37:3d:b3:54:1f:f6:9f:e2:6c:78:d2:a6:95:b3:8a:26:c0: 94:8a:c8:82:a5:09:27:48:07:fd:77:c3:6e:ac:92:f7:44:09: 05:75:ee:bf:68:e0:c0:f8:d2:af:ee:35:4b:d5:04:48:e3:82: 03:30:80:ef:50:6d:44:49:35:4b:8c:77:ae:7f:08:c8:7f:cb: 41:04:2c:08:8d:77:a3:09:92:30:2c:aa:be:95:bf:f7:af:15: aa:2c:8c:e9:df:84:ef:55:b1:63:c2:2a:4e:97:5f:ad:57:72: e7:d2:34:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvPQtYjv3LPWuEfSQAWl4VrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjYwMTE4MDQwMDIyWhcNMjYwMTE5MDQwMDIyWjAzMTEwLwYDVQQD EyhmZTc3YTIxYjQwOWRjOTM0NjIxZmM1YmNmOTQwOGQ2ZjViYjQ3Y2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjZQi/adC2WeA8o8r9f9AgN/k9TZ 9FAPz1XYpBOjdCdqneNQSsXSGtjD/UESwyhTTiw8ldFQxvwy2LZMOQJ5/ZudkTOA lPuOMRYVSUeHGfQubimtAjCfMJ78V8e6HhQxDe8rmFVsKlcfP+4MBVtjh2Fhv1Ta qxiIJ9mroSxqy7aC0zCuXZVjwPp/Wq5vdkt+FDj6HSXgtjMZJtT6IRYpP6BbqN5X Di7s2QdT7tfdSh1uUiESsawzxNL1flFH7QojoLu5Dyh4r406kRy2GLyNsRgt4cVY nOdGXWrnrxxf1sdS6jqliABnKB0M1ThJfHltlzulVDaLhwgUFnPQSBNC1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP53ohtAnck0Yh/FvPlAjW9btHywMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATfnkaBaY uvkKQijjgyLkz+IMm4gDowf/vU3yeT4BOBgofckmCONtIm1Rcb7wr+DMBnFjIOSV gbtuKvyOkVFERivwgk7PznG2RWZwJQ8eP/Noyithjs1QZfSrOfMiaqOz651goQA4 qoS+itIFwViAz6uJnG3FoduiYigEmbuc9UAoyXzxhXYy66O2p4mNobZk/zc9s1Qf 9p/ibHjSppWziibAlIrIgqUJJ0gH/XfDbqyS90QJBXXuv2jgwPjSr+41S9UESOOC AzCA71BtREk1S4x3rn8IyH/LQQQsCI13owmSMCyqvpW/968VqiyM6d+E71WxY8Iq TpdfrVdy59I0lA== -----END CERTIFICATE-----Generated at Sun Jan 18 06:00:51 2026 by rpki-client