This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft File: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json) Hash identifier: r1rjQ/ksIGZhopzKts+3WVwYQOIiyLkc7te0LiE8TTo= Subject key identifier: F5:C8:1D:6B:ED:E3:0A:13:09:11:EC:1F:E9:6B:04:AD:63:C2:88:2C Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81 Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81 Certificate serial: 019BAFB87894CA60F83DBB820209CC27F041 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft Manifest number: 1352 Signing time: Mon 12 Jan 2026 01:01:00 +0000 Manifest this update: Mon 12 Jan 2026 01:01:00 +0000 Manifest next update: Tue 13 Jan 2026 01:01:00 +0000 Files and hashes: 1: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: hiEp5y1r7R/1uxYwt3OExGaEwoAFCkhzsrUiB2uGxfc=) 2: gVF7AxuIzKTCjMsBQD_13bKv0vk.roa (hash: Xq/PLLG8F1v6vaXhJgc29NbSM77ha3BnJMruHRHuujU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 01:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:b8:78:94:ca:60:f8:3d:bb:82:02:09:cc:27:f0:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81 Validity Not Before: Jan 12 01:01:00 2026 GMT Not After : Jan 13 01:01:00 2026 GMT Subject: CN=f5c81d6bede30a130911ec1fe96b04ad63c2882c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:56:6a:08:24:1d:ab:c3:b3:be:e1:77:84:98: e6:12:50:b7:3f:f6:b0:ce:ae:89:2d:79:60:b0:73: 57:d0:c6:f1:16:38:1a:63:8f:7b:6c:ce:dc:92:9e: 26:7c:34:9c:5c:c3:e6:08:31:1e:df:6b:41:86:84: 73:6d:b6:0b:06:14:ed:c3:77:a4:dd:eb:fa:7b:3f: 98:49:3f:3e:28:18:c8:2f:51:69:82:70:d1:3c:47: b6:c1:30:7d:82:1e:bb:2f:f8:c9:1b:5e:29:87:85: c0:7b:09:92:68:0b:1a:00:a6:cb:69:69:8a:57:89: 6b:e2:c3:4d:70:2f:e6:d5:6c:e4:a6:8b:ed:5f:19: 91:a9:32:27:c6:37:19:e2:62:1f:78:e4:36:91:4c: 03:e0:b8:00:e8:1f:7d:80:eb:4f:12:c7:3d:26:bb: 96:62:e0:4a:04:94:68:6b:e8:7f:a3:41:92:f1:c9: 12:e1:de:52:97:ce:d2:8b:12:92:0e:80:f4:e6:88: 18:3f:55:8a:ed:d6:f6:6f:a0:68:33:46:b2:98:4b: 06:bf:a5:e4:49:28:b4:d8:83:6c:d7:d3:d9:1a:84: f5:fe:b0:7d:be:91:e3:ad:cf:be:9f:9f:6d:2a:1b: 22:a5:34:75:81:f3:d1:eb:54:54:69:60:0e:65:0a: 63:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:C8:1D:6B:ED:E3:0A:13:09:11:EC:1F:E9:6B:04:AD:63:C2:88:2C X509v3 Authority Key Identifier: keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e4:3b:9c:47:33:c5:25:94:7a:47:33:31:e3:5f:f4:d7:ed: bb:43:52:33:7e:ee:c3:07:5b:9e:49:ed:d3:d7:1f:4d:f9:cb: e0:8e:7c:bc:40:2b:88:94:7d:25:92:03:2e:b9:39:e5:da:a9: 3a:0d:a3:2b:27:a7:1e:ee:78:1e:9e:b5:28:54:ae:be:0b:b6: 91:51:d5:10:58:b4:83:6f:c9:05:fd:18:fc:ae:9a:84:7f:c0: 94:8b:84:2c:9f:b4:3e:b0:9d:2d:5b:1c:d8:a1:e5:c4:83:97: db:a7:9f:19:e8:04:05:99:96:1e:6b:2b:d3:6e:d5:04:17:be: 5e:38:98:e7:a6:7b:a8:dc:e9:db:e2:26:7a:cf:9f:bc:de:87: 75:8c:e3:5c:26:0d:65:93:a0:d1:ef:68:df:ba:5c:74:ed:96: d9:2e:bb:0c:d3:63:99:e9:d6:ea:bd:0e:a0:95:94:cb:0f:e1: 62:56:65:5e:f4:cf:b4:8f:c9:c0:b9:9f:2e:32:df:d8:5b:aa: 3b:d4:60:9a:5a:d6:02:c3:bc:9f:b6:94:9b:c7:f2:3f:5c:42: b5:c4:ed:92:b9:d8:f4:88:b7:a8:18:6d:37:cb:c2:61:1f:57: 84:9a:6a:a1:f2:e9:fd:89:5e:c6:f5:5a:91:a8:40:a9:c9:97: 8c:20:38:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvuHiUymD4PbuCAgnMJ/BBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2N2RjZjU3NzY1NGRjYTE3YTYxMGI5YWY0ZjJjYTc0MjFk Y2JiODEwHhcNMjYwMTEyMDEwMTAwWhcNMjYwMTEzMDEwMTAwWjAzMTEwLwYDVQQD EyhmNWM4MWQ2YmVkZTMwYTEzMDkxMWVjMWZlOTZiMDRhZDYzYzI4ODJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1ZqCCQdq8OzvuF3hJjmElC3P/aw zq6JLXlgsHNX0MbxFjgaY497bM7ckp4mfDScXMPmCDEe32tBhoRzbbYLBhTtw3ek 3ev6ez+YST8+KBjIL1FpgnDRPEe2wTB9gh67L/jJG14ph4XAewmSaAsaAKbLaWmK V4lr4sNNcC/m1WzkpovtXxmRqTInxjcZ4mIfeOQ2kUwD4LgA6B99gOtPEsc9JruW YuBKBJRoa+h/o0GS8ckS4d5Sl87SixKSDoD05ogYP1WK7db2b6BoM0aymEsGv6Xk SSi02INs19PZGoT1/rB9vpHjrc++n59tKhsipTR1gfPR61RUaWAOZQpj7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXIHWvt4woTCRHsH+lrBK1jwogsMB8GA1UdIwQY MBaAFAZ9z1d2VNyhemELmvTyynQh3LuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUt OTg1MTgyMDAxZTkyLzEvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC8yOWNiMmUtNDY4MC00YTM2LWIwYTUtOTg1MTgyMDAxZTky LzEvQm4zUFYzWlUzS0Y2WVF1YTlQTEtkQ0hjdTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOQ7nEcz xSWUekczMeNf9Nftu0NSM37uwwdbnknt09cfTfnL4I58vEAriJR9JZIDLrk55dqp Og2jKyenHu54Hp61KFSuvgu2kVHVEFi0g2/JBf0Y/K6ahH/AlIuELJ+0PrCdLVsc 2KHlxIOX26efGegEBZmWHmsr027VBBe+XjiY56Z7qNzp2+Imes+fvN6HdYzjXCYN ZZOg0e9o37pcdO2W2S67DNNjmenW6r0OoJWUyw/hYlZlXvTPtI/JwLmfLjLf2Fuq O9RgmlrWAsO8n7aUm8fyP1xCtcTtkrnY9Ii3qBhtN8vCYR9XhJpqofLp/YlexvVa kahAqcmXjCA4+w== -----END CERTIFICATE-----Generated at Mon Jan 12 05:02:44 2026 by rpki-client