This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft File: bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json) Hash identifier: Tn1OWKEykweFJUKCDtTKxrOd5S86cXnIT7OwKK3SCLY= Subject key identifier: 51:69:B4:5F:4D:44:56:CE:48:25:93:F6:4B:66:0B:77:49:E5:18:F7 Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8 Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8 Certificate serial: 019B7937402FF72CC241901AF9F8EEAA60BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft Manifest number: 07CE Signing time: Thu 01 Jan 2026 11:00:22 +0000 Manifest this update: Thu 01 Jan 2026 11:00:22 +0000 Manifest next update: Fri 02 Jan 2026 11:00:22 +0000 Files and hashes: 1: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: M0GNvs+O9FMb6kBDqjuzORnoW21oADw1v47gcqoi7Tg=) 2: h0CiyPqTT3nB3mru9Rx5ThXMJsc.roa (hash: gn5UUlC6bwE9RLEUWaV0t2xvepay+0W+QHAMC8Fs/OE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 09:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:37:40:2f:f7:2c:c2:41:90:1a:f9:f8:ee:aa:60:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8 Validity Not Before: Jan 1 11:00:22 2026 GMT Not After : Jan 2 11:00:22 2026 GMT Subject: CN=5169b45f4d4456ce482593f64b660b7749e518f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b3:d1:cb:a3:c1:47:b6:57:d2:8f:bf:1c:66: 8c:b4:1b:47:74:c0:43:21:55:c3:a4:a3:70:9c:9d: 91:6d:5b:42:2a:1c:7c:4b:3f:45:34:e2:26:a3:2a: 1c:2a:8b:89:f3:ac:3e:1a:5b:c8:52:a2:71:57:1c: 76:6e:b0:43:d3:08:01:b0:ce:8c:c1:3c:c3:88:e4: da:41:d6:c8:f8:b4:29:f7:ba:1f:27:64:f8:5d:00: ab:50:ac:88:51:e0:03:42:6e:86:3e:28:f5:91:1f: f2:08:c2:71:c6:e6:54:f5:d7:cb:a5:8f:2b:57:d7: c4:0d:f1:86:3e:b4:fe:4b:ab:c0:b5:af:c9:e7:9e: c7:75:d0:c0:e4:e6:34:f3:f1:c0:95:f2:62:80:00: 89:42:13:2a:be:5a:72:c3:63:1c:28:05:7e:6b:65: 9a:5c:01:d4:bd:96:ba:4d:45:95:c2:45:0c:21:70: d7:77:68:14:85:10:6a:c4:21:4b:11:eb:1b:b5:16: 81:7d:c9:77:7e:ae:3a:f9:a1:33:64:33:eb:ec:69: 65:2b:3e:1e:13:84:0e:28:e5:71:84:51:f2:fb:16: 26:da:c9:f1:27:de:32:34:31:f5:d9:a2:da:f9:d4: b0:14:a6:3a:9a:e8:6b:0e:4d:76:5a:0a:20:fb:bc: 7a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:69:B4:5F:4D:44:56:CE:48:25:93:F6:4B:66:0B:77:49:E5:18:F7 X509v3 Authority Key Identifier: keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:12:d9:e1:ef:f5:50:e0:ed:26:8b:1f:fb:51:00:c1:eb:23: 15:6a:2c:c7:35:fa:e9:e7:90:1a:c6:87:6d:16:04:4d:a0:44: 39:77:59:1b:78:08:a8:71:da:af:4b:aa:f6:de:f7:7f:e5:9a: 0f:6f:81:4d:a3:1b:77:7d:57:00:a5:7f:1d:fd:b1:5d:e3:1c: f7:e9:27:17:a4:03:18:c5:9e:9a:a8:49:7a:47:cc:16:92:9b: 45:f2:ed:4a:7e:5d:9c:76:2f:ad:49:dd:9c:a4:72:cc:92:f9: 4e:6f:01:05:f0:c8:26:9e:f1:be:e3:59:51:25:78:8f:33:78: a9:f0:9f:f2:d0:8d:68:5a:2b:46:85:37:cf:ce:be:01:1d:fb: d7:cb:7c:18:5e:83:f2:a5:9c:60:11:30:bf:88:15:59:12:0b: 8e:c9:47:aa:e8:99:94:b0:fd:1d:d5:bd:99:9c:a9:52:46:2a: f7:e4:3b:2c:40:88:9a:9e:b0:62:82:45:64:92:4f:8f:33:0f: 90:1f:84:d8:77:a3:1a:a2:3e:93:30:66:ec:89:64:f7:cd:4a: d1:9e:91:6e:05:03:4f:6f:cd:e4:34:87:04:c5:52:9a:ad:58: 87:0d:cc:be:1a:85:1c:c6:b6:b3:11:16:59:22:ad:42:fe:be: 90:08:9e:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5N0Av9yzCQZAa+fjuqmC9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDg2MTkyY2IzZjI4ZjU4YjIxNDRkZGUyZDkxYTIzMTIw NTZmYzgwHhcNMjYwMTAxMTEwMDIyWhcNMjYwMTAyMTEwMDIyWjAzMTEwLwYDVQQD Eyg1MTY5YjQ1ZjRkNDQ1NmNlNDgyNTkzZjY0YjY2MGI3NzQ5ZTUxOGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrPRy6PBR7ZX0o+/HGaMtBtHdMBD IVXDpKNwnJ2RbVtCKhx8Sz9FNOImoyocKouJ86w+GlvIUqJxVxx2brBD0wgBsM6M wTzDiOTaQdbI+LQp97ofJ2T4XQCrUKyIUeADQm6GPij1kR/yCMJxxuZU9dfLpY8r V9fEDfGGPrT+S6vAta/J557HddDA5OY08/HAlfJigACJQhMqvlpyw2McKAV+a2Wa XAHUvZa6TUWVwkUMIXDXd2gUhRBqxCFLEesbtRaBfcl3fq46+aEzZDPr7GllKz4e E4QOKOVxhFHy+xYm2snxJ94yNDH12aLa+dSwFKY6muhrDk12Wgog+7x6WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFptF9NRFbOSCWT9ktmC3dJ5Rj3MB8GA1UdIwQY MBaAFGwIYZLLPyj1iyFE3eLZGiMSBW/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9lNmExMjAtNDFiNC00ZGI0LTgzYjkt ZWVmNTI5YTQ3N2U3LzEvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9lNmExMjAtNDFiNC00ZGI0LTgzYjktZWVmNTI5YTQ3N2U3 LzEvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhLZ4e/1 UODtJosf+1EAwesjFWosxzX66eeQGsaHbRYETaBEOXdZG3gIqHHar0uq9t73f+Wa D2+BTaMbd31XAKV/Hf2xXeMc9+knF6QDGMWemqhJekfMFpKbRfLtSn5dnHYvrUnd nKRyzJL5Tm8BBfDIJp7xvuNZUSV4jzN4qfCf8tCNaForRoU3z86+AR3718t8GF6D 8qWcYBEwv4gVWRILjslHquiZlLD9HdW9mZypUkYq9+Q7LECImp6wYoJFZJJPjzMP kB+E2HejGqI+kzBm7Ilk981K0Z6RbgUDT2/N5DSHBMVSmq1Yhw3MvhqFHMa2sxEW WSKtQv6+kAiebw== -----END CERTIFICATE-----Generated at Thu Jan 1 17:35:34 2026 by rpki-client