This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft File: BaCPua9NbK_M-uOyjsbtScQj78Y.mft (raw, json) Hash identifier: bl/UEG2KkL7Vz6YbMtHpeFXJCHh3o07K88IULDD344A= Subject key identifier: 9C:8D:D8:95:6C:B3:99:5D:C9:78:EF:A2:28:13:20:B9:6F:88:2A:B9 Authority key identifier: 05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6 Certificate issuer: /CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6 Certificate serial: 019C420F4FD546F1B6D205247321038A8682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft Manifest number: 13C1 Signing time: Mon 09 Feb 2026 11:00:25 +0000 Manifest this update: Mon 09 Feb 2026 11:00:25 +0000 Manifest next update: Tue 10 Feb 2026 11:00:25 +0000 Files and hashes: 1: BaCPua9NbK_M-uOyjsbtScQj78Y.crl (hash: Klh3hedG4kqyTBFi7ni9yiXMahvTuqQLdt7i7ksoNYQ=) 2: G8Q8U9PXAXyP6GSlPYqobfziQzA.roa (hash: 34ZB7ek6+uTjMbRni0oLjT93sAaYBaeAPO9eFx4+uCg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:4f:d5:46:f1:b6:d2:05:24:73:21:03:8a:86:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a08fb9af4d6cafccfae3b28ec6ed49c423efc6 Validity Not Before: Feb 9 11:00:25 2026 GMT Not After : Feb 10 11:00:25 2026 GMT Subject: CN=9c8dd8956cb3995dc978efa2281320b96f882ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:eb:cf:0d:a7:57:99:47:0d:bb:b2:4b:97:e4: a9:8c:f2:e4:04:3d:f8:40:e7:d4:1b:03:c8:24:05: fe:24:2a:ca:29:ca:4e:a3:60:b8:5d:d2:89:52:25: 04:bf:75:f6:11:09:1d:63:81:de:8a:e9:f6:ae:6a: 43:f4:35:f1:76:d2:f7:01:f3:3a:85:7f:de:9f:ef: 1c:05:0e:16:5b:1b:1e:72:d5:59:d9:8c:a8:90:12: 45:62:08:4e:04:82:b0:e9:47:72:8c:0e:78:7f:16: f7:25:de:50:16:2e:9c:5c:36:9a:8f:63:18:5e:d2: fc:be:06:4b:fe:1c:00:4e:aa:05:ff:6a:da:af:ce: 2b:19:5c:cb:3f:a2:74:fb:5c:db:98:ed:35:d8:c7: 03:58:89:eb:cf:99:a5:09:d8:a5:93:e7:3c:e0:e1: f2:2d:f7:41:30:13:8d:7b:1a:a3:7c:02:01:37:ed: 06:25:51:ae:66:ff:65:92:f6:4c:41:51:de:ef:90: 48:d1:ae:bc:80:6b:5e:5c:8b:e9:c5:16:9d:9b:30: 95:5b:86:bc:3a:06:01:17:ab:df:24:8e:ac:70:5e: 73:63:e5:d2:5b:77:9c:82:9c:2a:49:cc:da:db:d7: 83:e5:42:4c:d5:ee:48:ab:e6:4c:94:93:34:aa:69: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:8D:D8:95:6C:B3:99:5D:C9:78:EF:A2:28:13:20:B9:6F:88:2A:B9 X509v3 Authority Key Identifier: keyid:05:A0:8F:B9:AF:4D:6C:AF:CC:FA:E3:B2:8E:C6:ED:49:C4:23:EF:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaCPua9NbK_M-uOyjsbtScQj78Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1e444e-1c9c-41b7-a371-d2b23a355eda/1/BaCPua9NbK_M-uOyjsbtScQj78Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:03:58:da:88:0a:07:de:fe:d8:16:f5:d6:dc:85:97:85:bf: 96:c5:66:5d:be:b0:2d:35:b4:39:10:cc:ae:89:9d:81:a2:61: 77:47:39:01:45:e7:a2:01:e8:3e:d9:f2:a5:a4:f4:37:17:6c: f3:39:68:0d:40:fb:7d:d2:01:35:97:44:b8:a7:15:9c:db:c8: 6f:73:f6:2a:8e:47:de:6e:c3:d0:c9:68:0f:92:20:54:96:2d: f2:64:c5:8f:3a:e2:8d:34:54:af:5f:0e:bb:2c:eb:48:10:c1: 5c:93:78:bb:12:b2:ac:c7:7b:2a:76:4d:4b:ec:2e:de:96:fe: 96:b9:c6:83:70:2c:27:00:9c:bb:86:2d:ec:7e:43:65:f3:6d: f5:56:52:6f:5f:09:1a:7f:48:24:a1:24:87:ed:dd:9d:ec:1a: 53:75:7e:a1:47:b0:c7:06:62:1e:ce:4c:c4:cb:fe:51:a5:f7: 64:19:6c:53:05:4c:72:ac:13:88:2b:2f:82:91:69:1a:27:01: 26:66:e5:91:24:f8:ec:13:fe:ab:fa:86:d1:03:ac:52:eb:9b: 21:4c:ee:01:24:0a:04:b2:77:19:cc:7f:35:7c:c1:84:9a:86: 75:10:70:48:fc:10:cb:9f:62:65:b8:49:bd:c3:55:fe:4b:4c: 5c:ae:8e:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0/VRvG20gUkcyEDioaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTA4ZmI5YWY0ZDZjYWZjY2ZhZTNiMjhlYzZlZDQ5YzQy M2VmYzYwHhcNMjYwMjA5MTEwMDI1WhcNMjYwMjEwMTEwMDI1WjAzMTEwLwYDVQQD Eyg5YzhkZDg5NTZjYjM5OTVkYzk3OGVmYTIyODEzMjBiOTZmODgyYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+vPDadXmUcNu7JLl+SpjPLkBD34 QOfUGwPIJAX+JCrKKcpOo2C4XdKJUiUEv3X2EQkdY4Heiun2rmpD9DXxdtL3AfM6 hX/en+8cBQ4WWxsectVZ2YyokBJFYghOBIKw6UdyjA54fxb3Jd5QFi6cXDaaj2MY XtL8vgZL/hwATqoF/2rar84rGVzLP6J0+1zbmO012McDWInrz5mlCdilk+c84OHy LfdBMBONexqjfAIBN+0GJVGuZv9lkvZMQVHe75BI0a68gGteXIvpxRadmzCVW4a8 OgYBF6vfJI6scF5zY+XSW3ecgpwqScza29eD5UJM1e5Iq+ZMlJM0qmlwyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyN2JVss5ldyXjvoigTILlviCq5MB8GA1UdIwQY MBaAFAWgj7mvTWyvzPrjso7G7UnEI+/GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZTQ0NGUtMWM5Yy00MWI3LWEzNzEt ZDJiMjNhMzU1ZWRhLzEvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xZTQ0NGUtMWM5Yy00MWI3LWEzNzEtZDJiMjNhMzU1ZWRh LzEvQmFDUHVhOU5iS19NLXVPeWpzYnRTY1FqNzhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwNY2ogK B97+2Bb11tyFl4W/lsVmXb6wLTW0ORDMromdgaJhd0c5AUXnogHoPtnypaT0Nxds 8zloDUD7fdIBNZdEuKcVnNvIb3P2Ko5H3m7D0MloD5IgVJYt8mTFjzrijTRUr18O uyzrSBDBXJN4uxKyrMd7KnZNS+wu3pb+lrnGg3AsJwCcu4Yt7H5DZfNt9VZSb18J Gn9IJKEkh+3dnewaU3V+oUewxwZiHs5MxMv+UaX3ZBlsUwVMcqwTiCsvgpFpGicB JmblkST47BP+q/qG0QOsUuubIUzuASQKBLJ3Gcx/NXzBhJqGdRBwSPwQy59iZbhJ vcNV/ktMXK6O3A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:36 2026 by rpki-client