This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft File: bgC7pk9Ra41jNaAc8wS4It7hrtA.mft (raw, json) Hash identifier: CZn4GxgfKgXpgI8SEtM/9k4SxCseeBNWSHbwjGj4AP0= Subject key identifier: 10:64:AF:34:E3:1C:E3:0B:08:F2:10:88:A5:89:D5:EE:A8:A6:C4:ED Authority key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0 Certificate issuer: /CN=6e00bba64f516b8d6335a01cf304b822dee1aed0 Certificate serial: 019C43FE23A52F1BF69572DF75E81BE50763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 20:00:54 +0000 Manifest this update: Mon 09 Feb 2026 20:00:54 +0000 Manifest next update: Tue 10 Feb 2026 20:00:54 +0000 Files and hashes: 1: bgC7pk9Ra41jNaAc8wS4It7hrtA.crl (hash: Hm6zxZrvZmroItqSHQkAEZ+u0BRaLIAbIRCx3Bgf+60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:23:a5:2f:1b:f6:95:72:df:75:e8:1b:e5:07:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0 Validity Not Before: Feb 9 20:00:54 2026 GMT Not After : Feb 10 20:00:54 2026 GMT Subject: CN=1064af34e31ce30b08f21088a589d5eea8a6c4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:af:d0:6f:6d:86:6b:15:1f:23:dc:60:e6:5b: 60:68:1d:9d:1f:c3:5f:f0:ed:9d:dc:76:63:c0:f8: a4:46:bf:a7:45:74:36:db:48:26:e8:83:2c:b3:bc: 9a:8f:61:91:e0:22:61:ef:a7:18:35:53:dc:6f:1d: 91:5d:a4:30:7b:1b:11:8d:8d:82:bc:ae:05:5f:a5: 2f:08:e0:05:8f:af:cc:4a:d0:b3:88:36:45:0f:d8: 58:a9:c1:86:ba:2f:24:e1:45:4d:8d:bf:20:74:67: 3c:37:fd:d2:fd:22:8e:2e:19:0f:a6:b9:c3:23:08: 53:1f:2a:11:26:c4:42:a4:20:93:7a:2e:a0:c9:97: 81:a2:ea:8f:a8:d1:24:3a:f1:2c:94:29:b9:bf:d8: 36:47:53:1d:af:7e:5c:df:ab:f7:30:cf:c6:1e:8c: fa:4b:c1:c5:00:1e:b1:67:31:b6:79:f7:c5:6a:85: a8:7d:84:f7:e9:6f:7d:2d:27:5e:b0:e1:b5:e3:65: 22:99:be:dd:ae:97:fe:52:48:97:25:1f:51:fe:03: aa:7d:07:ab:90:87:ec:57:20:da:16:38:47:0a:61: f9:22:7e:03:b5:70:31:fd:6c:87:17:83:23:27:46: 50:9f:32:58:6a:88:16:5c:53:f1:3e:3e:fa:00:2d: ee:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:64:AF:34:E3:1C:E3:0B:08:F2:10:88:A5:89:D5:EE:A8:A6:C4:ED X509v3 Authority Key Identifier: keyid:6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e3:05:cf:dc:b2:41:db:e6:4a:8c:63:65:2e:09:47:ac:c5: bd:90:a1:35:58:01:23:06:27:79:d1:66:01:d4:30:b1:1d:f4: a9:a1:92:84:f6:69:b1:5a:ba:4c:f3:a9:07:bd:e1:dd:f4:f5: 95:90:22:2e:09:42:9d:e2:4e:e3:5e:29:06:7c:cb:65:e3:a7: f2:43:1d:56:25:25:51:1f:42:46:78:57:33:bb:c8:e0:9e:30: 9e:13:dd:df:62:0a:93:47:61:e0:cf:33:f8:b0:df:4e:79:c2: 25:e3:93:50:3e:46:dc:a3:46:54:c2:a3:39:a2:b9:f0:0e:c5: 4e:05:db:bb:3d:cf:32:e0:e5:14:49:01:f4:8f:86:59:d6:d5: b9:30:09:11:b3:4b:b9:cf:67:09:06:77:b9:23:b9:fd:f8:4c: 23:1c:89:a9:2a:9e:ba:58:a9:dc:2f:bc:98:36:68:d2:e8:91: ea:1d:6b:08:7e:a5:68:05:d7:6c:e0:f7:2d:6e:7c:bb:1d:92: 67:b3:14:f2:f9:0c:81:e3:5d:df:06:09:f8:ae:dc:05:49:2b: 55:8d:cd:fc:66:df:8c:f6:23:19:ad:3f:8a:36:89:4c:90:77: f1:ea:04:de:be:88:6d:e2:29:a8:de:19:41:1a:a7:52:b6:b0: 9b:2a:3a:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/iOlLxv2lXLfdegb5QdjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMDBiYmE2NGY1MTZiOGQ2MzM1YTAxY2YzMDRiODIyZGVl MWFlZDAwHhcNMjYwMjA5MjAwMDU0WhcNMjYwMjEwMjAwMDU0WjAzMTEwLwYDVQQD EygxMDY0YWYzNGUzMWNlMzBiMDhmMjEwODhhNTg5ZDVlZWE4YTZjNGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxa/Qb22GaxUfI9xg5ltgaB2dH8Nf 8O2d3HZjwPikRr+nRXQ220gm6IMss7yaj2GR4CJh76cYNVPcbx2RXaQwexsRjY2C vK4FX6UvCOAFj6/MStCziDZFD9hYqcGGui8k4UVNjb8gdGc8N/3S/SKOLhkPprnD IwhTHyoRJsRCpCCTei6gyZeBouqPqNEkOvEslCm5v9g2R1Mdr35c36v3MM/GHoz6 S8HFAB6xZzG2effFaoWofYT36W99LSdesOG142Uimb7drpf+UkiXJR9R/gOqfQer kIfsVyDaFjhHCmH5In4DtXAx/WyHF4MjJ0ZQnzJYaogWXFPxPj76AC3upwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBkrzTjHOMLCPIQiKWJ1e6opsTtMB8GA1UdIwQY MBaAFG4Au6ZPUWuNYzWgHPMEuCLe4a7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmdDN3BrOVJhNDFqTmFBYzh3UzRJdDdocnRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hZTVlNmMtYzcwZi00MGYyLTg5MGQt NTc1Y2Y1ZDMzNWU0LzEvYmdDN3BrOVJhNDFqTmFBYzh3UzRJdDdocnRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9hZTVlNmMtYzcwZi00MGYyLTg5MGQtNTc1Y2Y1ZDMzNWU0 LzEvYmdDN3BrOVJhNDFqTmFBYzh3UzRJdDdocnRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOMFz9yy QdvmSoxjZS4JR6zFvZChNVgBIwYnedFmAdQwsR30qaGShPZpsVq6TPOpB73h3fT1 lZAiLglCneJO414pBnzLZeOn8kMdViUlUR9CRnhXM7vI4J4wnhPd32IKk0dh4M8z +LDfTnnCJeOTUD5G3KNGVMKjOaK58A7FTgXbuz3PMuDlFEkB9I+GWdbVuTAJEbNL uc9nCQZ3uSO5/fhMIxyJqSqeulip3C+8mDZo0uiR6h1rCH6laAXXbOD3LW58ux2S Z7MU8vkMgeNd3wYJ+K7cBUkrVY3N/GbfjPYjGa0/ijaJTJB38eoE3r6IbeIpqN4Z QRqnUrawmyo6cw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:59 2026 by rpki-client