This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft File: BbM6ZnAbLGXUl_4ExbowG9zsttk.mft (raw, json) Hash identifier: Z5Xx/laKumxJ9Z03UeV4xXJh2sPVG24z981cP7i///k= Subject key identifier: 96:51:31:9C:AE:69:9B:DA:7C:E1:16:9B:44:F8:CB:E3:A1:62:ED:9F Authority key identifier: 05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9 Certificate issuer: /CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9 Certificate serial: 019C439068F5749CCAFF9625BF889BCB0D24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 18:01:03 +0000 Manifest this update: Mon 09 Feb 2026 18:01:03 +0000 Manifest next update: Tue 10 Feb 2026 18:01:03 +0000 Files and hashes: 1: BbM6ZnAbLGXUl_4ExbowG9zsttk.crl (hash: WvxoiV0bNVJe/A+uDELoxlW5FM6/ri2o6Bsl+1Jj7KY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:68:f5:74:9c:ca:ff:96:25:bf:88:9b:cb:0d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05b33a66701b2c65d497fe04c5ba301bdcecb6d9 Validity Not Before: Feb 9 18:01:03 2026 GMT Not After : Feb 10 18:01:03 2026 GMT Subject: CN=9651319cae699bda7ce1169b44f8cbe3a162ed9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:e2:9c:69:8f:19:2d:c3:3f:ba:46:82:31: 82:3d:ea:df:57:e1:b0:90:62:43:89:0f:05:70:61: 26:df:be:d7:b0:2a:33:c7:85:c8:2a:b7:67:d8:d7: 67:c2:ea:3f:e6:43:23:76:a2:b2:34:59:d5:87:8a: 1b:8a:6e:d6:aa:49:ad:58:15:ae:01:b1:bd:41:bc: 77:3d:32:ea:de:a9:13:6e:c2:ad:25:f1:b2:28:b5: 04:7b:9a:01:1b:64:73:e6:72:2b:c9:40:e2:0f:2c: 50:16:5b:ea:07:03:5a:bf:79:7e:46:77:bf:b4:44: 61:b0:11:b0:3a:c8:0e:2e:65:b7:3b:d5:fe:a8:b0: af:c9:ec:42:a8:9d:2c:4c:37:9f:39:e9:c0:e6:f6: 87:6d:e3:17:a7:9c:e9:a4:69:ba:83:50:12:89:03: 14:91:ad:85:e0:aa:22:95:3c:61:f4:7f:0a:02:df: ff:ad:f8:73:46:09:8e:98:8e:c3:da:71:5f:43:27: 45:54:49:eb:47:9d:9d:65:61:1e:31:9a:db:bc:d6: 6c:85:f8:92:a0:d3:55:b5:b4:cf:44:9e:d6:b0:e7: 3f:f7:80:cb:56:45:e3:15:c4:e7:53:ae:d4:55:62: 08:b1:a0:85:1e:65:42:c7:03:2b:de:c7:c6:43:22: a7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:51:31:9C:AE:69:9B:DA:7C:E1:16:9B:44:F8:CB:E3:A1:62:ED:9F X509v3 Authority Key Identifier: keyid:05:B3:3A:66:70:1B:2C:65:D4:97:FE:04:C5:BA:30:1B:DC:EC:B6:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbM6ZnAbLGXUl_4ExbowG9zsttk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2310f4-d8b3-4136-9997-1bf94a25014e/1/BbM6ZnAbLGXUl_4ExbowG9zsttk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:89:5f:e5:fb:75:0d:e2:0a:e7:f2:8a:bb:71:eb:44:c9:cf: 6a:9e:ec:f8:d0:2d:5e:8d:79:43:94:a4:5a:8e:c9:e7:a0:5f: a1:77:cd:24:9e:45:ce:7c:4d:97:c3:dc:ab:15:55:7c:8b:94: 7e:bb:3e:8a:3a:cb:f8:87:bf:ce:1f:26:7e:bb:2e:bd:ba:b4: 1b:1b:db:cd:04:8a:2d:71:2f:9f:5b:0c:90:b9:42:f7:05:eb: fe:df:86:04:2b:05:bc:60:11:4f:dc:11:85:30:29:cc:57:19: 33:55:6b:1e:49:c7:3b:1a:57:ea:62:35:f4:54:c2:4c:0c:23: 7b:b1:9c:73:be:0e:db:1e:cd:fb:1e:ac:4c:8f:03:5d:68:d2: 9d:5d:e2:d7:d8:3b:fc:95:8e:17:2c:96:63:17:2f:5d:51:e4: f2:62:71:55:5f:ef:ee:19:c9:02:c2:2a:48:dc:d2:2e:5c:09: e6:37:32:1d:49:94:2e:35:f8:12:b6:3f:3b:bf:03:09:05:d2: 00:e4:64:41:68:8f:bb:ae:05:49:e0:d9:0a:54:45:21:e8:d1: 9a:75:fa:fa:4b:bd:85:3a:b0:d7:5d:0f:d1:48:5e:f3:c2:a7: 85:fb:73:0a:e5:40:ff:f7:d7:9a:73:aa:2a:ef:8c:c6:61:40: 8a:0f:0b:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGj1dJzK/5Ylv4ibyw0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1YjMzYTY2NzAxYjJjNjVkNDk3ZmUwNGM1YmEzMDFiZGNl Y2I2ZDkwHhcNMjYwMjA5MTgwMTAzWhcNMjYwMjEwMTgwMTAzWjAzMTEwLwYDVQQD Eyg5NjUxMzE5Y2FlNjk5YmRhN2NlMTE2OWI0NGY4Y2JlM2ExNjJlZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphLinGmPGS3DP7pGgjGCPerfV+Gw kGJDiQ8FcGEm377XsCozx4XIKrdn2Ndnwuo/5kMjdqKyNFnVh4obim7WqkmtWBWu AbG9Qbx3PTLq3qkTbsKtJfGyKLUEe5oBG2Rz5nIryUDiDyxQFlvqBwNav3l+Rne/ tERhsBGwOsgOLmW3O9X+qLCvyexCqJ0sTDefOenA5vaHbeMXp5zppGm6g1ASiQMU ka2F4KoilTxh9H8KAt//rfhzRgmOmI7D2nFfQydFVEnrR52dZWEeMZrbvNZshfiS oNNVtbTPRJ7WsOc/94DLVkXjFcTnU67UVWIIsaCFHmVCxwMr3sfGQyKn+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZRMZyuaZvafOEWm0T4y+OhYu2fMB8GA1UdIwQY MBaAFAWzOmZwGyxl1Jf+BMW6MBvc7LbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTct MWJmOTRhMjUwMTRlLzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8yMzEwZjQtZDhiMy00MTM2LTk5OTctMWJmOTRhMjUwMTRl LzEvQmJNNlpuQWJMR1hVbF80RXhib3dHOXpzdHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs4lf5ft1 DeIK5/KKu3HrRMnPap7s+NAtXo15Q5SkWo7J56BfoXfNJJ5FznxNl8PcqxVVfIuU frs+ijrL+Ie/zh8mfrsuvbq0GxvbzQSKLXEvn1sMkLlC9wXr/t+GBCsFvGART9wR hTApzFcZM1VrHknHOxpX6mI19FTCTAwje7Gcc74O2x7N+x6sTI8DXWjSnV3i19g7 /JWOFyyWYxcvXVHk8mJxVV/v7hnJAsIqSNzSLlwJ5jcyHUmULjX4ErY/O78DCQXS AORkQWiPu64FSeDZClRFIejRmnX6+ku9hTqw110P0Uhe88KnhftzCuVA//fXmnOq Ku+MxmFAig8Low== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:58 2026 by rpki-client