This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft File: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft (raw, json) Hash identifier: N8q26/udDSIw3c8PL0S9GT/FMY3kj7kzpkg3fhan/rc= Subject key identifier: 76:0A:D8:6F:E7:88:89:A5:A9:18:D1:45:E4:AE:26:F6:DD:EB:F9:C7 Authority key identifier: 05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93 Certificate issuer: /CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493 Certificate serial: 019C427E04A3A6764D906BF0C7E23F3E0A6D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 13:01:20 +0000 Manifest this update: Mon 09 Feb 2026 13:01:20 +0000 Manifest next update: Tue 10 Feb 2026 13:01:20 +0000 Files and hashes: 1: BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl (hash: w/ffYSy8Sp+r/g/3Wk/URDl2xYn5no+qUh5lETnVNjw=) 2: gg5OcMVgH7lk6tVSqguHQUBZmos.roa (hash: 5xyidAvB+/kdMtCX2epFqjWiC7Y1xMvBLeyzRVWuBJ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:04:a3:a6:76:4d:90:6b:f0:c7:e2:3f:3e:0a:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05a2cb49b28b62f28d692ad9f4da0ae7081f8493 Validity Not Before: Feb 9 13:01:20 2026 GMT Not After : Feb 10 13:01:20 2026 GMT Subject: CN=760ad86fe78889a5a918d145e4ae26f6ddebf9c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:23:d8:44:40:05:f5:bf:77:f8:7d:ca:11: ae:a9:02:f5:65:c1:6e:06:66:2d:be:ad:0b:57:d2: e4:da:27:90:2b:78:4f:80:2f:e0:3e:7b:c2:2b:3f: cb:2b:7b:a7:50:69:3e:e9:49:53:d5:a9:96:0b:a1: 2e:fc:ca:ff:d2:d6:1f:6e:2a:a4:71:ca:1e:83:f1: 0c:63:e4:7b:30:4f:58:80:1a:5e:b3:2d:90:20:24: 6b:6f:62:2b:50:36:ad:78:4d:29:bc:88:c3:85:0b: b4:78:ac:28:c6:94:8d:70:4a:97:ce:e7:7e:05:51: 76:0c:e8:1b:50:49:ef:cf:c1:f4:d6:b1:f0:28:9b: 56:fd:3d:e4:72:db:48:52:6d:11:ac:9d:d3:52:82: 43:8d:31:20:bb:a9:66:36:45:6f:a2:73:7f:23:4e: bd:5c:b2:76:11:af:42:bd:88:98:11:d1:72:ef:d5: 30:e0:7a:57:2c:77:62:70:20:45:50:97:ca:4b:39: 14:19:04:af:3c:ea:f3:84:c2:66:b8:0f:d1:2f:62: 06:14:70:d9:0c:d4:9a:2e:09:0d:da:71:6a:13:20: 34:f5:2b:98:18:1e:2c:4e:a8:b9:29:95:a0:db:63: 45:96:57:5c:94:66:9e:13:93:3f:a0:74:de:9d:60: 77:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0A:D8:6F:E7:88:89:A5:A9:18:D1:45:E4:AE:26:F6:DD:EB:F9:C7 X509v3 Authority Key Identifier: keyid:05:A2:CB:49:B2:8B:62:F2:8D:69:2A:D9:F4:DA:0A:E7:08:1F:84:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/093177-1179-45ad-96e2-e5c0f5d33b23/1/BaLLSbKLYvKNaSrZ9NoK5wgfhJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f4:b0:0e:24:0a:3a:61:a5:4f:33:6a:a9:27:6a:b5:25:1f: 8a:78:cc:1a:a5:a9:e4:32:3b:49:1e:34:f3:e9:86:6c:4c:79: 34:88:cf:e1:97:ef:53:3f:bf:17:4c:81:cb:34:46:03:24:b1: ec:8d:2f:c0:b6:f7:1d:c2:f7:87:26:a2:3c:54:2f:8f:52:0d: 3c:76:86:26:fd:15:e0:53:ea:62:e2:29:11:69:fa:a7:8c:97: 19:d5:d4:69:b5:58:b8:56:70:41:a2:c0:92:e5:c7:ab:9f:33: f9:6f:8d:1f:b1:f4:20:13:5e:56:48:35:c1:de:2a:eb:b0:fc: 11:4d:ae:67:76:22:83:4c:fe:8d:56:55:9e:f6:5a:3b:91:20: 0a:29:17:ba:90:9c:3d:53:51:ed:ed:8a:1b:2e:be:3a:1f:fd: 7f:f6:4b:5c:9c:99:03:bc:05:46:bf:d9:40:c1:20:f8:57:10: a9:60:cb:36:2d:72:8f:7e:7f:11:50:17:67:fb:d4:32:33:e8: 0d:cc:af:78:8c:c1:ce:a4:05:82:c6:28:91:28:0a:92:89:8c: a4:a6:e3:89:f9:1b:04:e4:d5:92:a3:fc:f3:d8:b2:54:b2:aa: 6f:23:fc:a4:37:1d:0b:3e:84:ad:dc:f4:3e:53:1d:fc:d8:cd: 0c:31:14:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgSjpnZNkGvwx+I/PgptMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YTJjYjQ5YjI4YjYyZjI4ZDY5MmFkOWY0ZGEwYWU3MDgx Zjg0OTMwHhcNMjYwMjA5MTMwMTIwWhcNMjYwMjEwMTMwMTIwWjAzMTEwLwYDVQQD Eyg3NjBhZDg2ZmU3ODg4OWE1YTkxOGQxNDVlNGFlMjZmNmRkZWJmOWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgYj2ERABfW/d/h9yhGuqQL1ZcFu BmYtvq0LV9Lk2ieQK3hPgC/gPnvCKz/LK3unUGk+6UlT1amWC6Eu/Mr/0tYfbiqk ccoeg/EMY+R7ME9YgBpesy2QICRrb2IrUDateE0pvIjDhQu0eKwoxpSNcEqXzud+ BVF2DOgbUEnvz8H01rHwKJtW/T3kcttIUm0RrJ3TUoJDjTEgu6lmNkVvonN/I069 XLJ2Ea9CvYiYEdFy79Uw4HpXLHdicCBFUJfKSzkUGQSvPOrzhMJmuA/RL2IGFHDZ DNSaLgkN2nFqEyA09SuYGB4sTqi5KZWg22NFlldclGaeE5M/oHTenWB3WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYK2G/niImlqRjRReSuJvbd6/nHMB8GA1UdIwQY MBaAFAWiy0myi2LyjWkq2fTaCucIH4STMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTIt ZTVjMGY1ZDMzYjIzLzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wOTMxNzctMTE3OS00NWFkLTk2ZTItZTVjMGY1ZDMzYjIz LzEvQmFMTFNiS0xZdktOYVNyWjlOb0s1d2dmaEpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPSwDiQK OmGlTzNqqSdqtSUfinjMGqWp5DI7SR408+mGbEx5NIjP4ZfvUz+/F0yByzRGAySx 7I0vwLb3HcL3hyaiPFQvj1INPHaGJv0V4FPqYuIpEWn6p4yXGdXUabVYuFZwQaLA kuXHq58z+W+NH7H0IBNeVkg1wd4q67D8EU2uZ3Yig0z+jVZVnvZaO5EgCikXupCc PVNR7e2KGy6+Oh/9f/ZLXJyZA7wFRr/ZQMEg+FcQqWDLNi1yj35/EVAXZ/vUMjPo DcyveIzBzqQFgsYokSgKkomMpKbjifkbBOTVkqP889iyVLKqbyP8pDcdCz6Erdz0 PlMd/NjNDDEUGw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:03 2026 by rpki-client