This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft File: BjtmD1abVGtTDsbeabMIs2k-f3Q.mft (raw, json) Hash identifier: eOKWAV3P/AJo/EUtJahYIFrSAvtSlKRWs+cYCSFKhmw= Subject key identifier: 36:FA:5E:F5:CB:F4:D2:07:36:B0:24:E8:88:2F:9E:59:D3:D5:AC:ED Authority key identifier: 06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74 Certificate issuer: /CN=063b660f569b546b530ec6de69b308b3693e7f74 Certificate serial: 019BFB40C716E741DF084D456DA063210794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft Manifest number: 1781 Signing time: Mon 26 Jan 2026 17:01:25 +0000 Manifest this update: Mon 26 Jan 2026 17:01:25 +0000 Manifest next update: Tue 27 Jan 2026 17:01:25 +0000 Files and hashes: 1: BjtmD1abVGtTDsbeabMIs2k-f3Q.crl (hash: wr7kEsC1kAPmHt6UkFGnaE9plZC3yGCIogoOhODC1JQ=) 2: xhF6836ZAZ1v6FMBtDsruSd1XhM.roa (hash: CMajZTVB+UvtUZM05scLZACQyLK6q2OoOtMJquT+J6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:40:c7:16:e7:41:df:08:4d:45:6d:a0:63:21:07:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=063b660f569b546b530ec6de69b308b3693e7f74 Validity Not Before: Jan 26 17:01:25 2026 GMT Not After : Jan 27 17:01:25 2026 GMT Subject: CN=36fa5ef5cbf4d20736b024e8882f9e59d3d5aced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:3c:4d:65:3c:e4:8b:b5:0c:8e:5b:51:f6:e4: 23:6a:46:a7:96:f1:ff:28:db:f4:cc:4f:3a:6b:2f: 07:55:4a:31:42:ad:68:c3:fd:94:85:f3:8d:46:c3: e4:98:a5:e4:18:4c:e2:85:a7:5c:0d:32:8b:7a:05: cc:1d:ca:17:f7:69:5d:56:54:d5:8e:95:3a:dd:6b: a5:1a:21:43:ca:2c:41:97:a4:b7:aa:8a:f6:62:a6: 4b:ac:c3:b4:4b:b4:52:2a:7d:fd:86:72:24:c2:c8: 8c:5a:21:20:20:37:d1:90:1f:3a:82:8f:64:9d:b3: be:90:99:bf:99:c2:44:b9:ff:29:f9:c4:af:d7:61: c0:fa:6a:da:e0:7a:d1:9e:ba:3e:2f:82:9d:6d:e5: 6c:f3:20:35:2e:6b:fa:e7:46:d7:02:85:e9:b2:f7: 1a:f6:f2:07:d8:73:bd:3d:c8:cf:52:00:72:97:ea: 8c:b7:f9:38:00:74:35:5d:1b:f7:f5:e9:5f:9d:3c: f1:e4:ad:de:d3:34:94:4e:91:71:80:cc:f7:09:76: c6:34:e7:5f:18:ff:c1:b3:be:5b:91:0b:12:de:be: 5b:f7:00:83:b8:7b:55:31:e7:05:a7:9a:b1:dc:ab: e9:a5:74:4b:83:60:46:60:9b:81:45:8c:01:3f:02: 12:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FA:5E:F5:CB:F4:D2:07:36:B0:24:E8:88:2F:9E:59:D3:D5:AC:ED X509v3 Authority Key Identifier: keyid:06:3B:66:0F:56:9B:54:6B:53:0E:C6:DE:69:B3:08:B3:69:3E:7F:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjtmD1abVGtTDsbeabMIs2k-f3Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/92ba5b-c735-4a34-8534-bc25ae6eb13c/1/BjtmD1abVGtTDsbeabMIs2k-f3Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:bc:31:b2:18:9c:5f:7e:36:1b:fa:e8:4e:46:e2:07:07:cc: 0e:51:2f:b2:a3:12:a5:fc:8e:36:da:d9:20:da:e5:9f:ec:99: fd:16:58:01:05:cc:11:2b:76:38:88:bf:4b:66:db:8d:9c:4c: af:46:61:ec:0e:dc:cb:a9:a8:15:eb:fa:c8:f0:e4:83:4d:42: 3e:f0:9c:74:76:f4:50:24:f0:01:14:12:2c:e7:5f:30:df:b4: 1f:9b:64:9a:db:c9:78:ba:44:19:4b:24:1f:06:0b:ac:9f:c4: 6c:1b:6f:13:e9:12:42:7b:93:4f:3b:71:e5:15:28:80:aa:f9: 49:68:83:9a:fb:a2:ce:be:d6:51:03:fc:8f:37:cf:bc:f7:26: fe:10:ff:43:af:ea:8d:56:f3:4b:e1:1b:f9:60:52:8e:b2:0d: 4a:d7:e0:fb:8a:37:54:3c:84:a0:77:81:96:5e:28:26:15:ce: 3f:0b:6e:bf:ff:fa:2a:fe:c7:0d:68:81:5a:18:d3:ee:8c:ff: 67:60:04:7b:06:fe:b2:5e:b3:7e:f7:27:58:0a:81:c1:72:f5: de:2a:8a:fb:a7:07:28:c8:71:c1:84:c0:27:ae:64:e4:7b:64: b6:3a:4c:8a:63:74:7e:76:c8:df:52:b1:60:f5:e8:56:65:b1: 60:e1:c9:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7QMcW50HfCE1FbaBjIQeUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2M2I2NjBmNTY5YjU0NmI1MzBlYzZkZTY5YjMwOGIzNjkz ZTdmNzQwHhcNMjYwMTI2MTcwMTI1WhcNMjYwMTI3MTcwMTI1WjAzMTEwLwYDVQQD EygzNmZhNWVmNWNiZjRkMjA3MzZiMDI0ZTg4ODJmOWU1OWQzZDVhY2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TxNZTzki7UMjltR9uQjakanlvH/ KNv0zE86ay8HVUoxQq1ow/2UhfONRsPkmKXkGEzihadcDTKLegXMHcoX92ldVlTV jpU63WulGiFDyixBl6S3qor2YqZLrMO0S7RSKn39hnIkwsiMWiEgIDfRkB86go9k nbO+kJm/mcJEuf8p+cSv12HA+mra4HrRnro+L4KdbeVs8yA1Lmv650bXAoXpsvca 9vIH2HO9PcjPUgByl+qMt/k4AHQ1XRv39elfnTzx5K3e0zSUTpFxgMz3CXbGNOdf GP/Bs75bkQsS3r5b9wCDuHtVMecFp5qx3KvppXRLg2BGYJuBRYwBPwISiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb6XvXL9NIHNrAk6IgvnlnT1aztMB8GA1UdIwQY MBaAFAY7Zg9Wm1RrUw7G3mmzCLNpPn90MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQt YmMyNWFlNmViMTNjLzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85MmJhNWItYzczNS00YTM0LTg1MzQtYmMyNWFlNmViMTNj LzEvQmp0bUQxYWJWR3RURHNiZWFiTUlzMmstZjNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrwxshic X342G/roTkbiBwfMDlEvsqMSpfyONtrZINrln+yZ/RZYAQXMESt2OIi/S2bbjZxM r0Zh7A7cy6moFev6yPDkg01CPvCcdHb0UCTwARQSLOdfMN+0H5tkmtvJeLpEGUsk HwYLrJ/EbBtvE+kSQnuTTztx5RUogKr5SWiDmvuizr7WUQP8jzfPvPcm/hD/Q6/q jVbzS+Eb+WBSjrINStfg+4o3VDyEoHeBll4oJhXOPwtuv//6Kv7HDWiBWhjT7oz/ Z2AEewb+sl6zfvcnWAqBwXL13iqK+6cHKMhxwYTAJ65k5HtktjpMimN0fnbI31Kx YPXoVmWxYOHJ7g== -----END CERTIFICATE-----Generated at Tue Jan 27 00:10:02 2026 by rpki-client