This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: tQd6qCCwF1r88J+pnuRqdBCMYDEMwvnFps44I+8NZeM= Subject key identifier: EE:71:84:BE:F1:FC:EE:E3:FD:14:44:85:BC:5E:04:46:90:E4:68:6E Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019BD50EDC1265702417950048A92201266B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 17D8 Signing time: Mon 19 Jan 2026 07:01:19 +0000 Manifest this update: Mon 19 Jan 2026 07:01:19 +0000 Manifest next update: Tue 20 Jan 2026 07:01:19 +0000 Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: Dr5du3c79exuyAyVRq7dxmrjeMZ3s11CwLWGAGVFptU=) 2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=) 3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=) 4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=) 5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=) 6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:0e:dc:12:65:70:24:17:95:00:48:a9:22:01:26:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Jan 19 07:01:19 2026 GMT Not After : Jan 20 07:01:19 2026 GMT Subject: CN=ee7184bef1fceee3fd144485bc5e044690e4686e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b0:5d:e7:aa:64:f1:3f:31:3c:d4:ac:71:fb: 3e:62:24:d3:cc:0f:ea:86:74:fa:38:05:8e:0a:99: 17:d3:44:57:b3:e2:03:34:07:0e:fa:a5:e3:c2:df: 30:7d:bb:fc:e8:67:b0:82:de:45:81:7a:97:59:77: a0:54:24:30:c9:c6:de:3e:89:fa:e2:1a:d0:8d:b1: cc:36:6d:c0:3f:d2:cc:42:72:0f:e7:28:db:c6:2c: e7:a9:c5:4d:eb:cb:8b:83:93:54:a1:0a:49:7b:11: 73:e9:bb:71:72:ca:74:09:ea:1c:6e:a1:85:bb:69: ee:b2:1b:44:0e:ee:98:74:7a:a1:a3:11:c1:5c:62: 33:5a:79:53:4a:6c:06:4f:e6:d9:2d:80:8e:2e:e3: fa:87:cf:76:2d:2c:b6:d5:00:fc:c2:98:28:b3:c5: 63:32:6a:27:c3:d7:f4:94:d6:b9:af:fa:b9:83:84: 62:ed:60:3f:be:c7:25:7a:20:af:e3:ec:a9:dc:8c: 2a:38:b1:54:b2:40:6c:3c:4b:a3:eb:b7:73:ee:e1: a5:79:e8:8f:e4:5e:e7:60:07:9e:a3:82:2b:77:6e: 21:34:09:a9:c3:1a:a1:33:a0:e4:ae:e5:1c:2c:1b: ff:52:4c:54:fa:ca:20:57:ba:d0:df:d4:80:ee:e5: 68:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:71:84:BE:F1:FC:EE:E3:FD:14:44:85:BC:5E:04:46:90:E4:68:6E X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:12:df:df:67:9b:4f:a7:fa:18:76:c2:80:95:2a:dd:c3:20: 0e:bb:2d:73:b7:ed:d2:2a:22:e5:6a:fd:75:15:ea:e0:0f:61: 5b:34:55:c7:86:fe:24:7b:12:53:72:8b:e8:2e:0d:28:4f:53: 88:ea:a5:03:93:47:b5:bd:48:3c:43:9f:1d:8b:3b:89:30:0a: 89:e0:a1:36:a5:89:09:e6:3f:2f:27:c3:88:08:8e:34:93:b8: 9f:1e:de:e8:7e:6a:7d:75:d7:fe:48:e8:b3:f4:f9:35:64:f7: 95:04:00:89:97:59:53:0b:5a:e8:6b:7f:b2:1f:83:8f:20:a0: f7:fe:39:30:1a:2c:91:f9:9d:fc:62:6e:ce:06:c7:0b:82:05: 1b:f2:b2:32:35:e3:f4:1c:37:70:8f:88:2c:e0:af:d0:6a:ee: 68:c9:e5:91:0e:6d:86:66:d3:96:ff:dc:92:23:79:2b:84:a6: 90:76:c3:81:4e:dc:c2:d1:22:ed:b6:69:0e:60:e2:8f:2e:ad: 31:c6:37:9f:df:7c:37:e1:8b:d6:3c:40:f5:b3:0f:00:34:d3: 6f:f6:ea:83:3b:dc:df:f2:8d:9e:9f:c2:c8:2d:66:f8:76:b5: 89:26:ff:34:f0:a9:06:4d:f8:0c:94:e8:a7:c1:90:10:41:82: 53:d8:dc:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvVDtwSZXAkF5UASKkiASZrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjYwMTE5MDcwMTE5WhcNMjYwMTIwMDcwMTE5WjAzMTEwLwYDVQQD EyhlZTcxODRiZWYxZmNlZWUzZmQxNDQ0ODViYzVlMDQ0NjkwZTQ2ODZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87Bd56pk8T8xPNSscfs+YiTTzA/q hnT6OAWOCpkX00RXs+IDNAcO+qXjwt8wfbv86Gewgt5FgXqXWXegVCQwycbePon6 4hrQjbHMNm3AP9LMQnIP5yjbxiznqcVN68uLg5NUoQpJexFz6btxcsp0CeocbqGF u2nushtEDu6YdHqhoxHBXGIzWnlTSmwGT+bZLYCOLuP6h892LSy21QD8wpgos8Vj Mmonw9f0lNa5r/q5g4Ri7WA/vscleiCv4+yp3IwqOLFUskBsPEuj67dz7uGleeiP 5F7nYAeeo4Ird24hNAmpwxqhM6DkruUcLBv/UkxU+sogV7rQ39SA7uVoAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5xhL7x/O7j/RREhbxeBEaQ5GhuMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERLf32eb T6f6GHbCgJUq3cMgDrstc7ft0ioi5Wr9dRXq4A9hWzRVx4b+JHsSU3KL6C4NKE9T iOqlA5NHtb1IPEOfHYs7iTAKieChNqWJCeY/LyfDiAiONJO4nx7e6H5qfXXX/kjo s/T5NWT3lQQAiZdZUwta6Gt/sh+DjyCg9/45MBoskfmd/GJuzgbHC4IFG/KyMjXj 9Bw3cI+ILOCv0GruaMnlkQ5thmbTlv/ckiN5K4SmkHbDgU7cwtEi7bZpDmDijy6t McY3n998N+GL1jxA9bMPADTTb/bqgzvc3/KNnp/CyC1m+Ha1iSb/NPCpBk34DJTo p8GQEEGCU9jc4Q== -----END CERTIFICATE-----Generated at Mon Jan 19 09:02:33 2026 by rpki-client