This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft File: bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft (raw, json) Hash identifier: Sho5/vxIt3GfE/dsv1dGup0Cmnn7/dah82wMU/C9fac= Subject key identifier: 6E:84:F7:41:B6:46:56:54:72:B9:A6:B7:BD:B3:4A:E2:0A:9C:3C:8A Authority key identifier: 6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9 Certificate issuer: /CN=6c95fdca367bce19e2f253b78f3608ff341428c9 Certificate serial: 019B77497A67E0739390B162C9FD47C97998 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft Manifest number: 0371 Signing time: Thu 01 Jan 2026 02:01:02 +0000 Manifest this update: Thu 01 Jan 2026 02:01:02 +0000 Manifest next update: Fri 02 Jan 2026 02:01:02 +0000 Files and hashes: 1: Lf1xzTXAc6SiNDJtIVl8iWMf5b4.roa (hash: Mlu5t33KkThbOioHblpilqA5fDGAJvYvW4onNzjvD5s=) 2: bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl (hash: INmPDBO6mjxWYkysRbEHXdLHROYoAy/vKOYo2inbc+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:49:7a:67:e0:73:93:90:b1:62:c9:fd:47:c9:79:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c95fdca367bce19e2f253b78f3608ff341428c9 Validity Not Before: Jan 1 02:01:02 2026 GMT Not After : Jan 2 02:01:02 2026 GMT Subject: CN=6e84f741b646565472b9a6b7bdb34ae20a9c3c8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f9:75:8c:fd:6b:8b:f6:3b:d8:63:fe:ef:71: f2:1b:91:8b:3e:c6:97:14:49:16:1c:49:30:a1:85: aa:6d:c5:6c:7b:a6:ca:6b:7a:7a:3e:8d:e8:cb:51: eb:2c:e4:9a:c0:f6:27:5c:5c:c8:2f:0c:c6:e9:41: 1e:c3:6d:49:0d:c3:9b:e5:04:b6:35:90:68:2d:41: f3:2c:31:ff:2c:03:21:09:9e:a9:58:65:f6:3f:d6: 69:39:86:21:8c:4c:84:d9:f7:8a:7d:da:e2:0a:95: b0:f0:ec:91:12:3e:53:5e:2e:75:b7:2b:38:9e:87: d4:26:8c:b8:b0:83:bf:f8:8c:b1:05:55:3b:59:28: 27:6d:5c:0f:25:1e:81:46:6f:71:c0:c3:6b:8d:84: 2b:a1:e1:fe:b6:b2:d1:f7:3e:c8:83:d4:16:c9:15: 77:cb:96:2e:d6:c0:20:81:f8:94:99:28:8a:e7:45: c9:a4:1d:e4:d0:b5:b5:c1:8f:b5:f5:e8:9a:50:7c: cb:12:81:e0:a6:58:af:6e:ff:af:65:f2:00:36:d9: 2d:be:07:16:dc:49:0d:2a:ad:fc:02:1b:1d:2d:c7: 16:02:39:61:6e:0d:73:69:6e:b4:57:1a:ec:75:25: cd:62:05:fd:c6:89:a9:69:eb:b1:5b:8c:1b:17:12: 28:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:84:F7:41:B6:46:56:54:72:B9:A6:B7:BD:B3:4A:E2:0A:9C:3C:8A X509v3 Authority Key Identifier: keyid:6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:05:65:60:ad:ed:d1:c0:f9:59:fb:ee:d7:4c:19:30:b8:df: 06:ed:eb:96:b6:fc:59:12:0c:14:85:16:18:3a:0a:9a:84:1c: d4:b5:ce:f7:95:71:12:3c:56:45:71:40:ab:b0:7d:c5:4d:30: e0:f3:fb:77:f0:7c:88:6d:50:6c:19:c4:a1:56:39:0f:2c:7f: c0:4f:04:4f:93:e0:cc:22:bd:e9:64:5a:ac:66:bc:82:4c:a0: 74:cb:81:74:a2:44:67:3f:b0:4e:b9:06:a0:91:2e:83:c9:3d: 10:69:47:fa:c3:1e:ab:c1:9b:a2:b7:7e:8a:61:3b:19:01:c7: 1f:45:e1:25:a1:40:a8:0c:39:29:29:cf:e2:c4:94:e8:33:6b: 54:e2:3e:aa:27:57:f0:3f:ee:e4:ca:54:5e:ce:9c:a1:2f:f6: 4c:2d:8b:df:40:ac:79:02:dd:8e:43:73:8e:6f:51:dc:21:b0: c7:38:db:78:e7:18:92:63:29:31:1e:29:b0:92:99:db:5d:3b: 98:9e:d5:d8:6b:48:d9:10:0d:4b:68:42:c1:e0:4c:21:14:4d: fa:26:c4:c9:9d:57:e0:6a:84:ad:41:f9:ef:10:d5:07:5c:c1: bc:93:af:b8:6b:df:9b:1f:74:da:e4:a7:29:3f:8f:30:2c:f1: 3a:29:6b:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3SXpn4HOTkLFiyf1HyXmYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOTVmZGNhMzY3YmNlMTllMmYyNTNiNzhmMzYwOGZmMzQx NDI4YzkwHhcNMjYwMTAxMDIwMTAyWhcNMjYwMTAyMDIwMTAyWjAzMTEwLwYDVQQD Eyg2ZTg0Zjc0MWI2NDY1NjU0NzJiOWE2YjdiZGIzNGFlMjBhOWMzYzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/l1jP1ri/Y72GP+73HyG5GLPsaX FEkWHEkwoYWqbcVse6bKa3p6Po3oy1HrLOSawPYnXFzILwzG6UEew21JDcOb5QS2 NZBoLUHzLDH/LAMhCZ6pWGX2P9ZpOYYhjEyE2feKfdriCpWw8OyREj5TXi51tys4 nofUJoy4sIO/+IyxBVU7WSgnbVwPJR6BRm9xwMNrjYQroeH+trLR9z7Ig9QWyRV3 y5Yu1sAggfiUmSiK50XJpB3k0LW1wY+19eiaUHzLEoHgplivbv+vZfIANtktvgcW 3EkNKq38AhsdLccWAjlhbg1zaW60VxrsdSXNYgX9xompaeuxW4wbFxIoUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6E90G2RlZUcrmmt72zSuIKnDyKMB8GA1UdIwQY MBaAFGyV/co2e84Z4vJTt482CP80FCjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mMDFhMDItNWE5ZS00NDQxLTliM2Qt ZDVjMTg4NjJkMDI2LzEvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mMDFhMDItNWE5ZS00NDQxLTliM2QtZDVjMTg4NjJkMDI2 LzEvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARAVlYK3t 0cD5Wfvu10wZMLjfBu3rlrb8WRIMFIUWGDoKmoQc1LXO95VxEjxWRXFAq7B9xU0w 4PP7d/B8iG1QbBnEoVY5Dyx/wE8ET5PgzCK96WRarGa8gkygdMuBdKJEZz+wTrkG oJEug8k9EGlH+sMeq8Gbord+imE7GQHHH0XhJaFAqAw5KSnP4sSU6DNrVOI+qidX 8D/u5MpUXs6coS/2TC2L30CseQLdjkNzjm9R3CGwxzjbeOcYkmMpMR4psJKZ2107 mJ7V2GtI2RANS2hCweBMIRRN+ibEyZ1X4GqErUH57xDVB1zBvJOvuGvfmx902uSn KT+PMCzxOilrWg== -----END CERTIFICATE-----Generated at Thu Jan 1 07:22:06 2026 by rpki-client