This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft File: BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft (raw, json) Hash identifier: vG5Mt8n4uneHDg5JoSFEZFHIE+EJyqlTvpWUWMpTFbc= Subject key identifier: B3:18:F3:1C:F1:2B:11:91:D5:D0:F3:8C:43:11:25:49:6F:C1:F2:4F Authority key identifier: BC:9E:09:28:61:14:A0:AB:AE:FC:F8:EC:49:E8:C5:FA:5E:78:48:4A Certificate issuer: /CN=bc9e09286114a0abaefcf8ec49e8c5fa5e78484a Certificate serial: 6D422EEE1C01380F872AF2EB0DF7FB844078EF07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ4JKGEUoKuu_PjsSejF-l54SEo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft Manifest number: 19 Signing time: Tue 27 Jan 2026 10:47:40 +0000 Manifest this update: Tue 27 Jan 2026 10:42:40 +0000 Manifest next update: Wed 28 Jan 2026 13:28:40 +0000 Files and hashes: 1: BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.crl (hash: GfRTQ10bKJPey7QGiFTr4UsxLHf9KVNCm+NSjkhqsPY=) 2: AS214749.asa (hash: RYlC9PQ+LoodhtgoIjxNb0wE9JuGdO7xtokex5vTzdE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.crl rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ4JKGEUoKuu_PjsSejF-l54SEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 13:28:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:42:2e:ee:1c:01:38:0f:87:2a:f2:eb:0d:f7:fb:84:40:78:ef:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9e09286114a0abaefcf8ec49e8c5fa5e78484a Validity Not Before: Jan 27 10:42:40 2026 GMT Not After : Jan 28 13:28:40 2026 GMT Subject: CN=B318F31CF12B1191D5D0F38C431125496FC1F24F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:75:99:92:70:97:15:76:bb:fa:0c:8c:43:aa: 52:1f:5b:79:af:5d:ba:5d:e4:0b:2e:26:5a:d0:d3: 6e:b7:24:ef:40:e9:c6:94:93:e9:3e:2e:e8:1b:d2: ff:48:96:1d:6f:b4:47:9e:b6:ce:17:4a:38:d3:62: 3c:a4:58:63:10:58:c6:3c:07:2d:75:fd:3a:8a:30: 16:01:52:0b:13:ea:d4:ef:ff:7b:02:a8:4a:74:14: 49:a8:33:76:e7:14:00:43:d2:b2:5e:7d:07:c8:c8: a0:88:86:d1:02:4a:a1:fc:92:45:2d:ce:8c:dd:25: 34:59:30:fe:d1:da:a1:75:12:8d:fd:b7:7f:93:7a: cf:f8:d0:1e:75:f7:b3:2e:aa:d0:86:c5:4e:ec:19: db:a2:6b:7e:2d:00:02:74:1f:df:a9:b3:89:1d:a3: de:59:7e:22:23:0d:96:44:ca:6e:37:f7:ec:28:76: d3:73:16:0b:62:1b:84:43:92:bb:6d:eb:d0:ae:18: bf:75:e0:c7:6a:c1:e5:92:46:51:ed:c0:e4:19:a2: 9d:28:e2:3f:56:ff:c8:63:d2:70:16:f1:5d:77:fe: 71:1a:74:62:2c:11:a1:14:6d:12:33:8b:c2:e1:5b: f8:4d:b5:dc:65:47:a9:f1:58:4e:62:99:61:7e:f0: c7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:18:F3:1C:F1:2B:11:91:D5:D0:F3:8C:43:11:25:49:6F:C1:F2:4F X509v3 Authority Key Identifier: keyid:BC:9E:09:28:61:14:A0:AB:AE:FC:F8:EC:49:E8:C5:FA:5E:78:48:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ4JKGEUoKuu_PjsSejF-l54SEo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/06feb79d-9a1d-4cf2-9747-ecb32e6c7851/0/BC9E09286114A0ABAEFCF8EC49E8C5FA5E78484A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:47:e4:85:0f:19:61:17:9e:a9:69:71:b9:08:c1:18:6e:6b: 46:cf:00:89:81:03:4b:7d:40:c5:05:24:25:b1:0e:51:02:4e: 04:d7:cf:8b:8f:a9:1e:d9:76:d4:95:72:6e:e5:36:d6:a5:39: 2a:2a:38:6a:60:cd:23:04:eb:09:e6:0c:a7:da:92:b8:cd:b5: 43:87:df:ea:ac:b8:6b:70:2f:94:db:8e:c4:2b:6a:58:db:40: 22:5c:0f:47:a8:28:74:b9:04:6f:12:16:b7:03:da:78:00:b8: 8a:40:6e:ec:bf:f8:15:83:06:f4:61:b9:0b:c5:7e:4f:db:d6: f8:1f:1f:d8:32:71:ab:b4:40:7f:0d:e5:07:88:6b:96:2c:b6: 6e:3b:3d:d7:97:3f:dc:33:2d:d1:1f:81:cf:4f:94:97:fb:71: 64:c3:12:2e:0b:85:3f:c6:89:99:9a:57:f3:79:e8:5d:90:27: e6:02:0e:e8:7f:9a:c3:e5:7c:a6:a1:2f:f0:1b:3d:2e:90:4d: 92:51:19:e4:46:8a:fd:63:86:2e:4b:33:06:f9:f0:fe:98:88: 88:8c:e7:82:03:ff:78:24:45:31:a3:c9:b5:42:a9:e7:c8:32: 71:3c:9b:2a:b8:ce:2e:3f:60:4a:47:2d:22:22:a9:46:7d:08: 9d:0f:77:90 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbUIu7hwBOA+HKvLrDff7hEB47wcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmM5ZTA5Mjg2MTE0YTBhYmFlZmNmOGVjNDllOGM1ZmE1 ZTc4NDg0YTAeFw0yNjAxMjcxMDQyNDBaFw0yNjAxMjgxMzI4NDBaMDMxMTAvBgNV BAMTKEIzMThGMzFDRjEyQjExOTFENUQwRjM4QzQzMTEyNTQ5NkZDMUYyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVdZmScJcVdrv6DIxDqlIfW3mv Xbpd5AsuJlrQ0263JO9A6caUk+k+Lugb0v9Ilh1vtEeets4XSjjTYjykWGMQWMY8 By11/TqKMBYBUgsT6tTv/3sCqEp0FEmoM3bnFABD0rJefQfIyKCIhtECSqH8kkUt zozdJTRZMP7R2qF1Eo39t3+Tes/40B5197MuqtCGxU7sGduia34tAAJ0H9+ps4kd o95ZfiIjDZZEym439+wodtNzFgtiG4RDkrtt69CuGL914MdqweWSRlHtwOQZop0o 4j9W/8hj0nAW8V13/nEadGIsEaEUbRIzi8LhW/hNtdxlR6nxWE5imWF+8McbAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsxjzHPErEZHV0POMQxElSW/B8k8wHwYDVR0j BBgwFoAUvJ4JKGEUoKuu/PjsSejF+l54SEowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDZmZWI3OWQtOWExZC00Y2YyLTk3NDctZWNiMzJlNmM3 ODUxLzAvQkM5RTA5Mjg2MTE0QTBBQkFFRkNGOEVDNDlFOEM1RkE1RTc4NDg0QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZKNEpLR0VVb0t1dV9QanNTZWpGLWw1 NFNFby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wNmZlYjc5ZC05 YTFkLTRjZjItOTc0Ny1lY2IzMmU2Yzc4NTEvMC9CQzlFMDkyODYxMTRBMEFCQUVG Q0Y4RUM0OUU4QzVGQTVFNzg0ODRBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhEfkhQ8ZYReeqWlxuQjB GG5rRs8AiYEDS31AxQUkJbEOUQJOBNfPi4+pHtl21JVybuU21qU5Kio4amDNIwTr CeYMp9qSuM21Q4ff6qy4a3AvlNuOxCtqWNtAIlwPR6godLkEbxIWtwPaeAC4ikBu 7L/4FYMG9GG5C8V+T9vW+B8f2DJxq7RAfw3lB4hrliy2bjs915c/3DMt0R+Bz0+U l/txZMMSLguFP8aJmZpX83noXZAn5gIO6H+aw+V8pqEv8Bs9LpBNklEZ5EaK/WOG LkszBvnw/piIiIznggP/eCRFMaPJtUKp58gycTybKrjOLj9gSkctIiKpRn0InQ93 kA== -----END CERTIFICATE-----Generated at Wed Jan 28 06:02:53 2026 by rpki-client