This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft File: bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json) Hash identifier: 7NIxwabUnxVwZROjNTDRCd9iOqTibcMf4gEoVAHZcts= Subject key identifier: 17:EA:24:EF:61:EF:49:B7:EA:93:0F:6C:09:C4:AD:25:07:9B:BD:F3 Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8 Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8 Certificate serial: 019C42B43995CA8BFB7283BE7E0289FEBE2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft Manifest number: 0837 Signing time: Mon 09 Feb 2026 14:00:33 +0000 Manifest this update: Mon 09 Feb 2026 14:00:33 +0000 Manifest next update: Tue 10 Feb 2026 14:00:33 +0000 Files and hashes: 1: 2txQ-0RSqs2uJRwQDVdC5Ar0Q1U.roa (hash: dgukSS0gWF7oah9dhXPhy2J6/nwd2z1Om6wRww4A75c=) 2: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: H1+leY3cH69gzXstN4LzF2pZFCcBmWp/RKo3ejzPcx4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:39:95:ca:8b:fb:72:83:be:7e:02:89:fe:be:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8 Validity Not Before: Feb 9 14:00:33 2026 GMT Not After : Feb 10 14:00:33 2026 GMT Subject: CN=17ea24ef61ef49b7ea930f6c09c4ad25079bbdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:28:a8:3e:df:3d:df:4c:b5:72:aa:bb:15:f7: 7b:45:af:f8:08:d5:99:cd:b1:93:9e:e7:d0:94:6c: 06:1a:57:83:38:3d:34:2e:fb:51:20:fa:21:a3:18: 28:9f:af:72:6d:a0:6e:ad:cf:48:77:10:0c:55:21: 86:f5:89:c7:3b:fd:04:98:b5:b1:c3:25:f1:a8:af: bc:dd:7f:33:de:89:78:44:4e:8f:6f:62:b4:10:f8: 2d:65:b2:ff:a3:b6:34:df:69:0f:22:e9:11:a5:89: 79:74:a4:c5:ea:91:34:aa:cb:62:42:d4:0e:ec:65: 7b:53:f7:d4:cf:e2:a4:96:8c:01:5b:92:29:bc:9f: 27:d8:3b:c7:8b:d3:12:e5:1c:73:85:e1:87:74:33: de:85:19:ab:6f:2b:b7:bd:87:af:1f:21:d4:1d:2f: ad:5b:b1:3a:03:66:7b:34:0c:98:c4:a6:26:cb:e6: b5:2b:11:0c:34:44:fa:c0:14:77:9d:84:06:18:b0: 19:4f:e5:19:a3:6e:20:05:58:b8:8e:9e:15:df:bb: b5:f1:10:8a:8a:1c:c5:6d:c1:57:bf:3d:55:3b:1c: 4c:30:fc:8b:b9:8a:65:3d:cd:af:a0:90:16:8f:b3: a6:ff:7f:76:6f:f9:b8:92:e1:0e:b4:7d:cf:d8:00: 0f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EA:24:EF:61:EF:49:B7:EA:93:0F:6C:09:C4:AD:25:07:9B:BD:F3 X509v3 Authority Key Identifier: keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:33:43:a3:1d:b9:25:4e:26:e6:92:00:ac:21:b6:28:3c:5d: fe:45:b1:fd:90:5a:0c:e5:80:35:ad:42:6a:1d:f6:a8:3a:3d: 7d:8d:6b:28:89:4e:74:9f:ea:41:42:d1:ba:1c:fa:c1:d8:f1: 9f:bb:09:6e:2b:92:8a:be:41:c4:24:28:bd:15:e4:9f:07:9c: 76:4c:5e:e3:bb:a6:f4:79:4c:20:3a:5e:4c:a4:15:5a:0e:5c: 9b:b0:ed:11:40:5f:50:0e:32:84:b2:bf:67:3d:5d:3d:37:d4: 14:b7:8d:1c:04:e4:7b:cf:cf:60:12:71:46:3b:5d:64:90:b8: 26:7e:b5:54:e1:fe:22:ef:97:b4:02:4f:07:72:0e:c7:92:9a: 05:b4:ec:f1:11:44:b0:b7:c2:8e:2e:d8:c7:b5:1d:30:e1:a2: 37:c5:71:85:ad:66:8c:df:72:2e:10:c0:88:05:0c:61:49:85: 40:43:46:5f:81:11:f1:42:d2:44:09:9f:42:5b:b3:dc:4f:7d: 3e:fc:1a:f6:14:b6:15:f9:71:b6:1b:49:65:8f:87:06:4f:2f: 33:ac:e4:fc:7a:58:80:b9:16:e3:cc:cc:2c:aa:fd:8c:88:b2: 6b:c5:6b:0f:52:26:d2:d9:54:26:02:97:36:5f:d1:30:05:ce: d9:f4:1a:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDmVyov7coO+fgKJ/r4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDg2MTkyY2IzZjI4ZjU4YjIxNDRkZGUyZDkxYTIzMTIw NTZmYzgwHhcNMjYwMjA5MTQwMDMzWhcNMjYwMjEwMTQwMDMzWjAzMTEwLwYDVQQD EygxN2VhMjRlZjYxZWY0OWI3ZWE5MzBmNmMwOWM0YWQyNTA3OWJiZGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CioPt8930y1cqq7Ffd7Ra/4CNWZ zbGTnufQlGwGGleDOD00LvtRIPohoxgon69ybaBurc9IdxAMVSGG9YnHO/0EmLWx wyXxqK+83X8z3ol4RE6Pb2K0EPgtZbL/o7Y032kPIukRpYl5dKTF6pE0qstiQtQO 7GV7U/fUz+KklowBW5IpvJ8n2DvHi9MS5RxzheGHdDPehRmrbyu3vYevHyHUHS+t W7E6A2Z7NAyYxKYmy+a1KxEMNET6wBR3nYQGGLAZT+UZo24gBVi4jp4V37u18RCK ihzFbcFXvz1VOxxMMPyLuYplPc2voJAWj7Om/392b/m4kuEOtH3P2AAPTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfqJO9h70m36pMPbAnErSUHm73zMB8GA1UdIwQY MBaAFGwIYZLLPyj1iyFE3eLZGiMSBW/IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9lNmExMjAtNDFiNC00ZGI0LTgzYjkt ZWVmNTI5YTQ3N2U3LzEvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9lNmExMjAtNDFiNC00ZGI0LTgzYjktZWVmNTI5YTQ3N2U3 LzEvYkFoaGtzc19LUFdMSVVUZDR0a2FJeElGYjhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASTNDox25 JU4m5pIArCG2KDxd/kWx/ZBaDOWANa1Cah32qDo9fY1rKIlOdJ/qQULRuhz6wdjx n7sJbiuSir5BxCQovRXknwecdkxe47um9HlMIDpeTKQVWg5cm7DtEUBfUA4yhLK/ Zz1dPTfUFLeNHATke8/PYBJxRjtdZJC4Jn61VOH+Iu+XtAJPB3IOx5KaBbTs8RFE sLfCji7Yx7UdMOGiN8Vxha1mjN9yLhDAiAUMYUmFQENGX4ER8ULSRAmfQluz3E99 Pvwa9hS2FflxthtJZY+HBk8vM6zk/HpYgLkW48zMLKr9jIiya8VrD1Im0tlUJgKX Nl/RMAXO2fQarQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:43 2026 by rpki-client