This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft File: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft (raw, json) Hash identifier: P3kjtaAxMVrXvJ/1cdDMQQS8l9yoWDBRdF6uRZiGG9g= Subject key identifier: 33:34:0B:9D:87:36:64:4D:2D:C5:40:A3:73:70:B5:05:34:4A:CF:62 Authority key identifier: 04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 Certificate issuer: /CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Certificate serial: 019C07452E848989F346086B6572A2395B75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft Manifest number: 17F2 Signing time: Thu 29 Jan 2026 01:01:40 +0000 Manifest this update: Thu 29 Jan 2026 01:01:40 +0000 Manifest next update: Fri 30 Jan 2026 01:01:40 +0000 Files and hashes: 1: BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl (hash: BvhFQKLvuqxOnc3W5RvDk/qnqpLoJKNeZVBy4l8mctg=) 2: CPUhEOExF0ziNZD9XMn51a1QJ3c.roa (hash: qym8G/fphFABj4oWhLx7wQxvMSSj/db0RE1lOddGZpw=) 3: FFyVQHxfxA2JYXv-nY54g1GYtro.roa (hash: QM/JMI1UEoh9aaA99WGsNEw6j3PaxikWHShXp5ymCRM=) 4: YD_XXCbZEnIXTIaNsWUYxuNoqmA.roa (hash: W7cs/xQuSSTnLoEGL+dej1CyYsODurQRLjmk1GN3TMQ=) 5: c4AMpI84bSLLoLu-Ea8RFpboDzQ.roa (hash: 2I19yw1SZNgsve1ORsF8XfKr6nE/sZkCdyWL4vHbbeI=) 6: zwpretBBcOwIvlCxlvtxUd8KleQ.roa (hash: 66sBlQaDKWSjMmvIhgmu4sGX8q5VTriyNBFsUaYRzrY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 01:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:07:45:2e:84:89:89:f3:46:08:6b:65:72:a2:39:5b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a5ec5f52668be50b4518b687cf8bd95930ae39 Validity Not Before: Jan 29 01:01:40 2026 GMT Not After : Jan 30 01:01:40 2026 GMT Subject: CN=33340b9d8736644d2dc540a37370b505344acf62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:43:9a:b1:c3:ba:02:d0:29:7e:23:4b:b1:5f: 9b:49:5e:ea:ff:81:a7:e0:63:34:ce:64:f1:26:61: 09:d9:f0:5a:f6:b3:be:7a:e4:e0:54:da:77:8a:da: e5:15:49:19:55:23:6d:59:7e:8d:74:1f:cf:bd:74: 7f:18:54:84:88:21:e6:5c:00:fe:49:e3:4f:80:ea: ca:04:6a:f0:11:fe:4c:72:dd:97:ec:01:f5:a4:c9: a9:bf:a9:8d:2c:bd:51:14:c3:a1:17:1e:b2:72:6d: 7d:f8:e9:95:ad:a0:ec:c9:7f:0d:f9:86:e0:85:38: 42:b5:c3:68:a4:a6:9f:ce:d0:b3:ac:44:54:47:e3: 99:84:e1:08:0d:09:9b:21:ab:74:64:09:50:32:10: d7:3f:d0:ec:1d:78:c3:2d:6f:45:69:89:44:89:ab: 80:7e:e6:e0:21:23:1e:52:d6:21:af:87:ae:d4:17: 05:85:5e:24:6f:1e:ff:38:5b:ef:da:6e:1a:a6:43: dd:9c:e6:b1:cd:77:e3:67:a1:1f:fc:1c:f4:f1:db: 36:4a:36:e9:84:11:41:92:1c:4a:ce:53:48:bc:73: 01:f6:0e:3a:cc:7b:02:c7:d9:2d:d9:09:b1:20:57: fa:61:2e:df:1f:bb:19:8a:e2:71:cc:b3:2d:76:80: 0f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:34:0B:9D:87:36:64:4D:2D:C5:40:A3:73:70:B5:05:34:4A:CF:62 X509v3 Authority Key Identifier: keyid:04:A5:EC:5F:52:66:8B:E5:0B:45:18:B6:87:CF:8B:D9:59:30:AE:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/00e33e-fd74-4583-984e-c6b84cc58610/1/BKXsX1Jmi-ULRRi2h8-L2Vkwrjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:e4:8b:c8:30:51:01:76:22:27:58:75:ee:a1:c7:63:a1:4b: c1:5e:01:f5:c9:62:3c:62:50:93:26:8c:16:78:57:9c:ba:3d: ee:d4:12:d0:47:54:e2:e7:e1:7a:0d:a7:83:39:b3:6c:64:87: dd:33:fd:31:b8:61:72:f0:14:76:84:02:5d:36:a5:83:b0:8e: dc:83:06:06:65:8a:f0:74:c7:63:7f:ad:70:7e:ab:9d:b4:6f: 85:5f:cf:2f:76:07:4c:a3:5f:29:1d:e2:be:ea:59:a2:7c:a0: f7:fc:36:68:03:3e:39:b0:2a:cc:e4:06:4d:c7:2d:9a:65:da: a7:1b:9a:49:94:29:2c:60:1a:1e:3e:4d:5e:38:10:c6:07:de: ba:40:b8:4b:98:53:67:b4:b9:b1:6f:5a:54:be:81:71:1c:1a: 79:b0:26:90:42:ef:1c:b3:00:95:b3:31:b9:68:6c:08:c1:aa: 10:b4:9f:e5:b0:f7:7e:f0:a3:00:f3:10:f6:90:20:87:da:58: ae:2e:be:db:be:38:19:d0:22:9d:74:82:4e:8e:61:d1:a7:58: 74:c5:46:7c:d0:f4:2a:a9:a4:8b:20:4e:2f:29:23:87:88:8c: ad:e2:f8:af:89:d9:69:43:b1:57:01:f0:bb:a0:d4:be:b1:4c: bb:71:83:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwHRS6EiYnzRghrZXKiOVt1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTVlYzVmNTI2NjhiZTUwYjQ1MThiNjg3Y2Y4YmQ5NTkz MGFlMzkwHhcNMjYwMTI5MDEwMTQwWhcNMjYwMTMwMDEwMTQwWjAzMTEwLwYDVQQD EygzMzM0MGI5ZDg3MzY2NDRkMmRjNTQwYTM3MzcwYjUwNTM0NGFjZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEOascO6AtApfiNLsV+bSV7q/4Gn 4GM0zmTxJmEJ2fBa9rO+euTgVNp3itrlFUkZVSNtWX6NdB/PvXR/GFSEiCHmXAD+ SeNPgOrKBGrwEf5Mct2X7AH1pMmpv6mNLL1RFMOhFx6ycm19+OmVraDsyX8N+Ybg hThCtcNopKafztCzrERUR+OZhOEIDQmbIat0ZAlQMhDXP9DsHXjDLW9FaYlEiauA fubgISMeUtYhr4eu1BcFhV4kbx7/OFvv2m4apkPdnOaxzXfjZ6Ef/Bz08ds2Sjbp hBFBkhxKzlNIvHMB9g46zHsCx9kt2QmxIFf6YS7fH7sZiuJxzLMtdoAPvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM0C52HNmRNLcVAo3NwtQU0Ss9iMB8GA1UdIwQY MBaAFASl7F9SZovlC0UYtofPi9lZMK45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUt YzZiODRjYzU4NjEwLzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8wMGUzM2UtZmQ3NC00NTgzLTk4NGUtYzZiODRjYzU4NjEw LzEvQktYc1gxSm1pLVVMUlJpMmg4LUwyVmt3cmprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE+SLyDBR AXYiJ1h17qHHY6FLwV4B9cliPGJQkyaMFnhXnLo97tQS0EdU4ufheg2ngzmzbGSH 3TP9MbhhcvAUdoQCXTalg7CO3IMGBmWK8HTHY3+tcH6rnbRvhV/PL3YHTKNfKR3i vupZonyg9/w2aAM+ObAqzOQGTcctmmXapxuaSZQpLGAaHj5NXjgQxgfeukC4S5hT Z7S5sW9aVL6BcRwaebAmkELvHLMAlbMxuWhsCMGqELSf5bD3fvCjAPMQ9pAgh9pY ri6+2744GdAinXSCTo5h0adYdMVGfND0KqmkiyBOLykjh4iMreL4r4nZaUOxVwHw u6DUvrFMu3GDUQ== -----END CERTIFICATE-----Generated at Thu Jan 29 10:02:06 2026 by rpki-client