This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft File: BVYYphlfHsrLCFztOwoaF8YqLPo.mft (raw, json) Hash identifier: XOKAVxEVWOFUm6PlXiL2zdIGytUf7lFOljHIUCNTSnA= Subject key identifier: 04:A6:57:89:63:5A:CC:CE:2F:58:E9:A7:94:54:E2:6E:A1:A6:ED:86 Authority key identifier: 05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA Certificate issuer: /CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa Certificate serial: 019C040CCF9A53E87D35EBF4DE2BAB268E66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft Manifest number: 1387 Signing time: Wed 28 Jan 2026 10:01:14 +0000 Manifest this update: Wed 28 Jan 2026 10:01:14 +0000 Manifest next update: Thu 29 Jan 2026 10:01:14 +0000 Files and hashes: 1: BVYYphlfHsrLCFztOwoaF8YqLPo.crl (hash: A1U/rBEW57M/rxqboU1spKEjlg1W3DAgHBZtwLoBAcQ=) 2: ZrpD-HPOpkWnog8ZwPaUN_G8Qz8.roa (hash: cYVKZh1myfenrYhf5mnnHt/sHZoWJT/ER0EDPjoy5XA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:0c:cf:9a:53:e8:7d:35:eb:f4:de:2b:ab:26:8e:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=055618a6195f1ecacb085ced3b0a1a17c62a2cfa Validity Not Before: Jan 28 10:01:14 2026 GMT Not After : Jan 29 10:01:14 2026 GMT Subject: CN=04a65789635accce2f58e9a79454e26ea1a6ed86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:33:9f:30:1f:b1:06:7b:3c:ec:b3:8a:07:36: 6d:ca:29:3e:0f:ae:8b:82:4e:a4:dd:7c:3c:ad:f2: 6a:0e:1f:85:db:46:55:be:08:3e:04:20:3a:e1:6b: 4c:71:1f:c5:03:85:61:9e:8d:79:d0:76:51:9e:56: ae:dd:3d:82:3f:6e:bd:39:c6:8d:8d:a3:ce:d2:1b: b1:22:32:0c:53:7a:a4:d2:d1:9d:71:4c:41:69:7d: 48:8c:fe:62:bb:58:4d:47:d2:86:b0:b7:cc:9b:3a: d1:d9:04:4a:7e:fc:1e:7c:93:c5:f9:a7:ee:56:90: 16:f6:9a:57:01:02:98:0f:4f:d3:4e:f4:31:ce:1d: 6c:c3:cc:20:52:d4:24:72:68:06:e9:e4:50:9c:4e: b0:76:92:52:fa:51:15:09:3e:97:f8:a8:b4:e1:6a: 9d:ed:6d:df:74:39:a4:63:2e:1c:7d:09:0f:92:4f: 30:ad:c0:de:42:95:b8:86:df:52:3f:c2:cc:e5:69: c8:ec:3f:3a:8f:f2:30:f4:ab:6c:5a:5c:6e:50:d0: 3e:53:36:09:e9:6f:ae:44:96:4d:b8:65:3f:b8:8a: 3c:f0:c9:6a:17:9c:8b:6f:93:51:b1:e5:eb:b4:11: bf:91:b5:e5:1c:15:58:85:e5:4e:74:34:d3:6f:1e: cb:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:A6:57:89:63:5A:CC:CE:2F:58:E9:A7:94:54:E2:6E:A1:A6:ED:86 X509v3 Authority Key Identifier: keyid:05:56:18:A6:19:5F:1E:CA:CB:08:5C:ED:3B:0A:1A:17:C6:2A:2C:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVYYphlfHsrLCFztOwoaF8YqLPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/eae333-30c4-43ff-b23d-5ae5bca6f48c/1/BVYYphlfHsrLCFztOwoaF8YqLPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:fe:06:b3:50:2c:0d:bb:3f:99:90:1f:e1:43:61:76:03:e5: 53:53:02:3f:45:da:fe:a0:cb:04:10:8d:3b:84:a1:14:5c:5d: c6:ae:79:ba:a3:6a:dc:29:83:35:53:ab:a4:43:fb:35:60:6d: 38:f6:8c:8b:39:39:d9:68:ec:63:22:5f:80:46:45:93:3b:d7: c8:b7:3f:da:02:3f:d5:8c:f8:1f:07:b7:d7:83:27:54:21:10: 2a:b3:16:09:04:05:bc:48:19:76:33:87:d7:52:b6:47:fc:98: 7c:ae:36:08:7f:b5:f2:26:b4:ba:9a:60:1f:78:38:3a:4a:69: e3:bb:c5:31:84:78:c9:06:f1:35:c8:e8:01:8d:08:3b:15:a7: 71:5e:ed:5d:8f:39:c5:05:cb:c5:fe:9f:e5:86:d5:45:e5:a3: ef:79:51:0d:0c:75:83:66:15:f3:9f:54:f2:45:a9:41:3b:81: 9f:f2:64:4c:b8:ac:15:52:5d:19:aa:10:4f:56:a9:c4:8a:2e: 4f:f2:dc:48:c4:26:f1:cc:83:78:31:ca:1c:4b:5f:11:8c:61: 56:9c:3e:74:b9:32:a7:fa:0c:1e:bf:b6:9b:f7:fb:ba:0e:96: 47:4e:0a:65:c9:8c:70:b4:12:cb:c2:53:cc:57:d9:f5:94:15: 5b:f0:a7:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwEDM+aU+h9Nev03iurJo5mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTYxOGE2MTk1ZjFlY2FjYjA4NWNlZDNiMGExYTE3YzYy YTJjZmEwHhcNMjYwMTI4MTAwMTE0WhcNMjYwMTI5MTAwMTE0WjAzMTEwLwYDVQQD EygwNGE2NTc4OTYzNWFjY2NlMmY1OGU5YTc5NDU0ZTI2ZWExYTZlZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjOfMB+xBns87LOKBzZtyik+D66L gk6k3Xw8rfJqDh+F20ZVvgg+BCA64WtMcR/FA4Vhno150HZRnlau3T2CP269OcaN jaPO0huxIjIMU3qk0tGdcUxBaX1IjP5iu1hNR9KGsLfMmzrR2QRKfvwefJPF+afu VpAW9ppXAQKYD0/TTvQxzh1sw8wgUtQkcmgG6eRQnE6wdpJS+lEVCT6X+Ki04Wqd 7W3fdDmkYy4cfQkPkk8wrcDeQpW4ht9SP8LM5WnI7D86j/Iw9KtsWlxuUNA+UzYJ 6W+uRJZNuGU/uIo88MlqF5yLb5NRseXrtBG/kbXlHBVYheVOdDTTbx7L3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASmV4ljWszOL1jpp5RU4m6hpu2GMB8GA1UdIwQY MBaAFAVWGKYZXx7Kywhc7TsKGhfGKiz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2Qt NWFlNWJjYTZmNDhjLzEvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lYWUzMzMtMzBjNC00M2ZmLWIyM2QtNWFlNWJjYTZmNDhj LzEvQlZZWXBobGZIc3JMQ0Z6dE93b2FGOFlxTFBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr/4Gs1As Dbs/mZAf4UNhdgPlU1MCP0Xa/qDLBBCNO4ShFFxdxq55uqNq3CmDNVOrpEP7NWBt OPaMizk52WjsYyJfgEZFkzvXyLc/2gI/1Yz4Hwe314MnVCEQKrMWCQQFvEgZdjOH 11K2R/yYfK42CH+18ia0uppgH3g4Okpp47vFMYR4yQbxNcjoAY0IOxWncV7tXY85 xQXLxf6f5YbVReWj73lRDQx1g2YV859U8kWpQTuBn/JkTLisFVJdGaoQT1apxIou T/LcSMQm8cyDeDHKHEtfEYxhVpw+dLkyp/oMHr+2m/f7ug6WR04KZcmMcLQSy8JT zFfZ9ZQVW/CnUg== -----END CERTIFICATE-----Generated at Wed Jan 28 18:34:50 2026 by rpki-client