This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json) Hash identifier: b4J3jLzYwM/K30I31rguGKndNaDwu2WHOBtAxhILQ08= Subject key identifier: AD:A8:CC:01:24:BF:5C:79:94:BE:19:4F:02:81:5A:9A:74:A5:A5:07 Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa Certificate serial: 019C43FDC18AB53C5F4FBD80413D09D2C804 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 20:00:29 +0000 Manifest this update: Mon 09 Feb 2026 20:00:29 +0000 Manifest next update: Tue 10 Feb 2026 20:00:29 +0000 Files and hashes: 1: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: CEnosOeWJwsLoVm9eaqA56KYCOGou2FcK3GrJhutZ0Y=) 2: etj0sShjec2CBR92UCLlU4OhoHU.roa (hash: T3WyGa+EDgJcqKV7smiXEGZnclSaocbCUmsz9FP6vjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:c1:8a:b5:3c:5f:4f:bd:80:41:3d:09:d2:c8:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa Validity Not Before: Feb 9 20:00:29 2026 GMT Not After : Feb 10 20:00:29 2026 GMT Subject: CN=ada8cc0124bf5c7994be194f02815a9a74a5a507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:76:92:0e:a9:77:fa:8f:2e:c9:b2:2e:20:a5: 39:c7:58:b1:eb:50:41:b3:6a:50:fc:ae:9b:8e:b4: 44:a1:c2:56:eb:9c:fb:52:21:bb:c3:a4:52:b1:50: d5:b0:15:72:d6:cd:9f:7e:ef:f2:04:2e:da:ce:a2: 82:60:7c:41:af:3e:ea:e4:ef:f3:4f:5a:fb:9c:e7: 2a:28:8f:6c:43:04:51:95:0b:69:e0:aa:81:74:13: c0:2f:11:ee:60:9e:f5:06:ec:85:8c:4e:71:95:59: f5:1c:f3:ef:85:11:55:d0:01:22:ed:40:53:16:2f: 58:05:22:b3:a8:45:86:a1:d6:fd:ef:2b:bb:b4:f1: 48:41:36:81:1f:7e:9d:3a:c4:a8:b4:06:a3:12:49: db:5c:20:2d:b6:8e:bc:db:89:57:21:cc:f7:26:84: 91:94:cb:6e:cd:89:ca:2d:e0:1e:6e:01:3a:f0:75: 84:d2:84:95:39:af:77:53:88:67:1b:2f:01:27:ff: af:b4:fb:02:f8:cf:34:21:4d:2e:2d:97:30:31:9a: e3:ab:79:ef:da:8e:6e:82:77:71:fd:26:e5:86:07: 2f:1a:ca:61:29:d8:57:9d:ad:8b:5a:d6:0b:42:01: a7:3a:39:94:58:b5:f3:dc:95:1d:0b:9c:3c:b8:b9: 3a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A8:CC:01:24:BF:5C:79:94:BE:19:4F:02:81:5A:9A:74:A5:A5:07 X509v3 Authority Key Identifier: keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ba:68:16:80:14:52:49:5d:ad:ef:48:22:e1:80:71:18:43: 17:4f:dd:7d:b8:27:ff:b3:2e:c3:3b:1a:0f:41:80:f2:ad:40: 7b:1d:d4:89:c6:26:33:2b:db:ad:b3:59:3c:6f:50:ac:ef:f5: b0:8d:a0:e8:f4:fe:b5:fa:b4:76:da:af:7d:92:a4:41:85:8b: 89:e7:ba:3a:8f:78:15:85:bb:73:81:8a:86:f1:17:5a:8c:63: c8:d6:83:8e:5a:f0:85:39:ad:69:5e:e5:89:14:a8:d9:ee:c0: 99:9b:17:ea:53:19:77:21:db:c6:f6:b6:cc:8d:b9:52:49:6a: 87:13:1b:72:1f:5f:cc:3f:59:b1:a7:25:c2:04:c7:fb:72:09: bc:94:53:7c:5f:81:51:f9:63:52:48:31:4c:f6:22:8e:97:96: 0a:51:44:3b:83:b1:58:a3:db:da:6a:51:a8:b0:9e:13:a8:9a: 61:53:bb:05:ef:a8:c4:56:28:e3:2e:77:02:00:06:b5:de:34: 8e:8a:76:e0:ba:d2:cd:41:39:56:0b:d8:8a:54:e8:79:f4:96: 2f:e6:3b:16:73:ef:bd:9c:e2:ec:f1:b3:f6:6e:fe:f9:9e:22: 2a:43:74:59:c7:b7:2c:98:51:7f:97:ae:20:4e:d8:b4:8b:93: 97:db:5a:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/cGKtTxfT72AQT0J0sgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzgwYzhiNGU1NWU1OTA4MWFmNzNhYTE5MzVlMTBhMDEy MDU3ZmEwHhcNMjYwMjA5MjAwMDI5WhcNMjYwMjEwMjAwMDI5WjAzMTEwLwYDVQQD EyhhZGE4Y2MwMTI0YmY1Yzc5OTRiZTE5NGYwMjgxNWE5YTc0YTVhNTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnaSDql3+o8uybIuIKU5x1ix61BB s2pQ/K6bjrREocJW65z7UiG7w6RSsVDVsBVy1s2ffu/yBC7azqKCYHxBrz7q5O/z T1r7nOcqKI9sQwRRlQtp4KqBdBPALxHuYJ71BuyFjE5xlVn1HPPvhRFV0AEi7UBT Fi9YBSKzqEWGodb97yu7tPFIQTaBH36dOsSotAajEknbXCAtto6824lXIcz3JoSR lMtuzYnKLeAebgE68HWE0oSVOa93U4hnGy8BJ/+vtPsC+M80IU0uLZcwMZrjq3nv 2o5ugndx/SblhgcvGsphKdhXna2LWtYLQgGnOjmUWLXz3JUdC5w8uLk61QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2ozAEkv1x5lL4ZTwKBWpp0paUHMB8GA1UdIwQY MBaAFGw4DItOVeWQga9zqhk14QoBIFf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAt MDhmMDk0ZGFmMjQ3LzEvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZTQyYzctMTU1YS00OWFhLWFhMDAtMDhmMDk0ZGFmMjQ3 LzEvYkRnTWkwNVY1WkNCcjNPcUdUWGhDZ0VnVl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUbpoFoAU Ukldre9IIuGAcRhDF0/dfbgn/7MuwzsaD0GA8q1Aex3UicYmMyvbrbNZPG9QrO/1 sI2g6PT+tfq0dtqvfZKkQYWLiee6Oo94FYW7c4GKhvEXWoxjyNaDjlrwhTmtaV7l iRSo2e7AmZsX6lMZdyHbxva2zI25UklqhxMbch9fzD9ZsaclwgTH+3IJvJRTfF+B UfljUkgxTPYijpeWClFEO4OxWKPb2mpRqLCeE6iaYVO7Be+oxFYo4y53AgAGtd40 jop24LrSzUE5VgvYilToefSWL+Y7FnPvvZzi7PGz9m7++Z4iKkN0Wce3LJhRf5eu IE7YtIuTl9taSg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:03 2026 by rpki-client