This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft File: bOrnoCiJYKda-M6A54iFQ8f3fNc.mft (raw, json) Hash identifier: 0WeTLHxpIJf6disSpMaaoHHCVMdr+WpVc1FQy3odH+c= Subject key identifier: B5:DB:61:09:23:A7:51:40:4A:C4:91:A1:B0:63:A8:2C:43:3D:48:48 Authority key identifier: 6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7 Certificate issuer: /CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7 Certificate serial: 019C42EAFABBA9A580E212BD5695A2B5D614 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft Manifest number: 151E Signing time: Mon 09 Feb 2026 15:00:21 +0000 Manifest this update: Mon 09 Feb 2026 15:00:21 +0000 Manifest next update: Tue 10 Feb 2026 15:00:21 +0000 Files and hashes: 1: 06iciWMnCvsa1G81d73kMnybKl0.roa (hash: 9/zv2guSkQOWznP9YeG/uAwYzC8tOeda3ReFt/vmKVQ=) 2: bOrnoCiJYKda-M6A54iFQ8f3fNc.crl (hash: 13MgTjUYqds45erYhiS7Vt03Az2RL+6gkJXosfGpHqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:fa:bb:a9:a5:80:e2:12:bd:56:95:a2:b5:d6:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ceae7a0288960a75af8ce80e7888543c7f77cd7 Validity Not Before: Feb 9 15:00:21 2026 GMT Not After : Feb 10 15:00:21 2026 GMT Subject: CN=b5db610923a751404ac491a1b063a82c433d4848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:b0:8d:af:7c:3e:47:ff:0b:4c:b6:76:c8: cc:86:f3:73:b1:45:0f:e2:30:ad:dd:be:ff:b9:67: 2f:11:0e:2d:f0:14:7d:da:4d:62:25:ac:81:66:bd: 02:6c:95:e4:6b:7a:e4:0d:5f:69:ee:a9:5e:ae:fd: 39:1b:8d:4a:f0:22:91:52:1c:ac:7d:24:f3:a1:2f: 5d:2f:49:fe:d1:5e:36:45:b8:3b:aa:49:38:ea:94: 25:ba:84:b5:46:e3:69:a1:6a:28:e9:53:f4:2d:7f: 0b:72:70:6a:74:5a:97:06:bf:e1:a0:33:a8:98:06: b3:27:74:cd:f6:cf:71:81:f7:c3:eb:05:b0:07:66: f6:7e:9b:e4:7e:8a:88:c5:b4:91:ee:fc:ed:74:68: f0:e2:92:b0:3a:89:d8:78:74:3c:95:da:d1:f3:d7: 73:33:de:cf:40:e9:7b:1a:67:aa:20:f0:da:1a:27: 5c:4a:ab:6f:e8:2a:2a:72:71:07:10:c9:4b:7b:43: 67:b5:4e:76:09:20:a7:4f:18:bc:9b:4e:f6:c8:95: b4:2d:aa:f8:58:b8:ad:f6:55:bd:ba:64:3b:7a:6d: c7:6a:1d:b8:5d:6e:1c:f1:8b:f4:01:57:e3:8b:68: 1a:80:29:d6:55:19:e9:e5:aa:75:a1:e9:6d:e2:ad: 6f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DB:61:09:23:A7:51:40:4A:C4:91:A1:B0:63:A8:2C:43:3D:48:48 X509v3 Authority Key Identifier: keyid:6C:EA:E7:A0:28:89:60:A7:5A:F8:CE:80:E7:88:85:43:C7:F7:7C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOrnoCiJYKda-M6A54iFQ8f3fNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/708f76-56ef-433f-9eac-4a4a3b0408a6/1/bOrnoCiJYKda-M6A54iFQ8f3fNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b4:3f:27:80:3d:4e:bb:cc:f7:96:5e:cc:ac:b7:95:ef:3b: 06:c5:6c:42:84:d6:d5:6b:c0:f4:19:56:49:6e:04:bc:c4:44: f6:cf:b6:d9:60:9e:d9:d4:0a:35:5a:82:f8:19:a1:1b:47:be: 14:7c:6e:94:e5:95:ad:dc:d7:de:7d:86:ad:e6:81:26:92:ad: 93:e3:ea:6c:1a:18:a5:b1:32:2a:48:e9:5e:3e:2f:6b:bc:7b: 62:29:60:2e:af:67:76:3d:f4:58:dd:03:56:3b:71:18:62:46: 14:4b:9f:b3:23:1e:f5:c8:ff:88:45:3a:a0:e0:a1:2c:b9:80: 1a:14:e1:7a:37:29:83:cc:5a:f8:7a:4c:ae:83:48:11:e0:89: 98:ed:8d:60:ad:b6:b2:c9:2a:69:27:cb:3d:d7:94:9d:b6:ea: 34:96:cc:34:cc:99:a6:b8:c4:36:f6:db:5b:e4:88:e3:1c:24: db:7f:b7:c2:6f:d4:cc:07:d8:72:6d:41:8a:ad:f8:38:e6:70: fe:ea:26:10:d8:6e:05:8e:9c:2c:5f:f5:db:5a:d7:2e:17:0c: 2b:61:11:20:30:46:55:1a:53:38:db:8e:16:b8:75:c9:dd:66: a4:fd:27:77:e8:08:9c:48:71:23:1b:eb:4d:08:38:f7:9a:b5: 05:80:34:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6vq7qaWA4hK9VpWitdYUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZWFlN2EwMjg4OTYwYTc1YWY4Y2U4MGU3ODg4NTQzYzdm NzdjZDcwHhcNMjYwMjA5MTUwMDIxWhcNMjYwMjEwMTUwMDIxWjAzMTEwLwYDVQQD EyhiNWRiNjEwOTIzYTc1MTQwNGFjNDkxYTFiMDYzYTgyYzQzM2Q0ODQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUGwja98Pkf/C0y2dsjMhvNzsUUP 4jCt3b7/uWcvEQ4t8BR92k1iJayBZr0CbJXka3rkDV9p7qlerv05G41K8CKRUhys fSTzoS9dL0n+0V42Rbg7qkk46pQluoS1RuNpoWoo6VP0LX8LcnBqdFqXBr/hoDOo mAazJ3TN9s9xgffD6wWwB2b2fpvkfoqIxbSR7vztdGjw4pKwOonYeHQ8ldrR89dz M97PQOl7GmeqIPDaGidcSqtv6CoqcnEHEMlLe0NntU52CSCnTxi8m072yJW0Lar4 WLit9lW9umQ7em3Hah24XW4c8Yv0AVfji2gagCnWVRnp5ap1oelt4q1vQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXbYQkjp1FASsSRobBjqCxDPUhIMB8GA1UdIwQY MBaAFGzq56AoiWCnWvjOgOeIhUPH93zXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMt NGE0YTNiMDQwOGE2LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS83MDhmNzYtNTZlZi00MzNmLTllYWMtNGE0YTNiMDQwOGE2 LzEvYk9ybm9DaUpZS2RhLU02QTU0aUZROGYzZk5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobQ/J4A9 TrvM95ZezKy3le87BsVsQoTW1WvA9BlWSW4EvMRE9s+22WCe2dQKNVqC+BmhG0e+ FHxulOWVrdzX3n2GreaBJpKtk+PqbBoYpbEyKkjpXj4va7x7YilgLq9ndj30WN0D VjtxGGJGFEufsyMe9cj/iEU6oOChLLmAGhThejcpg8xa+HpMroNIEeCJmO2NYK22 sskqaSfLPdeUnbbqNJbMNMyZprjENvbbW+SI4xwk23+3wm/UzAfYcm1Biq34OOZw /uomENhuBY6cLF/121rXLhcMK2ERIDBGVRpTONuOFrh1yd1mpP0nd+gInEhxIxvr TQg495q1BYA0mg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:06 2026 by rpki-client