This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json) Hash identifier: UrJSV92qEfQgbWzjaNBXALabWh5kgodyrJ/BPvAvPOE= Subject key identifier: 97:69:93:19:BB:38:BA:53:D6:E9:36:02:CB:AA:45:F8:BE:09:DD:C4 Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e Certificate serial: 019C41A20902B910AEF83AD7F92B07DF422F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft Manifest number: 040D Signing time: Mon 09 Feb 2026 09:01:04 +0000 Manifest this update: Mon 09 Feb 2026 09:01:04 +0000 Manifest next update: Tue 10 Feb 2026 09:01:04 +0000 Files and hashes: 1: PGvLDQOEl1eDAyZzLgaLVXSVE_M.roa (hash: 84nzVcTSlRfWBNj/SgSbr5SPyeZcNdC5TuBdV+hRaRc=) 2: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: hKAnuEJPcui2Yc7VxBQNDB//cXclkrOeSmCf25Adheg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:09:02:b9:10:ae:f8:3a:d7:f9:2b:07:df:42:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e Validity Not Before: Feb 9 09:01:04 2026 GMT Not After : Feb 10 09:01:04 2026 GMT Subject: CN=97699319bb38ba53d6e93602cbaa45f8be09ddc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:92:8d:b1:50:49:d3:b3:a4:9b:23:6d:35:2e: 56:cf:a1:de:21:fc:4d:69:7e:d0:ee:1a:1e:49:3c: f6:a0:c0:9f:35:8a:8f:c3:20:12:d9:a4:88:62:f1: 90:c2:de:02:1d:23:7a:b5:b5:d9:22:61:11:7a:c8: 11:3b:0c:44:86:bf:2f:d0:33:48:3f:46:d4:55:63: e5:b7:65:b8:c9:12:2b:94:9e:48:fc:83:ee:96:f6: 83:3d:a6:69:cc:22:cf:26:c9:09:a7:c1:a7:8a:ea: 48:93:f2:eb:fd:19:8c:a6:24:63:38:f4:c8:c1:ef: ad:72:23:a0:24:92:ae:cc:f1:a4:a1:7d:cd:de:5c: e5:92:88:99:c5:22:9d:b1:c4:ce:d1:e6:b7:bc:c0: a1:d5:5c:bd:7a:eb:ee:ee:ef:3f:8b:99:83:38:dd: fd:f0:bb:3d:f0:42:4e:de:b6:b7:eb:4d:bc:a7:ba: e6:a3:f6:b6:d4:ee:67:97:79:86:59:42:1a:bb:9f: b7:d2:04:3e:48:56:5b:01:97:74:cf:87:27:70:5f: 24:4b:7d:49:0b:ae:b5:3c:c0:be:cd:28:87:a5:57: fd:e6:34:97:36:1e:ce:4e:5c:8f:eb:61:cf:00:aa: d4:63:e4:cb:da:19:3a:7b:ab:42:07:26:39:a7:a9: dd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:69:93:19:BB:38:BA:53:D6:E9:36:02:CB:AA:45:F8:BE:09:DD:C4 X509v3 Authority Key Identifier: keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:c3:fc:85:79:da:5f:7d:87:69:33:c9:a9:de:2b:65:10:04: dc:52:c6:6e:e9:ee:71:13:fb:92:9d:61:f8:3a:80:b7:2d:47: dc:b9:18:ce:ff:82:84:a2:99:2b:ea:e7:29:db:65:a9:3f:b5: b6:53:d9:5d:a1:ac:27:8a:e1:23:f5:74:ff:e1:75:81:88:ac: 3b:c5:ae:8d:17:cb:fb:aa:0a:e3:10:79:c3:90:e4:f8:6c:8d: b6:f5:b5:89:5b:e7:b2:86:9b:ee:19:f7:5c:b2:d3:09:c9:ca: 37:b4:63:91:a3:b2:0a:4f:23:9a:a8:ec:65:94:d7:bd:fe:07: 04:d8:bd:e1:1f:9b:e4:89:99:ef:b5:0a:68:40:ba:cf:93:3f: 5c:8c:21:66:4f:ca:48:58:c0:36:59:b1:34:6b:9e:3d:e3:7f: e4:49:9c:5c:1d:9f:c0:9f:84:d4:5d:fe:44:85:09:d6:dc:9c: 1a:76:14:d7:84:1b:e1:48:11:7d:55:a9:ed:65:61:37:6e:96: ef:d1:71:96:97:34:26:d8:a0:7d:c0:a5:09:c9:fb:e1:a8:6c: 19:7e:4e:e7:ad:fa:39:fa:61:25:ca:cc:ed:53:7e:e1:c9:e3: 0e:92:2b:2f:9f:c2:58:56:fb:30:8a:61:bf:3a:4c:96:d8:17: c1:7a:6e:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBogkCuRCu+DrX+SsH30IvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZDJjZWQzNTJmMDFmN2ViNWRjNzYxOWVkNzE0YzZiNmE1 Yzc5MWUwHhcNMjYwMjA5MDkwMTA0WhcNMjYwMjEwMDkwMTA0WjAzMTEwLwYDVQQD Eyg5NzY5OTMxOWJiMzhiYTUzZDZlOTM2MDJjYmFhNDVmOGJlMDlkZGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JKNsVBJ07OkmyNtNS5Wz6HeIfxN aX7Q7hoeSTz2oMCfNYqPwyAS2aSIYvGQwt4CHSN6tbXZImEResgROwxEhr8v0DNI P0bUVWPlt2W4yRIrlJ5I/IPulvaDPaZpzCLPJskJp8GniupIk/Lr/RmMpiRjOPTI we+tciOgJJKuzPGkoX3N3lzlkoiZxSKdscTO0ea3vMCh1Vy9euvu7u8/i5mDON39 8Ls98EJO3ra36028p7rmo/a21O5nl3mGWUIau5+30gQ+SFZbAZd0z4cncF8kS31J C661PMC+zSiHpVf95jSXNh7OTlyP62HPAKrUY+TL2hk6e6tCByY5p6ndQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdpkxm7OLpT1uk2AsuqRfi+Cd3EMB8GA1UdIwQY MBaAFG3SztNS8B9+tdx2Ge1xTGtqXHkeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8yNDVlMWEtMDYxMi00NTk2LWE5NWEt OWRmNzI1MzBiNjY5LzEvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8yNDVlMWEtMDYxMi00NTk2LWE5NWEtOWRmNzI1MzBiNjY5 LzEvYmRMTzAxTHdIMzYxM0hZWjdYRk1hMnBjZVI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8P8hXna X32HaTPJqd4rZRAE3FLGbunucRP7kp1h+DqAty1H3LkYzv+ChKKZK+rnKdtlqT+1 tlPZXaGsJ4rhI/V0/+F1gYisO8WujRfL+6oK4xB5w5Dk+GyNtvW1iVvnsoab7hn3 XLLTCcnKN7RjkaOyCk8jmqjsZZTXvf4HBNi94R+b5ImZ77UKaEC6z5M/XIwhZk/K SFjANlmxNGuePeN/5EmcXB2fwJ+E1F3+RIUJ1tycGnYU14Qb4UgRfVWp7WVhN26W 79Fxlpc0JtigfcClCcn74ahsGX5O5636OfphJcrM7VN+4cnjDpIrL5/CWFb7MIph vzpMltgXwXpuGg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:27 2026 by rpki-client