This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft File: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft (raw, json) Hash identifier: uXMHxxl77IQK2hgGhZocK2Ijvc7HBouvbufMzzR96yw= Subject key identifier: 6D:15:C7:C7:9A:67:7E:DE:D6:6B:4F:45:DB:EC:8C:36:9A:95:11:62 Authority key identifier: 06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04 Certificate issuer: /CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504 Certificate serial: 019C41339DC165FC034B9DEF4442D1E6CB4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft Manifest number: 0CD7 Signing time: Mon 09 Feb 2026 07:00:27 +0000 Manifest this update: Mon 09 Feb 2026 07:00:27 +0000 Manifest next update: Tue 10 Feb 2026 07:00:27 +0000 Files and hashes: 1: BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl (hash: vb/0/g9tatoxE1KMLniH4ilnhJB8sE5WL5AuDHG/C4c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:9d:c1:65:fc:03:4b:9d:ef:44:42:d1:e6:cb:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06018e7b52bd3268aa4d5d3aa577f47d0f187504 Validity Not Before: Feb 9 07:00:27 2026 GMT Not After : Feb 10 07:00:27 2026 GMT Subject: CN=6d15c7c79a677eded66b4f45dbec8c369a951162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8f:68:58:24:0a:90:99:68:ec:9c:c0:76:da: 4f:d5:aa:3c:21:23:5e:f0:5e:8b:3b:8e:37:57:c1: 12:a5:3c:09:1d:04:b8:dc:a7:6c:d2:4e:41:8c:1e: 42:bb:db:77:31:b3:6f:0b:a6:b0:c0:73:d3:f8:46: 73:a7:6b:60:d1:93:ea:06:b2:ee:5d:2f:cd:da:f2: 27:63:54:46:35:d2:2d:50:16:8f:e9:fb:2e:af:0d: d5:f6:a1:7f:1b:fd:7f:ea:3b:c4:83:a9:52:a9:fb: 06:28:8a:7c:10:e4:fd:40:1b:23:65:4c:20:74:1f: 2c:b0:4b:a1:a8:be:af:d5:23:96:43:57:86:5f:4e: 7a:fc:46:ed:29:0f:ac:a1:4f:22:ac:4f:0d:42:43: 1c:62:e9:27:73:46:94:b7:39:23:86:75:34:66:bf: af:4b:68:40:82:f8:0b:fb:7d:69:c6:49:bf:f5:8d: f0:64:7d:17:a2:21:92:87:a9:cb:fa:e9:16:2e:b7: 71:44:6d:ad:30:40:ea:8d:9e:d9:fa:b8:fb:41:db: 72:a6:29:7b:5c:45:81:93:91:c5:78:47:28:aa:94: 29:a7:3c:bc:bc:43:0d:6e:72:2f:36:fb:71:6a:50: 51:fe:0f:7f:22:69:da:7d:0f:0b:fa:3b:1d:8f:b2: 56:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:15:C7:C7:9A:67:7E:DE:D6:6B:4F:45:DB:EC:8C:36:9A:95:11:62 X509v3 Authority Key Identifier: keyid:06:01:8E:7B:52:BD:32:68:AA:4D:5D:3A:A5:77:F4:7D:0F:18:75:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fdc9b0-7185-4b18-857d-1d9fe8aa12ab/1/BgGOe1K9MmiqTV06pXf0fQ8YdQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:3f:35:45:49:f7:90:f7:e3:07:c1:ee:38:eb:9b:da:d9:42: 01:75:b4:71:f7:20:32:17:a6:4d:43:3a:d1:7d:77:2d:2f:34: 9c:f6:17:a6:52:9f:d0:9d:46:20:b1:1f:f8:cd:b5:1b:4e:16: b1:a1:29:e0:f1:3c:a7:8d:17:af:9b:62:d5:9b:f8:fc:45:b8: c1:03:a6:55:be:72:93:9c:15:6d:14:83:e4:4c:41:db:25:22: 04:ce:33:be:a5:7d:28:79:ea:63:c9:5e:fd:40:71:fa:be:eb: 1a:0b:fc:d0:88:01:74:08:17:78:1f:f3:5b:82:a9:42:42:47: 67:63:7b:b6:39:5d:bb:7c:0c:6d:68:56:84:9b:a7:a0:66:64: 09:83:d6:37:c6:ac:f4:18:c3:a5:c9:e8:d8:8b:32:ae:6f:76: c6:32:79:c6:4c:d3:43:20:b4:df:e4:d1:cc:3e:af:44:88:05: a5:c6:b4:0b:5c:46:18:06:47:48:9f:d4:b1:5a:47:82:ae:fb: 35:20:c8:09:a8:32:8b:de:93:7c:c4:b8:2a:b1:ff:8f:39:77: 73:76:cc:13:40:fb:72:47:24:4d:1a:e6:76:d5:71:a6:69:de: 16:ca:8d:68:80:1e:0b:8b:69:5f:30:42:5b:95:75:ad:47:a1: b9:ee:52:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM53BZfwDS53vRELR5stMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MDE4ZTdiNTJiZDMyNjhhYTRkNWQzYWE1NzdmNDdkMGYx ODc1MDQwHhcNMjYwMjA5MDcwMDI3WhcNMjYwMjEwMDcwMDI3WjAzMTEwLwYDVQQD Eyg2ZDE1YzdjNzlhNjc3ZWRlZDY2YjRmNDVkYmVjOGMzNjlhOTUxMTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI9oWCQKkJlo7JzAdtpP1ao8ISNe 8F6LO443V8ESpTwJHQS43Kds0k5BjB5Cu9t3MbNvC6awwHPT+EZzp2tg0ZPqBrLu XS/N2vInY1RGNdItUBaP6fsurw3V9qF/G/1/6jvEg6lSqfsGKIp8EOT9QBsjZUwg dB8ssEuhqL6v1SOWQ1eGX056/EbtKQ+soU8irE8NQkMcYuknc0aUtzkjhnU0Zr+v S2hAgvgL+31pxkm/9Y3wZH0XoiGSh6nL+ukWLrdxRG2tMEDqjZ7Z+rj7Qdtypil7 XEWBk5HFeEcoqpQppzy8vEMNbnIvNvtxalBR/g9/ImnafQ8L+jsdj7JWdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0Vx8eaZ37e1mtPRdvsjDaalRFiMB8GA1UdIwQY MBaAFAYBjntSvTJoqk1dOqV39H0PGHUEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9mZGM5YjAtNzE4NS00YjE4LTg1N2Qt MWQ5ZmU4YWExMmFiLzEvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9mZGM5YjAtNzE4NS00YjE4LTg1N2QtMWQ5ZmU4YWExMmFi LzEvQmdHT2UxSzlNbWlxVFYwNnBYZjBmUThZZFFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANj81RUn3 kPfjB8HuOOub2tlCAXW0cfcgMhemTUM60X13LS80nPYXplKf0J1GILEf+M21G04W saEp4PE8p40Xr5ti1Zv4/EW4wQOmVb5yk5wVbRSD5ExB2yUiBM4zvqV9KHnqY8le /UBx+r7rGgv80IgBdAgXeB/zW4KpQkJHZ2N7tjldu3wMbWhWhJunoGZkCYPWN8as 9BjDpcno2Isyrm92xjJ5xkzTQyC03+TRzD6vRIgFpca0C1xGGAZHSJ/UsVpHgq77 NSDICagyi96TfMS4KrH/jzl3c3bME0D7ckckTRrmdtVxpmneFsqNaIAeC4tpXzBC W5V1rUehue5SAw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:50 2026 by rpki-client