This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft File: BV14S5ASZjw0C_Z_rLYb--EIcbg.mft (raw, json) Hash identifier: 3DNwMNhBHx9i8O7PpPEyuSnxy/yg4MPU1iZw9J5SuvU= Subject key identifier: 15:D2:A1:6D:56:02:D0:2A:C1:60:E4:FF:D0:C7:25:01:05:27:06:10 Authority key identifier: 05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8 Certificate issuer: /CN=055d784b9012663c340bf67facb61bfbe10871b8 Certificate serial: 019C4133C4680F8D2988B1E10FB3EA1D67A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft Manifest number: 0D16 Signing time: Mon 09 Feb 2026 07:00:37 +0000 Manifest this update: Mon 09 Feb 2026 07:00:37 +0000 Manifest next update: Tue 10 Feb 2026 07:00:37 +0000 Files and hashes: 1: BV14S5ASZjw0C_Z_rLYb--EIcbg.crl (hash: Smg8pUqQTUTYmV3A2+wH7CsZ3tFTdQI+Q5NuXx+xs3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:c4:68:0f:8d:29:88:b1:e1:0f:b3:ea:1d:67:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=055d784b9012663c340bf67facb61bfbe10871b8 Validity Not Before: Feb 9 07:00:37 2026 GMT Not After : Feb 10 07:00:37 2026 GMT Subject: CN=15d2a16d5602d02ac160e4ffd0c7250105270610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b1:dc:03:da:94:7b:e2:a4:a9:55:39:88:7b: 84:4a:31:8c:9f:1d:44:3d:d3:ee:28:fa:84:6b:f8: dd:f7:d0:97:b5:71:18:76:13:a4:8d:c3:22:92:ee: c1:ec:00:2e:26:59:de:50:41:08:d5:98:2f:85:9c: c7:37:88:aa:83:79:87:7b:0a:73:08:19:17:25:51: d0:13:0d:22:53:1c:f5:93:01:4b:76:8c:b7:33:fd: c1:fe:0e:4b:3f:6a:9b:83:ca:b5:88:2e:85:4e:32: b6:de:1e:c2:92:6f:06:13:59:5b:6d:49:a9:75:2a: cb:ce:16:b6:4f:84:71:06:33:4f:ff:f8:d9:64:d8: 15:e1:c1:63:60:54:13:a1:0f:ea:20:81:16:7d:27: 11:94:32:5f:56:69:65:93:5c:fc:7c:cb:f2:30:43: eb:7b:09:51:47:12:e1:6c:37:1c:0b:45:97:23:79: 40:9c:a7:d8:db:4c:87:cf:1d:fe:03:56:be:54:12: e0:3f:a1:d0:d4:57:17:64:a5:85:9b:ab:97:9b:40: 2b:4a:e5:c2:1e:66:67:4d:cb:5e:f0:d1:8f:31:9d: 98:f0:41:bb:2d:4d:d6:03:55:49:59:ac:e5:16:d8: cc:68:71:53:86:73:ac:bb:97:fb:cd:e7:00:5b:68: f2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D2:A1:6D:56:02:D0:2A:C1:60:E4:FF:D0:C7:25:01:05:27:06:10 X509v3 Authority Key Identifier: keyid:05:5D:78:4B:90:12:66:3C:34:0B:F6:7F:AC:B6:1B:FB:E1:08:71:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV14S5ASZjw0C_Z_rLYb--EIcbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/57c0e8-393c-45c9-881f-3b4205db753a/1/BV14S5ASZjw0C_Z_rLYb--EIcbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:bf:a6:75:e8:04:d7:35:f8:56:26:b7:dc:93:99:16:6c:dd: 9d:8d:2e:a4:e9:d7:05:34:4f:1e:67:8b:a1:54:d5:58:34:6c: 59:8c:ac:d0:ae:02:83:69:fc:23:88:71:ce:2b:a2:74:30:c2: 97:2b:17:39:6b:68:1d:bf:e5:4d:40:f5:0e:fe:fd:5f:73:8d: e1:50:3c:78:78:30:3c:6b:87:d4:ec:49:31:46:d8:c0:7d:b9: 74:bf:2f:f3:3a:30:48:20:3b:76:79:d6:b3:69:3a:2a:e9:8b: 06:bc:90:ac:a6:82:d9:f8:62:fd:88:c5:0e:7a:fe:cd:5d:68: 6a:2f:c0:3a:6d:ed:76:6f:f4:67:57:4d:dd:ca:88:f5:51:2b: fb:83:4a:70:63:5b:79:00:fe:6a:5d:47:2c:54:76:2b:b0:b9: f4:b8:32:75:c7:0f:17:1a:f2:37:c3:a6:f0:b5:07:26:7f:c5: 01:31:21:00:34:3e:5a:aa:7d:e4:54:7c:fd:da:20:f1:d0:11: e2:f5:17:4e:39:f7:68:84:bb:bd:3b:41:de:41:b1:6d:bf:f9: 66:11:e0:dc:14:81:ed:de:d0:1e:67:ee:82:7b:2e:03:93:70: e7:29:c8:7b:67:2a:3a:12:c1:18:ad:03:3f:11:34:7d:fd:06: d8:40:0e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM8RoD40piLHhD7PqHWegMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NWQ3ODRiOTAxMjY2M2MzNDBiZjY3ZmFjYjYxYmZiZTEw ODcxYjgwHhcNMjYwMjA5MDcwMDM3WhcNMjYwMjEwMDcwMDM3WjAzMTEwLwYDVQQD EygxNWQyYTE2ZDU2MDJkMDJhYzE2MGU0ZmZkMGM3MjUwMTA1MjcwNjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7HcA9qUe+KkqVU5iHuESjGMnx1E PdPuKPqEa/jd99CXtXEYdhOkjcMiku7B7AAuJlneUEEI1ZgvhZzHN4iqg3mHewpz CBkXJVHQEw0iUxz1kwFLdoy3M/3B/g5LP2qbg8q1iC6FTjK23h7Ckm8GE1lbbUmp dSrLzha2T4RxBjNP//jZZNgV4cFjYFQToQ/qIIEWfScRlDJfVmllk1z8fMvyMEPr ewlRRxLhbDccC0WXI3lAnKfY20yHzx3+A1a+VBLgP6HQ1FcXZKWFm6uXm0ArSuXC HmZnTcte8NGPMZ2Y8EG7LU3WA1VJWazlFtjMaHFThnOsu5f7zecAW2jyAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXSoW1WAtAqwWDk/9DHJQEFJwYQMB8GA1UdIwQY MBaAFAVdeEuQEmY8NAv2f6y2G/vhCHG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC81N2MwZTgtMzkzYy00NWM5LTg4MWYt M2I0MjA1ZGI3NTNhLzEvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC81N2MwZTgtMzkzYy00NWM5LTg4MWYtM2I0MjA1ZGI3NTNh LzEvQlYxNFM1QVNaancwQ19aX3JMWWItLUVJY2JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAab+mdegE 1zX4Via33JOZFmzdnY0upOnXBTRPHmeLoVTVWDRsWYys0K4Cg2n8I4hxziuidDDC lysXOWtoHb/lTUD1Dv79X3ON4VA8eHgwPGuH1OxJMUbYwH25dL8v8zowSCA7dnnW s2k6KumLBryQrKaC2fhi/YjFDnr+zV1oai/AOm3tdm/0Z1dN3cqI9VEr+4NKcGNb eQD+al1HLFR2K7C59LgydccPFxryN8Om8LUHJn/FATEhADQ+Wqp95FR8/dog8dAR 4vUXTjn3aIS7vTtB3kGxbb/5ZhHg3BSB7d7QHmfugnsuA5Nw5ynIe2cqOhLBGK0D PxE0ff0G2EAONA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:36 2026 by rpki-client