This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft File: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json) Hash identifier: XM0VYx7p4IppmV9LEZWufevacU8CarHr46P5rSi9Los= Subject key identifier: E2:66:AC:F5:3D:20:68:9B:A5:03:F1:85:95:FF:D6:D6:B8:CB:CA:4E Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96 Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396 Certificate serial: 019BD9FE3015F7F6FCB5D289F191F1891541 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft Manifest number: 17ED Signing time: Tue 20 Jan 2026 06:01:12 +0000 Manifest this update: Tue 20 Jan 2026 06:01:12 +0000 Manifest next update: Wed 21 Jan 2026 06:01:12 +0000 Files and hashes: 1: 1-sLM79fhgln3kKtmAVDWOo1kwmw.roa (hash: EUHr6hsfI8WuHLl/CT9f9Qt7naBdoIdHB1PmYGEqxpI=) 2: QlKF7TkGhe65CsAL6DFoslTMuac.roa (hash: cVjDRTfgLDonetzUTDUHdR576qL3SOFEB4K/eVKenvg=) 3: R-Ms9tnwVFr5zGPdMpveWYmvzTU.roa (hash: 4hVn6BmRDmF60zXMMdHkc2jChJsAngJEvYhtXGC9Vjo=) 4: ZK9ALarqOpzm0i2rpLZ-rHOMzdo.roa (hash: RllCIZ6AldL0IOvShUd1+ZNf+viS99vPh52YLrvbtJU=) 5: ZmcfgQVw9WznPpWT9yLghomma18.roa (hash: dwEz5IwUCOta4WNqfA1M1PPK2wh9BaQxA/M28+Mkwpk=) 6: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: wPWONQjVzeaVbktxgOXKgKtPF/1oyII+xL3RmQ5hXWg=) 7: ks2_IkZaAakd1-3jQOWLy85dDy8.roa (hash: mLEy/InkNukmfeS2zm1mvXpvR+u6dmdc0Mw1w4KWFN4=) 8: vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa (hash: TJZuXEOOt0r/V9EaRl+qnNfFa6UZgYtOnc2ci1AuANA=) 9: yO-faN1p6CDhjtBsMnJFSamd0b4.roa (hash: f5cjUT10BBqhpOr6X0AO88BjDl80sXjlHTe7MTa/7YQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d9:fe:30:15:f7:f6:fc:b5:d2:89:f1:91:f1:89:15:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396 Validity Not Before: Jan 20 06:01:12 2026 GMT Not After : Jan 21 06:01:12 2026 GMT Subject: CN=e266acf53d20689ba503f18595ffd6d6b8cbca4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1e:af:ec:28:8d:41:6e:23:33:a1:bc:24:4a: e9:fc:0b:a6:5e:f1:ef:54:b3:5e:f8:16:0b:75:37: af:17:50:af:78:41:4a:09:55:74:d9:86:28:34:f8: c3:4c:bf:43:27:03:eb:59:ae:dc:00:64:c6:43:bb: 99:15:5f:ae:a3:12:36:3a:a4:88:f0:bd:69:fa:15: 40:97:45:64:6e:a6:30:65:6f:47:c0:2a:0c:6c:91: 54:d0:76:21:28:05:04:af:e8:da:8a:28:07:f4:ac: bb:87:00:1c:2b:67:e3:6c:9c:89:54:e9:bc:65:7a: 9d:09:c5:a8:f9:5c:12:f3:9d:07:7b:7d:41:94:1c: 4c:46:7a:e7:05:6d:59:8d:a0:dc:09:d8:2f:03:2b: 2b:fb:75:fc:52:db:e3:a7:05:99:4d:8f:38:c0:2c: 80:24:2e:22:5d:90:06:77:b9:7c:87:f8:f1:72:1c: 0a:4b:48:a6:44:d9:bf:be:6f:52:ec:3f:ac:06:a7: 86:61:00:24:05:63:ef:a0:03:92:32:27:b1:a9:39: 32:8e:d9:fc:1e:8b:7c:2e:8d:42:52:84:5e:64:db: d4:aa:59:0b:f5:e0:55:d9:e4:32:6b:6b:95:84:28: 56:55:c4:39:05:04:07:bd:cd:e7:45:d9:8f:0f:af: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:66:AC:F5:3D:20:68:9B:A5:03:F1:85:95:FF:D6:D6:B8:CB:CA:4E X509v3 Authority Key Identifier: keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ab:2e:45:a7:23:3d:b9:c8:e2:9b:6f:df:2e:e2:a7:cf:3e: 15:e8:a6:a1:5f:a8:59:36:af:f7:9b:5d:11:e9:e4:78:b7:a1: 3b:1d:2a:d6:35:5c:63:f5:f6:91:b9:bc:74:1f:46:2e:61:17: e9:8c:06:ec:27:33:c7:30:47:96:e7:84:8a:c9:eb:b8:3c:af: 40:e3:dc:7a:98:c9:b1:91:d8:a5:6c:bd:4a:53:29:84:81:39: 10:63:3b:89:d1:5b:6f:26:4c:a9:e2:04:de:69:6f:13:b9:5a: 59:3b:7e:32:c4:e7:4a:07:db:be:2b:86:a5:4c:16:ab:b2:76: f2:a2:ec:22:97:b9:7e:04:c8:15:23:84:c0:8e:ba:86:da:41: 2c:dc:c8:e1:ed:82:ca:82:a0:f2:68:79:17:3e:7c:ff:1e:c1: 1c:e8:15:05:2d:75:b6:0a:b1:29:44:53:be:9b:dc:29:93:73: d0:e0:1a:3f:2a:6e:ad:37:6b:2c:29:ea:c3:97:9d:9b:2d:c6: 4e:85:e6:3a:3f:55:d9:cf:73:21:c8:05:fa:0a:26:ee:ba:0a: 83:04:81:df:6d:40:e9:8d:62:1d:e7:2e:14:4f:0b:d7:d0:cf: 7e:3d:eb:a7:61:6e:f6:b4:d2:e6:01:ee:87:17:cf:b3:f4:b2: 68:ae:e3:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvZ/jAV9/b8tdKJ8ZHxiRVBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDY5ZTE5ZTEyYzEwNDAwNGU4YjRiNzVmOGE3Nzg5Yjdl MTEzOTYwHhcNMjYwMTIwMDYwMTEyWhcNMjYwMTIxMDYwMTEyWjAzMTEwLwYDVQQD EyhlMjY2YWNmNTNkMjA2ODliYTUwM2YxODU5NWZmZDZkNmI4Y2JjYTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR6v7CiNQW4jM6G8JErp/AumXvHv VLNe+BYLdTevF1CveEFKCVV02YYoNPjDTL9DJwPrWa7cAGTGQ7uZFV+uoxI2OqSI 8L1p+hVAl0VkbqYwZW9HwCoMbJFU0HYhKAUEr+jaiigH9Ky7hwAcK2fjbJyJVOm8 ZXqdCcWo+VwS850He31BlBxMRnrnBW1ZjaDcCdgvAysr+3X8UtvjpwWZTY84wCyA JC4iXZAGd7l8h/jxchwKS0imRNm/vm9S7D+sBqeGYQAkBWPvoAOSMiexqTkyjtn8 Hot8Lo1CUoReZNvUqlkL9eBV2eQya2uVhChWVcQ5BQQHvc3nRdmPD6/6fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJmrPU9IGibpQPxhZX/1ta4y8pOMB8GA1UdIwQY MBaAFG0GnhnhLBBABOi0t1+Kd4m34ROWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmIt N2JmZjI5NmM2YjAyLzEvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9jZjY0ZjYtMDc4OS00M2UzLWJkNmItN2JmZjI5NmM2YjAy LzEvYlFhZUdlRXNFRUFFNkxTM1g0cDNpYmZoRTVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaasuRacj PbnI4ptv3y7ip88+FeimoV+oWTav95tdEenkeLehOx0q1jVcY/X2kbm8dB9GLmEX 6YwG7CczxzBHlueEisnruDyvQOPcepjJsZHYpWy9SlMphIE5EGM7idFbbyZMqeIE 3mlvE7laWTt+MsTnSgfbviuGpUwWq7J28qLsIpe5fgTIFSOEwI66htpBLNzI4e2C yoKg8mh5Fz58/x7BHOgVBS11tgqxKURTvpvcKZNz0OAaPypurTdrLCnqw5edmy3G ToXmOj9V2c9zIcgF+gom7roKgwSB321A6Y1iHecuFE8L19DPfj3rp2Fu9rTS5gHu hxfPs/SyaK7jcw== -----END CERTIFICATE-----Generated at Tue Jan 20 09:26:35 2026 by rpki-client