This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft File: BMXx0XeetwkJA2XbmCkXrf0PgEk.mft (raw, json) Hash identifier: ljOI7ZAB9vuwRGK7WEql1tZh8DdhlvOcFaLD6trUTbc= Subject key identifier: 67:22:AD:A7:65:70:85:95:62:22:95:4A:DC:A2:20:3A:E2:F8:67:A2 Authority key identifier: 04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49 Certificate issuer: /CN=04c5f1d1779eb709090365db982917adfd0f8049 Certificate serial: 019BD8474BE10343C615382178C1A12FA2D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft Manifest number: 0C9D Signing time: Mon 19 Jan 2026 22:01:49 +0000 Manifest this update: Mon 19 Jan 2026 22:01:49 +0000 Manifest next update: Tue 20 Jan 2026 22:01:49 +0000 Files and hashes: 1: BMXx0XeetwkJA2XbmCkXrf0PgEk.crl (hash: wVT7B3knIIMxI6hKAN0Pwjhc2L+RdKXFR/7XVYOFNQM=) 2: bEo8_8O2mw7PwZ1Q1MJJqc3Br9c.roa (hash: J6cPpgVeMRsfnWXOAjdK3KoD47LW/HrK99BGJHxHOac=) 3: mwL6ugxhwkwsvxWzk5gpM438ER0.roa (hash: MzMEcGzrb78MmWAPB5Ny/yePKvNxTfYRGwcwpRrll8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d8:47:4b:e1:03:43:c6:15:38:21:78:c1:a1:2f:a2:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04c5f1d1779eb709090365db982917adfd0f8049 Validity Not Before: Jan 19 22:01:49 2026 GMT Not After : Jan 20 22:01:49 2026 GMT Subject: CN=6722ada7657085956222954adca2203ae2f867a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:02:ea:d3:7f:ab:25:5d:76:3e:6b:4e:da:58: 13:a1:65:50:cd:4d:70:1b:6b:77:b4:c5:a2:b1:fa: 1d:37:a0:4c:88:c7:8b:da:dc:fc:37:6f:cf:1e:6c: f2:f3:70:ff:40:8d:f3:af:4e:62:77:68:44:92:b7: 60:2e:5f:ab:28:36:7e:57:4a:50:97:95:7d:7a:34: 52:6d:86:57:9c:20:7c:d3:30:72:28:39:c4:ad:55: 78:57:95:92:65:d3:c8:0e:66:eb:fc:37:7c:23:00: 40:96:a7:a9:15:ca:42:91:1a:29:4e:ca:7d:86:20: 3f:b0:d2:cb:b1:f5:f8:f6:4b:e3:00:fb:42:ef:0b: 27:e5:42:56:0f:c4:c6:87:0e:09:63:8c:52:06:54: 6b:36:11:96:72:06:61:53:bc:97:b6:0e:56:c9:76: d0:86:27:96:3a:e8:c0:85:96:41:98:03:1c:a6:97: e4:aa:46:4b:e6:3e:f0:ce:c2:6e:5d:84:0b:f0:ee: 9b:3c:d8:6f:c0:54:64:14:48:7e:52:b2:9c:f9:d6: b3:cf:09:9e:b6:b9:58:9a:46:d5:07:12:f0:43:2e: 12:54:3b:54:8e:8e:47:f9:49:33:b7:e1:a5:42:31: 6b:23:cb:46:cd:58:38:2b:dc:05:1a:1f:df:52:25: e3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:22:AD:A7:65:70:85:95:62:22:95:4A:DC:A2:20:3A:E2:F8:67:A2 X509v3 Authority Key Identifier: keyid:04:C5:F1:D1:77:9E:B7:09:09:03:65:DB:98:29:17:AD:FD:0F:80:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMXx0XeetwkJA2XbmCkXrf0PgEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/70b33b-d1eb-4bbb-97d6-0592453df7d2/1/BMXx0XeetwkJA2XbmCkXrf0PgEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:e2:e2:db:84:e6:ae:8c:45:02:c8:61:7e:fc:08:a4:d0:e3: 77:04:5c:2c:df:6c:e0:c2:84:b5:92:8f:41:d4:21:74:a7:98: f8:a5:ed:55:b6:cf:4c:06:52:14:01:6d:30:30:e9:56:26:19: 25:17:5d:3c:f6:b1:dc:a4:51:51:a9:8e:c7:54:27:1a:65:3b: b5:f7:fa:83:82:d5:ac:be:7c:5a:d1:12:0d:f3:0e:d2:8e:c0: 29:54:64:fb:e2:cf:a3:bf:36:a5:b4:16:16:83:f9:4f:a3:b7: 2e:51:86:15:27:74:fc:b9:71:8d:45:5e:b5:b3:0f:c7:3a:67: e5:67:64:36:5c:86:f3:0a:f9:e4:88:de:15:e0:10:a4:cc:c7: 2b:76:d6:c2:76:87:d2:74:c9:9f:1c:29:6a:98:42:a3:bf:6f: fe:cb:fd:5f:20:c9:97:31:7c:d4:8f:a9:e0:c0:29:67:0a:b6: d8:8f:b8:af:23:b1:29:8d:43:5a:ca:cd:bc:66:5e:26:f0:56: 35:3f:12:a7:89:7f:17:e3:5c:ad:39:ea:ed:20:26:2e:b7:02: 09:56:e6:a1:1f:5d:e5:38:c9:5e:9a:da:38:a8:46:e6:b4:be: 20:af:2a:8f:e5:e0:10:21:bf:4e:f9:eb:84:5a:27:ae:a2:ac: 7e:5f:3c:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvYR0vhA0PGFTgheMGhL6LZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YzVmMWQxNzc5ZWI3MDkwOTAzNjVkYjk4MjkxN2FkZmQw ZjgwNDkwHhcNMjYwMTE5MjIwMTQ5WhcNMjYwMTIwMjIwMTQ5WjAzMTEwLwYDVQQD Eyg2NzIyYWRhNzY1NzA4NTk1NjIyMjk1NGFkY2EyMjAzYWUyZjg2N2EyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgLq03+rJV12PmtO2lgToWVQzU1w G2t3tMWisfodN6BMiMeL2tz8N2/PHmzy83D/QI3zr05id2hEkrdgLl+rKDZ+V0pQ l5V9ejRSbYZXnCB80zByKDnErVV4V5WSZdPIDmbr/Dd8IwBAlqepFcpCkRopTsp9 hiA/sNLLsfX49kvjAPtC7wsn5UJWD8TGhw4JY4xSBlRrNhGWcgZhU7yXtg5WyXbQ hieWOujAhZZBmAMcppfkqkZL5j7wzsJuXYQL8O6bPNhvwFRkFEh+UrKc+dazzwme trlYmkbVBxLwQy4SVDtUjo5H+Ukzt+GlQjFrI8tGzVg4K9wFGh/fUiXj7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGciradlcIWVYiKVStyiIDri+GeiMB8GA1UdIwQY MBaAFATF8dF3nrcJCQNl25gpF639D4BJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYt MDU5MjQ1M2RmN2QyLzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC83MGIzM2ItZDFlYi00YmJiLTk3ZDYtMDU5MjQ1M2RmN2Qy LzEvQk1YeDBYZWV0d2tKQTJYYm1Da1hyZjBQZ0VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuLi24Tm roxFAshhfvwIpNDjdwRcLN9s4MKEtZKPQdQhdKeY+KXtVbbPTAZSFAFtMDDpViYZ JRddPPax3KRRUamOx1QnGmU7tff6g4LVrL58WtESDfMO0o7AKVRk++LPo782pbQW FoP5T6O3LlGGFSd0/LlxjUVetbMPxzpn5WdkNlyG8wr55IjeFeAQpMzHK3bWwnaH 0nTJnxwpaphCo79v/sv9XyDJlzF81I+p4MApZwq22I+4ryOxKY1DWsrNvGZeJvBW NT8Sp4l/F+NcrTnq7SAmLrcCCVbmoR9d5TjJXpraOKhG5rS+IK8qj+XgECG/Tvnr hFonrqKsfl88Xw== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:34 2026 by rpki-client