This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft File: bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft (raw, json) Hash identifier: WRQUkC7eoPW1yXzOGdztQbrOae/BhpxcEJ0Ppfsd/LM= Subject key identifier: A0:67:71:74:C3:EF:04:F1:EA:DA:D5:7D:5C:B2:1A:CC:8D:F7:E0:7B Authority key identifier: 6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9 Certificate issuer: /CN=6c95fdca367bce19e2f253b78f3608ff341428c9 Certificate serial: 019C41A1A851811C32880643177B4E682B3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft Manifest number: 03DA Signing time: Mon 09 Feb 2026 09:00:39 +0000 Manifest this update: Mon 09 Feb 2026 09:00:39 +0000 Manifest next update: Tue 10 Feb 2026 09:00:39 +0000 Files and hashes: 1: PlsF5PQ3EmH7blpykkipygbTcpI.roa (hash: zKxBR8QIzVtoSlF/4rcdDJ436zJksb7pP3puW4slSSw=) 2: bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl (hash: aIHNneM3K4TaXDEaCHmDcIe60pmse5jHm0v16MUann4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:a8:51:81:1c:32:88:06:43:17:7b:4e:68:2b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c95fdca367bce19e2f253b78f3608ff341428c9 Validity Not Before: Feb 9 09:00:39 2026 GMT Not After : Feb 10 09:00:39 2026 GMT Subject: CN=a0677174c3ef04f1eadad57d5cb21acc8df7e07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2c:ff:9d:1b:8d:11:3c:09:9a:c2:ea:7a:c7: 90:05:4c:d6:47:c4:12:5b:71:1d:51:b3:e1:c5:ee: 7a:5a:41:0f:51:87:13:84:85:01:42:1c:95:53:60: 61:41:47:df:ed:9a:1e:bc:cd:66:69:aa:07:7f:76: 29:d1:6a:da:14:23:a7:ce:a1:af:03:a2:6e:83:2c: 88:84:b4:98:cb:b3:f2:1d:a5:a3:9f:f6:3f:7a:3a: 9f:70:bc:bc:26:50:19:2d:8e:86:1f:34:29:42:e0: d4:b1:27:de:31:66:4b:0b:a3:8d:65:be:2d:d7:a3: ef:5f:1d:d1:50:9f:c3:49:08:58:98:d7:cb:06:5b: 3b:8c:f5:2e:7d:a2:e5:24:d5:c8:a0:09:ee:0a:fc: 43:f1:bd:29:9d:ea:75:f3:f3:a7:ea:4c:75:b6:40: 42:7c:74:de:bf:98:62:11:d0:16:35:fa:e4:ea:10: 10:05:a6:fe:6d:da:72:3d:f2:4a:59:3a:50:bc:ad: ca:81:23:9a:91:8b:05:3f:da:08:76:fe:44:48:d9: ee:43:ca:31:83:c3:22:93:a5:5c:1c:49:d4:a4:18: 5f:c1:9c:7d:b7:47:56:d7:5b:c2:b2:c0:ec:71:63: a9:1c:df:c7:b2:2d:25:c5:c5:28:21:b4:a0:5e:47: 58:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:67:71:74:C3:EF:04:F1:EA:DA:D5:7D:5C:B2:1A:CC:8D:F7:E0:7B X509v3 Authority Key Identifier: keyid:6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:05:48:d9:dc:0a:5f:39:48:09:66:c2:b2:d4:02:1d:af:ee: ea:85:78:b2:49:06:f1:7b:f6:73:aa:c3:a2:24:ad:e2:4f:52: e0:23:1d:0d:87:d8:b5:5c:ba:e8:c6:e8:cc:4b:08:d7:71:de: 0b:1b:d6:df:7f:2d:0d:30:55:42:b6:ce:2b:e5:52:ec:72:30: 7a:20:e8:0e:cf:86:24:88:b8:02:1e:be:ed:9a:98:61:62:71: d0:d1:65:69:95:6b:8b:53:6e:d0:29:b8:a5:55:ff:41:17:c9: 16:0a:80:ea:e9:2a:a4:4e:53:b3:e9:2b:88:cc:36:28:87:db: a4:68:93:87:61:75:17:cf:a1:1f:ae:49:55:c2:a7:f5:47:3e: 5c:7b:8d:c7:e5:32:73:2b:9c:31:48:21:27:2f:dc:26:10:d1: 09:9a:d5:89:fc:1b:09:37:5b:2e:f7:8e:26:23:0d:ef:42:04: 72:1e:87:26:4c:a2:7a:ec:f0:34:0e:d1:b7:b1:1a:63:41:06: 4a:69:2a:ea:be:0e:ee:aa:f6:e2:dc:03:a0:1c:e5:e9:eb:e7: 69:2a:30:a4:a0:78:21:f0:88:7a:50:8d:fd:72:a0:78:fd:6e: 6e:3a:d7:13:1d:10:9d:3b:50:21:bd:c0:c6:18:a8:54:5b:03: ef:5c:c4:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoahRgRwyiAZDF3tOaCs7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjOTVmZGNhMzY3YmNlMTllMmYyNTNiNzhmMzYwOGZmMzQx NDI4YzkwHhcNMjYwMjA5MDkwMDM5WhcNMjYwMjEwMDkwMDM5WjAzMTEwLwYDVQQD EyhhMDY3NzE3NGMzZWYwNGYxZWFkYWQ1N2Q1Y2IyMWFjYzhkZjdlMDdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCz/nRuNETwJmsLqeseQBUzWR8QS W3EdUbPhxe56WkEPUYcThIUBQhyVU2BhQUff7ZoevM1maaoHf3Yp0WraFCOnzqGv A6JugyyIhLSYy7PyHaWjn/Y/ejqfcLy8JlAZLY6GHzQpQuDUsSfeMWZLC6ONZb4t 16PvXx3RUJ/DSQhYmNfLBls7jPUufaLlJNXIoAnuCvxD8b0pnep18/On6kx1tkBC fHTev5hiEdAWNfrk6hAQBab+bdpyPfJKWTpQvK3KgSOakYsFP9oIdv5ESNnuQ8ox g8Mik6VcHEnUpBhfwZx9t0dW11vCssDscWOpHN/Hsi0lxcUoIbSgXkdY3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBncXTD7wTx6trVfVyyGsyN9+B7MB8GA1UdIwQY MBaAFGyV/co2e84Z4vJTt482CP80FCjJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mMDFhMDItNWE5ZS00NDQxLTliM2Qt ZDVjMTg4NjJkMDI2LzEvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9mMDFhMDItNWE5ZS00NDQxLTliM2QtZDVjMTg4NjJkMDI2 LzEvYkpYOXlqWjd6aG5pOGxPM2p6WUlfelFVS01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwVI2dwK XzlICWbCstQCHa/u6oV4skkG8Xv2c6rDoiSt4k9S4CMdDYfYtVy66MbozEsI13He CxvW338tDTBVQrbOK+VS7HIweiDoDs+GJIi4Ah6+7ZqYYWJx0NFlaZVri1Nu0Cm4 pVX/QRfJFgqA6ukqpE5Ts+kriMw2KIfbpGiTh2F1F8+hH65JVcKn9Uc+XHuNx+Uy cyucMUghJy/cJhDRCZrVifwbCTdbLveOJiMN70IEch6HJkyieuzwNA7Rt7EaY0EG Smkq6r4O7qr24twDoBzl6evnaSowpKB4IfCIelCN/XKgeP1ubjrXEx0QnTtQIb3A xhioVFsD71zEkw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:40 2026 by rpki-client