This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft File: BUHqG_Ktqt02piLrPqg13Ju2gZs.mft (raw, json) Hash identifier: 5FpPJfW5P4Eoiwue9TK06NOetq6l85/lGWkrWNJsqJY= Subject key identifier: 9D:08:75:C7:E6:FC:88:E9:1F:98:D8:DE:04:A3:B3:8C:BB:E2:B5:29 Authority key identifier: 05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B Certificate issuer: /CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b Certificate serial: 019BB1706D9810673F941FB8DE14870D66D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft Manifest number: 167A Signing time: Mon 12 Jan 2026 09:01:33 +0000 Manifest this update: Mon 12 Jan 2026 09:01:33 +0000 Manifest next update: Tue 13 Jan 2026 09:01:33 +0000 Files and hashes: 1: BUHqG_Ktqt02piLrPqg13Ju2gZs.crl (hash: /mJcJYaqOr1hptug13GLs2cYKkij6J1Z4CL2VyE7sMo=) 2: lXZT8pMtuHAq6fKsihQHWu8qz5Q.roa (hash: CREAI2bwdzAy9LxcYU7uoPR2XEXd4CUfcjb+D4ZYEk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b1:70:6d:98:10:67:3f:94:1f:b8:de:14:87:0d:66:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0541ea1bf2adaadd36a622eb3ea835dc9bb6819b Validity Not Before: Jan 12 09:01:33 2026 GMT Not After : Jan 13 09:01:33 2026 GMT Subject: CN=9d0875c7e6fc88e91f98d8de04a3b38cbbe2b529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0d:4d:25:0f:e8:6f:29:62:ec:95:59:69:dc: 35:dc:4a:61:d1:54:47:9a:ff:3b:73:e3:21:c5:cb: 28:07:e2:b6:ee:14:71:a6:b6:a4:d0:d3:82:78:a1: 36:0e:6c:56:72:4b:50:92:7d:2a:ca:a0:b5:51:82: 2c:e8:f2:a3:3d:a6:78:52:6f:7a:97:d3:72:3c:9d: 99:cc:1e:82:9c:f3:87:6c:03:d5:60:e9:23:d2:61: e1:d5:09:e4:af:26:7e:36:f7:a0:f7:fe:3d:f4:80: 4a:a4:3f:7d:b5:0a:3c:88:07:cd:c7:70:49:0d:fc: fe:55:ce:17:b3:32:f0:8d:c9:62:2d:59:70:2e:b3: 22:88:86:db:d6:fd:76:2f:e8:8a:a0:57:a4:48:dc: 15:ea:0d:84:84:2b:27:f1:4e:03:1a:34:1f:7e:eb: a2:3b:c6:cd:21:a3:45:b3:95:87:f0:a5:72:91:8e: 0e:51:c8:24:a0:c8:34:b0:43:36:a0:19:20:d3:76: bf:62:82:4e:56:d7:56:bf:9a:82:9d:1c:0a:26:ca: 0a:93:b3:67:87:e8:93:f3:db:5c:84:c9:7e:1a:31: 93:b5:9c:66:ed:2d:d6:9b:64:f3:bf:0a:bc:54:80: 25:46:f5:cf:f1:b6:86:12:5a:80:55:d7:7c:0d:2a: f6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:08:75:C7:E6:FC:88:E9:1F:98:D8:DE:04:A3:B3:8C:BB:E2:B5:29 X509v3 Authority Key Identifier: keyid:05:41:EA:1B:F2:AD:AA:DD:36:A6:22:EB:3E:A8:35:DC:9B:B6:81:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUHqG_Ktqt02piLrPqg13Ju2gZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/64a063-5c4d-410c-86aa-24afcef4f3f5/1/BUHqG_Ktqt02piLrPqg13Ju2gZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:31:26:39:8f:9f:f4:c1:c0:51:43:b3:6b:b7:1d:7a:c0:9c: 53:5d:25:90:75:aa:6b:33:4e:43:35:ca:fe:07:fb:57:63:d3: c9:ed:8b:14:3b:18:8c:df:95:70:4a:c3:28:4e:62:77:6c:13: 46:31:c9:5d:46:d0:e5:30:42:21:99:45:15:91:19:4a:8a:1a: 29:29:4f:4d:19:4b:e3:96:2e:ff:cf:84:ba:b7:6b:1a:18:e3: 26:70:7e:d4:bd:88:20:bf:f4:f7:0b:09:a7:8b:92:28:ee:58: 15:0b:79:90:b5:3a:4a:61:b5:81:62:38:a6:78:4c:1a:ec:19: 0c:d4:b9:1d:35:ed:d8:6a:e0:5b:78:a2:f1:ac:1d:b6:b8:4e: 80:50:6c:00:2c:47:4b:26:25:a0:8d:ce:82:f9:0f:43:20:7b: 28:6b:38:a0:80:12:76:98:86:a4:50:5e:a6:92:6a:42:0b:9e: d3:b1:4f:4b:b8:d5:9d:2d:af:81:44:05:32:7c:a7:e3:f7:fc: c3:64:e3:5b:db:81:dd:20:9e:8d:b1:62:ac:7f:ba:1b:42:43: 55:c5:d4:c8:dd:00:bb:b4:7c:01:60:73:2d:ef:7b:d5:ea:13: de:46:42:19:f9:dd:39:9d:04:11:a5:dd:58:3a:12:81:7d:45: a2:09:ac:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuxcG2YEGc/lB+43hSHDWbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NDFlYTFiZjJhZGFhZGQzNmE2MjJlYjNlYTgzNWRjOWJi NjgxOWIwHhcNMjYwMTEyMDkwMTMzWhcNMjYwMTEzMDkwMTMzWjAzMTEwLwYDVQQD Eyg5ZDA4NzVjN2U2ZmM4OGU5MWY5OGQ4ZGUwNGEzYjM4Y2JiZTJiNTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ1NJQ/obyli7JVZadw13Eph0VRH mv87c+MhxcsoB+K27hRxprak0NOCeKE2DmxWcktQkn0qyqC1UYIs6PKjPaZ4Um96 l9NyPJ2ZzB6CnPOHbAPVYOkj0mHh1QnkryZ+Nveg9/499IBKpD99tQo8iAfNx3BJ Dfz+Vc4XszLwjcliLVlwLrMiiIbb1v12L+iKoFekSNwV6g2EhCsn8U4DGjQffuui O8bNIaNFs5WH8KVykY4OUcgkoMg0sEM2oBkg03a/YoJOVtdWv5qCnRwKJsoKk7Nn h+iT89tchMl+GjGTtZxm7S3Wm2Tzvwq8VIAlRvXP8baGElqAVdd8DSr2BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0Idcfm/IjpH5jY3gSjs4y74rUpMB8GA1UdIwQY MBaAFAVB6hvyrardNqYi6z6oNdybtoGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEt MjRhZmNlZjRmM2Y1LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi82NGEwNjMtNWM0ZC00MTBjLTg2YWEtMjRhZmNlZjRmM2Y1 LzEvQlVIcUdfS3RxdDAycGlMclBxZzEzSnUyZ1pzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTEmOY+f 9MHAUUOza7cdesCcU10lkHWqazNOQzXK/gf7V2PTye2LFDsYjN+VcErDKE5id2wT RjHJXUbQ5TBCIZlFFZEZSooaKSlPTRlL45Yu/8+EurdrGhjjJnB+1L2IIL/09wsJ p4uSKO5YFQt5kLU6SmG1gWI4pnhMGuwZDNS5HTXt2GrgW3ii8awdtrhOgFBsACxH SyYloI3OgvkPQyB7KGs4oIASdpiGpFBeppJqQgue07FPS7jVnS2vgUQFMnyn4/f8 w2TjW9uB3SCejbFirH+6G0JDVcXUyN0Au7R8AWBzLe971eoT3kZCGfndOZ0EEaXd WDoSgX1FogmsKA== -----END CERTIFICATE-----Generated at Mon Jan 12 13:35:32 2026 by rpki-client