This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft File: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft (raw, json) Hash identifier: Iw8VowoB1004rvtEWJszBE7X3VHuBlVl41HcW4LvqzU= Subject key identifier: 6D:D8:6C:BE:0B:A7:74:EE:D8:C7:92:0B:C2:8E:DC:9F:1E:D7:21:C7 Authority key identifier: 04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1 Certificate issuer: /CN=04904347a2361aced7c370f7446de708277ee6d1 Certificate serial: 019C42B4050C00451B7710234C2909CBBD3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft Manifest number: 070F Signing time: Mon 09 Feb 2026 14:00:19 +0000 Manifest this update: Mon 09 Feb 2026 14:00:19 +0000 Manifest next update: Tue 10 Feb 2026 14:00:19 +0000 Files and hashes: 1: BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl (hash: jRUkPOStALyy2Q2gN5cQwnIst/6A6JmTxlNYgU9Dfng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:05:0c:00:45:1b:77:10:23:4c:29:09:cb:bd:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04904347a2361aced7c370f7446de708277ee6d1 Validity Not Before: Feb 9 14:00:19 2026 GMT Not After : Feb 10 14:00:19 2026 GMT Subject: CN=6dd86cbe0ba774eed8c7920bc28edc9f1ed721c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:9c:53:a2:af:fa:6d:76:9e:d6:c5:1a:0d: dc:47:2b:30:cb:3b:08:f7:14:f3:c1:be:e6:31:0a: 22:5c:8d:5f:be:f7:8e:d3:59:75:d0:a6:15:9e:22: 63:93:b5:00:5b:ce:96:b7:10:0e:56:79:42:3b:f4: 43:31:0c:7b:72:e8:4e:01:1e:85:30:40:f3:5a:9f: 56:3b:24:fd:1c:c7:e1:d6:ce:82:94:29:9b:0b:b3: 8e:22:5d:33:05:48:e7:86:87:e8:fd:82:31:e2:47: 10:82:cf:6d:81:2c:68:28:ea:b5:ab:0d:05:a9:e6: 18:7d:b3:42:26:03:03:6c:d4:42:85:b5:21:5c:33: 4c:5c:d4:63:17:30:2b:a0:fb:0f:38:28:a5:a4:87: 40:a5:ae:75:d0:98:63:56:4a:cb:61:7e:4a:20:ec: 42:20:79:53:48:9d:5a:8b:d7:76:5b:36:48:92:a7: 62:8a:6e:33:b6:9f:3e:98:97:1f:3b:ac:23:04:ad: 8a:5a:f4:b7:16:c9:e1:00:cc:5c:91:86:d5:8d:81: fe:93:04:68:51:ca:2c:fb:79:fc:54:1f:d1:9e:59: 2d:12:b5:cc:cb:5c:0c:b8:57:3d:02:6f:81:89:fe: 9a:3b:0d:c1:fa:ee:c6:16:ea:84:4d:fd:2e:b9:f6: cb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:D8:6C:BE:0B:A7:74:EE:D8:C7:92:0B:C2:8E:DC:9F:1E:D7:21:C7 X509v3 Authority Key Identifier: keyid:04:90:43:47:A2:36:1A:CE:D7:C3:70:F7:44:6D:E7:08:27:7E:E6:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c69320-e046-4595-af38-565fba117868/1/BJBDR6I2Gs7Xw3D3RG3nCCd-5tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:6b:ec:5d:d9:64:84:d1:bf:ef:df:dd:e3:03:03:43:58:7c: a5:9c:00:3e:01:7b:7a:cc:94:5a:5a:d7:3f:ea:d9:41:95:a2: da:bb:fc:c9:3e:e9:58:93:7c:03:98:b2:0f:dd:39:fd:31:59: 2d:c2:b9:f7:df:69:a6:e9:af:7b:61:c2:ec:03:fb:72:25:f9: 91:24:86:8f:b5:71:09:aa:ea:32:41:8a:d7:9e:9d:6f:75:86: 47:c9:af:4e:c9:56:de:19:58:7e:fa:bd:35:59:ca:41:52:06: 66:2b:ae:23:88:59:d4:f6:e6:e9:f6:69:5a:0f:15:42:6a:d6: 6f:15:4d:9a:ff:23:9b:f1:3a:92:9c:b7:bc:77:43:57:b6:5f: 19:37:89:7e:6e:81:76:77:59:a4:4b:f8:3f:1d:ab:dc:ba:24: ea:13:eb:62:a5:e2:ff:0c:7f:22:54:f7:43:9f:46:f9:3a:3c: 41:30:43:f5:48:11:f2:f9:e1:d3:7b:5c:3d:4f:67:68:cd:77: fe:3e:92:37:9a:aa:29:97:b2:84:b6:fe:0b:b9:cc:fb:0d:3f: 59:6e:35:ad:07:87:09:e3:6d:5c:09:da:a0:bf:25:4a:3f:d3: a4:b1:ae:55:b3:fa:2c:7f:db:d8:fc:c9:7d:36:f6:52:98:87: 54:17:22:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtAUMAEUbdxAjTCkJy706MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0OTA0MzQ3YTIzNjFhY2VkN2MzNzBmNzQ0NmRlNzA4Mjc3 ZWU2ZDEwHhcNMjYwMjA5MTQwMDE5WhcNMjYwMjEwMTQwMDE5WjAzMTEwLwYDVQQD Eyg2ZGQ4NmNiZTBiYTc3NGVlZDhjNzkyMGJjMjhlZGM5ZjFlZDcyMWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLecU6Kv+m12ntbFGg3cRyswyzsI 9xTzwb7mMQoiXI1fvveO01l10KYVniJjk7UAW86WtxAOVnlCO/RDMQx7cuhOAR6F MEDzWp9WOyT9HMfh1s6ClCmbC7OOIl0zBUjnhofo/YIx4kcQgs9tgSxoKOq1qw0F qeYYfbNCJgMDbNRChbUhXDNMXNRjFzAroPsPOCilpIdApa510JhjVkrLYX5KIOxC IHlTSJ1ai9d2WzZIkqdiim4ztp8+mJcfO6wjBK2KWvS3FsnhAMxckYbVjYH+kwRo Ucos+3n8VB/RnlktErXMy1wMuFc9Am+Bif6aOw3B+u7GFuqETf0uufbL0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3YbL4Lp3Tu2MeSC8KO3J8e1yHHMB8GA1UdIwQY MBaAFASQQ0eiNhrO18Nw90Rt5wgnfubRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkpCRFI2STJHczdYdzNEM1JHM25DQ2QtNXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jNjkzMjAtZTA0Ni00NTk1LWFmMzgt NTY1ZmJhMTE3ODY4LzEvQkpCRFI2STJHczdYdzNEM1JHM25DQ2QtNXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9jNjkzMjAtZTA0Ni00NTk1LWFmMzgtNTY1ZmJhMTE3ODY4 LzEvQkpCRFI2STJHczdYdzNEM1JHM25DQ2QtNXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApGvsXdlk hNG/79/d4wMDQ1h8pZwAPgF7esyUWlrXP+rZQZWi2rv8yT7pWJN8A5iyD905/TFZ LcK5999ppumve2HC7AP7ciX5kSSGj7VxCarqMkGK156db3WGR8mvTslW3hlYfvq9 NVnKQVIGZiuuI4hZ1Pbm6fZpWg8VQmrWbxVNmv8jm/E6kpy3vHdDV7ZfGTeJfm6B dndZpEv4Px2r3Lok6hPrYqXi/wx/IlT3Q59G+To8QTBD9UgR8vnh03tcPU9naM13 /j6SN5qqKZeyhLb+C7nM+w0/WW41rQeHCeNtXAnaoL8lSj/TpLGuVbP6LH/b2PzJ fTb2UpiHVBcilg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:51:59 2026 by rpki-client