This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft File: bG9jkROWOM74MYEUEyzPJuFn06Q.mft (raw, json) Hash identifier: IwcpO1N+94uuKa7YmajFdk5h6VIIsLsynmTEwHWa/is= Subject key identifier: 75:43:96:C7:AE:90:09:DC:42:AD:D5:72:7F:F1:FE:D5:C0:C3:25:DD Authority key identifier: 6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4 Certificate issuer: /CN=6c6f6391139638cef8318114132ccf26e167d3a4 Certificate serial: 019B7759DED057530B5055D373E0EC4CE847 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft Manifest number: 1480 Signing time: Thu 01 Jan 2026 02:18:57 +0000 Manifest this update: Thu 01 Jan 2026 02:18:57 +0000 Manifest next update: Fri 02 Jan 2026 02:18:57 +0000 Files and hashes: 1: aCRE3gLyqKdnvA-j-2aLcuCjRwM.roa (hash: ynx5tfnKZJH99nxW03XgpU3cYgXZihD5CZxo4tNLmhI=) 2: bG9jkROWOM74MYEUEyzPJuFn06Q.crl (hash: KrkPl59hEFkf2nnaKDQH2A+j1lCJSzclbWOUs0lDbJ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:de:d0:57:53:0b:50:55:d3:73:e0:ec:4c:e8:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c6f6391139638cef8318114132ccf26e167d3a4 Validity Not Before: Jan 1 02:18:57 2026 GMT Not After : Jan 2 02:18:57 2026 GMT Subject: CN=754396c7ae9009dc42add5727ff1fed5c0c325dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:6c:30:26:b7:97:41:81:41:a6:ca:47:c2: 74:c2:db:91:85:23:f7:bc:02:61:ff:be:bc:aa:fe: 0c:76:46:5c:3b:aa:d8:c4:4e:40:5b:ed:43:f5:07: 84:40:47:a1:22:ff:e2:28:7b:f7:79:8d:68:22:67: 7a:13:ce:06:04:41:34:e7:2c:41:84:ad:bd:76:ef: 56:38:fd:60:f3:1a:03:25:94:64:71:7b:6b:44:4b: 75:5b:97:17:e0:32:7c:01:07:60:e3:1c:09:48:7f: 01:0e:62:a9:f5:74:93:4d:ae:4b:bf:93:37:d9:87: 16:ac:6c:d8:98:ce:32:40:c2:2c:6b:a4:65:42:e6: a4:0e:6b:b3:37:b7:b0:ca:96:e5:87:be:99:46:6f: 0b:54:34:18:40:de:ea:1a:36:d8:84:32:8e:53:07: 4f:56:57:23:9f:a5:e4:11:c1:62:51:93:32:8b:c0: 9c:e3:fa:b2:e4:36:70:b1:cd:7a:1f:85:cd:aa:20: 5d:4f:b2:34:65:c4:78:4f:9e:c3:d9:97:f4:b5:5b: b4:39:e2:82:02:f6:dc:ac:c9:2d:63:96:5c:ea:93: ef:44:d3:a1:09:c2:f7:c8:25:39:93:87:ac:30:5c: 18:ba:72:a5:1e:a6:e3:cb:5a:9e:8d:0a:33:a0:b5: 3c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:43:96:C7:AE:90:09:DC:42:AD:D5:72:7F:F1:FE:D5:C0:C3:25:DD X509v3 Authority Key Identifier: keyid:6C:6F:63:91:13:96:38:CE:F8:31:81:14:13:2C:CF:26:E1:67:D3:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG9jkROWOM74MYEUEyzPJuFn06Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/95a6f4-8220-46dc-b238-34ad1c853599/1/bG9jkROWOM74MYEUEyzPJuFn06Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:a0:c4:b1:41:cd:17:ed:0a:00:a3:1b:00:ba:11:3b:c2:d5: 41:12:84:07:f7:fc:5c:70:9c:48:f4:27:32:29:18:9d:5f:cc: b7:32:7d:55:23:22:b2:eb:76:c0:3a:0e:48:d6:82:eb:b6:7a: 77:4b:de:c1:08:31:26:f5:3d:e4:62:a9:43:15:c8:d6:ad:6e: 25:a5:e7:72:ca:49:d3:07:59:7d:b2:d3:e5:42:21:b8:83:77: e5:e4:88:ba:bd:fc:1a:4a:59:b7:7d:b7:ae:e7:98:ab:d1:12: 99:7a:8e:5c:94:5c:97:f6:da:93:59:35:10:5b:6d:c4:13:52: 91:fa:62:aa:5a:e7:f5:39:b6:f7:4e:2d:5d:c1:a1:2c:1b:2e: 20:2f:5c:3e:b8:98:e1:c2:eb:14:8f:60:29:34:ff:7f:3f:69: bf:72:3a:61:e7:7e:b4:3b:4f:c1:62:19:7c:16:a3:25:c7:3c: 1d:22:d5:a1:10:90:68:9d:b2:4f:c2:eb:8a:0f:f5:0d:4a:a9: 32:a3:a4:95:24:87:68:d9:3d:11:f2:9c:37:f4:74:a8:24:2c: 61:ff:5d:36:3d:fa:41:6b:45:c3:66:2d:8b:c8:a7:8a:22:72: 46:bf:36:e6:13:e2:59:37:b8:ae:fd:3a:64:98:a0:c6:c0:09: d8:ad:f8:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3Wd7QV1MLUFXTc+DsTOhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNmY2MzkxMTM5NjM4Y2VmODMxODExNDEzMmNjZjI2ZTE2 N2QzYTQwHhcNMjYwMTAxMDIxODU3WhcNMjYwMTAyMDIxODU3WjAzMTEwLwYDVQQD Eyg3NTQzOTZjN2FlOTAwOWRjNDJhZGQ1NzI3ZmYxZmVkNWMwYzMyNWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQtsMCa3l0GBQabKR8J0wtuRhSP3 vAJh/768qv4MdkZcO6rYxE5AW+1D9QeEQEehIv/iKHv3eY1oImd6E84GBEE05yxB hK29du9WOP1g8xoDJZRkcXtrREt1W5cX4DJ8AQdg4xwJSH8BDmKp9XSTTa5Lv5M3 2YcWrGzYmM4yQMIsa6RlQuakDmuzN7ewypblh76ZRm8LVDQYQN7qGjbYhDKOUwdP Vlcjn6XkEcFiUZMyi8Cc4/qy5DZwsc16H4XNqiBdT7I0ZcR4T57D2Zf0tVu0OeKC AvbcrMktY5Zc6pPvRNOhCcL3yCU5k4esMFwYunKlHqbjy1qejQozoLU8swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVDlseukAncQq3Vcn/x/tXAwyXdMB8GA1UdIwQY MBaAFGxvY5ETljjO+DGBFBMszybhZ9OkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkc5amtST1dPTTc0TVlFVUV5elBKdUZuMDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85NWE2ZjQtODIyMC00NmRjLWIyMzgt MzRhZDFjODUzNTk5LzEvYkc5amtST1dPTTc0TVlFVUV5elBKdUZuMDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS85NWE2ZjQtODIyMC00NmRjLWIyMzgtMzRhZDFjODUzNTk5 LzEvYkc5amtST1dPTTc0TVlFVUV5elBKdUZuMDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH6DEsUHN F+0KAKMbALoRO8LVQRKEB/f8XHCcSPQnMikYnV/MtzJ9VSMisut2wDoOSNaC67Z6 d0vewQgxJvU95GKpQxXI1q1uJaXncspJ0wdZfbLT5UIhuIN35eSIur38GkpZt323 rueYq9ESmXqOXJRcl/bak1k1EFttxBNSkfpiqlrn9Tm2904tXcGhLBsuIC9cPriY 4cLrFI9gKTT/fz9pv3I6Yed+tDtPwWIZfBajJcc8HSLVoRCQaJ2yT8Lrig/1DUqp MqOklSSHaNk9EfKcN/R0qCQsYf9dNj36QWtFw2Yti8iniiJyRr825hPiWTe4rv06 ZJigxsAJ2K348w== -----END CERTIFICATE-----Generated at Thu Jan 1 05:47:08 2026 by rpki-client