This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft File: BfxVV0h24Nb6voqXkcwNNmWv-OY.mft (raw, json) Hash identifier: gEuHfbTrcwNUZkL/4z9XAH5kqxaAkWN/h151z//RpVg= Subject key identifier: 10:E7:99:59:D7:76:F4:F7:BC:97:CF:86:FC:F8:39:A7:45:C9:D3:5D Authority key identifier: 05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6 Certificate issuer: /CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6 Certificate serial: 019C432290C3F4C19E3417E0876A7F0AE029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft Manifest number: 08DF Signing time: Mon 09 Feb 2026 16:01:04 +0000 Manifest this update: Mon 09 Feb 2026 16:01:04 +0000 Manifest next update: Tue 10 Feb 2026 16:01:04 +0000 Files and hashes: 1: BfxVV0h24Nb6voqXkcwNNmWv-OY.crl (hash: hVb5ge20NAX7GL2iqfIPNlI1Vnuctsdl+bfvQKF0C0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:90:c3:f4:c1:9e:34:17:e0:87:6a:7f:0a:e0:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05fc55574876e0d6fabe8a9791cc0d3665aff8e6 Validity Not Before: Feb 9 16:01:04 2026 GMT Not After : Feb 10 16:01:04 2026 GMT Subject: CN=10e79959d776f4f7bc97cf86fcf839a745c9d35d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c1:7f:5d:fc:0b:09:27:11:1c:7c:b0:33:63: 43:86:5d:e8:d9:6f:30:ea:14:2b:39:04:70:3b:b8: 64:9b:83:ae:47:c6:31:50:6a:44:6c:d9:fe:3a:fa: b6:84:b6:d6:ca:ee:a2:5b:03:f0:21:4b:d8:d1:58: 05:59:72:00:be:f1:93:5e:de:37:2f:94:16:1c:5d: 9f:e0:3b:f2:80:0f:5b:ad:d7:85:c0:65:f1:a9:20: 5b:a4:56:60:77:df:d9:0b:a6:35:85:d0:9c:32:fb: 0c:ef:68:8c:c0:fc:24:12:a2:9f:88:70:36:d3:ae: d7:60:05:65:b8:3b:0f:a4:e0:48:7d:f7:74:7f:a4: a8:fb:b4:3d:d8:5a:db:f7:0f:5b:c7:a9:10:eb:29: 36:62:65:6c:90:25:f1:ce:98:11:77:01:9c:52:dc: 03:cf:ee:cc:24:c8:6e:de:7c:d6:d8:78:81:4a:50: 6d:2c:1b:cf:5e:9c:d4:2e:05:3f:4e:f6:28:e5:c7: f7:9e:7d:91:4b:3b:19:3b:c2:97:b3:d0:27:11:12: 82:75:e5:56:6e:ae:0b:0f:a3:04:26:84:4a:7e:56: 6f:a2:a9:ca:bc:34:26:13:62:cd:80:df:71:aa:1e: e8:73:dd:26:5b:d9:d8:84:c8:b9:40:9a:30:ab:4d: 35:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E7:99:59:D7:76:F4:F7:BC:97:CF:86:FC:F8:39:A7:45:C9:D3:5D X509v3 Authority Key Identifier: keyid:05:FC:55:57:48:76:E0:D6:FA:BE:8A:97:91:CC:0D:36:65:AF:F8:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfxVV0h24Nb6voqXkcwNNmWv-OY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ada591-f0bb-434a-9384-e98063921bf0/1/BfxVV0h24Nb6voqXkcwNNmWv-OY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:e8:21:a9:be:e0:6a:cc:2e:c6:d3:20:7a:84:0e:57:72:b0: 91:a9:b9:39:f4:b2:5f:d5:bf:fa:fd:41:47:b2:3d:cb:e1:06: 07:db:2a:28:3d:41:5f:e4:db:79:2b:c8:f6:fa:da:47:93:94: c3:93:4f:39:26:85:52:c0:83:ff:68:7b:2a:a6:4e:16:ad:31: 8d:67:26:8f:42:70:65:04:cf:17:7e:f3:51:c8:26:5a:88:87: dc:6b:68:f7:00:9b:fc:21:40:65:f4:5a:ff:17:e7:f4:c2:82: 15:1e:19:ad:b3:da:fd:85:2d:45:fa:9b:17:cc:0d:79:1f:b4: f1:71:36:7d:9a:a2:ff:cc:b4:8a:c5:ea:3a:58:9e:57:1c:c2: 12:2d:2f:f5:af:04:15:7d:83:b6:be:af:67:bf:75:91:2c:68: f4:2f:f7:77:cb:24:7a:b3:f4:d4:05:c8:1b:07:99:4f:46:f0: 37:a9:4c:42:bd:71:d8:68:35:7c:2c:96:c5:98:0d:d7:8c:cd: ca:ca:9f:97:29:87:9c:45:fe:99:08:8f:b5:fe:4e:e9:39:2b: f9:6d:81:84:d6:0d:4b:d8:8a:1b:74:58:3d:1d:74:a3:8b:8e: 66:31:bd:16:ca:e1:75:77:97:47:9f:e4:a0:17:fd:e8:23:59: 19:d0:3a:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpDD9MGeNBfgh2p/CuApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ZmM1NTU3NDg3NmUwZDZmYWJlOGE5NzkxY2MwZDM2NjVh ZmY4ZTYwHhcNMjYwMjA5MTYwMTA0WhcNMjYwMjEwMTYwMTA0WjAzMTEwLwYDVQQD EygxMGU3OTk1OWQ3NzZmNGY3YmM5N2NmODZmY2Y4MzlhNzQ1YzlkMzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MF/XfwLCScRHHywM2NDhl3o2W8w 6hQrOQRwO7hkm4OuR8YxUGpEbNn+Ovq2hLbWyu6iWwPwIUvY0VgFWXIAvvGTXt43 L5QWHF2f4DvygA9brdeFwGXxqSBbpFZgd9/ZC6Y1hdCcMvsM72iMwPwkEqKfiHA2 067XYAVluDsPpOBIffd0f6So+7Q92Frb9w9bx6kQ6yk2YmVskCXxzpgRdwGcUtwD z+7MJMhu3nzW2HiBSlBtLBvPXpzULgU/TvYo5cf3nn2RSzsZO8KXs9AnERKCdeVW bq4LD6MEJoRKflZvoqnKvDQmE2LNgN9xqh7oc90mW9nYhMi5QJowq001eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDnmVnXdvT3vJfPhvz4OadFydNdMB8GA1UdIwQY MBaAFAX8VVdIduDW+r6Kl5HMDTZlr/jmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hZGE1OTEtZjBiYi00MzRhLTkzODQt ZTk4MDYzOTIxYmYwLzEvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9hZGE1OTEtZjBiYi00MzRhLTkzODQtZTk4MDYzOTIxYmYw LzEvQmZ4VlYwaDI0TmI2dm9xWGtjd05ObVd2LU9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEeghqb7g aswuxtMgeoQOV3Kwkam5OfSyX9W/+v1BR7I9y+EGB9sqKD1BX+TbeSvI9vraR5OU w5NPOSaFUsCD/2h7KqZOFq0xjWcmj0JwZQTPF37zUcgmWoiH3Gto9wCb/CFAZfRa /xfn9MKCFR4ZrbPa/YUtRfqbF8wNeR+08XE2fZqi/8y0isXqOlieVxzCEi0v9a8E FX2Dtr6vZ791kSxo9C/3d8skerP01AXIGweZT0bwN6lMQr1x2Gg1fCyWxZgN14zN ysqflymHnEX+mQiPtf5O6Tkr+W2BhNYNS9iKG3RYPR10o4uOZjG9FsrhdXeXR5/k oBf96CNZGdA6tg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:37:46 2026 by rpki-client