This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: qVCtJBzO4NYhw1ZTMd6WivOhVJYGlJpEWMDoDKzsoq0= Subject key identifier: 11:6A:D3:B4:BF:E3:25:EB:3A:28:FA:E9:D5:59:0F:B3:9D:52:69:D9 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019BF206D1BEBE22A27FA7300892961C2E6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 17E7 Signing time: Sat 24 Jan 2026 22:01:31 +0000 Manifest this update: Sat 24 Jan 2026 22:01:31 +0000 Manifest next update: Sun 25 Jan 2026 22:01:31 +0000 Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: wHmjKwVUoPKd82k/YlbbsRvMFEYmwd5ItIFfrBzqLqs=) 2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=) 3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=) 4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=) 5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=) 6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:06:d1:be:be:22:a2:7f:a7:30:08:92:96:1c:2e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Jan 24 22:01:31 2026 GMT Not After : Jan 25 22:01:31 2026 GMT Subject: CN=116ad3b4bfe325eb3a28fae9d5590fb39d5269d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:26:4b:96:bf:ca:6d:fe:cd:36:d9:2e:72:70: de:e9:40:24:76:4c:ca:40:09:4c:22:06:0f:ff:15: 04:5d:fd:fa:6b:be:7e:5f:33:4c:fa:d7:23:1b:f5: ed:5c:15:6e:56:2c:2b:5a:b1:e9:58:6a:73:9e:31: 02:8d:8e:68:95:2c:05:6e:76:dc:9f:2c:5a:8d:06: ff:f7:08:eb:e5:b1:cf:f6:60:53:63:1d:bf:de:71: 90:2c:5a:a7:67:34:62:78:ac:78:36:db:07:a7:22: bc:21:7c:2b:d0:ac:c4:dc:15:2f:77:4b:3a:7f:25: b5:4b:ef:c2:5e:5d:ed:18:09:98:c9:bd:47:9d:a1: 91:14:16:00:76:9b:0f:f8:71:84:67:43:17:a4:9c: df:4b:23:87:49:9c:e7:4c:c6:69:53:97:2d:fb:c3: bb:63:a8:89:9c:cd:1d:31:8d:19:4b:d3:5a:ec:db: 58:7f:a5:35:bf:a9:14:a6:17:a5:e4:cc:d1:54:a4: 9b:24:a9:56:a6:c3:4f:f4:ea:56:b9:80:69:3a:22: 78:a5:83:33:87:07:d4:7f:3c:59:f6:ba:9c:ca:02: ff:6e:61:6b:37:ca:e6:31:64:d8:12:94:c5:c8:ce: bf:28:a4:02:f7:7c:e2:93:05:ad:69:08:2d:19:d8: 92:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6A:D3:B4:BF:E3:25:EB:3A:28:FA:E9:D5:59:0F:B3:9D:52:69:D9 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:62:ec:43:61:a9:ae:49:57:9e:6a:e9:15:e6:f6:c4:63:ed: 80:6f:09:5a:0f:cf:82:6d:2d:dd:bb:99:71:6f:a9:29:b3:fc: 8d:96:a4:a7:f0:4f:77:7d:8c:e4:7d:88:b2:55:6a:30:77:51: a8:28:5c:a7:a6:82:fe:04:a5:59:72:aa:95:92:2b:a4:c5:47: 7a:ef:3c:5f:8c:d2:01:6d:66:ed:68:5b:f8:b6:b0:34:c0:32: 17:e2:38:4c:06:37:c3:ec:58:84:0c:df:32:6b:82:b4:40:33: b9:ac:88:39:63:06:34:0f:64:31:ed:09:de:dc:66:23:f3:31: 32:ba:ee:1c:4b:02:30:0d:22:7e:92:1c:04:ca:08:1d:c7:44: 60:94:69:79:38:c2:ad:7f:4d:69:ff:19:60:24:b3:bc:8a:74: 94:f8:8d:d4:c5:3c:a8:fd:77:7f:a0:64:fa:50:de:ec:70:c5: 55:82:2e:ea:4b:8d:45:80:b1:b1:ae:d9:1e:2b:58:ab:f3:e2: c8:ff:af:a9:c5:ec:cf:28:37:e8:1e:48:f8:98:6c:62:0f:2d: 46:d6:f8:9f:6f:15:ba:fd:46:d6:75:2b:4f:4b:d0:03:4e:27: 29:55:b3:40:fb:c9:f3:54:7b:6d:db:58:5f:0c:08:78:bb:3b: 6b:e5:8b:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyBtG+viKif6cwCJKWHC5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjYwMTI0MjIwMTMxWhcNMjYwMTI1MjIwMTMxWjAzMTEwLwYDVQQD EygxMTZhZDNiNGJmZTMyNWViM2EyOGZhZTlkNTU5MGZiMzlkNTI2OWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiZLlr/Kbf7NNtkucnDe6UAkdkzK QAlMIgYP/xUEXf36a75+XzNM+tcjG/XtXBVuViwrWrHpWGpznjECjY5olSwFbnbc nyxajQb/9wjr5bHP9mBTYx2/3nGQLFqnZzRieKx4NtsHpyK8IXwr0KzE3BUvd0s6 fyW1S+/CXl3tGAmYyb1HnaGRFBYAdpsP+HGEZ0MXpJzfSyOHSZznTMZpU5ct+8O7 Y6iJnM0dMY0ZS9Na7NtYf6U1v6kUphel5MzRVKSbJKlWpsNP9OpWuYBpOiJ4pYMz hwfUfzxZ9rqcygL/bmFrN8rmMWTYEpTFyM6/KKQC93zikwWtaQgtGdiScQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFq07S/4yXrOij66dVZD7OdUmnZMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2LsQ2Gp rklXnmrpFeb2xGPtgG8JWg/Pgm0t3buZcW+pKbP8jZakp/BPd32M5H2IslVqMHdR qChcp6aC/gSlWXKqlZIrpMVHeu88X4zSAW1m7Whb+LawNMAyF+I4TAY3w+xYhAzf MmuCtEAzuayIOWMGNA9kMe0J3txmI/MxMrruHEsCMA0ifpIcBMoIHcdEYJRpeTjC rX9Naf8ZYCSzvIp0lPiN1MU8qP13f6Bk+lDe7HDFVYIu6kuNRYCxsa7ZHitYq/Pi yP+vqcXszyg36B5I+JhsYg8tRtb4n28Vuv1G1nUrT0vQA04nKVWzQPvJ81R7bdtY XwwIeLs7a+WLSQ== -----END CERTIFICATE-----Generated at Sun Jan 25 06:39:22 2026 by rpki-client