This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: 29U7OQmhdMMGOgknHPr6MY2vsGdQxQqosjfjiSl+Blo= Subject key identifier: 28:0E:AC:DF:A0:F7:7D:1F:53:1E:9F:E0:3F:C5:BD:8F:EB:49:01:92 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019B8BAB9C1D2D2DAE5F6B09517B9502F526 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 17B2 Signing time: Mon 05 Jan 2026 01:00:38 +0000 Manifest this update: Mon 05 Jan 2026 01:00:38 +0000 Manifest next update: Tue 06 Jan 2026 01:00:38 +0000 Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: fokeuVVrgN/V/3Jc9LCZVUAwj/jbhqcMAOMQGxgP1sg=) 2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=) 3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=) 4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=) 5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=) 6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Jan 2026 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8b:ab:9c:1d:2d:2d:ae:5f:6b:09:51:7b:95:02:f5:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Jan 5 01:00:38 2026 GMT Not After : Jan 6 01:00:38 2026 GMT Subject: CN=280eacdfa0f77d1f531e9fe03fc5bd8feb490192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:af:9c:5b:9e:e6:97:cc:a7:59:b0:d7:c6: 9b:36:54:ae:4c:d9:fb:69:cb:fb:5d:00:49:68:c3: cd:9d:86:39:b5:d8:8b:6f:92:fe:0b:7b:dc:aa:39: eb:24:9d:cd:55:e7:c0:ab:b1:ef:93:4a:ad:40:1e: e7:f5:47:a1:e0:b9:19:fa:b5:4e:26:63:ae:4f:29: 43:ba:9e:dc:8a:eb:07:0f:ca:f5:d1:49:0c:2c:d5: 31:85:97:d5:f1:af:dd:c9:0d:5c:34:52:be:69:15: 07:42:d7:fb:e7:65:d3:a3:77:6d:a1:1d:27:43:a8: 54:35:7f:b4:6d:21:05:d8:c0:f1:ec:5e:b7:aa:41: ad:9d:1c:83:55:bc:70:9a:3e:28:2c:39:77:64:7b: ad:ef:ca:e6:f6:3e:cb:8e:d0:0e:e6:ff:50:fc:a7: be:a2:4c:19:c0:b9:a8:1b:f7:27:d1:e6:9b:11:14: 81:30:b1:1a:69:1f:57:8c:13:f6:85:c5:b5:88:2b: b3:45:85:af:c6:6c:47:e0:3f:83:7d:18:45:df:03: 63:7d:06:83:e9:f1:80:88:aa:9c:ba:90:b3:e3:b3: cc:ff:18:8e:2c:b7:c5:0c:33:e1:20:21:f4:2e:17: b3:65:76:d9:bc:81:a9:0b:e6:88:f5:c6:21:6a:0f: 81:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0E:AC:DF:A0:F7:7D:1F:53:1E:9F:E0:3F:C5:BD:8F:EB:49:01:92 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:07:eb:b6:50:55:05:02:1b:96:77:55:c8:b3:ee:ba:a9:94: c0:42:db:24:46:96:0c:ca:7f:83:d0:d4:ab:cd:fa:b2:42:0b: 50:da:8e:13:7e:64:ce:e1:44:ec:9d:d6:86:f2:40:d9:9c:ea: ca:b4:ea:9a:ad:50:69:78:74:b6:95:24:c9:78:66:70:4b:a7: 59:5e:02:c1:95:ce:5c:09:7a:41:86:ae:63:81:48:10:34:c0: ae:db:8c:16:2c:d0:3a:2f:e8:2a:ee:4f:b2:50:c5:c2:ec:33: d2:0c:a3:46:c3:6c:0b:38:01:3f:68:e1:0e:28:a2:ff:62:3f: a7:7f:5f:25:69:c8:62:b5:2b:81:b4:d5:f5:34:41:c3:4c:27: 9f:41:95:a2:f6:17:2f:fe:da:04:91:db:f0:15:06:f1:9e:d7: f9:27:f7:cb:f1:0f:e3:cb:e9:40:a6:5f:1b:5a:69:8b:e7:43: 47:71:e3:1d:62:dc:b8:2a:f1:7b:3c:1a:1d:fd:33:fc:87:9f: aa:0d:61:c4:22:b3:ae:fb:33:1b:39:f3:34:6b:e4:f8:34:02: da:87:1b:27:20:82:08:75:a6:e6:b7:16:55:85:f3:0c:e3:bd: 3c:7f:31:8e:a1:a8:c1:67:9b:d4:90:51:af:f1:74:2c:e0:41: c9:e2:4d:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuLq5wdLS2uX2sJUXuVAvUmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjYwMTA1MDEwMDM4WhcNMjYwMTA2MDEwMDM4WjAzMTEwLwYDVQQD EygyODBlYWNkZmEwZjc3ZDFmNTMxZTlmZTAzZmM1YmQ4ZmViNDkwMTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwevnFue5pfMp1mw18abNlSuTNn7 acv7XQBJaMPNnYY5tdiLb5L+C3vcqjnrJJ3NVefAq7Hvk0qtQB7n9Ueh4LkZ+rVO JmOuTylDup7ciusHD8r10UkMLNUxhZfV8a/dyQ1cNFK+aRUHQtf752XTo3dtoR0n Q6hUNX+0bSEF2MDx7F63qkGtnRyDVbxwmj4oLDl3ZHut78rm9j7LjtAO5v9Q/Ke+ okwZwLmoG/cn0eabERSBMLEaaR9XjBP2hcW1iCuzRYWvxmxH4D+DfRhF3wNjfQaD 6fGAiKqcupCz47PM/xiOLLfFDDPhICH0LhezZXbZvIGpC+aI9cYhag+BxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgOrN+g930fUx6f4D/FvY/rSQGSMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgfrtlBV BQIblndVyLPuuqmUwELbJEaWDMp/g9DUq836skILUNqOE35kzuFE7J3WhvJA2Zzq yrTqmq1QaXh0tpUkyXhmcEunWV4CwZXOXAl6QYauY4FIEDTArtuMFizQOi/oKu5P slDFwuwz0gyjRsNsCzgBP2jhDiii/2I/p39fJWnIYrUrgbTV9TRBw0wnn0GVovYX L/7aBJHb8BUG8Z7X+Sf3y/EP48vpQKZfG1ppi+dDR3HjHWLcuCrxezwaHf0z/Ief qg1hxCKzrvszGznzNGvk+DQC2ocbJyCCCHWm5rcWVYXzDOO9PH8xjqGowWeb1JBR r/F0LOBByeJNlA== -----END CERTIFICATE-----Generated at Mon Jan 5 09:15:21 2026 by rpki-client