This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft File: bW812JkKeylMRTlW4OgkLAqssDE.mft (raw, json) Hash identifier: 6Uf4Cr9a4jJRW7cx2SiV84g0NcKkFqZV80aj5ObNwBI= Subject key identifier: 5A:EA:14:32:09:62:05:07:31:74:EB:AA:2B:85:67:DD:06:7F:1D:08 Authority key identifier: 6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31 Certificate issuer: /CN=6d6f35d8990a7b294c453956e0e8242c0aacb031 Certificate serial: 019BFE0B38D23835BB2C6353D8B8FB5E0C77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft Manifest number: 8F Signing time: Tue 27 Jan 2026 06:01:46 +0000 Manifest this update: Tue 27 Jan 2026 06:01:46 +0000 Manifest next update: Wed 28 Jan 2026 06:01:46 +0000 Files and hashes: 1: bW812JkKeylMRTlW4OgkLAqssDE.crl (hash: 46rjQEttQaVBZLqeAvJZylLdYMwMr38MJi2klpaq82g=) 2: pLo7yeor3yvWz_bHf888b08GSSo.roa (hash: 8qMgd9TM0x86p9/1D7RQi+vTq1bW9K6YhRD76Hg6SSc=) 3: qXjBAQggAXrOxJUgY6djSdlqPKE.roa (hash: e2sA9+fia+zY8nNz4+VYlrrORiWU4ku7fSihowH+jkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0b:38:d2:38:35:bb:2c:63:53:d8:b8:fb:5e:0c:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d6f35d8990a7b294c453956e0e8242c0aacb031 Validity Not Before: Jan 27 06:01:46 2026 GMT Not After : Jan 28 06:01:46 2026 GMT Subject: CN=5aea1432096205073174ebaa2b8567dd067f1d08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:93:2d:d5:56:a6:82:1a:2d:fc:3d:b3:f6:08: 40:5d:29:d2:88:47:22:b3:0c:70:a1:a2:fb:32:fc: 4c:27:34:de:06:8b:9a:4d:91:db:0c:0b:10:84:b1: 60:ee:39:97:e0:49:f0:c4:00:9e:ab:2e:12:b8:ee: ca:a1:c6:24:a0:96:d5:15:84:3e:f4:83:cd:a1:8b: e6:43:4c:1e:6c:0e:eb:11:ae:bc:bb:56:b0:b3:0c: 18:a9:98:9f:35:26:22:1f:43:77:4d:a3:60:42:7f: 96:df:92:ef:13:8f:b6:0a:e0:76:9d:c0:14:b0:c0: 34:92:3a:86:32:37:67:55:fb:80:7c:3a:bc:91:5a: cb:37:22:48:7e:78:b8:78:3b:02:03:b6:f6:09:d6: 74:c6:c2:5b:bb:12:60:86:23:1f:12:cc:19:7b:db: 44:9d:19:08:d0:4d:10:43:81:73:a6:39:01:85:b1: 8b:02:78:74:90:78:79:82:30:25:22:51:7a:ad:a6: ca:89:fe:b9:e3:6e:cd:21:99:32:42:90:64:06:66: 77:cd:d1:cf:cb:a9:a6:5c:69:ee:47:69:3a:22:6c: 87:b0:c4:d6:d0:a5:19:53:80:1e:17:8d:30:fa:09: 7f:a9:81:a4:3f:8c:69:d5:7d:ed:5f:90:03:3c:9b: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:EA:14:32:09:62:05:07:31:74:EB:AA:2B:85:67:DD:06:7F:1D:08 X509v3 Authority Key Identifier: keyid:6D:6F:35:D8:99:0A:7B:29:4C:45:39:56:E0:E8:24:2C:0A:AC:B0:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW812JkKeylMRTlW4OgkLAqssDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ffc29c-43e8-4086-b145-7a096f607e26/1/bW812JkKeylMRTlW4OgkLAqssDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:f7:87:19:cd:00:ff:fa:64:c1:c7:d4:6a:06:e4:da:da:da: f8:18:4a:bf:5c:63:a3:ed:a6:19:88:57:a1:af:76:9a:9b:30: ee:fc:68:65:22:16:5b:07:1a:3f:cc:30:7e:52:88:16:ba:ca: e0:13:12:77:fe:b4:5a:3b:95:95:7a:26:c2:c1:a9:b1:d9:02: 52:fb:ec:48:54:92:61:df:80:91:bc:95:8c:61:89:c3:ad:75: 6d:c8:bf:98:27:c5:7c:57:fe:c7:47:e7:76:64:f9:40:80:09: eb:ad:72:18:65:4f:27:54:af:7a:27:a9:73:c9:ab:95:59:27: fd:95:11:a2:8e:fb:49:34:93:f7:5f:f3:3d:e5:d5:34:2b:05: 99:85:aa:dc:25:18:8f:28:6b:74:d3:75:d1:d3:39:9c:53:a9: ae:ee:6a:86:39:b1:c0:78:06:7c:30:4d:3f:8e:03:17:f7:4f: 75:cc:5e:08:98:ef:e6:69:ec:96:06:30:b8:3c:c1:93:00:a6: bc:9a:34:ea:3e:ad:7f:2e:d1:e2:21:2a:01:50:ea:a7:8d:01: fd:42:65:86:36:4c:a0:03:f9:fa:69:47:8f:3a:d2:59:4d:25: fa:f7:58:f1:82:a6:c7:eb:f3:f3:df:64:bd:14:ad:9e:52:26: f3:6e:d3:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CzjSODW7LGNT2Lj7Xgx3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNmYzNWQ4OTkwYTdiMjk0YzQ1Mzk1NmUwZTgyNDJjMGFh Y2IwMzEwHhcNMjYwMTI3MDYwMTQ2WhcNMjYwMTI4MDYwMTQ2WjAzMTEwLwYDVQQD Eyg1YWVhMTQzMjA5NjIwNTA3MzE3NGViYWEyYjg1NjdkZDA2N2YxZDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpMt1Vamghot/D2z9ghAXSnSiEci swxwoaL7MvxMJzTeBouaTZHbDAsQhLFg7jmX4EnwxACeqy4SuO7KocYkoJbVFYQ+ 9IPNoYvmQ0webA7rEa68u1awswwYqZifNSYiH0N3TaNgQn+W35LvE4+2CuB2ncAU sMA0kjqGMjdnVfuAfDq8kVrLNyJIfni4eDsCA7b2CdZ0xsJbuxJghiMfEswZe9tE nRkI0E0QQ4FzpjkBhbGLAnh0kHh5gjAlIlF6rabKif65427NIZkyQpBkBmZ3zdHP y6mmXGnuR2k6ImyHsMTW0KUZU4AeF40w+gl/qYGkP4xp1X3tX5ADPJvsXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFrqFDIJYgUHMXTrqiuFZ90Gfx0IMB8GA1UdIwQY MBaAFG1vNdiZCnspTEU5VuDoJCwKrLAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mZmMyOWMtNDNlOC00MDg2LWIxNDUt N2EwOTZmNjA3ZTI2LzEvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9mZmMyOWMtNDNlOC00MDg2LWIxNDUtN2EwOTZmNjA3ZTI2 LzEvYlc4MTJKa0tleWxNUlRsVzRPZ2tMQXFzc0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHveHGc0A //pkwcfUagbk2tra+BhKv1xjo+2mGYhXoa92mpsw7vxoZSIWWwcaP8wwflKIFrrK 4BMSd/60WjuVlXomwsGpsdkCUvvsSFSSYd+AkbyVjGGJw611bci/mCfFfFf+x0fn dmT5QIAJ661yGGVPJ1Sveiepc8mrlVkn/ZURoo77STST91/zPeXVNCsFmYWq3CUY jyhrdNN10dM5nFOpru5qhjmxwHgGfDBNP44DF/dPdcxeCJjv5mnslgYwuDzBkwCm vJo06j6tfy7R4iEqAVDqp40B/UJlhjZMoAP5+mlHjzrSWU0l+vdY8YKmx+vz899k vRStnlIm827TbA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:47:20 2026 by rpki-client