This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json) Hash identifier: +8996v62oYsatWMHI4Ud1n4+x/dfujmAU1NqM2z0NFY= Subject key identifier: F9:D6:2B:F5:4F:5B:D9:5D:70:5B:75:4C:78:51:A8:4B:10:E6:60:65 Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Certificate serial: 019B80F1510AAD7FD2C2FF3F9616A2A4B11F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft Manifest number: 0FAE Signing time: Fri 02 Jan 2026 23:00:57 +0000 Manifest this update: Fri 02 Jan 2026 23:00:57 +0000 Manifest next update: Sat 03 Jan 2026 23:00:57 +0000 Files and hashes: 1: 9F4nFbGxWFyzlJVE1S__5b6FPCI.roa (hash: g0Q3yvsLaJ0f1xZGMnOTjSsR0ohn67wJH/LM7dSM5CA=) 2: ERNFrnzBGMp5dbReFDeBkgmcPh8.roa (hash: fopuSknYAN9eY8CjJVKKrYqlanNz4e2UGCvAXKYoocE=) 3: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=) 4: VGWXxgnVjRzhnWv4xLC7nIAXaR8.roa (hash: b/7VbWeRSEWFgdp8+ZkMOanq2mlESLfiHeCuFxwqmRM=) 5: ZzjkBXr5q1g4RTOv6r81K4wPzek.roa (hash: EbxKJ4vDtHIhISfCa5emGMn2e3XIMHISVR6d79MhkPc=) 6: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: kSnOe/dHTtNkV+SJFQQN1L9Uba1jc4TVUqza3Mjve8w=) 7: uQF7IyytbS3yrbTg44uQRPpFYao.roa (hash: k+4BWSV4vpxlK8x4wwgoZ+fmKkoDTHmAUh9+Y4xZiic=) 8: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=) 9: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:f1:51:0a:ad:7f:d2:c2:ff:3f:96:16:a2:a4:b1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Validity Not Before: Jan 2 23:00:57 2026 GMT Not After : Jan 3 23:00:57 2026 GMT Subject: CN=f9d62bf54f5bd95d705b754c7851a84b10e66065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:2b:cc:89:4b:7a:aa:dd:9b:88:31:bc:ad: c7:0c:00:b2:26:fa:7b:e2:20:38:dc:27:01:5a:e8: 32:e9:2d:02:bf:3c:f0:b9:4c:8f:40:dc:cd:ad:a3: cc:22:14:dd:e3:2f:72:38:e9:65:ab:6a:e1:8c:f4: 38:46:67:8d:4e:b4:dd:58:50:97:bd:b9:16:bb:9e: e0:f5:b3:38:2f:17:6a:32:1c:55:79:5c:c9:2a:4c: e8:2c:69:81:e7:a3:e2:58:12:ef:76:fe:d6:8f:0f: bd:32:ef:82:c4:b5:36:d7:1d:0e:61:f7:b0:59:05: 31:f5:8c:11:55:a3:fa:65:54:1f:24:30:85:73:b1: c8:09:46:8e:b3:f3:57:fc:0d:06:a5:80:2c:7b:02: 83:31:63:3e:04:b7:18:1f:23:5c:a9:9d:d9:22:0e: 4d:c1:f0:91:2a:a5:61:d2:59:ab:7a:10:14:f9:ed: 6a:22:90:1e:f9:87:79:d2:e8:74:e0:ee:eb:c0:a3: e2:37:1b:97:16:fa:f0:90:0d:da:56:69:03:f0:61: 51:ca:30:1b:81:69:10:b0:dd:de:8c:36:d5:9b:98: 8d:ea:1b:d7:e3:94:28:75:4b:c9:ec:9c:33:b4:4e: d8:5a:f8:ea:ad:4f:dc:ae:a6:d2:23:da:4d:2c:9f: d5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D6:2B:F5:4F:5B:D9:5D:70:5B:75:4C:78:51:A8:4B:10:E6:60:65 X509v3 Authority Key Identifier: keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:90:4e:09:cb:70:d4:15:58:72:df:43:1c:17:f1:eb:b2:18: 50:91:d0:5a:18:53:08:de:ca:61:b3:39:9f:a4:d8:54:98:d2: fa:4d:b7:00:a8:33:ad:19:92:07:1d:2a:1c:7a:b3:78:68:1d: af:be:f0:d7:57:a0:77:54:74:fa:2d:07:01:d1:a0:75:ed:6e: e9:fb:75:53:86:ee:17:16:17:af:a6:d9:14:7c:fb:51:a5:e9: d4:a4:c9:56:b5:9c:d6:18:d9:d1:45:11:79:a6:4f:f6:c6:a1: 94:58:61:cd:96:63:c5:78:45:ea:61:52:03:60:12:64:23:ee: 57:a6:f1:21:8e:75:9a:b5:a6:0b:7c:2c:38:be:c7:81:8e:7a: b4:53:ac:09:eb:9e:bd:d3:a2:36:5e:66:10:95:fd:5d:c3:c4: e2:40:6b:c5:0a:11:82:76:54:77:e4:44:bd:66:a8:25:58:25: a3:53:93:de:56:b9:6c:be:1d:b8:87:68:5e:b9:4b:33:57:54: 89:91:d1:4a:36:ea:b9:00:3d:d3:5e:2f:8e:e6:84:99:d1:26: 75:d0:ac:60:6b:d7:1a:f2:68:26:2b:28:ec:87:16:7d:a7:17: fa:3f:8c:9f:91:ae:2c:47:03:14:58:18:32:df:b2:e6:f0:ed: e3:50:d1:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuA8VEKrX/Swv8/lhaipLEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2 ZGVmMjAwHhcNMjYwMTAyMjMwMDU3WhcNMjYwMTAzMjMwMDU3WjAzMTEwLwYDVQQD EyhmOWQ2MmJmNTRmNWJkOTVkNzA1Yjc1NGM3ODUxYTg0YjEwZTY2MDY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaYrzIlLeqrdm4gxvK3HDACyJvp7 4iA43CcBWugy6S0CvzzwuUyPQNzNraPMIhTd4y9yOOllq2rhjPQ4RmeNTrTdWFCX vbkWu57g9bM4LxdqMhxVeVzJKkzoLGmB56PiWBLvdv7Wjw+9Mu+CxLU21x0OYfew WQUx9YwRVaP6ZVQfJDCFc7HICUaOs/NX/A0GpYAsewKDMWM+BLcYHyNcqZ3ZIg5N wfCRKqVh0lmrehAU+e1qIpAe+Yd50uh04O7rwKPiNxuXFvrwkA3aVmkD8GFRyjAb gWkQsN3ejDbVm5iN6hvX45QodUvJ7JwztE7YWvjqrU/crqbSI9pNLJ/VUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnWK/VPW9ldcFt1THhRqEsQ5mBlMB8GA1UdIwQY MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1 LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZBOCctw 1BVYct9DHBfx67IYUJHQWhhTCN7KYbM5n6TYVJjS+k23AKgzrRmSBx0qHHqzeGgd r77w11egd1R0+i0HAdGgde1u6ft1U4buFxYXr6bZFHz7UaXp1KTJVrWc1hjZ0UUR eaZP9sahlFhhzZZjxXhF6mFSA2ASZCPuV6bxIY51mrWmC3wsOL7HgY56tFOsCeue vdOiNl5mEJX9XcPE4kBrxQoRgnZUd+REvWaoJVglo1OT3la5bL4duIdoXrlLM1dU iZHRSjbquQA9014vjuaEmdEmddCsYGvXGvJoJiso7IcWfacX+j+Mn5GuLEcDFFgY Mt+y5vDt41DRvA== -----END CERTIFICATE-----Generated at Sat Jan 3 03:57:30 2026 by rpki-client