This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft File: bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft (raw, json) Hash identifier: h67UQrUFudi35+7fzei1u7vsdzRAEHDo8IKtCAis2/8= Subject key identifier: 25:75:02:77:5D:0D:DB:02:9E:58:7E:1B:AF:B8:1D:D4:A3:BA:23:69 Authority key identifier: 6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74 Certificate issuer: /CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74 Certificate serial: 019BFE78D8266219DAE762F2F77ECAD8D827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft Manifest number: 04A8 Signing time: Tue 27 Jan 2026 08:01:30 +0000 Manifest this update: Tue 27 Jan 2026 08:01:30 +0000 Manifest next update: Wed 28 Jan 2026 08:01:30 +0000 Files and hashes: 1: YDy6wLds96Yf3zX0RUfnfXQDw5Q.roa (hash: 86RzS+pw/jn2zDtIOdA8fDYlhM/9zcSkfL4mjAAa2B4=) 2: bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl (hash: g/YAAGB8XtvfkRnkODTXwOCgYLLHHA58rBghha826AU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 08:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:78:d8:26:62:19:da:e7:62:f2:f7:7e:ca:d8:d8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc3853da70cdea0dba46414b6b0e6d1f1716e74 Validity Not Before: Jan 27 08:01:30 2026 GMT Not After : Jan 28 08:01:30 2026 GMT Subject: CN=257502775d0ddb029e587e1bafb81dd4a3ba2369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:08:0c:fd:14:7b:18:68:3b:aa:eb:87:43:4a: 5c:2c:5c:bc:16:bc:c4:02:69:a2:d4:f5:d5:36:21: 52:cd:30:15:88:3c:27:7c:15:35:d8:b6:1b:bd:a9: 54:f7:01:43:c5:b9:b9:b3:5d:31:04:10:c1:73:94: 18:e8:4f:91:55:3a:13:79:ba:42:2f:70:fc:f4:1b: b1:e8:b0:75:f9:24:87:8f:2a:7d:ea:64:f8:a3:23: 4e:e0:4f:a9:d4:e4:e3:77:e2:fa:77:be:94:2c:ed: 15:8f:11:72:8c:c2:10:60:38:9f:7d:83:6b:f2:52: 9a:7f:c2:bf:f2:93:38:62:52:6a:32:1a:5c:70:e2: 62:89:1b:c7:56:96:48:dc:0c:2f:13:89:92:18:77: 49:e4:9d:c7:38:11:91:ef:58:bc:00:7a:ba:aa:eb: 1b:3b:26:45:d3:10:32:1d:d2:ca:5c:b5:a0:c6:5b: 37:5f:f2:56:39:e1:49:80:35:21:5b:43:1b:a6:37: 5d:c1:18:76:54:26:e9:f7:ae:00:9d:24:00:19:52: 66:c3:00:0f:da:3b:96:05:03:9e:5c:d3:3f:95:48: 91:2b:1f:7d:de:f5:da:ff:86:22:54:18:8b:ef:c4: 14:18:90:96:18:8e:ae:22:7d:73:48:03:9d:0a:32: 90:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:75:02:77:5D:0D:DB:02:9E:58:7E:1B:AF:B8:1D:D4:A3:BA:23:69 X509v3 Authority Key Identifier: keyid:6C:C3:85:3D:A7:0C:DE:A0:DB:A4:64:14:B6:B0:E6:D1:F1:71:6E:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMOFPacM3qDbpGQUtrDm0fFxbnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d128de-d61d-4f03-9134-046a68ab4c8d/1/bMOFPacM3qDbpGQUtrDm0fFxbnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:1a:06:d9:9f:1e:a3:1a:37:0b:b2:01:f9:4c:0f:eb:13:cc: 8b:92:fd:40:5c:08:ae:f0:b5:1f:80:fc:6c:f1:94:0c:2d:39: c7:a2:b2:f2:fe:cb:42:0a:6a:62:e0:9d:7a:1b:b2:6a:0f:36: 47:42:a2:3d:28:f2:73:b6:89:4a:4a:d9:85:9f:15:99:8f:55: c9:32:98:79:06:9d:05:6b:35:05:17:46:5b:4e:e3:fb:da:c9: ae:ab:c9:01:fc:39:68:2e:43:8a:e7:b5:bc:4a:e8:c9:e5:8d: 60:9f:76:36:40:2b:db:60:74:7a:f3:0f:2f:73:1d:2e:45:89: 95:53:91:e5:ac:30:67:e7:2f:dc:6b:be:cc:97:5f:c4:86:2c: 83:f4:3a:e4:4a:d5:6e:62:5a:61:c8:cd:a2:81:f9:ec:b8:b2: ed:fa:ff:8f:f2:3d:6e:34:5d:6f:fd:bf:8c:24:b1:9f:42:42: fb:19:c8:24:81:99:14:3c:be:d2:0f:ed:01:e9:9b:25:ee:4c: 17:0c:71:f7:47:e7:86:b7:3d:82:6e:e6:32:c3:08:15:7a:5d: a7:ec:74:dd:c0:cf:e7:03:4f:a8:7c:74:76:6b:3f:e4:40:e1: ef:b8:6c:45:19:50:c1:be:3f:67:65:87:cf:1f:08:7a:45:c1: 13:69:c5:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+eNgmYhna52Ly937K2NgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzM4NTNkYTcwY2RlYTBkYmE0NjQxNGI2YjBlNmQxZjE3 MTZlNzQwHhcNMjYwMTI3MDgwMTMwWhcNMjYwMTI4MDgwMTMwWjAzMTEwLwYDVQQD EygyNTc1MDI3NzVkMGRkYjAyOWU1ODdlMWJhZmI4MWRkNGEzYmEyMzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQgM/RR7GGg7quuHQ0pcLFy8FrzE Ammi1PXVNiFSzTAViDwnfBU12LYbvalU9wFDxbm5s10xBBDBc5QY6E+RVToTebpC L3D89Bux6LB1+SSHjyp96mT4oyNO4E+p1OTjd+L6d76ULO0VjxFyjMIQYDiffYNr 8lKaf8K/8pM4YlJqMhpccOJiiRvHVpZI3AwvE4mSGHdJ5J3HOBGR71i8AHq6qusb OyZF0xAyHdLKXLWgxls3X/JWOeFJgDUhW0MbpjddwRh2VCbp964AnSQAGVJmwwAP 2juWBQOeXNM/lUiRKx993vXa/4YiVBiL78QUGJCWGI6uIn1zSAOdCjKQHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCV1AnddDdsCnlh+G6+4HdSjuiNpMB8GA1UdIwQY MBaAFGzDhT2nDN6g26RkFLaw5tHxcW50MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1PRlBhY00zcURicEdRVXRyRG0wZkZ4Ym5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9kMTI4ZGUtZDYxZC00ZjAzLTkxMzQt MDQ2YTY4YWI0YzhkLzEvYk1PRlBhY00zcURicEdRVXRyRG0wZkZ4Ym5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9kMTI4ZGUtZDYxZC00ZjAzLTkxMzQtMDQ2YTY4YWI0Yzhk LzEvYk1PRlBhY00zcURicEdRVXRyRG0wZkZ4Ym5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAchoG2Z8e oxo3C7IB+UwP6xPMi5L9QFwIrvC1H4D8bPGUDC05x6Ky8v7LQgpqYuCdehuyag82 R0KiPSjyc7aJSkrZhZ8VmY9VyTKYeQadBWs1BRdGW07j+9rJrqvJAfw5aC5Diue1 vEroyeWNYJ92NkAr22B0evMPL3MdLkWJlVOR5awwZ+cv3Gu+zJdfxIYsg/Q65ErV bmJaYcjNooH57Liy7fr/j/I9bjRdb/2/jCSxn0JC+xnIJIGZFDy+0g/tAembJe5M Fwxx90fnhrc9gm7mMsMIFXpdp+x03cDP5wNPqHx0dms/5EDh77hsRRlQwb4/Z2WH zx8IekXBE2nF+A== -----END CERTIFICATE-----Generated at Tue Jan 27 12:44:24 2026 by rpki-client