This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft File: BWAG8qGECQDHU2KBIbP7fsW9iek.mft (raw, json) Hash identifier: z1Wnn0Q4iopmlanJfNiMCpqIUG7KD1fMtpOqCS8GFZo= Subject key identifier: 65:BA:0D:74:00:6A:77:BA:2D:1B:82:C0:8F:41:75:88:53:A4:B8:2B Authority key identifier: 05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9 Certificate issuer: /CN=056006f2a1840900c753628121b3fb7ec5bd89e9 Certificate serial: 019C44D976F07ABC62EFA025CEBE87258C9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft Manifest number: 0A50 Signing time: Tue 10 Feb 2026 00:00:28 +0000 Manifest this update: Tue 10 Feb 2026 00:00:28 +0000 Manifest next update: Wed 11 Feb 2026 00:00:28 +0000 Files and hashes: 1: BWAG8qGECQDHU2KBIbP7fsW9iek.crl (hash: pfEJJcXcWE58816vOfa1f79Pj/L4txLIcVAaaVOaQkk=) 2: Kuv9DpkmQjOsnvnJuwLQgk8WMt8.roa (hash: 5lHGls0Q7liXh3sS1jBjBdhD/Gm1Mc/HHHU6LNM2qo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:76:f0:7a:bc:62:ef:a0:25:ce:be:87:25:8c:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056006f2a1840900c753628121b3fb7ec5bd89e9 Validity Not Before: Feb 10 00:00:28 2026 GMT Not After : Feb 11 00:00:28 2026 GMT Subject: CN=65ba0d74006a77ba2d1b82c08f41758853a4b82b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3b:92:a1:c4:a9:38:c7:4f:de:5d:c2:35:35: 22:83:b1:d3:58:d1:a0:d8:1f:97:f1:15:52:82:68: ac:5e:d6:f6:11:de:93:72:bc:00:13:a4:d0:82:a1: ec:3f:ef:ef:85:5d:45:34:cc:25:e6:cf:71:8a:da: 20:8c:6d:f5:44:88:18:82:fb:4a:40:bc:86:e7:f7: 42:1f:cc:81:3e:93:d9:eb:d1:80:78:0f:36:55:09: ee:12:b4:41:c8:2e:56:f8:13:09:40:ba:cc:c6:89: 12:80:99:f0:b8:0d:04:76:54:dd:7e:b2:bb:6b:16: 60:0c:2f:2f:b9:ce:ca:6e:98:cb:3f:77:6e:14:e1: 23:de:36:ef:cb:8e:ff:35:ed:31:1f:93:7a:9e:95: 1c:96:26:80:e5:75:69:dc:99:e7:93:21:89:b6:11: 1a:44:62:09:2c:da:d6:76:64:c3:75:ae:5c:2c:d6: 22:8e:1a:d3:e8:24:45:99:b8:7a:d9:71:1d:fd:1d: 93:78:db:6b:f6:53:a0:4e:5f:ad:11:69:06:3e:c8: 51:db:c7:8e:74:98:f8:b4:b2:3e:dc:0b:4d:0b:54: ae:b1:43:55:00:a2:95:72:51:37:17:22:98:7a:3b: 29:e7:13:71:21:4b:7f:cf:7f:f0:b0:cb:46:fb:e7: 06:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BA:0D:74:00:6A:77:BA:2D:1B:82:C0:8F:41:75:88:53:A4:B8:2B X509v3 Authority Key Identifier: keyid:05:60:06:F2:A1:84:09:00:C7:53:62:81:21:B3:FB:7E:C5:BD:89:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWAG8qGECQDHU2KBIbP7fsW9iek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5732d3-a53c-41f7-a623-55b3e6476a7b/1/BWAG8qGECQDHU2KBIbP7fsW9iek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:0e:74:32:c5:a8:ca:c5:37:bf:44:6a:f3:23:1e:1c:70:1f: bf:92:f8:bd:41:8b:1e:f7:ba:5e:c1:4e:de:b4:54:90:d2:eb: 64:7a:01:a2:c3:5e:7f:f4:57:23:1c:8d:89:04:b9:eb:96:59: 2e:73:84:8b:31:a2:66:7f:16:7c:4d:d7:e1:0f:3b:4a:c6:7b: 7c:5c:ea:61:31:bf:85:a5:09:53:b0:35:d5:41:13:43:4f:4a: 9f:c3:fe:ad:8c:79:64:99:a4:ac:c2:d6:6a:25:10:96:3d:06: 12:b6:60:70:8b:66:f0:a9:7d:1f:62:10:a1:7b:60:e4:7f:de: 98:67:69:94:1e:ad:fe:3b:55:10:b1:49:66:f0:07:d1:49:d0: 17:cd:ad:d6:1b:33:18:36:7c:d4:12:be:e2:0f:0b:ca:7b:0a: 47:1c:8a:c6:7b:a1:52:c5:7a:93:4e:58:2e:f8:5c:33:f9:1e: 13:78:e0:a3:ee:cf:a2:fd:62:f9:92:46:25:ae:d3:a1:d0:10: e4:26:24:ae:73:c4:1b:eb:85:e1:a0:ed:23:88:4c:14:8d:ba: 11:62:2a:ab:b2:24:ca:73:eb:7c:11:1b:f4:5e:c0:6f:2b:c6: 80:17:04:17:de:0c:f4:56:26:62:37:38:f5:b1:62:b1:e9:62: 05:36:cf:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2Xbwerxi76Alzr6HJYybMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjAwNmYyYTE4NDA5MDBjNzUzNjI4MTIxYjNmYjdlYzVi ZDg5ZTkwHhcNMjYwMjEwMDAwMDI4WhcNMjYwMjExMDAwMDI4WjAzMTEwLwYDVQQD Eyg2NWJhMGQ3NDAwNmE3N2JhMmQxYjgyYzA4ZjQxNzU4ODUzYTRiODJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTuSocSpOMdP3l3CNTUig7HTWNGg 2B+X8RVSgmisXtb2Ed6TcrwAE6TQgqHsP+/vhV1FNMwl5s9xitogjG31RIgYgvtK QLyG5/dCH8yBPpPZ69GAeA82VQnuErRByC5W+BMJQLrMxokSgJnwuA0EdlTdfrK7 axZgDC8vuc7KbpjLP3duFOEj3jbvy47/Ne0xH5N6npUcliaA5XVp3JnnkyGJthEa RGIJLNrWdmTDda5cLNYijhrT6CRFmbh62XEd/R2TeNtr9lOgTl+tEWkGPshR28eO dJj4tLI+3AtNC1SusUNVAKKVclE3FyKYejsp5xNxIUt/z3/wsMtG++cGnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGW6DXQAane6LRuCwI9BdYhTpLgrMB8GA1UdIwQY MBaAFAVgBvKhhAkAx1NigSGz+37FvYnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMt NTViM2U2NDc2YTdiLzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC81NzMyZDMtYTUzYy00MWY3LWE2MjMtNTViM2U2NDc2YTdi LzEvQldBRzhxR0VDUURIVTJLQkliUDdmc1c5aWVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAog50MsWo ysU3v0Rq8yMeHHAfv5L4vUGLHve6XsFO3rRUkNLrZHoBosNef/RXIxyNiQS565ZZ LnOEizGiZn8WfE3X4Q87SsZ7fFzqYTG/haUJU7A11UETQ09Kn8P+rYx5ZJmkrMLW aiUQlj0GErZgcItm8Kl9H2IQoXtg5H/emGdplB6t/jtVELFJZvAH0UnQF82t1hsz GDZ81BK+4g8LynsKRxyKxnuhUsV6k05YLvhcM/keE3jgo+7Pov1i+ZJGJa7TodAQ 5CYkrnPEG+uF4aDtI4hMFI26EWIqq7IkynPrfBEb9F7AbyvGgBcEF94M9FYmYjc4 9bFiseliBTbPfA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:29 2026 by rpki-client