This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json) Hash identifier: Om3Jx1kRf98HiLGAwWAa+7MWzI7qo1Ghdc06bQHWxCw= Subject key identifier: 40:E4:E7:7B:11:1B:F5:A5:F6:BC:1D:E2:42:5A:A2:18:A7:D3:6D:3A Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b Certificate serial: 019C42EB18819F706F167FC725ACE6062361 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft Manifest number: 16AF Signing time: Mon 09 Feb 2026 15:00:29 +0000 Manifest this update: Mon 09 Feb 2026 15:00:29 +0000 Manifest next update: Tue 10 Feb 2026 15:00:29 +0000 Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: vf9tXiGGXGKII580pGxOoV0s6szMU1xa1tk3EI0yLHg=) 2: nZWVrpkktVLvbn1tQxNa0DXWXX8.roa (hash: Po7W+yP4HlMRBc7RVFcp2+NXeQgCvfW3njKkUPa+zOQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:18:81:9f:70:6f:16:7f:c7:25:ac:e6:06:23:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b Validity Not Before: Feb 9 15:00:29 2026 GMT Not After : Feb 10 15:00:29 2026 GMT Subject: CN=40e4e77b111bf5a5f6bc1de2425aa218a7d36d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:35:09:c5:42:e5:a2:57:a0:41:14:5c:18:d1: 6f:5b:77:11:ea:f2:1e:68:54:44:75:56:5e:a2:1f: 54:7f:1f:b6:7f:62:7e:a8:15:9c:e4:a2:bb:02:1f: ac:dc:c0:65:3d:94:f3:d9:0e:2f:6b:73:92:86:81: 2a:c7:e8:75:14:e2:8d:75:3e:23:91:17:87:0b:81: 0a:ce:de:3f:0a:4d:87:a0:16:fe:49:5c:50:c1:9d: d2:15:2a:68:f5:b5:79:65:80:cc:ab:97:48:f3:15: 8e:cd:84:f7:13:71:a3:e5:7d:6c:80:7a:4a:11:46: c0:93:a3:65:0f:28:83:58:82:65:d3:fb:d0:8b:15: b5:03:d0:da:9e:45:ad:72:58:06:a6:4d:87:6f:84: 4e:09:85:e5:c1:21:c7:f6:cb:f6:c8:fb:59:49:e2: 18:d6:05:10:39:2c:39:da:49:af:02:c1:78:83:e4: 97:a3:a0:68:1e:37:eb:5d:47:63:d5:10:d7:0e:7f: 43:cf:be:e4:68:e5:17:1a:12:30:db:90:37:0f:b3: d9:6b:5b:a3:f0:5a:93:59:81:6e:a0:71:c8:6f:1f: 0c:d4:87:db:b8:db:7b:16:a3:da:77:d7:3f:39:f6: de:13:dd:91:0d:12:4b:29:86:4e:01:8a:47:d8:d0: ed:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E4:E7:7B:11:1B:F5:A5:F6:BC:1D:E2:42:5A:A2:18:A7:D3:6D:3A X509v3 Authority Key Identifier: keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:c1:ec:10:54:1e:76:0f:f5:19:07:c8:10:29:0f:b5:48:45: c2:9f:01:c7:07:46:e0:01:5f:95:d5:66:e5:ac:d6:34:eb:cd: 35:db:49:af:3e:08:84:21:72:a3:a0:8b:f3:b0:ba:11:19:4c: e2:c4:cc:97:33:53:cc:9b:34:4d:1b:f7:9a:60:32:8d:7d:28: e0:27:dd:bc:40:c7:1b:41:85:f9:63:43:fb:89:81:69:71:b0: ce:07:de:78:51:17:7e:45:86:9d:5f:c7:08:73:d2:91:b5:3f: 8d:68:d4:02:cb:b8:fa:8c:61:19:95:c4:d0:1d:97:75:fb:40: 0b:4e:58:88:aa:52:b9:33:56:cd:75:2e:8a:bb:4a:ae:3a:39: 7c:b0:9a:a9:54:1e:a7:2a:93:4d:ca:31:97:2f:42:6f:3e:52: 70:60:4a:0d:ab:3c:ac:9c:d6:5c:c9:8b:35:75:6e:f4:1e:d3: ce:34:0e:75:63:5b:d6:b2:43:97:54:14:a2:b5:26:f6:57:72: 7a:5f:cf:7e:46:86:75:ed:32:17:d9:d9:01:8c:a4:ca:06:d0: bd:47:26:2b:50:93:73:7e:c6:f0:35:f5:9e:16:f7:14:52:6c: ad:e1:38:1b:73:31:c0:b0:cd:4f:e4:4b:ba:9a:c8:2b:28:db: cc:f9:68:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6xiBn3BvFn/HJazmBiNhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNDJhZTZlOTYxODBmMDNiN2NhNmQ5NzQyNzUxNmU0YzA3 ZjZlMmIwHhcNMjYwMjA5MTUwMDI5WhcNMjYwMjEwMTUwMDI5WjAzMTEwLwYDVQQD Eyg0MGU0ZTc3YjExMWJmNWE1ZjZiYzFkZTI0MjVhYTIxOGE3ZDM2ZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DUJxULlolegQRRcGNFvW3cR6vIe aFREdVZeoh9Ufx+2f2J+qBWc5KK7Ah+s3MBlPZTz2Q4va3OShoEqx+h1FOKNdT4j kReHC4EKzt4/Ck2HoBb+SVxQwZ3SFSpo9bV5ZYDMq5dI8xWOzYT3E3Gj5X1sgHpK EUbAk6NlDyiDWIJl0/vQixW1A9DankWtclgGpk2Hb4ROCYXlwSHH9sv2yPtZSeIY 1gUQOSw52kmvAsF4g+SXo6BoHjfrXUdj1RDXDn9Dz77kaOUXGhIw25A3D7PZa1uj 8FqTWYFuoHHIbx8M1IfbuNt7FqPad9c/OfbeE92RDRJLKYZOAYpH2NDt7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDk53sRG/Wl9rwd4kJaohin0206MB8GA1UdIwQY MBaAFApCrm6WGA8Dt8ptl0J1FuTAf24rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEt YjQxOTJhYzYzOGM5LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS80NmM3ZTYtNDAwNi00MGYwLWFkYWEtYjQxOTJhYzYzOGM5 LzEvQ2tLdWJwWVlEd08zeW0yWFFuVVc1TUJfYmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqsHsEFQe dg/1GQfIECkPtUhFwp8BxwdG4AFfldVm5azWNOvNNdtJrz4IhCFyo6CL87C6ERlM 4sTMlzNTzJs0TRv3mmAyjX0o4CfdvEDHG0GF+WND+4mBaXGwzgfeeFEXfkWGnV/H CHPSkbU/jWjUAsu4+oxhGZXE0B2XdftAC05YiKpSuTNWzXUuirtKrjo5fLCaqVQe pyqTTcoxly9Cbz5ScGBKDas8rJzWXMmLNXVu9B7TzjQOdWNb1rJDl1QUorUm9ldy el/PfkaGde0yF9nZAYykygbQvUcmK1CTc37G8DX1nhb3FFJsreE4G3MxwLDNT+RL uprIKyjbzPloeA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:54:25 2026 by rpki-client