This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft File: bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft (raw, json) Hash identifier: XcUghuiYWA3baCcNcnY0wS/feYofB1KiOxyYbLX1m+s= Subject key identifier: 5C:04:11:C9:FF:8C:53:B5:12:5A:59:13:57:04:58:8E:0A:A6:FD:9C Authority key identifier: 6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C Certificate issuer: /CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c Certificate serial: 019C41A15FAB750F223A387A6D4B79CFCE6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft Manifest number: 01A7 Signing time: Mon 09 Feb 2026 09:00:20 +0000 Manifest this update: Mon 09 Feb 2026 09:00:20 +0000 Manifest next update: Tue 10 Feb 2026 09:00:20 +0000 Files and hashes: 1: bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl (hash: g650n4DjGG6VA43AupuzPmAaJxykSaROUXDvonsJxJw=) 2: sR4VSsh46NucLoZBNFoOCKjAw_w.roa (hash: iz6mxFRpjWhqFGbB1en1IQ8K5ksG0skqK0JvXZzfdr4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:5f:ab:75:0f:22:3a:38:7a:6d:4b:79:cf:ce:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cc1850245d2bf0b583a339f2eb4f7c09059640c Validity Not Before: Feb 9 09:00:20 2026 GMT Not After : Feb 10 09:00:20 2026 GMT Subject: CN=5c0411c9ff8c53b5125a59135704588e0aa6fd9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:35:d1:55:a7:47:05:aa:c7:62:4d:a9:37:fb: 52:04:89:c5:9e:fb:fa:b7:21:76:17:a6:fb:0a:f8: 53:57:9e:0d:8f:50:76:7f:27:b0:08:5b:14:c1:10: f2:60:ff:2c:5e:42:ac:fd:62:e8:0b:0d:7f:45:46: f0:4c:5b:c6:7a:c9:ab:9b:5a:c0:e6:0b:a4:1b:6b: 64:67:33:b7:2b:46:20:ed:7d:d9:eb:1d:3f:dd:81: 6a:39:b1:a5:8a:4d:41:ed:94:12:e8:49:6a:1b:65: 4e:1d:29:91:21:e6:04:cd:4b:c7:c9:72:5f:d2:6e: d4:2b:3e:47:0e:85:3c:b3:98:8b:c8:ef:a3:c8:a8: 90:e0:09:96:dd:57:5a:56:85:e3:a4:9f:8f:3b:6e: 30:6d:48:13:b6:65:e5:6f:66:70:65:f8:fc:7c:e0: 17:15:67:cc:0f:fe:2b:e6:ae:95:17:d9:98:4d:84: 35:ca:55:88:db:2d:db:d6:9a:c7:4d:2e:b0:1f:e8: 52:5c:3f:2e:71:e9:84:18:7a:a9:1e:87:8f:2f:0d: a0:90:a0:99:18:6d:79:e3:13:40:3b:c8:33:c0:f9: 7d:df:dc:ce:dd:87:d4:45:e0:6d:43:a3:1f:98:d2: be:1d:21:21:a0:c9:5b:09:c0:cc:38:d2:2a:d7:7d: c6:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:04:11:C9:FF:8C:53:B5:12:5A:59:13:57:04:58:8E:0A:A6:FD:9C X509v3 Authority Key Identifier: keyid:6C:C1:85:02:45:D2:BF:0B:58:3A:33:9F:2E:B4:F7:C0:90:59:64:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMGFAkXSvwtYOjOfLrT3wJBZZAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/70a0b8-4542-4840-8f19-0a68da27b3a1/1/bMGFAkXSvwtYOjOfLrT3wJBZZAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:9b:00:b7:3b:cb:8f:5f:65:68:be:24:39:11:00:89:ad:73: 18:e8:d2:07:74:c9:aa:78:31:ec:f1:26:11:76:ec:f2:2d:8e: ff:05:00:50:d7:b2:40:a0:89:32:a8:97:a8:21:25:d4:e9:20: 8b:f7:69:81:a3:0e:c9:8f:0c:e9:d1:3d:37:28:aa:07:1e:d9: 56:a4:c0:f2:5e:0a:f7:ca:9f:e6:12:33:47:93:0a:48:a7:0a: 64:ef:f6:72:d7:47:4b:01:6c:2b:e7:40:1c:a2:d6:c9:40:1a: aa:cd:a5:12:49:50:e8:ce:67:09:7f:3c:cc:51:44:0b:33:0a: a6:db:44:1f:ed:b7:ba:ef:3c:06:d6:81:85:8b:46:79:f4:53: 46:cb:80:95:fd:c3:75:27:f2:86:67:a6:cc:c7:76:2e:13:63: b6:ba:e3:c3:3a:43:8e:c8:29:f2:43:75:cd:3d:a9:d4:8b:ab: 05:be:00:7a:89:28:8e:2d:14:3f:16:f2:21:e9:de:30:df:db: 59:2d:77:da:7f:95:a0:a4:95:b6:90:04:58:2d:d8:a9:79:08: 41:37:85:2e:cc:1b:f4:da:cb:9a:06:5c:a2:05:a3:f0:41:25: 3b:34:f6:3f:e9:3f:75:6d:11:34:f5:0a:94:2b:bb:6a:0a:26: 47:68:2e:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoV+rdQ8iOjh6bUt5z85uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYzE4NTAyNDVkMmJmMGI1ODNhMzM5ZjJlYjRmN2MwOTA1 OTY0MGMwHhcNMjYwMjA5MDkwMDIwWhcNMjYwMjEwMDkwMDIwWjAzMTEwLwYDVQQD Eyg1YzA0MTFjOWZmOGM1M2I1MTI1YTU5MTM1NzA0NTg4ZTBhYTZmZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzXRVadHBarHYk2pN/tSBInFnvv6 tyF2F6b7CvhTV54Nj1B2fyewCFsUwRDyYP8sXkKs/WLoCw1/RUbwTFvGesmrm1rA 5gukG2tkZzO3K0Yg7X3Z6x0/3YFqObGlik1B7ZQS6ElqG2VOHSmRIeYEzUvHyXJf 0m7UKz5HDoU8s5iLyO+jyKiQ4AmW3VdaVoXjpJ+PO24wbUgTtmXlb2ZwZfj8fOAX FWfMD/4r5q6VF9mYTYQ1ylWI2y3b1prHTS6wH+hSXD8ucemEGHqpHoePLw2gkKCZ GG154xNAO8gzwPl939zO3YfUReBtQ6MfmNK+HSEhoMlbCcDMONIq133GUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwEEcn/jFO1ElpZE1cEWI4Kpv2cMB8GA1UdIwQY MBaAFGzBhQJF0r8LWDozny6098CQWWQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1HRkFrWFN2d3RZT2pPZkxyVDN3SkJaWkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC83MGEwYjgtNDU0Mi00ODQwLThmMTkt MGE2OGRhMjdiM2ExLzEvYk1HRkFrWFN2d3RZT2pPZkxyVDN3SkJaWkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC83MGEwYjgtNDU0Mi00ODQwLThmMTktMGE2OGRhMjdiM2Ex LzEvYk1HRkFrWFN2d3RZT2pPZkxyVDN3SkJaWkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapsAtzvL j19laL4kOREAia1zGOjSB3TJqngx7PEmEXbs8i2O/wUAUNeyQKCJMqiXqCEl1Okg i/dpgaMOyY8M6dE9NyiqBx7ZVqTA8l4K98qf5hIzR5MKSKcKZO/2ctdHSwFsK+dA HKLWyUAaqs2lEklQ6M5nCX88zFFECzMKpttEH+23uu88BtaBhYtGefRTRsuAlf3D dSfyhmemzMd2LhNjtrrjwzpDjsgp8kN1zT2p1IurBb4Aeokoji0UPxbyIeneMN/b WS132n+VoKSVtpAEWC3YqXkIQTeFLswb9NrLmgZcogWj8EElOzT2P+k/dW0RNPUK lCu7agomR2gu1g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:23 2026 by rpki-client