This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft File: RRblOzLKp2GQbw_N6idbcg4XQsg.mft (raw, json) Hash identifier: 3PbqVsmZT0zdHJ7ySQgGyKjp3XffpxzyugUzhi/o1WI= Subject key identifier: 6A:F6:8B:FD:ED:89:49:17:53:53:9E:BB:03:83:72:1F:74:DE:F7:27 Authority key identifier: 45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8 Certificate issuer: /CN=4516e53b32caa761906f0fcdea275b720e1742c8 Certificate serial: 019C1F4D4B0EE9665346DA8DB024D29DCD5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft Manifest number: 1793 Signing time: Mon 02 Feb 2026 17:01:25 +0000 Manifest this update: Mon 02 Feb 2026 17:01:25 +0000 Manifest next update: Tue 03 Feb 2026 17:01:25 +0000 Files and hashes: 1: KB8F56npxsv2SiBMv4PjE2Sfeg0.roa (hash: i1MaNL7YKj5RBSF1ihDVOZicIUuCwbZMxtDhOGtPRCY=) 2: RRblOzLKp2GQbw_N6idbcg4XQsg.crl (hash: KzLte6v7V1AZbirCicw6mSOcjXWv1PpwdSRF+sfXWYU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 17:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:4d:4b:0e:e9:66:53:46:da:8d:b0:24:d2:9d:cd:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4516e53b32caa761906f0fcdea275b720e1742c8 Validity Not Before: Feb 2 17:01:25 2026 GMT Not After : Feb 3 17:01:25 2026 GMT Subject: CN=6af68bfded89491753539ebb0383721f74def727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:51:7f:3c:68:aa:a5:81:13:06:15:46:42:51: e8:87:dc:62:25:36:16:be:04:42:a8:2a:01:04:89: b6:a6:45:0e:6d:8e:90:c4:ab:de:11:ab:3c:8a:b1: 88:e6:3f:0a:b5:97:59:eb:0d:60:d7:5b:b5:71:df: 81:ef:3f:73:c2:1a:1d:a4:cf:03:93:f7:5c:75:85: fd:2a:54:be:6d:4f:2a:e9:8e:cb:6e:7e:ac:52:a0: c1:03:45:a6:9e:b8:d6:fb:e9:98:7b:75:bb:06:4c: 0f:51:b1:f4:7c:36:5f:46:c5:c2:61:36:de:8a:06: 79:d3:f7:da:d0:d6:62:74:f2:7c:08:47:e4:95:26: 70:c1:81:00:59:00:34:aa:e3:f4:de:d5:4f:5f:cb: af:96:17:79:22:7b:db:19:58:a7:91:0c:3b:75:fe: 08:f3:e8:dc:99:42:c5:3c:e5:b8:99:d6:d6:09:f1: ac:05:c7:84:45:f4:c5:52:38:c5:bc:b0:11:1a:8c: c3:9e:94:6e:f6:c2:f8:72:b8:36:de:6f:62:13:2a: 05:3c:0b:d2:d7:12:9d:1e:e8:cf:12:80:cb:63:15: 90:97:9c:70:9f:02:e6:4e:28:d5:fa:34:8f:e1:93: 99:67:87:b7:ea:92:5e:79:63:86:2d:71:ce:66:65: 22:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F6:8B:FD:ED:89:49:17:53:53:9E:BB:03:83:72:1F:74:DE:F7:27 X509v3 Authority Key Identifier: keyid:45:16:E5:3B:32:CA:A7:61:90:6F:0F:CD:EA:27:5B:72:0E:17:42:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRblOzLKp2GQbw_N6idbcg4XQsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/bf426a-3a8f-4252-a17f-ba02c960b8f4/1/RRblOzLKp2GQbw_N6idbcg4XQsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d3:49:ac:3b:3a:15:1d:e4:ac:49:1d:d1:1a:28:c1:77:a3: 71:48:15:64:bd:0b:ba:74:8b:05:12:35:bd:a6:c5:0c:9d:42: 76:39:86:9a:f3:dc:54:e5:2c:c5:a1:97:51:60:33:c9:74:cc: 93:6e:e4:fa:ac:6c:d5:36:e3:1c:73:28:cc:3a:ed:f9:cd:8f: c8:78:54:f5:8e:7b:8a:f8:b3:a6:43:d7:77:86:4e:b6:8d:cd: 01:b4:ae:c3:f8:9c:6b:22:c7:1e:79:0f:12:6c:d6:0f:6e:c0: d8:8e:a9:69:c4:a1:4f:f4:e4:1f:4a:f0:76:c6:54:ba:f1:a5: d8:f9:91:74:af:bb:d4:a4:f6:21:dd:71:f6:cd:e0:84:52:80: 8f:27:5f:c4:6f:07:a3:36:c8:c4:b8:02:22:35:02:0e:6e:bb: ad:3e:01:f6:fe:d6:77:8c:ed:cd:91:90:9f:d0:6e:3f:af:0e: 8b:09:35:a2:d0:8c:92:4e:14:0f:fe:8f:6f:60:1b:8d:15:0c: fe:28:a5:b2:c8:38:2e:ea:7e:14:ec:e4:d3:d7:57:81:dc:22: 6c:1c:61:84:d3:fc:3c:7d:46:e7:b6:51:3c:ee:d3:b4:4f:1c: 9d:f3:14:92:2d:79:b1:28:43:ed:4b:e9:f4:82:38:8b:0e:05: 85:62:64:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfTUsO6WZTRtqNsCTSnc1fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1MTZlNTNiMzJjYWE3NjE5MDZmMGZjZGVhMjc1YjcyMGUx NzQyYzgwHhcNMjYwMjAyMTcwMTI1WhcNMjYwMjAzMTcwMTI1WjAzMTEwLwYDVQQD Eyg2YWY2OGJmZGVkODk0OTE3NTM1MzllYmIwMzgzNzIxZjc0ZGVmNzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlF/PGiqpYETBhVGQlHoh9xiJTYW vgRCqCoBBIm2pkUObY6QxKveEas8irGI5j8KtZdZ6w1g11u1cd+B7z9zwhodpM8D k/dcdYX9KlS+bU8q6Y7Lbn6sUqDBA0WmnrjW++mYe3W7BkwPUbH0fDZfRsXCYTbe igZ50/fa0NZidPJ8CEfklSZwwYEAWQA0quP03tVPX8uvlhd5InvbGVinkQw7df4I 8+jcmULFPOW4mdbWCfGsBceERfTFUjjFvLARGozDnpRu9sL4crg23m9iEyoFPAvS 1xKdHujPEoDLYxWQl5xwnwLmTijV+jSP4ZOZZ4e36pJeeWOGLXHOZmUiSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGr2i/3tiUkXU1OeuwODch903vcnMB8GA1UdIwQY MBaAFEUW5TsyyqdhkG8PzeonW3IOF0LIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2Yt YmEwMmM5NjBiOGY0LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9iZjQyNmEtM2E4Zi00MjUyLWExN2YtYmEwMmM5NjBiOGY0 LzEvUlJibE96TEtwMkdRYndfTjZpZGJjZzRYUXNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9NJrDs6 FR3krEkd0RoowXejcUgVZL0LunSLBRI1vabFDJ1CdjmGmvPcVOUsxaGXUWAzyXTM k27k+qxs1TbjHHMozDrt+c2PyHhU9Y57ivizpkPXd4ZOto3NAbSuw/icayLHHnkP EmzWD27A2I6pacShT/TkH0rwdsZUuvGl2PmRdK+71KT2Id1x9s3ghFKAjydfxG8H ozbIxLgCIjUCDm67rT4B9v7Wd4ztzZGQn9BuP68Oiwk1otCMkk4UD/6Pb2AbjRUM /iilssg4Lup+FOzk09dXgdwibBxhhNP8PH1G57ZRPO7TtE8cnfMUki15sShD7Uvp 9II4iw4FhWJkhQ== -----END CERTIFICATE-----Generated at Tue Feb 3 01:54:02 2026 by rpki-client