This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft File: bacdwHnJ2MLSAprWQOejv5f03O0.mft (raw, json) Hash identifier: t4oEpcoF7LR5fIPjp3ct8O4VD5+JUG0iRDRDCMw777Y= Subject key identifier: D4:22:98:38:BD:6F:C0:DE:2B:EA:5B:56:0B:0C:A0:81:8A:43:1C:F3 Authority key identifier: 6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED Certificate issuer: /CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced Certificate serial: 019C1CB9AE4516CA4B9813DA8A7C2BDE1148 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft Manifest number: 4D Signing time: Mon 02 Feb 2026 05:00:56 +0000 Manifest this update: Mon 02 Feb 2026 05:00:56 +0000 Manifest next update: Tue 03 Feb 2026 05:00:56 +0000 Files and hashes: 1: bacdwHnJ2MLSAprWQOejv5f03O0.crl (hash: zZvkyj1Tli2uV+6e9v1nfVReLn+Viq8iQPddEyigIZ8=) 2: yrzn6Y2tA0RegmyWuqXrLhnCjFk.asa (hash: CO4rC9oL7L+NGPB2CWOrIlYqlgFoVTfF6SHqEbozoRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:b9:ae:45:16:ca:4b:98:13:da:8a:7c:2b:de:11:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6da71dc079c9d8c2d2029ad640e7a3bf97f4dced Validity Not Before: Feb 2 05:00:56 2026 GMT Not After : Feb 3 05:00:56 2026 GMT Subject: CN=d4229838bd6fc0de2bea5b560b0ca0818a431cf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:49:37:3c:2b:1b:f0:8f:7a:6c:3e:b4:02:b1: 19:2f:f4:7e:55:49:5c:58:df:67:ef:e4:a2:c7:22: 72:ee:a1:70:e7:eb:cc:ae:7a:20:6c:18:31:cc:5e: 3c:80:e9:65:2e:92:ad:18:e6:3d:ce:ad:45:6b:08: 6d:c5:b8:93:ec:ca:d6:d4:65:58:31:c5:5d:d1:b2: 44:3b:90:a3:bb:02:33:cf:a0:52:f9:05:8c:9c:f4: 44:77:48:9d:06:4b:89:8a:93:6c:1e:c7:a1:97:18: ee:1f:a7:60:3e:dd:a8:88:2a:62:53:58:b7:27:59: ee:7e:31:45:33:9f:61:ed:09:54:f6:08:b1:b3:71: 7d:72:91:49:03:f4:22:e2:4c:03:11:fd:b6:92:4f: 4d:ad:0d:85:04:b7:30:54:31:73:bb:40:3a:27:3d: 50:5a:ed:c2:8b:b6:85:2c:17:1c:78:44:14:e6:ee: c4:e5:23:2c:5b:c3:ed:39:49:a4:45:46:2c:a5:3c: c8:a1:5d:a9:ea:2e:17:f1:fb:af:d7:1d:53:65:5f: e6:b5:82:01:b3:cc:50:6a:fa:ff:c8:0e:d3:be:15: b8:93:30:1f:41:bf:f8:b6:d4:51:e5:ba:5c:7e:b9: a5:c0:92:7f:92:db:1b:e4:b6:b0:ed:b2:30:8e:f5: 1d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:22:98:38:BD:6F:C0:DE:2B:EA:5B:56:0B:0C:A0:81:8A:43:1C:F3 X509v3 Authority Key Identifier: keyid:6D:A7:1D:C0:79:C9:D8:C2:D2:02:9A:D6:40:E7:A3:BF:97:F4:DC:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bacdwHnJ2MLSAprWQOejv5f03O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5983ae-f43f-4cf7-9352-60857f688cf7/1/bacdwHnJ2MLSAprWQOejv5f03O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7c:b3:00:2f:92:72:0b:6a:bc:b1:cd:0b:4d:c0:51:a4:89: 61:b6:23:15:e3:14:c2:cd:c0:84:6e:dc:6d:30:07:e4:dc:ff: 44:1e:d8:3d:22:01:91:f0:6c:f7:68:ed:5a:f1:cb:a8:f8:d2: 05:67:fd:bf:16:cc:34:c7:31:54:07:6e:72:7b:fe:62:0f:b6: ca:4d:26:5d:09:b0:b8:ff:26:35:3b:eb:61:0b:8c:cd:7b:2b: a2:40:ab:94:e9:32:b4:cd:96:52:5e:c9:be:76:dc:02:d1:67: 1a:59:72:66:6f:de:cd:ba:8f:60:d8:ac:6e:26:a5:ff:9b:48: 2f:ee:29:00:5a:0c:37:cb:7d:1e:08:2b:c1:8b:28:2c:46:17: f1:30:45:48:14:b3:63:21:1e:e2:b7:fe:40:fd:6b:9c:85:58: d4:bd:0e:a9:6b:47:31:e0:95:5c:da:66:fd:c2:08:02:18:5f: 24:2b:95:92:72:8c:3b:6e:f9:6a:10:1a:d9:6b:13:d8:dd:e1: 4d:e9:40:d8:6b:ef:ab:09:35:a0:f3:18:66:25:23:9b:c0:4c: a9:65:2f:24:41:d9:63:1a:3b:41:0a:d3:80:9b:d3:10:93:15: f4:13:d0:f1:d9:48:b0:18:0d:49:c1:24:f5:59:d9:98:c8:2b: 42:f0:c3:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcua5FFspLmBPainwr3hFIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYTcxZGMwNzljOWQ4YzJkMjAyOWFkNjQwZTdhM2JmOTdm NGRjZWQwHhcNMjYwMjAyMDUwMDU2WhcNMjYwMjAzMDUwMDU2WjAzMTEwLwYDVQQD EyhkNDIyOTgzOGJkNmZjMGRlMmJlYTViNTYwYjBjYTA4MThhNDMxY2YzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukk3PCsb8I96bD60ArEZL/R+VUlc WN9n7+SixyJy7qFw5+vMrnogbBgxzF48gOllLpKtGOY9zq1FawhtxbiT7MrW1GVY McVd0bJEO5CjuwIzz6BS+QWMnPREd0idBkuJipNsHsehlxjuH6dgPt2oiCpiU1i3 J1nufjFFM59h7QlU9gixs3F9cpFJA/Qi4kwDEf22kk9NrQ2FBLcwVDFzu0A6Jz1Q Wu3Ci7aFLBcceEQU5u7E5SMsW8PtOUmkRUYspTzIoV2p6i4X8fuv1x1TZV/mtYIB s8xQavr/yA7TvhW4kzAfQb/4ttRR5bpcfrmlwJJ/ktsb5Law7bIwjvUddQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQimDi9b8DeK+pbVgsMoIGKQxzzMB8GA1UdIwQY MBaAFG2nHcB5ydjC0gKa1kDno7+X9NztMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmFjZHdIbkoyTUxTQXByV1FPZWp2NWYwM08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81OTgzYWUtZjQzZi00Y2Y3LTkzNTIt NjA4NTdmNjg4Y2Y3LzEvYmFjZHdIbkoyTUxTQXByV1FPZWp2NWYwM08wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi81OTgzYWUtZjQzZi00Y2Y3LTkzNTItNjA4NTdmNjg4Y2Y3 LzEvYmFjZHdIbkoyTUxTQXByV1FPZWp2NWYwM08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXyzAC+S cgtqvLHNC03AUaSJYbYjFeMUws3AhG7cbTAH5Nz/RB7YPSIBkfBs92jtWvHLqPjS BWf9vxbMNMcxVAducnv+Yg+2yk0mXQmwuP8mNTvrYQuMzXsrokCrlOkytM2WUl7J vnbcAtFnGllyZm/ezbqPYNisbial/5tIL+4pAFoMN8t9HggrwYsoLEYX8TBFSBSz YyEe4rf+QP1rnIVY1L0OqWtHMeCVXNpm/cIIAhhfJCuVknKMO275ahAa2WsT2N3h TelA2Gvvqwk1oPMYZiUjm8BMqWUvJEHZYxo7QQrTgJvTEJMV9BPQ8dlIsBgNScEk 9VnZmMgrQvDDBA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:13 2026 by rpki-client