This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft File: BDqcNdnhovTTSnVPom0gNleEchg.mft (raw, json) Hash identifier: bBcAR5GDy/W3CHJRU+p6FGqX2P0NanRVD5XyXhFApsY= Subject key identifier: 39:79:DF:6B:80:51:B9:9A:C6:74:75:D5:2B:AB:3D:7E:44:BC:4D:A2 Authority key identifier: 04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18 Certificate issuer: /CN=043a9c35d9e1a2f4d34a754fa26d203657847218 Certificate serial: 019C42EB8A22632F62A0892B1B7AF92B1A93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft Manifest number: 1649 Signing time: Mon 09 Feb 2026 15:00:58 +0000 Manifest this update: Mon 09 Feb 2026 15:00:58 +0000 Manifest next update: Tue 10 Feb 2026 15:00:58 +0000 Files and hashes: 1: BDqcNdnhovTTSnVPom0gNleEchg.crl (hash: Ojpgiv4vWPWy8sB2e04a/KQxQXiry3hHbdRHDQr6fAs=) 2: lTfd7GgHfFfG-NrFVv4P-oURL84.roa (hash: flnE10R0DAa5/66iQpSm47J0K/6sHRptDOR5dGtHv+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:8a:22:63:2f:62:a0:89:2b:1b:7a:f9:2b:1a:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=043a9c35d9e1a2f4d34a754fa26d203657847218 Validity Not Before: Feb 9 15:00:58 2026 GMT Not After : Feb 10 15:00:58 2026 GMT Subject: CN=3979df6b8051b99ac67475d52bab3d7e44bc4da2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:06:88:6e:f7:31:84:a2:40:7b:b2:ac:b2:d0: 95:36:6f:ea:79:e2:29:80:5c:10:4b:8b:b5:8e:41: 65:7b:bd:16:99:c1:47:f9:7f:a8:43:51:43:3c:a7: 33:64:58:c8:41:c1:c8:99:c5:de:7e:a7:79:b4:90: 34:f0:ba:c9:43:70:f8:58:9c:a3:d6:f1:27:91:c9: 1f:12:10:15:88:9c:b1:26:8e:b5:57:f5:14:a1:a9: 69:75:3c:0d:fb:c2:ff:c8:89:46:12:6a:a2:9e:36: 53:d1:01:8d:72:c9:71:6c:56:52:9c:16:2c:18:4f: 03:16:d6:01:09:91:cc:62:54:9c:c3:3b:50:9f:aa: 00:34:57:0c:7f:61:e7:53:f7:09:bf:f6:b4:09:b5: c7:c0:93:5a:a3:81:d1:51:8f:7b:a9:f4:23:c4:c7: 2a:4e:0e:ea:3e:56:7c:8f:4c:de:93:f7:7a:2d:19: 4a:e4:52:88:7d:9b:7e:1a:81:b4:51:7f:ce:25:59: 94:69:3d:17:49:c1:b8:44:cb:78:31:a9:36:19:c7: 29:e6:51:89:05:0e:aa:5e:5d:57:6e:31:b6:09:6e: 43:27:16:22:cb:b7:87:a7:a2:c1:94:10:14:61:ac: 31:2f:fb:fa:e3:0c:d5:e3:3d:67:a0:e6:3d:a4:e1: c1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:79:DF:6B:80:51:B9:9A:C6:74:75:D5:2B:AB:3D:7E:44:BC:4D:A2 X509v3 Authority Key Identifier: keyid:04:3A:9C:35:D9:E1:A2:F4:D3:4A:75:4F:A2:6D:20:36:57:84:72:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDqcNdnhovTTSnVPom0gNleEchg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3b104a-c039-42c2-9ff1-85cbd2068e8f/1/BDqcNdnhovTTSnVPom0gNleEchg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:82:bc:3f:93:81:c1:a2:34:ca:63:fd:ca:ba:20:34:29:f5: d8:23:67:5e:75:03:5e:80:5b:7c:08:ae:f3:f9:15:dc:de:f2: 08:fd:a6:73:e3:1f:f6:7c:07:0e:2e:ff:e0:f2:da:07:01:0d: 8a:51:0d:c6:9f:87:c4:84:12:68:9c:9f:8c:91:05:88:57:b4: 01:1b:09:ae:d5:5d:0c:cb:b3:82:e7:86:59:0e:46:6f:0c:ee: e3:81:42:ec:9e:28:03:d5:55:74:ab:50:e3:b7:bb:46:e6:78: 34:f3:b7:e0:03:94:c7:13:f2:fe:33:c6:60:51:7a:aa:79:c2: 97:bc:82:64:39:99:ad:71:b2:de:ec:5a:e8:a5:71:be:78:83: 69:11:18:db:17:6c:b4:82:c1:ab:c7:d8:7f:b5:bb:12:74:4e: 0d:80:26:12:e5:3c:31:28:4a:cc:de:02:b8:e0:98:4e:97:5d: a8:68:60:75:06:1e:e6:1d:9f:bb:0d:6e:2b:c8:1f:db:c8:68: 5c:e7:2d:3d:6e:03:46:2a:47:df:f1:02:48:47:f1:73:3a:b2: c6:46:81:4c:71:14:d4:95:a5:05:bc:fb:01:e7:04:be:fa:e0: 77:9d:22:f2:c6:b0:c2:b2:42:13:b5:67:71:3e:c3:18:90:d9: 14:e0:9e:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64oiYy9ioIkrG3r5KxqTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0M2E5YzM1ZDllMWEyZjRkMzRhNzU0ZmEyNmQyMDM2NTc4 NDcyMTgwHhcNMjYwMjA5MTUwMDU4WhcNMjYwMjEwMTUwMDU4WjAzMTEwLwYDVQQD EygzOTc5ZGY2YjgwNTFiOTlhYzY3NDc1ZDUyYmFiM2Q3ZTQ0YmM0ZGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugaIbvcxhKJAe7KsstCVNm/qeeIp gFwQS4u1jkFle70WmcFH+X+oQ1FDPKczZFjIQcHImcXefqd5tJA08LrJQ3D4WJyj 1vEnkckfEhAViJyxJo61V/UUoalpdTwN+8L/yIlGEmqinjZT0QGNcslxbFZSnBYs GE8DFtYBCZHMYlScwztQn6oANFcMf2HnU/cJv/a0CbXHwJNao4HRUY97qfQjxMcq Tg7qPlZ8j0zek/d6LRlK5FKIfZt+GoG0UX/OJVmUaT0XScG4RMt4Mak2Gccp5lGJ BQ6qXl1XbjG2CW5DJxYiy7eHp6LBlBAUYawxL/v64wzV4z1noOY9pOHBswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDl532uAUbmaxnR11SurPX5EvE2iMB8GA1UdIwQY MBaAFAQ6nDXZ4aL000p1T6JtIDZXhHIYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zYjEwNGEtYzAzOS00MmMyLTlmZjEt ODVjYmQyMDY4ZThmLzEvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zYjEwNGEtYzAzOS00MmMyLTlmZjEtODVjYmQyMDY4ZThm LzEvQkRxY05kbmhvdlRUU25WUG9tMGdObGVFY2hnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsIK8P5OB waI0ymP9yrogNCn12CNnXnUDXoBbfAiu8/kV3N7yCP2mc+Mf9nwHDi7/4PLaBwEN ilENxp+HxIQSaJyfjJEFiFe0ARsJrtVdDMuzgueGWQ5Gbwzu44FC7J4oA9VVdKtQ 47e7RuZ4NPO34AOUxxPy/jPGYFF6qnnCl7yCZDmZrXGy3uxa6KVxvniDaREY2xds tILBq8fYf7W7EnRODYAmEuU8MShKzN4CuOCYTpddqGhgdQYe5h2fuw1uK8gf28ho XOctPW4DRipH3/ECSEfxczqyxkaBTHEU1JWlBbz7AecEvvrgd50i8sawwrJCE7Vn cT7DGJDZFOCe8g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:51 2026 by rpki-client