This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft File: B2KQRhen92vQw05C0bl_fIPc8Cg.mft (raw, json) Hash identifier: F8VZ83D3NaFyOJ4Yo3fVsmCNZJjsSL4ska+4VhvPi08= Subject key identifier: C0:7C:61:D2:4B:79:AC:A3:79:C9:4B:2C:B0:16:BD:83:BD:F2:EF:82 Authority key identifier: 07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28 Certificate issuer: /CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028 Certificate serial: 019C4321D7D9D35CB9CFCACA54FF2D056845 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 16:00:17 +0000 Manifest this update: Mon 09 Feb 2026 16:00:17 +0000 Manifest next update: Tue 10 Feb 2026 16:00:17 +0000 Files and hashes: 1: B2KQRhen92vQw05C0bl_fIPc8Cg.crl (hash: gRZOUWntykyfFh1lA7r8qYbwlOK9/JqjJzYYNKqZubA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d7:d9:d3:5c:b9:cf:ca:ca:54:ff:2d:05:68:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0762904617a7f76bd0c34e42d1b97f7c83dcf028 Validity Not Before: Feb 9 16:00:17 2026 GMT Not After : Feb 10 16:00:17 2026 GMT Subject: CN=c07c61d24b79aca379c94b2cb016bd83bdf2ef82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:79:ce:64:4d:c3:a0:e8:91:eb:b8:2f:77:35: 74:7e:4a:a4:41:11:d0:37:2d:a1:61:ec:ff:d0:f7: fd:b4:5c:f9:e1:4a:16:fa:38:5b:42:2a:21:7d:13: 9c:a5:35:34:4b:49:25:cb:e3:b0:f2:2b:cb:c1:9a: a7:03:34:65:d8:e6:b1:8b:fa:f9:82:5d:09:c0:56: 67:71:7d:d6:8c:35:ec:c8:41:e1:33:3f:60:43:71: ee:3a:00:e5:32:a5:1e:30:06:b4:5f:dd:a0:6c:8f: e5:90:34:84:7a:76:bd:99:34:40:72:ec:17:73:82: 49:fb:22:8b:78:29:de:23:59:de:47:f1:c0:f5:7d: fb:fe:c6:38:89:eb:54:81:ca:86:b8:8b:18:23:ae: 98:06:fb:9d:d8:3e:11:ea:7c:57:3b:d8:ad:be:29: 5f:34:64:66:8a:ec:63:55:6c:bf:30:0f:ee:9b:b9: c8:62:3c:a7:01:51:8e:a7:fd:23:73:e6:e5:47:f4: 0d:20:58:51:81:10:e8:c9:ed:25:2a:51:f3:9a:6a: 88:62:3e:df:60:7f:a6:96:25:e3:36:67:8d:b1:df: 4b:83:ef:e4:d9:22:d3:50:02:e6:f7:27:f6:f9:37: e4:b2:aa:41:c8:68:83:83:ae:5f:de:07:ab:a2:9a: 75:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7C:61:D2:4B:79:AC:A3:79:C9:4B:2C:B0:16:BD:83:BD:F2:EF:82 X509v3 Authority Key Identifier: keyid:07:62:90:46:17:A7:F7:6B:D0:C3:4E:42:D1:B9:7F:7C:83:DC:F0:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2KQRhen92vQw05C0bl_fIPc8Cg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/474073-a995-4425-9349-04248e377af5/1/B2KQRhen92vQw05C0bl_fIPc8Cg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:49:09:b8:b4:52:a8:4c:67:a7:7b:d8:ce:72:7a:31:ff:a3: 9d:93:1e:97:a8:de:95:f1:56:d4:76:0c:3c:8d:88:40:f1:c9: 6a:83:b5:41:74:0b:c4:dc:b1:d1:5a:dd:8d:e5:19:8c:37:bd: b1:81:52:fb:03:b0:71:ed:07:05:50:eb:4b:d8:ce:fd:ab:5c: e9:19:8c:17:a7:7d:a3:3c:22:f2:58:28:e9:85:6e:8a:2e:a8: 27:7b:a4:76:4a:7b:5a:cc:50:88:33:f8:1c:e1:2e:56:cd:c1: f1:eb:d9:bf:44:5a:90:51:b0:79:33:e4:27:b9:8b:32:bf:ec: bb:83:11:45:ab:c2:6e:10:95:3b:ad:c5:01:02:cd:1a:42:3b: 8d:bb:89:c7:2a:a9:d3:ff:e8:cd:e8:de:40:9f:34:b8:1a:e7: 50:fe:33:b3:5b:87:76:95:cb:de:28:25:9b:ea:8a:31:91:ef: a5:1c:33:bc:00:5d:a3:74:88:ab:39:99:2a:c2:d0:83:4c:ed: d8:b0:b5:d7:30:ca:f7:7a:73:d5:0a:6d:43:c2:14:ff:da:76: 76:a8:4a:89:b5:72:7d:67:0d:07:1a:a2:df:cc:a0:1b:16:07: 07:48:0e:66:95:07:1a:62:9e:30:03:5a:a9:3f:52:41:2e:3c: 9a:35:02:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdfZ01y5z8rKVP8tBWhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3NjI5MDQ2MTdhN2Y3NmJkMGMzNGU0MmQxYjk3ZjdjODNk Y2YwMjgwHhcNMjYwMjA5MTYwMDE3WhcNMjYwMjEwMTYwMDE3WjAzMTEwLwYDVQQD EyhjMDdjNjFkMjRiNzlhY2EzNzljOTRiMmNiMDE2YmQ4M2JkZjJlZjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XnOZE3DoOiR67gvdzV0fkqkQRHQ Ny2hYez/0Pf9tFz54UoW+jhbQiohfROcpTU0S0kly+Ow8ivLwZqnAzRl2Oaxi/r5 gl0JwFZncX3WjDXsyEHhMz9gQ3HuOgDlMqUeMAa0X92gbI/lkDSEena9mTRAcuwX c4JJ+yKLeCneI1neR/HA9X37/sY4ietUgcqGuIsYI66YBvud2D4R6nxXO9itvilf NGRmiuxjVWy/MA/um7nIYjynAVGOp/0jc+blR/QNIFhRgRDoye0lKlHzmmqIYj7f YH+mliXjNmeNsd9Lg+/k2SLTUALm9yf2+TfksqpByGiDg65f3geropp1QwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMB8YdJLeayjeclLLLAWvYO98u+CMB8GA1UdIwQY MBaAFAdikEYXp/dr0MNOQtG5f3yD3PAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDkt MDQyNDhlMzc3YWY1LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi80NzQwNzMtYTk5NS00NDI1LTkzNDktMDQyNDhlMzc3YWY1 LzEvQjJLUVJoZW45MnZRdzA1QzBibF9mSVBjOENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaUkJuLRS qExnp3vYznJ6Mf+jnZMel6jelfFW1HYMPI2IQPHJaoO1QXQLxNyx0VrdjeUZjDe9 sYFS+wOwce0HBVDrS9jO/atc6RmMF6d9ozwi8lgo6YVuii6oJ3ukdkp7WsxQiDP4 HOEuVs3B8evZv0RakFGweTPkJ7mLMr/su4MRRavCbhCVO63FAQLNGkI7jbuJxyqp 0//ozejeQJ80uBrnUP4zs1uHdpXL3iglm+qKMZHvpRwzvABdo3SIqzmZKsLQg0zt 2LC11zDK93pz1QptQ8IU/9p2dqhKibVyfWcNBxqi38ygGxYHB0gOZpUHGmKeMANa qT9SQS48mjUCeg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:07 2026 by rpki-client