This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json) Hash identifier: fQB8LB14s4xkNC0GGgkgKaa39G7FyzBCGekZf4nk9R8= Subject key identifier: 87:E5:15:6F:2B:79:B8:0C:AD:63:AE:A3:AE:5B:94:5D:86:C5:69:62 Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44 Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844 Certificate serial: 019C42468B5B72A260119F6116E863E54440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft Manifest number: 1553 Signing time: Mon 09 Feb 2026 12:00:45 +0000 Manifest this update: Mon 09 Feb 2026 12:00:45 +0000 Manifest next update: Tue 10 Feb 2026 12:00:45 +0000 Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: BB8fTb+hkYFD7nf19LnsvNZkzTxCuyRcVljZ9apOzTs=) 2: sQyne1zxQXu_zdF8YvRFUzS8ZEg.roa (hash: KddIGoSYVIL2Nj4926PBtsXbFubGN3uCRL3ozwJnP+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:8b:5b:72:a2:60:11:9f:61:16:e8:63:e5:44:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844 Validity Not Before: Feb 9 12:00:45 2026 GMT Not After : Feb 10 12:00:45 2026 GMT Subject: CN=87e5156f2b79b80cad63aea3ae5b945d86c56962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8c:9e:5a:5d:9b:56:d1:f1:36:5b:fe:10:5c: 73:8f:f4:a6:b0:d1:0d:ab:0e:43:33:d1:5d:2e:9b: d5:e6:eb:9d:89:15:4b:be:42:48:db:cf:9f:5c:06: bd:7a:5e:77:16:4e:b3:fe:87:9e:04:dc:15:6c:38: 99:cc:ea:88:be:b6:1d:5d:90:9b:3e:73:d7:fa:34: 10:3d:64:2e:62:6e:11:92:9d:c5:ae:fc:34:f9:29: 1c:5e:66:69:47:f4:be:5d:66:7b:38:db:aa:1c:01: f2:dc:42:4f:f1:0b:62:de:2a:c0:ec:3a:7e:17:b2: e0:ed:d2:26:cc:48:cf:54:dd:e6:61:c0:ff:8e:a0: 7f:e7:2f:42:2d:a9:66:cb:ac:71:3a:46:67:d9:5c: 7d:ce:ec:40:5e:8f:26:e2:f6:34:f2:c1:31:52:82: c3:2d:9c:4a:78:8c:58:48:48:20:b6:76:c3:4f:18: 10:f1:21:4e:a1:fc:20:9a:b2:eb:95:95:cc:f9:4a: 15:6e:a8:5e:dd:f7:f5:b3:0b:40:2f:0c:e2:dc:43: 6b:19:00:c4:81:c3:d2:85:61:da:8c:8b:8d:6f:b1: 76:c3:f8:c9:a8:92:cc:8e:e6:bb:2c:20:66:dc:bb: 84:54:0d:a0:37:48:d1:3a:17:9d:8b:d4:76:ba:c1: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E5:15:6F:2B:79:B8:0C:AD:63:AE:A3:AE:5B:94:5D:86:C5:69:62 X509v3 Authority Key Identifier: keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e3:d6:ac:b3:74:67:5e:8f:ef:11:b1:de:33:39:49:41:7b: 83:2c:ba:5c:af:b9:d8:58:05:79:18:67:5f:1f:11:06:c0:76: 19:b0:11:5d:7d:f4:13:b3:ac:7b:ac:80:c2:cc:9a:74:2e:04: 8e:d9:c2:b9:40:bb:b1:1b:4e:c9:fa:bb:16:9d:87:3c:0a:dd: a6:57:50:f5:e8:0d:9c:c4:f7:72:42:cf:2a:f9:26:48:af:3c: 27:16:85:f3:9b:38:95:f0:61:41:a8:a6:1d:39:a7:fd:3b:3e: 29:16:d7:ec:43:7f:e7:69:cf:4b:e5:91:38:4d:08:70:a3:48: c8:40:ce:ca:91:59:86:e1:d6:3c:12:fb:f3:93:2f:43:c7:63: 24:3e:9a:e0:95:78:60:90:8d:b7:47:b3:bd:cd:07:65:fd:07: 62:c9:fe:2d:fb:a4:df:c4:d8:a8:d1:5b:cf:b3:66:02:d9:9f: e6:28:4f:0d:b4:b8:ac:a3:98:cf:af:e2:59:03:b2:c6:33:c2: 41:bc:db:33:72:eb:6f:fe:7e:df:ae:dc:7c:e3:e6:67:45:5e: 64:07:f6:f3:c0:6c:89:6e:69:b3:bd:65:2e:5b:54:e6:8c:d5: 67:81:7f:00:f8:17:43:c0:12:48:cc:45:af:1c:10:b1:1e:d4: c4:c3:4d:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRotbcqJgEZ9hFuhj5URAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2Y2U1YjI4NDY2YjkyNzQyNTI2MDMxMzkyZDk0YmYxYTU1 OGU4NDQwHhcNMjYwMjA5MTIwMDQ1WhcNMjYwMjEwMTIwMDQ1WjAzMTEwLwYDVQQD Eyg4N2U1MTU2ZjJiNzliODBjYWQ2M2FlYTNhZTViOTQ1ZDg2YzU2OTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIyeWl2bVtHxNlv+EFxzj/SmsNEN qw5DM9FdLpvV5uudiRVLvkJI28+fXAa9el53Fk6z/oeeBNwVbDiZzOqIvrYdXZCb PnPX+jQQPWQuYm4Rkp3Frvw0+SkcXmZpR/S+XWZ7ONuqHAHy3EJP8Qti3irA7Dp+ F7Lg7dImzEjPVN3mYcD/jqB/5y9CLalmy6xxOkZn2Vx9zuxAXo8m4vY08sExUoLD LZxKeIxYSEggtnbDTxgQ8SFOofwgmrLrlZXM+UoVbqhe3ff1swtALwzi3ENrGQDE gcPShWHajIuNb7F2w/jJqJLMjua7LCBm3LuEVA2gN0jROhedi9R2usE0hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIflFW8rebgMrWOuo65blF2GxWliMB8GA1UdIwQY MBaAFAbOWyhGa5J0JSYDE5LZS/GlWOhEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS80NWNmMzctYWZhNS00OTk0LWFlZGIt NDg1YjIwOTUyZDkzLzEvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS80NWNmMzctYWZhNS00OTk0LWFlZGItNDg1YjIwOTUyZDkz LzEvQnM1YktFWnJrblFsSmdNVGt0bEw4YVZZNkVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+PWrLN0 Z16P7xGx3jM5SUF7gyy6XK+52FgFeRhnXx8RBsB2GbARXX30E7Ose6yAwsyadC4E jtnCuUC7sRtOyfq7Fp2HPArdpldQ9egNnMT3ckLPKvkmSK88JxaF85s4lfBhQaim HTmn/Ts+KRbX7EN/52nPS+WROE0IcKNIyEDOypFZhuHWPBL785MvQ8djJD6a4JV4 YJCNt0ezvc0HZf0HYsn+Lfuk38TYqNFbz7NmAtmf5ihPDbS4rKOYz6/iWQOyxjPC QbzbM3Lrb/5+367cfOPmZ0VeZAf288BsiW5ps71lLltU5ozVZ4F/APgXQ8ASSMxF rxwQsR7UxMNNzg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:23 2026 by rpki-client