This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft File: bHO9JP2DCIa_otKWFBbSGF3jN3I.mft (raw, json) Hash identifier: bH0GuGAKOg6ehBgDw42IX4SZfU6l9SaLvtLSdC98Qjc= Subject key identifier: 1A:37:54:9E:27:2B:C3:0C:85:A8:14:05:21:AC:E3:E5:E5:95:AE:5A Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72 Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772 Certificate serial: 019C44A2D5ECF78C41D8863297361B663D85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft Manifest number: 0B5D Signing time: Mon 09 Feb 2026 23:00:48 +0000 Manifest this update: Mon 09 Feb 2026 23:00:48 +0000 Manifest next update: Tue 10 Feb 2026 23:00:48 +0000 Files and hashes: 1: WKluDkXLbOUe3fiyMU_sfUku4Zk.roa (hash: g8pqi7RglCM3KJkQHe8MWM6i4Vof+uHKV1U9w7O5DtE=) 2: bHO9JP2DCIa_otKWFBbSGF3jN3I.crl (hash: oUq+kgQV8b1JV9EnSijliH5ez0sWOIY9PN58MAqsFzI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:d5:ec:f7:8c:41:d8:86:32:97:36:1b:66:3d:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772 Validity Not Before: Feb 9 23:00:48 2026 GMT Not After : Feb 10 23:00:48 2026 GMT Subject: CN=1a37549e272bc30c85a8140521ace3e5e595ae5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:05:61:70:a9:26:99:54:fd:85:21:f0:40:ef: 3d:0c:76:35:fa:9e:cb:ff:8a:b8:a3:0e:a4:ca:31: 60:4c:14:7e:c9:ee:d7:04:36:33:44:e7:83:b8:f9: 7c:c9:f1:eb:8b:e2:17:12:90:c4:37:2d:5e:44:84: 39:81:e9:ac:4c:c8:54:51:fb:89:ae:28:ad:25:cc: b2:91:92:ac:e3:1e:ed:4e:23:2d:c3:40:06:fc:7c: df:b3:44:2b:b5:93:9a:1e:6e:e0:87:86:a8:21:9c: e1:ab:2f:af:75:14:93:5d:7b:87:b6:bd:a5:2c:3d: a9:df:0b:41:a1:82:3a:66:5e:23:34:da:66:97:e4: d6:10:1e:25:de:80:63:66:eb:f3:72:af:d9:46:5f: 05:13:ba:82:ee:d9:42:43:09:24:3f:bf:41:fc:a6: 94:50:43:81:e1:07:b8:87:03:d3:81:9d:4f:6b:15: 15:ad:16:be:60:f0:8d:6d:eb:69:e5:63:e7:30:f1: 70:88:b3:ec:01:71:aa:a7:73:26:3f:b4:a8:67:73: ea:0e:d4:6b:99:58:93:cd:71:56:fd:92:d4:22:0f: 7f:d2:e4:d9:e5:2d:11:0f:6f:e5:60:50:8a:fc:4d: 3a:d7:fc:d8:ee:4d:81:3c:05:db:eb:be:e0:13:23: 8b:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:37:54:9E:27:2B:C3:0C:85:A8:14:05:21:AC:E3:E5:E5:95:AE:5A X509v3 Authority Key Identifier: keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:cf:f0:be:83:44:fd:92:cf:1e:95:88:c3:2a:27:7f:97:48: b7:b5:10:77:a3:a9:04:55:35:e0:71:a8:bb:3d:48:a8:bd:c4: 2f:ba:85:49:5a:03:dc:64:6b:86:12:36:4d:0d:29:27:a5:cc: 22:56:37:10:3d:5e:d3:ad:1c:dd:df:41:c2:3f:0d:45:f1:d8: be:83:f3:8b:0c:38:36:d9:3c:5a:13:2a:a5:5c:f4:5f:8a:f7: fa:cc:e3:49:21:f0:4c:25:77:ba:ef:e9:91:2a:0f:9a:21:2c: b5:c6:60:a6:3f:d7:29:a5:03:95:cd:89:ae:6a:c5:88:ca:9d: 15:23:57:d6:16:4a:a3:7f:f6:7a:5e:00:95:22:ac:1f:09:cc: 6d:78:3f:ad:35:ff:a2:cf:cd:b0:1c:48:59:47:58:de:f0:c9: 92:a9:2b:d7:c8:f7:e5:7a:fd:64:d1:4a:0a:52:fc:a4:c9:af: 28:1d:54:88:f5:ed:20:7d:5f:10:74:20:06:08:db:23:8a:51: 29:97:50:8b:31:91:4b:3f:15:69:98:17:a8:00:a5:9c:e2:8a: 70:3c:06:28:8e:f2:66:4a:54:53:b7:a3:44:ae:13:f8:ca:60: d4:81:d1:b9:d3:66:a8:8e:87:e0:47:15:ea:13:de:50:e0:73: f9:9c:71:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEotXs94xB2IYylzYbZj2FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNzNiZDI0ZmQ4MzA4ODZiZmEyZDI5NjE0MTZkMjE4NWRl MzM3NzIwHhcNMjYwMjA5MjMwMDQ4WhcNMjYwMjEwMjMwMDQ4WjAzMTEwLwYDVQQD EygxYTM3NTQ5ZTI3MmJjMzBjODVhODE0MDUyMWFjZTNlNWU1OTVhZTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogVhcKkmmVT9hSHwQO89DHY1+p7L /4q4ow6kyjFgTBR+ye7XBDYzROeDuPl8yfHri+IXEpDENy1eRIQ5gemsTMhUUfuJ riitJcyykZKs4x7tTiMtw0AG/Hzfs0QrtZOaHm7gh4aoIZzhqy+vdRSTXXuHtr2l LD2p3wtBoYI6Zl4jNNpml+TWEB4l3oBjZuvzcq/ZRl8FE7qC7tlCQwkkP79B/KaU UEOB4Qe4hwPTgZ1PaxUVrRa+YPCNbetp5WPnMPFwiLPsAXGqp3MmP7SoZ3PqDtRr mViTzXFW/ZLUIg9/0uTZ5S0RD2/lYFCK/E061/zY7k2BPAXb677gEyOLVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBo3VJ4nK8MMhagUBSGs4+Xlla5aMB8GA1UdIwQY MBaAFGxzvST9gwiGv6LSlhQW0hhd4zdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OGRhYjgtN2IyNC00OWYzLWEzNmYt NzNhMTU3YTJiOTlmLzEvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85OGRhYjgtN2IyNC00OWYzLWEzNmYtNzNhMTU3YTJiOTlm LzEvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgs/wvoNE /ZLPHpWIwyonf5dIt7UQd6OpBFU14HGouz1IqL3EL7qFSVoD3GRrhhI2TQ0pJ6XM IlY3ED1e060c3d9Bwj8NRfHYvoPziww4Ntk8WhMqpVz0X4r3+szjSSHwTCV3uu/p kSoPmiEstcZgpj/XKaUDlc2JrmrFiMqdFSNX1hZKo3/2el4AlSKsHwnMbXg/rTX/ os/NsBxIWUdY3vDJkqkr18j35Xr9ZNFKClL8pMmvKB1UiPXtIH1fEHQgBgjbI4pR KZdQizGRSz8VaZgXqAClnOKKcDwGKI7yZkpUU7ejRK4T+Mpg1IHRudNmqI6H4EcV 6hPeUOBz+ZxxKg== -----END CERTIFICATE-----Generated at Tue Feb 10 06:09:58 2026 by rpki-client