This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft File: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft (raw, json) Hash identifier: diE+E1DyZSVK7WljHsb4/2w112jMUI9J/8UhJF8NGGw= Subject key identifier: 63:FC:4A:FB:AB:4F:3E:03:47:92:16:09:B3:0E:98:42:E5:C3:19:C2 Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76 Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376 Certificate serial: 019C4133E19DB144FD70F648CA96AF13C421 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft Manifest number: 0ACE Signing time: Mon 09 Feb 2026 07:00:44 +0000 Manifest this update: Mon 09 Feb 2026 07:00:44 +0000 Manifest next update: Tue 10 Feb 2026 07:00:44 +0000 Files and hashes: 1: BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl (hash: AAIi+tHJbOKRM7zu2qqABOdoic63IdY7GEXwCiqUe3I=) 2: CI4ko7IFE2eF3AlAlzoIHGGOq_A.roa (hash: r0qwmSw9Inbl8qdHUq2nQr86Vl9zhDV6qpUzB9VSqQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:e1:9d:b1:44:fd:70:f6:48:ca:96:af:13:c4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376 Validity Not Before: Feb 9 07:00:44 2026 GMT Not After : Feb 10 07:00:44 2026 GMT Subject: CN=63fc4afbab4f3e0347921609b30e9842e5c319c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:36:a9:85:30:3e:96:e1:2d:b5:11:8c:1f:bc: a2:81:31:47:85:4d:68:64:e1:32:15:94:87:08:9c: fe:05:86:c4:8c:35:79:3b:24:5c:bc:c7:6a:b5:5f: 67:22:31:c1:e9:62:42:25:73:e2:b4:42:39:0c:97: e7:4c:c3:1d:75:0f:00:6c:67:55:0b:7d:9c:d8:c4: 43:a3:9b:f4:c5:1a:a5:c7:a7:79:ae:32:da:48:37: ed:cc:35:1c:6e:59:57:86:2e:85:e8:d6:83:9c:85: d6:8e:c5:56:08:e7:f1:47:5c:d8:03:c4:80:9b:ce: b8:ff:a7:0f:fb:c2:24:eb:f7:3f:30:63:60:85:3f: 9d:bb:78:fa:86:2e:21:e3:7d:a2:69:08:4d:df:24: 18:85:98:ed:80:19:09:0f:c0:d3:d6:86:7c:99:4d: 18:ee:02:5d:ae:2d:95:e8:41:fc:e7:9e:62:36:64: 32:39:54:7d:03:c1:25:aa:60:82:f8:5c:a0:04:ec: de:7e:b3:d2:bf:25:63:82:a4:99:bb:3b:05:3c:49: d7:d3:8e:44:36:1e:f4:cf:ce:93:32:4b:46:8c:95: 92:68:80:ed:a0:09:f2:4e:53:df:be:7d:86:70:09: 6a:0d:e8:d8:77:2b:12:d7:d8:01:dd:dc:8b:4c:dc: 9c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FC:4A:FB:AB:4F:3E:03:47:92:16:09:B3:0E:98:42:E5:C3:19:C2 X509v3 Authority Key Identifier: keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:97:07:e9:fc:8a:95:f8:7f:e7:58:b7:a0:3e:92:71:3d:47: 34:85:23:ad:fe:03:26:d5:8a:27:e9:22:cf:13:19:e9:ad:73: 04:b1:3c:9d:f1:d3:35:67:26:51:3d:fc:53:e3:fa:b6:9b:4a: 7d:14:4f:5d:c8:56:b7:a1:dc:bf:14:8b:5c:0e:64:2d:36:9d: af:36:8f:05:46:f6:64:de:ab:0f:c4:5d:aa:0f:72:f1:b2:53: 3b:12:d4:31:13:ab:f9:cd:4d:f2:4b:09:07:f1:aa:1d:8d:67: fc:b9:13:37:de:47:d0:39:42:0a:a9:00:26:62:ac:a2:96:bc: ea:73:2b:27:c4:97:c7:e0:0b:d0:b0:40:8d:53:d2:16:5b:77: 95:53:fe:d6:a5:46:8e:ee:2b:d7:25:2d:a4:b3:52:ba:95:c1: 5d:d3:d6:c9:a5:e4:74:6d:f8:98:ab:f7:0d:f8:c2:9b:16:0f: 78:4f:2c:78:0c:26:c7:0c:97:13:ea:78:c6:2f:47:8c:f1:b1: 58:5f:38:68:99:85:7a:d3:a8:6a:18:d0:78:90:9e:13:9d:e0: e2:27:89:54:d4:3e:23:8f:81:87:1e:5d:be:7a:1a:fb:d7:6a: 36:8d:36:4a:45:45:8f:63:ce:ce:79:cc:03:fe:87:97:86:17: 00:e0:c8:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM+GdsUT9cPZIypavE8QhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY0YTQzZTBiMDY1MTI0N2ZjMzYyOWM2MjdiOWMzODVm MGMzNzYwHhcNMjYwMjA5MDcwMDQ0WhcNMjYwMjEwMDcwMDQ0WjAzMTEwLwYDVQQD Eyg2M2ZjNGFmYmFiNGYzZTAzNDc5MjE2MDliMzBlOTg0MmU1YzMxOWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zaphTA+luEttRGMH7yigTFHhU1o ZOEyFZSHCJz+BYbEjDV5OyRcvMdqtV9nIjHB6WJCJXPitEI5DJfnTMMddQ8AbGdV C32c2MRDo5v0xRqlx6d5rjLaSDftzDUcbllXhi6F6NaDnIXWjsVWCOfxR1zYA8SA m864/6cP+8Ik6/c/MGNghT+du3j6hi4h432iaQhN3yQYhZjtgBkJD8DT1oZ8mU0Y 7gJdri2V6EH8555iNmQyOVR9A8ElqmCC+FygBOzefrPSvyVjgqSZuzsFPEnX045E Nh70z86TMktGjJWSaIDtoAnyTlPfvn2GcAlqDejYdysS19gB3dyLTNycYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGP8SvurTz4DR5IWCbMOmELlwxnCMB8GA1UdIwQY MBaAFAVvSkPgsGUSR/w2KcYnucOF8MN2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDct ZmU1OGY4NGRkM2ZkLzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yNWI2Y2UtYzIxMS00NjY4LTlhNDctZmU1OGY4NGRkM2Zk LzEvQlc5S1EtQ3daUkpIX0RZcHhpZTV3NFh3dzNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABpcH6fyK lfh/51i3oD6ScT1HNIUjrf4DJtWKJ+kizxMZ6a1zBLE8nfHTNWcmUT38U+P6tptK fRRPXchWt6HcvxSLXA5kLTadrzaPBUb2ZN6rD8Rdqg9y8bJTOxLUMROr+c1N8ksJ B/GqHY1n/LkTN95H0DlCCqkAJmKsopa86nMrJ8SXx+AL0LBAjVPSFlt3lVP+1qVG ju4r1yUtpLNSupXBXdPWyaXkdG34mKv3DfjCmxYPeE8seAwmxwyXE+p4xi9HjPGx WF84aJmFetOoahjQeJCeE53g4ieJVNQ+I4+Bhx5dvnoa+9dqNo02SkVFj2POznnM A/6Hl4YXAODInQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:55 2026 by rpki-client