This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json) Hash identifier: QVj/tJymJ3jO31MxDtNxVdoGcSne4SjNRzgFF83es9M= Subject key identifier: 59:2E:BB:3B:30:57:D6:F1:7D:D5:E8:CA:6F:8E:39:6B:45:39:42:D4 Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a Certificate serial: 019BFC8AA68D62DF8BAB80CB4F777E4382C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft Manifest number: 095A Signing time: Mon 26 Jan 2026 23:01:43 +0000 Manifest this update: Mon 26 Jan 2026 23:01:43 +0000 Manifest next update: Tue 27 Jan 2026 23:01:43 +0000 Files and hashes: 1: 4CafLS7JDiRJ7i99aQcoyS601qY.roa (hash: mhWYHOFyle+qHEjhYXCosBkYHSITvo6K4qTAMUU7D8I=) 2: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: raQAny/B04QJAHDH9ZS9ikdmOrDM6wnMbYUP1W9B3R4=) 3: kBF7zKM32edjJgXjH4AjSwsgXFM.roa (hash: RthnvzKZHaRVcGw388WF7ImSuN7L155l1GY/DTSrS+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:a6:8d:62:df:8b:ab:80:cb:4f:77:7e:43:82:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a Validity Not Before: Jan 26 23:01:43 2026 GMT Not After : Jan 27 23:01:43 2026 GMT Subject: CN=592ebb3b3057d6f17dd5e8ca6f8e396b453942d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:07:dd:ea:8f:3f:c7:5f:1b:95:9f:73:78:d9: 5e:3e:79:e0:24:f5:d1:f3:32:b2:00:54:59:49:9f: 94:b5:41:13:3b:df:fb:7a:0a:d1:f8:5d:03:58:9b: 35:ea:4d:79:6d:75:df:28:0d:9b:ad:de:32:70:95: 07:45:08:09:82:b1:68:f6:4b:ad:f5:dd:62:54:39: 4a:1e:d8:c7:33:7f:9a:c5:24:b6:12:1f:5b:03:cf: 8f:e4:ef:67:6f:e2:4d:8c:e6:a7:c7:7b:94:5d:bf: 69:dc:af:d1:e1:0c:0f:33:97:81:48:10:bc:4d:cb: b5:a2:1a:fb:95:70:f0:82:13:3e:4d:bb:27:0d:85: 99:40:e5:74:20:65:0d:64:0b:80:8e:bd:a9:74:01: e7:da:24:aa:ca:80:81:5e:17:f4:89:e6:c9:77:ac: 96:1a:09:2c:67:ad:a4:36:23:8e:2f:92:d6:5a:c0: 24:4f:8a:0d:d0:97:c9:6b:37:a7:d8:99:49:2c:6d: e3:0b:c1:e1:ba:da:7e:29:f4:c8:57:c3:74:56:68: 24:63:e3:bc:4e:5f:37:ed:97:ba:18:42:f7:dd:96: 05:89:aa:34:a3:29:7e:80:9d:0b:39:b3:be:85:7b: b2:bc:71:95:3e:95:65:20:84:9f:b6:f4:5f:7d:2d: 77:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:2E:BB:3B:30:57:D6:F1:7D:D5:E8:CA:6F:8E:39:6B:45:39:42:D4 X509v3 Authority Key Identifier: keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ce:f2:a0:8c:6b:e7:26:5b:38:b6:4c:6d:ba:ff:a2:97:f3: 1a:30:2d:d6:5f:2b:58:e2:e7:94:07:fb:15:78:2d:d5:1d:db: e3:b0:94:ac:48:c3:cd:86:9e:42:4e:9b:2e:92:1f:34:96:90: 60:4b:08:24:83:41:63:f9:6e:ca:60:08:12:d2:26:21:9f:5e: 9b:d4:a4:fa:f7:ff:82:6e:8c:60:7b:43:1f:9c:5e:c1:5a:68: 1b:c2:38:8c:cf:c3:df:b7:0c:b6:bf:e3:2e:e7:bf:9b:19:c2: f4:9a:f6:a7:fe:d2:66:af:eb:e0:bf:d2:fd:63:3e:1e:89:8d: 07:86:eb:e2:10:6a:3e:b4:e6:2c:8c:bc:7b:99:60:a9:dc:64: ce:60:f5:3e:25:f9:f1:66:9f:73:6b:b9:e9:08:29:f3:79:00: 21:9d:40:81:7a:3b:ef:c4:01:e5:d5:1f:5e:39:cc:c8:c0:c1: 5e:44:5a:73:84:1a:32:5d:9e:14:f7:b4:a5:f5:ff:e2:15:5f: 23:20:f5:af:ea:55:5a:95:4b:5e:4e:bb:d4:78:ab:94:aa:14: 3f:2c:42:78:8a:bb:fa:ab:25:69:4d:54:d0:ca:38:7e:cd:ba: a6:fb:8d:9b:7d:ea:92:19:d3:e0:09:27:89:1a:d6:93:3e:dc: 87:f2:2d:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8iqaNYt+Lq4DLT3d+Q4LCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNTM3N2JiOWRhNDFjYWExMTc2ZjQzMjI2MmRjYWE5OWM0 NzZmOWEwHhcNMjYwMTI2MjMwMTQzWhcNMjYwMTI3MjMwMTQzWjAzMTEwLwYDVQQD Eyg1OTJlYmIzYjMwNTdkNmYxN2RkNWU4Y2E2ZjhlMzk2YjQ1Mzk0MmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAfd6o8/x18blZ9zeNlePnngJPXR 8zKyAFRZSZ+UtUETO9/7egrR+F0DWJs16k15bXXfKA2brd4ycJUHRQgJgrFo9kut 9d1iVDlKHtjHM3+axSS2Eh9bA8+P5O9nb+JNjOanx3uUXb9p3K/R4QwPM5eBSBC8 Tcu1ohr7lXDwghM+TbsnDYWZQOV0IGUNZAuAjr2pdAHn2iSqyoCBXhf0iebJd6yW GgksZ62kNiOOL5LWWsAkT4oN0JfJazen2JlJLG3jC8Hhutp+KfTIV8N0VmgkY+O8 Tl837Ze6GEL33ZYFiao0oyl+gJ0LObO+hXuyvHGVPpVlIISftvRffS131wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkuuzswV9bxfdXoym+OOWtFOULUMB8GA1UdIwQY MBaAFGxTd7udpByqEXb0MiYtyqmcR2+aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2It NmVkMTBlYmI5MzNmLzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS85YjE5YjUtNDNiYi00NzQ0LTkzY2ItNmVkMTBlYmI5MzNm LzEvYkZOM3U1MmtIS29SZHZReUppM0txWnhIYjVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs87yoIxr 5yZbOLZMbbr/opfzGjAt1l8rWOLnlAf7FXgt1R3b47CUrEjDzYaeQk6bLpIfNJaQ YEsIJINBY/luymAIEtImIZ9em9Sk+vf/gm6MYHtDH5xewVpoG8I4jM/D37cMtr/j Lue/mxnC9Jr2p/7SZq/r4L/S/WM+HomNB4br4hBqPrTmLIy8e5lgqdxkzmD1PiX5 8Wafc2u56Qgp83kAIZ1AgXo778QB5dUfXjnMyMDBXkRac4QaMl2eFPe0pfX/4hVf IyD1r+pVWpVLXk671HirlKoUPyxCeIq7+qslaU1U0Mo4fs26pvuNm33qkhnT4Akn iRrWkz7ch/ItSQ== -----END CERTIFICATE-----Generated at Tue Jan 27 02:16:18 2026 by rpki-client