This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft File: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft (raw, json) Hash identifier: c8Qwx5PStZOPAC0Lhcm1wtPHilPgl1VsNTLu2luP0Ik= Subject key identifier: D8:B7:BC:4D:FA:2F:97:8B:F5:FE:17:6E:C9:9C:68:9A:B6:36:A8:26 Authority key identifier: 05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4 Certificate issuer: /CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4 Certificate serial: 019B9FA12B9D6F916A1FD4556160C6BDB13B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft Manifest number: 17BD Signing time: Thu 08 Jan 2026 22:01:38 +0000 Manifest this update: Thu 08 Jan 2026 22:01:38 +0000 Manifest next update: Fri 09 Jan 2026 22:01:38 +0000 Files and hashes: 1: Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl (hash: d5Amb1UQWZa7XRp4ue91bp+KPZCBWhVROrRr14AJmGs=) 2: Lqd1mryq0eI3XAJCMSKyJDpltOI.roa (hash: NKrZd+8ubVZMRdGL7RM/ghy07bvO6vCdLTdgz04D2Kg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 22:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:9f:a1:2b:9d:6f:91:6a:1f:d4:55:61:60:c6:bd:b1:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05ae5f23db983fd136ae9d71e87e1e5130bcf6d4 Validity Not Before: Jan 8 22:01:38 2026 GMT Not After : Jan 9 22:01:38 2026 GMT Subject: CN=d8b7bc4dfa2f978bf5fe176ec99c689ab636a826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:6f:4d:7f:54:e1:cc:ca:4b:96:8e:d8:a2: cf:e6:16:18:44:a2:58:b3:27:09:a0:37:20:ef:8d: 89:4f:65:79:8a:34:12:84:9a:16:91:aa:a4:71:7b: 44:5b:ac:7c:d1:03:bf:8a:21:cd:d9:28:2d:a1:33: d7:e2:f9:a5:3f:f7:16:e7:52:9f:56:b0:b7:51:aa: 68:8e:c8:05:c2:4b:b1:24:d1:e1:66:5e:01:14:8b: 6e:14:b4:71:0d:da:db:08:cf:25:f9:74:de:cd:a4: 2b:aa:d0:0b:6f:0a:18:6f:86:a8:b1:f7:25:6f:1c: 40:c9:b2:2e:fb:c9:bb:73:55:96:45:ee:45:82:42: a5:f7:0f:8e:98:79:1d:07:ae:ee:c8:84:43:6b:6c: 9e:e9:56:d7:bd:66:59:a7:a1:25:56:0d:2c:a0:a1: b8:d5:6f:b5:51:6c:e3:63:b3:53:d7:e9:b9:b4:7e: 64:05:d2:d8:55:02:b8:73:a3:be:59:dc:bd:58:f3: 7d:01:17:e3:3c:3f:e4:96:13:9d:f5:ac:4d:73:e9: 48:df:62:26:61:12:ed:20:e1:bb:e8:74:04:07:92: 8b:0f:06:64:aa:87:89:91:e2:6c:f4:3e:79:25:55: aa:a2:a4:64:4e:23:28:da:f4:b0:1c:15:90:66:42: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B7:BC:4D:FA:2F:97:8B:F5:FE:17:6E:C9:9C:68:9A:B6:36:A8:26 X509v3 Authority Key Identifier: keyid:05:AE:5F:23:DB:98:3F:D1:36:AE:9D:71:E8:7E:1E:51:30:BC:F6:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/745fcb-f472-4039-8b1d-44efd130659c/1/Ba5fI9uYP9E2rp1x6H4eUTC89tQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c0:09:45:be:6f:90:d2:3c:af:f8:90:fe:ed:2b:97:0c:a7: 17:b5:2f:25:b7:4c:b1:5f:ab:14:4c:3e:ba:fd:9c:6b:0f:a3: f7:59:14:96:95:58:64:64:15:23:1a:ec:22:38:8d:a3:c2:8a: 63:7e:df:b4:35:db:b8:7e:19:ad:81:fa:be:3b:63:b3:27:21: 5e:3d:ae:ff:24:d1:15:95:de:43:86:3f:78:3d:9c:e4:e3:e6: 54:a3:a9:3d:78:2a:22:88:c9:2d:fa:fe:3e:16:75:92:6c:b7: 01:f9:9c:20:d0:e8:5a:7e:bb:3c:83:2e:97:7c:f3:40:37:12: a1:18:03:13:90:12:53:ed:45:f6:86:a5:d6:80:db:66:e9:d8: 1e:3d:9f:f1:14:09:9d:f0:75:25:94:e9:41:2d:6b:01:53:b3: ba:28:fc:51:45:91:c1:c2:76:3b:90:d9:b0:6f:b6:36:1d:94: 00:d5:30:36:d9:66:4d:90:c9:09:6d:b7:31:a0:4d:a8:b4:98: 4f:de:e4:14:39:f6:ba:ea:48:7b:be:5d:9b:71:9a:7a:69:71: 3b:73:a9:e7:cf:61:5f:86:bd:d2:12:9d:b4:3c:0b:9e:70:47: 65:28:49:f7:10:d5:d5:40:eb:eb:2c:26:b6:62:fe:b2:55:fd: b7:f5:cd:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZufoSudb5FqH9RVYWDGvbE7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YWU1ZjIzZGI5ODNmZDEzNmFlOWQ3MWU4N2UxZTUxMzBi Y2Y2ZDQwHhcNMjYwMTA4MjIwMTM4WhcNMjYwMTA5MjIwMTM4WjAzMTEwLwYDVQQD EyhkOGI3YmM0ZGZhMmY5NzhiZjVmZTE3NmVjOTljNjg5YWI2MzZhODI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFhvTX9U4czKS5aO2KLP5hYYRKJY sycJoDcg742JT2V5ijQShJoWkaqkcXtEW6x80QO/iiHN2SgtoTPX4vmlP/cW51Kf VrC3UapojsgFwkuxJNHhZl4BFItuFLRxDdrbCM8l+XTezaQrqtALbwoYb4aosfcl bxxAybIu+8m7c1WWRe5FgkKl9w+OmHkdB67uyIRDa2ye6VbXvWZZp6ElVg0soKG4 1W+1UWzjY7NT1+m5tH5kBdLYVQK4c6O+Wdy9WPN9ARfjPD/klhOd9axNc+lI32Im YRLtIOG76HQEB5KLDwZkqoeJkeJs9D55JVWqoqRkTiMo2vSwHBWQZkLmcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNi3vE36L5eL9f4XbsmcaJq2NqgmMB8GA1UdIwQY MBaAFAWuXyPbmD/RNq6dceh+HlEwvPbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NDVmY2ItZjQ3Mi00MDM5LThiMWQt NDRlZmQxMzA2NTljLzEvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS83NDVmY2ItZjQ3Mi00MDM5LThiMWQtNDRlZmQxMzA2NTlj LzEvQmE1Zkk5dVlQOUUycnAxeDZINGVVVEM4OXRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacAJRb5v kNI8r/iQ/u0rlwynF7UvJbdMsV+rFEw+uv2caw+j91kUlpVYZGQVIxrsIjiNo8KK Y37ftDXbuH4ZrYH6vjtjsychXj2u/yTRFZXeQ4Y/eD2c5OPmVKOpPXgqIojJLfr+ PhZ1kmy3AfmcINDoWn67PIMul3zzQDcSoRgDE5ASU+1F9oal1oDbZunYHj2f8RQJ nfB1JZTpQS1rAVOzuij8UUWRwcJ2O5DZsG+2Nh2UANUwNtlmTZDJCW23MaBNqLSY T97kFDn2uupIe75dm3GaemlxO3Op589hX4a90hKdtDwLnnBHZShJ9xDV1UDr6ywm tmL+slX9t/XN/Q== -----END CERTIFICATE-----Generated at Fri Jan 9 08:24:30 2026 by rpki-client