This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json) Hash identifier: +U9tEbg5nmadLImDV+N+LoE9Sd2rwaEgR59hgOkhivM= Subject key identifier: 40:BC:7F:CE:B6:0F:0A:92:BE:B2:74:73:20:84:45:12:FB:B1:E9:1F Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5 Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5 Certificate serial: 019C43226BABBA825E7D2F2A8D1EE638E1A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft Manifest number: 0D2C Signing time: Mon 09 Feb 2026 16:00:55 +0000 Manifest this update: Mon 09 Feb 2026 16:00:55 +0000 Manifest next update: Tue 10 Feb 2026 16:00:55 +0000 Files and hashes: 1: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: 8dGrO1YAJYeYedY6Aj4r3yiISMqh85IYo+cVDyttfDs=) 2: k4UtRTo4es2u6gj5J8Th7aFb0lI.roa (hash: IUlZB81NExbN3uxs4qiipWIFE522u3DdVU+kG7Xx+fY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:6b:ab:ba:82:5e:7d:2f:2a:8d:1e:e6:38:e1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5 Validity Not Before: Feb 9 16:00:55 2026 GMT Not After : Feb 10 16:00:55 2026 GMT Subject: CN=40bc7fceb60f0a92beb2747320844512fbb1e91f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:21:ac:4e:65:d3:66:12:ea:4e:eb:ff:03:dc: 40:f4:af:75:c5:43:53:94:b6:3e:0d:49:61:a8:92: ea:52:35:79:a9:bc:43:56:cf:70:fe:d9:06:e7:fe: a5:b5:79:0e:aa:a2:62:f4:8b:2a:d3:db:1b:d9:53: b1:3d:c2:47:76:35:f6:35:0d:ff:ed:ae:6c:44:22: 7d:ca:b2:f2:d6:d9:14:09:bf:33:20:77:27:30:48: 41:f7:53:29:8a:46:a8:06:fa:c6:bc:cb:3b:95:ca: 82:61:17:cc:c2:f1:1c:f6:8f:b9:d3:2c:fd:63:c6: a2:14:bd:d9:6c:ea:c1:bd:23:e5:da:cb:58:84:94: d9:29:e3:78:77:b1:45:d8:70:c2:9f:de:82:57:0b: f2:c5:2a:3c:ac:e1:b1:13:4c:75:9e:e3:22:6c:a9: 6f:c8:e2:81:d0:90:9c:40:5f:15:f0:52:db:98:4a: 1a:3b:ab:7f:86:ce:3c:f1:ae:90:f0:32:e9:ad:9b: 43:1f:b2:2b:27:26:b5:a4:d0:e8:8a:9f:eb:ab:b3: b5:aa:cc:09:5e:7b:86:14:86:b6:9c:31:d7:fa:8a: 81:7d:13:3a:41:d9:44:27:b2:f7:d8:41:39:61:14: 59:e3:e9:97:15:3a:c1:64:d5:97:be:27:8f:86:dd: 47:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BC:7F:CE:B6:0F:0A:92:BE:B2:74:73:20:84:45:12:FB:B1:E9:1F X509v3 Authority Key Identifier: keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:2d:a4:a9:04:18:b0:9f:af:b3:cc:02:7d:dc:bb:d1:55:1a: 18:64:a3:42:48:ff:1e:2c:57:d2:0c:f3:c5:56:ff:8f:7f:b7: d9:8d:cb:b3:64:ec:d2:57:ab:5e:a0:cb:cc:5d:d6:6f:80:b8: 16:ba:cd:f5:12:05:c0:43:7f:5c:68:ad:4e:27:71:1c:00:95: 4f:b1:84:7d:1d:ab:5b:22:6e:0e:c8:a3:ca:05:a8:8f:5a:14: 19:58:29:e1:0c:f4:15:7f:fa:ad:80:c6:78:bc:cc:41:1a:13: 8e:bf:b3:00:fb:d1:e0:a3:e2:3e:bc:fc:eb:85:3a:12:cb:e8: f1:6c:fc:49:44:e4:f2:0f:89:2d:42:45:36:8c:22:d1:2d:68: 7f:81:8b:40:3e:99:1e:0b:51:b2:1d:ea:d5:20:af:a3:f7:f1: ab:67:98:3b:8b:1a:33:45:c2:d2:73:e3:88:f1:03:57:89:25: 0d:62:06:42:27:1f:0f:06:d0:0a:7e:ec:00:1a:50:48:93:0e: 86:45:e9:b9:66:99:44:03:9e:e8:79:84:6b:72:d1:47:e0:cb: 47:88:9e:59:c7:85:32:b5:0b:98:c1:02:a6:7c:e4:8e:b8:5f: eb:75:44:fa:64:d4:cf:30:bd:69:d5:b4:e5:86:fa:f3:91:bb: b5:46:4d:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImuruoJefS8qjR7mOOGnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNjA4ODNhYWU0OTFlNWZiNzczYTkyNjQwMTlmZjRmODg4 ZDVjYTUwHhcNMjYwMjA5MTYwMDU1WhcNMjYwMjEwMTYwMDU1WjAzMTEwLwYDVQQD Eyg0MGJjN2ZjZWI2MGYwYTkyYmViMjc0NzMyMDg0NDUxMmZiYjFlOTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5iGsTmXTZhLqTuv/A9xA9K91xUNT lLY+DUlhqJLqUjV5qbxDVs9w/tkG5/6ltXkOqqJi9Isq09sb2VOxPcJHdjX2NQ3/ 7a5sRCJ9yrLy1tkUCb8zIHcnMEhB91MpikaoBvrGvMs7lcqCYRfMwvEc9o+50yz9 Y8aiFL3ZbOrBvSPl2stYhJTZKeN4d7FF2HDCn96CVwvyxSo8rOGxE0x1nuMibKlv yOKB0JCcQF8V8FLbmEoaO6t/hs488a6Q8DLprZtDH7IrJya1pNDoip/rq7O1qswJ XnuGFIa2nDHX+oqBfRM6QdlEJ7L32EE5YRRZ4+mXFTrBZNWXviePht1H+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEC8f862DwqSvrJ0cyCERRL7sekfMB8GA1UdIwQY MBaAFG5giDquSR5ft3OpJkAZ/0+IjVylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAt YjU2MDJkM2RhOGE2LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9kOGUwOTYtNDMxMC00MmI5LWJkMjAtYjU2MDJkM2RhOGE2 LzEvYm1DSU9xNUpIbC0zYzZrbVFCbl9UNGlOWEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASS2kqQQY sJ+vs8wCfdy70VUaGGSjQkj/HixX0gzzxVb/j3+32Y3Ls2Ts0lerXqDLzF3Wb4C4 FrrN9RIFwEN/XGitTidxHACVT7GEfR2rWyJuDsijygWoj1oUGVgp4Qz0FX/6rYDG eLzMQRoTjr+zAPvR4KPiPrz864U6Esvo8Wz8SUTk8g+JLUJFNowi0S1of4GLQD6Z HgtRsh3q1SCvo/fxq2eYO4saM0XC0nPjiPEDV4klDWIGQicfDwbQCn7sABpQSJMO hkXpuWaZRAOe6HmEa3LRR+DLR4ieWceFMrULmMECpnzkjrhf63VE+mTUzzC9adW0 5Yb685G7tUZNrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:28 2026 by rpki-client