This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft File: BsdGzX1N-VptA8qVVKdUdg1eTgY.mft (raw, json) Hash identifier: WhdD5iPrFX+F3gcxk+dojwJb1PdL/ixzXZ3h1qRiq9s= Subject key identifier: 78:54:76:EE:76:14:FB:98:F1:AC:64:76:6A:4E:26:1A:79:31:0A:BD Authority key identifier: 06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06 Certificate issuer: /CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06 Certificate serial: 019C42465D09EE16420D7D16012E3A627707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft Manifest number: 0887 Signing time: Mon 09 Feb 2026 12:00:33 +0000 Manifest this update: Mon 09 Feb 2026 12:00:33 +0000 Manifest next update: Tue 10 Feb 2026 12:00:33 +0000 Files and hashes: 1: BsdGzX1N-VptA8qVVKdUdg1eTgY.crl (hash: A+ssYu0Sa3JyDQm6rjRV3jhlJ7Ky7m0OycAWeCAaGQQ=) 2: NBGlz4BOwm_Rb4kwh-h4UA65oDk.roa (hash: Ugv5nwQuiMqwOwqv6jAyXgwzxe6xlFAAFYW63xYA81c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:5d:09:ee:16:42:0d:7d:16:01:2e:3a:62:77:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06c746cd7d4df95a6d03ca9554a754760d5e4e06 Validity Not Before: Feb 9 12:00:33 2026 GMT Not After : Feb 10 12:00:33 2026 GMT Subject: CN=785476ee7614fb98f1ac64766a4e261a79310abd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:f0:bd:f5:15:e0:c0:8a:0b:7d:66:c4:65: ba:28:ea:2d:12:5a:2b:6f:5a:d1:c9:69:cc:02:f8: 4f:db:e7:67:de:c5:6a:18:3b:4e:37:28:ad:3c:5d: 62:fe:39:54:1d:8b:c4:37:e0:d4:a8:52:07:6d:77: a8:43:56:25:cf:16:55:5d:01:b5:a9:38:e8:65:42: 91:2f:c4:0c:bd:39:aa:bc:75:33:ff:6e:81:4c:f4: 6f:bf:bf:f3:1d:fb:bb:93:95:05:f6:9c:69:95:03: 62:74:83:cd:76:5c:9a:07:e6:b2:ef:47:7f:e6:c7: b4:e0:f9:08:35:ef:72:dd:5d:c0:7a:29:91:a6:ba: 90:4c:90:c4:4f:ed:27:87:b7:0d:a0:da:02:c7:6c: 4f:5c:05:be:48:85:3f:39:11:ea:5a:f9:65:7b:22: 3c:9e:ad:95:ae:1f:78:ea:7d:34:b3:da:99:2e:8f: b9:21:cc:f5:16:6e:ca:a5:c1:21:ff:01:54:87:cd: 58:4d:ff:9e:9c:a6:81:03:bd:09:0f:0b:f8:59:8f: ee:e6:d0:99:fc:9f:f6:24:d8:7c:a7:b2:96:4d:45: c0:99:06:96:b4:28:56:e2:73:0f:a8:68:c8:a0:bb: 31:ab:b9:89:ee:79:34:28:99:d4:3d:de:b2:9d:8a: a6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:54:76:EE:76:14:FB:98:F1:AC:64:76:6A:4E:26:1A:79:31:0A:BD X509v3 Authority Key Identifier: keyid:06:C7:46:CD:7D:4D:F9:5A:6D:03:CA:95:54:A7:54:76:0D:5E:4E:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsdGzX1N-VptA8qVVKdUdg1eTgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/952cd7-3297-4eaf-854f-b0afd45dcd78/1/BsdGzX1N-VptA8qVVKdUdg1eTgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d8:bb:f0:57:da:2a:92:d3:f6:82:87:6a:9b:91:57:02:58: 32:ec:8f:24:8d:39:6d:ed:b0:f3:38:63:24:9e:59:ec:e4:72: 4c:25:c3:d9:54:70:40:34:eb:ad:b8:c2:cf:b6:bd:d3:ad:bc: ec:0b:d3:65:31:77:5f:9e:6d:43:b5:44:ca:c2:4b:1f:33:05: ca:21:d2:c0:16:5e:df:17:3b:b4:ad:6a:9b:63:41:a9:3d:3a: e5:1e:c1:1e:37:9f:7a:5d:cb:20:a1:77:c7:0d:7c:a7:af:8f: a9:19:fa:06:b4:7f:f3:3f:99:2e:41:e5:2c:a4:f7:ce:20:89: 6b:36:22:5e:39:56:85:19:f7:1d:de:c8:5b:75:66:a1:d7:2b: 06:58:48:88:34:a7:f5:bd:82:4d:0e:d6:82:ba:8b:d0:96:c2: 0c:33:21:16:8f:84:20:51:28:63:fe:c1:31:9c:03:8d:d1:f9: 3e:1d:f8:15:a1:db:18:3f:d2:e2:3d:94:b8:cd:bb:ec:83:f3: fa:e3:40:9b:26:a1:7f:75:a5:6c:11:6f:55:da:32:ab:76:19: 9e:98:6e:1e:fe:1f:e8:b1:2c:fb:0e:25:ff:9d:c2:66:3b:be: 25:75:7f:34:4a:fc:14:3b:fd:ac:79:ed:e5:38:41:05:65:a4: d3:ab:72:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRl0J7hZCDX0WAS46YncHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Yzc0NmNkN2Q0ZGY5NWE2ZDAzY2E5NTU0YTc1NDc2MGQ1 ZTRlMDYwHhcNMjYwMjA5MTIwMDMzWhcNMjYwMjEwMTIwMDMzWjAzMTEwLwYDVQQD Eyg3ODU0NzZlZTc2MTRmYjk4ZjFhYzY0NzY2YTRlMjYxYTc5MzEwYWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra/wvfUV4MCKC31mxGW6KOotElor b1rRyWnMAvhP2+dn3sVqGDtONyitPF1i/jlUHYvEN+DUqFIHbXeoQ1YlzxZVXQG1 qTjoZUKRL8QMvTmqvHUz/26BTPRvv7/zHfu7k5UF9pxplQNidIPNdlyaB+ay70d/ 5se04PkINe9y3V3AeimRprqQTJDET+0nh7cNoNoCx2xPXAW+SIU/ORHqWvlleyI8 nq2Vrh946n00s9qZLo+5Icz1Fm7KpcEh/wFUh81YTf+enKaBA70JDwv4WY/u5tCZ /J/2JNh8p7KWTUXAmQaWtChW4nMPqGjIoLsxq7mJ7nk0KJnUPd6ynYqmZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHhUdu52FPuY8axkdmpOJhp5MQq9MB8GA1UdIwQY MBaAFAbHRs19TflabQPKlVSnVHYNXk4GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYt YjBhZmQ0NWRjZDc4LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi85NTJjZDctMzI5Ny00ZWFmLTg1NGYtYjBhZmQ0NWRjZDc4 LzEvQnNkR3pYMU4tVnB0QThxVlZLZFVkZzFlVGdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldi78Ffa KpLT9oKHapuRVwJYMuyPJI05be2w8zhjJJ5Z7ORyTCXD2VRwQDTrrbjCz7a90628 7AvTZTF3X55tQ7VEysJLHzMFyiHSwBZe3xc7tK1qm2NBqT065R7BHjefel3LIKF3 xw18p6+PqRn6BrR/8z+ZLkHlLKT3ziCJazYiXjlWhRn3Hd7IW3VmodcrBlhIiDSn 9b2CTQ7WgrqL0JbCDDMhFo+EIFEoY/7BMZwDjdH5Ph34FaHbGD/S4j2UuM277IPz +uNAmyahf3WlbBFvVdoyq3YZnphuHv4f6LEs+w4l/53CZju+JXV/NEr8FDv9rHnt 5ThBBWWk06tysA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:29 2026 by rpki-client