This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: fFEJVwx5YcZV6pb4i/xUIawgHgqjc2TEqHapb/n/lkM= Subject key identifier: 34:82:AA:E0:B2:CE:4F:7D:A7:80:BC:EF:ED:E4:C3:DA:67:41:23:7D Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019B85E14D8768D92D702994BECE7CD7208E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 17AF Signing time: Sat 03 Jan 2026 22:01:33 +0000 Manifest this update: Sat 03 Jan 2026 22:01:33 +0000 Manifest next update: Sun 04 Jan 2026 22:01:33 +0000 Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: I+ME8i9GEvmbE8TQM3QCE3w2JPk5EmhS7JacP6cR5eA=) 2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=) 3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=) 4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=) 5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=) 6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 22:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:85:e1:4d:87:68:d9:2d:70:29:94:be:ce:7c:d7:20:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Jan 3 22:01:33 2026 GMT Not After : Jan 4 22:01:33 2026 GMT Subject: CN=3482aae0b2ce4f7da780bcefede4c3da6741237d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8a:08:08:9a:89:aa:1a:77:d7:2c:09:c7:a0: 7c:4d:a3:f2:ce:bd:dd:ef:70:03:59:98:77:93:d6: a4:01:8e:98:bb:47:9a:c1:59:cf:10:da:ab:55:34: aa:c1:e2:c5:c0:98:76:01:7f:31:de:8b:d6:25:b4: e9:3e:49:26:1a:22:00:48:5d:4c:98:2b:38:4c:f0: aa:41:dc:ae:6a:d9:2e:94:4e:55:e4:36:32:ca:81: 0a:a9:82:8f:4c:70:48:0e:b4:42:e8:90:db:88:4d: b4:0b:58:e9:e9:a7:12:51:4a:70:1a:7f:fc:4a:97: 32:80:a3:c9:5a:38:e1:80:46:90:29:b6:a0:81:96: c0:51:73:56:ad:fb:5b:9e:ca:77:4f:09:55:96:a4: d7:81:dc:f0:97:ee:e7:02:ae:da:b2:6d:11:db:68: 13:31:a7:01:98:b8:62:8d:e1:bb:41:c0:bb:e3:42: 05:2e:7c:8c:04:c0:63:de:ee:93:6f:9e:e0:37:93: 65:e1:44:45:55:66:ac:d7:b2:b5:c9:f0:98:35:13: 8d:98:c4:4f:0f:4b:94:f5:12:f5:17:7e:a0:9a:41: 75:d6:8b:be:d6:7f:27:66:37:17:6e:74:0d:fd:d1: aa:26:4b:35:38:a8:13:49:06:77:fc:df:ce:b2:24: 0b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:82:AA:E0:B2:CE:4F:7D:A7:80:BC:EF:ED:E4:C3:DA:67:41:23:7D X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:4e:d7:e6:fd:eb:6b:45:a6:40:72:ac:7d:ed:06:3e:e3:1e: 8f:cc:97:f3:9f:ac:fd:a0:c1:57:47:b6:f8:8e:4f:92:f1:7d: 25:4a:3d:be:56:a2:c4:be:4f:b1:81:96:8f:5f:4b:d0:e6:19: 0f:24:7c:ec:a6:f1:2a:3b:02:ed:3d:b7:d9:69:85:0f:05:e8: 5c:2f:e0:1e:ed:0d:f5:1d:9b:80:7e:59:75:1c:3a:46:6d:22: 65:81:c0:3e:3d:bd:f3:86:dc:ef:16:34:5a:a8:e2:2e:b5:b6: 91:b9:fe:7c:1c:d3:06:af:4a:d9:91:ab:3f:d2:e6:3d:09:7f: 99:83:2f:11:8d:a2:2e:aa:54:6b:dd:56:51:66:0e:64:6c:96: a0:ac:04:75:e0:6d:68:a5:dc:7e:9a:4f:a0:2e:6d:7d:02:7e: cc:95:f9:44:cd:da:07:6a:4f:94:fb:19:23:c1:49:44:9a:a8: 58:85:29:92:4b:bb:ac:a4:bc:ce:5c:c0:d0:4a:ab:b9:bc:77: 6b:14:76:20:a5:25:1c:f7:58:e5:5b:5f:fe:6c:94:e2:00:cd: 54:72:9a:ee:c1:23:45:27:f7:1f:d3:1d:3d:c8:3a:fe:0a:5d: bb:17:de:42:51:56:ab:aa:a8:43:44:2e:b7:ca:44:6e:8d:a9: 9a:0a:39:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuF4U2HaNktcCmUvs581yCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjYwMTAzMjIwMTMzWhcNMjYwMTA0MjIwMTMzWjAzMTEwLwYDVQQD EygzNDgyYWFlMGIyY2U0ZjdkYTc4MGJjZWZlZGU0YzNkYTY3NDEyMzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoIoICJqJqhp31ywJx6B8TaPyzr3d 73ADWZh3k9akAY6Yu0eawVnPENqrVTSqweLFwJh2AX8x3ovWJbTpPkkmGiIASF1M mCs4TPCqQdyuatkulE5V5DYyyoEKqYKPTHBIDrRC6JDbiE20C1jp6acSUUpwGn/8 SpcygKPJWjjhgEaQKbaggZbAUXNWrftbnsp3TwlVlqTXgdzwl+7nAq7asm0R22gT MacBmLhijeG7QcC740IFLnyMBMBj3u6Tb57gN5Nl4URFVWas17K1yfCYNRONmMRP D0uU9RL1F36gmkF11ou+1n8nZjcXbnQN/dGqJks1OKgTSQZ3/N/OsiQLqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSCquCyzk99p4C87+3kw9pnQSN9MB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASE7X5v3r a0WmQHKsfe0GPuMej8yX85+s/aDBV0e2+I5PkvF9JUo9vlaixL5PsYGWj19L0OYZ DyR87KbxKjsC7T232WmFDwXoXC/gHu0N9R2bgH5ZdRw6Rm0iZYHAPj2984bc7xY0 WqjiLrW2kbn+fBzTBq9K2ZGrP9LmPQl/mYMvEY2iLqpUa91WUWYOZGyWoKwEdeBt aKXcfppPoC5tfQJ+zJX5RM3aB2pPlPsZI8FJRJqoWIUpkku7rKS8zlzA0Eqrubx3 axR2IKUlHPdY5Vtf/myU4gDNVHKa7sEjRSf3H9MdPcg6/gpduxfeQlFWq6qoQ0Qu t8pEbo2pmgo5hQ== -----END CERTIFICATE-----Generated at Sun Jan 4 05:48:49 2026 by rpki-client