This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft File: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft (raw, json) Hash identifier: 7shj4Yhxo3R2vSF0gN2IPZnQ4dqArlBI6gf6IhgbS6w= Subject key identifier: 39:91:BE:BC:3C:FA:B2:FB:68:D9:89:68:BC:5F:CA:28:94:62:29:07 Authority key identifier: 6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B Certificate issuer: /CN=6d005198b74572a156ab63f23085897bd3ccd41b Certificate serial: 019C427DEC03D560C9D1F3F359A47B7DF9F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft Manifest number: 0434 Signing time: Mon 09 Feb 2026 13:01:14 +0000 Manifest this update: Mon 09 Feb 2026 13:01:14 +0000 Manifest next update: Tue 10 Feb 2026 13:01:14 +0000 Files and hashes: 1: bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl (hash: EQcMPRYr9pj17JlolBoxRnLYjB635JMryMB570q8bUg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ec:03:d5:60:c9:d1:f3:f3:59:a4:7b:7d:f9:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d005198b74572a156ab63f23085897bd3ccd41b Validity Not Before: Feb 9 13:01:14 2026 GMT Not After : Feb 10 13:01:14 2026 GMT Subject: CN=3991bebc3cfab2fb68d98968bc5fca2894622907 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ca:b1:bd:0f:2c:b9:66:42:d0:2f:3f:f0:01: 19:0c:ee:a2:31:e1:d9:3e:39:86:67:b7:f2:b6:d0: 72:88:bb:ca:0f:51:04:55:22:47:df:11:29:17:4a: 77:8e:9b:e2:84:27:19:0f:c8:ac:a6:bc:24:e1:4a: 03:5d:32:fe:56:1a:e6:ff:84:ff:6b:b6:8a:99:0c: 58:9f:92:97:22:ac:48:89:10:8a:fa:d0:ab:08:f5: 98:9d:2d:94:c2:39:86:3e:3c:c5:a1:99:3b:d6:ec: 53:28:7d:cf:69:9f:fd:3a:a7:22:60:1a:52:9a:a7: b8:9e:62:98:ed:ca:8c:10:d7:d5:e7:57:02:65:c9: e3:69:8f:ae:0d:29:6e:8e:63:7d:64:47:b7:28:8b: 72:32:20:29:ee:56:e5:ff:e2:01:fe:a3:80:9f:e3: 6b:f1:fa:11:1b:1a:ee:7c:d6:d3:16:12:5a:fd:6e: 10:52:95:8d:9b:82:5a:01:77:07:1a:84:44:99:fb: 83:e2:be:90:50:dd:fb:95:f5:e8:9a:ba:d1:23:ba: e9:87:06:87:3e:d9:7d:4a:2d:fa:c8:03:bd:a3:b9: 2a:e7:c3:e7:b8:07:26:d6:e9:7a:60:f0:77:1a:e4: 15:3d:83:85:8c:27:f3:f0:a4:98:13:4f:1a:6c:a4: d9:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:91:BE:BC:3C:FA:B2:FB:68:D9:89:68:BC:5F:CA:28:94:62:29:07 X509v3 Authority Key Identifier: keyid:6D:00:51:98:B7:45:72:A1:56:AB:63:F2:30:85:89:7B:D3:CC:D4:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/975f3c-af4a-437b-89b1-284e5123e29f/1/bQBRmLdFcqFWq2PyMIWJe9PM1Bs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:77:c2:81:ec:5d:53:9c:d9:e2:03:51:65:de:6d:24:ca:ec: 00:85:bc:76:b4:96:58:1e:d3:22:b4:22:49:2f:16:58:6f:ef: 6e:b3:98:3a:0e:4f:a3:b3:18:c3:b3:19:2f:c0:53:5b:7d:07: bd:9d:96:9e:59:3b:d1:de:06:96:5a:f0:5f:35:cc:6c:6d:c9: 16:57:31:88:9a:b4:dd:1c:63:96:ab:5f:b6:3e:de:5e:23:ba: cf:78:23:3d:88:3d:75:f9:f9:33:80:36:8b:68:7f:3a:f5:14: c5:d8:9a:36:d5:de:25:49:a9:cf:de:10:d7:10:c3:ff:81:68: 66:9b:64:29:67:e6:ac:aa:48:3b:4a:9b:8a:1c:b9:2b:94:a6: 4f:82:01:08:d0:0e:61:ee:64:19:7d:3d:03:13:70:06:3c:87: 02:22:2b:2a:20:53:25:20:44:ae:4e:9f:55:39:f0:f0:50:5c: 4d:e9:2a:59:54:40:3d:68:b7:3c:dd:22:74:45:bd:85:d6:03: 81:e3:7c:0a:86:81:0c:6e:4a:02:0b:e5:35:d1:77:81:c5:8b: 7a:0c:d9:79:95:5d:46:66:fa:26:6f:56:cd:91:eb:51:39:91: 8e:70:53:f5:3b:91:2d:06:6e:d8:d9:21:f2:0f:3c:2d:09:0f: 83:5e:26:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfewD1WDJ0fPzWaR7ffnwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMDA1MTk4Yjc0NTcyYTE1NmFiNjNmMjMwODU4OTdiZDNj Y2Q0MWIwHhcNMjYwMjA5MTMwMTE0WhcNMjYwMjEwMTMwMTE0WjAzMTEwLwYDVQQD EygzOTkxYmViYzNjZmFiMmZiNjhkOTg5NjhiYzVmY2EyODk0NjIyOTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncqxvQ8suWZC0C8/8AEZDO6iMeHZ PjmGZ7fyttByiLvKD1EEVSJH3xEpF0p3jpvihCcZD8isprwk4UoDXTL+Vhrm/4T/ a7aKmQxYn5KXIqxIiRCK+tCrCPWYnS2UwjmGPjzFoZk71uxTKH3PaZ/9OqciYBpS mqe4nmKY7cqMENfV51cCZcnjaY+uDSlujmN9ZEe3KItyMiAp7lbl/+IB/qOAn+Nr 8foRGxrufNbTFhJa/W4QUpWNm4JaAXcHGoREmfuD4r6QUN37lfXomrrRI7rphwaH Ptl9Si36yAO9o7kq58PnuAcm1ul6YPB3GuQVPYOFjCfz8KSYE08abKTZFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmRvrw8+rL7aNmJaLxfyiiUYikHMB8GA1UdIwQY MBaAFG0AUZi3RXKhVqtj8jCFiXvTzNQbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEt Mjg0ZTUxMjNlMjlmLzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC85NzVmM2MtYWY0YS00MzdiLTg5YjEtMjg0ZTUxMjNlMjlm LzEvYlFCUm1MZEZjcUZXcTJQeU1JV0plOVBNMUJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK3fCgexd U5zZ4gNRZd5tJMrsAIW8drSWWB7TIrQiSS8WWG/vbrOYOg5Po7MYw7MZL8BTW30H vZ2Wnlk70d4GllrwXzXMbG3JFlcxiJq03Rxjlqtftj7eXiO6z3gjPYg9dfn5M4A2 i2h/OvUUxdiaNtXeJUmpz94Q1xDD/4FoZptkKWfmrKpIO0qbihy5K5SmT4IBCNAO Ye5kGX09AxNwBjyHAiIrKiBTJSBErk6fVTnw8FBcTekqWVRAPWi3PN0idEW9hdYD geN8CoaBDG5KAgvlNdF3gcWLegzZeZVdRmb6Jm9WzZHrUTmRjnBT9TuRLQZu2Nkh 8g88LQkPg14mxw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:54 2026 by rpki-client