This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft File: bzxUCLL2cjP2DWP3SaxIPrZq58g.mft (raw, json) Hash identifier: 8RUs+eFzzDFcngrzLkBf8YSKv5YUWDYeevCWXXKGdlI= Subject key identifier: 43:96:D5:B3:86:3C:14:A0:0C:3B:20:11:B6:96:57:8B:BB:62:9D:F9 Authority key identifier: 6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8 Certificate issuer: /CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8 Certificate serial: 019C41A1CDCD339EBF683F235242440D8111 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 09:00:48 +0000 Manifest this update: Mon 09 Feb 2026 09:00:48 +0000 Manifest next update: Tue 10 Feb 2026 09:00:48 +0000 Files and hashes: 1: bzxUCLL2cjP2DWP3SaxIPrZq58g.crl (hash: 8epIo07VAGMqKjekXDS0TjlkMUnPvVMD81KCXOIt33g=) 2: rdPF1oSF697o-6J7h737TTdZ1tI.roa (hash: sMXUA/wK5htTFnsVDTj5g0Rhpnmfg7FybwvswSl03mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:cd:cd:33:9e:bf:68:3f:23:52:42:44:0d:81:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f3c5408b2f67233f60d63f749ac483eb66ae7c8 Validity Not Before: Feb 9 09:00:48 2026 GMT Not After : Feb 10 09:00:48 2026 GMT Subject: CN=4396d5b3863c14a00c3b2011b696578bbb629df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:d8:e7:82:ad:e3:68:e4:87:39:90:51:3b: 80:b6:b3:70:98:a3:66:03:93:f2:b1:ed:cd:67:4d: 00:e8:51:f7:d0:a5:4e:8e:dd:97:13:65:63:60:6b: 34:51:cb:7d:2d:2b:8d:21:27:f7:75:60:db:bf:1c: de:b8:66:62:95:c1:46:ef:cf:19:4f:c2:e9:14:b6: 69:7b:03:02:ce:9f:68:a1:b8:1a:d2:6d:66:70:ba: 3c:7f:80:76:a5:92:7c:d1:64:e0:84:34:71:b1:bf: 73:4e:83:60:89:f7:34:66:05:d8:dd:f4:6d:a2:6f: cf:ef:2d:25:a0:85:e1:72:b2:62:52:e9:c7:80:54: 0c:86:32:b4:b2:74:2a:3f:81:ba:27:2b:7b:7e:04: 1a:62:f4:18:fb:d5:2d:a2:a6:5c:85:74:8c:2f:90: 2d:81:d8:42:e5:a1:58:d4:9a:d5:0b:2e:5f:87:dd: 34:24:97:06:fc:73:cf:a1:2f:b0:12:f2:48:30:10: 78:33:ff:f9:8f:fd:d7:1d:fc:13:34:53:93:8d:cd: 8e:6a:03:7f:2c:7d:44:0b:8b:f3:f7:6f:9e:86:f1: c5:ea:03:d3:97:fa:14:6c:07:9b:68:47:2b:bf:6a: 6f:21:3f:49:6d:fb:41:90:d2:02:00:03:04:43:0f: 8e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:96:D5:B3:86:3C:14:A0:0C:3B:20:11:B6:96:57:8B:BB:62:9D:F9 X509v3 Authority Key Identifier: keyid:6F:3C:54:08:B2:F6:72:33:F6:0D:63:F7:49:AC:48:3E:B6:6A:E7:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzxUCLL2cjP2DWP3SaxIPrZq58g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/964848-1028-4d22-9345-18f34a7dbdd9/1/bzxUCLL2cjP2DWP3SaxIPrZq58g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a3:ac:e7:d7:3b:a8:11:50:23:fa:1b:69:09:37:03:41:a2: c5:eb:31:34:74:1d:5c:49:fc:8e:95:52:56:60:39:47:3c:c8: a4:4e:e8:3b:9e:29:0e:fc:ee:05:18:7e:cb:1c:15:03:d7:ca: 64:e5:77:2b:28:78:ed:25:27:42:33:f4:78:0e:40:c1:b5:9a: 0d:81:fc:6a:ba:49:6f:1a:b9:7d:15:d1:5d:0d:37:6c:64:00: a9:07:91:5f:5a:d0:5a:a2:4d:57:cd:c7:b4:8b:f1:4c:29:db: c0:c9:20:62:fe:de:05:73:a3:83:b6:46:52:9f:35:fb:fc:fd: 93:1a:de:ac:54:a5:17:7c:c7:96:2f:fa:fb:39:f2:c4:72:e0: 2f:41:2b:98:57:b9:b4:e6:75:9e:49:fe:3f:e7:05:dc:b7:25: 68:16:30:a2:76:83:3e:80:80:74:76:40:06:b1:9f:05:b3:76: 9e:bc:7f:f4:df:78:e6:c0:67:86:0f:84:82:88:6d:d6:2b:17: 74:83:df:cc:e8:a7:b7:a5:0a:57:ef:de:9e:f4:cd:85:bb:39: 17:c4:b3:80:53:95:31:86:ef:e9:88:59:8b:de:a8:85:1e:1c: ed:c8:19:02:49:44:93:e0:5e:3b:fc:f7:13:d3:1a:85:98:31: 8a:7d:66:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoc3NM56/aD8jUkJEDYERMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmM2M1NDA4YjJmNjcyMzNmNjBkNjNmNzQ5YWM0ODNlYjY2 YWU3YzgwHhcNMjYwMjA5MDkwMDQ4WhcNMjYwMjEwMDkwMDQ4WjAzMTEwLwYDVQQD Eyg0Mzk2ZDViMzg2M2MxNGEwMGMzYjIwMTFiNjk2NTc4YmJiNjI5ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx7Y54Kt42jkhzmQUTuAtrNwmKNm A5Pyse3NZ00A6FH30KVOjt2XE2VjYGs0Uct9LSuNISf3dWDbvxzeuGZilcFG788Z T8LpFLZpewMCzp9oobga0m1mcLo8f4B2pZJ80WTghDRxsb9zToNgifc0ZgXY3fRt om/P7y0loIXhcrJiUunHgFQMhjK0snQqP4G6Jyt7fgQaYvQY+9UtoqZchXSML5At gdhC5aFY1JrVCy5fh900JJcG/HPPoS+wEvJIMBB4M//5j/3XHfwTNFOTjc2OagN/ LH1EC4vz92+ehvHF6gPTl/oUbAebaEcrv2pvIT9JbftBkNICAAMEQw+OFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOW1bOGPBSgDDsgEbaWV4u7Yp35MB8GA1UdIwQY MBaAFG88VAiy9nIz9g1j90msSD62aufIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUt MThmMzRhN2RiZGQ5LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC85NjQ4NDgtMTAyOC00ZDIyLTkzNDUtMThmMzRhN2RiZGQ5 LzEvYnp4VUNMTDJjalAyRFdQM1NheElQclpxNThnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqOs59c7 qBFQI/obaQk3A0GixesxNHQdXEn8jpVSVmA5RzzIpE7oO54pDvzuBRh+yxwVA9fK ZOV3Kyh47SUnQjP0eA5AwbWaDYH8arpJbxq5fRXRXQ03bGQAqQeRX1rQWqJNV83H tIvxTCnbwMkgYv7eBXOjg7ZGUp81+/z9kxrerFSlF3zHli/6+znyxHLgL0ErmFe5 tOZ1nkn+P+cF3LclaBYwonaDPoCAdHZABrGfBbN2nrx/9N945sBnhg+Egoht1isX dIPfzOint6UKV+/envTNhbs5F8SzgFOVMYbv6YhZi96ohR4c7cgZAklEk+BeO/z3 E9MahZgxin1mhQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:02 2026 by rpki-client