This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft File: ByZq37GLGJ89xNO-bcWWJUvlybE.mft (raw, json) Hash identifier: cxJDhuei8nGgul01ryBGYUtyN2IJqVS6sUexqegeSV0= Subject key identifier: 20:43:B2:85:0F:95:62:84:2F:BC:4D:BD:5A:28:86:9B:0A:A4:46:50 Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1 Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1 Certificate serial: 019C42B41BA4C2F5B905E15B055B00FB354F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft Manifest number: 0DCA Signing time: Mon 09 Feb 2026 14:00:25 +0000 Manifest this update: Mon 09 Feb 2026 14:00:25 +0000 Manifest next update: Tue 10 Feb 2026 14:00:25 +0000 Files and hashes: 1: ByZq37GLGJ89xNO-bcWWJUvlybE.crl (hash: KJPO1KbNfRvmKnagEITkyoHXIai30EpwUBgYI4XzIAE=) 2: aM81JrdxO-yRrVlKdRuDInz7Xik.roa (hash: m45p2Y1vKc3tda0x+KiQ3qLXf93450FPSTY5dkd5d+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:1b:a4:c2:f5:b9:05:e1:5b:05:5b:00:fb:35:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1 Validity Not Before: Feb 9 14:00:25 2026 GMT Not After : Feb 10 14:00:25 2026 GMT Subject: CN=2043b2850f9562842fbc4dbd5a28869b0aa44650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:06:04:20:14:77:c0:49:e6:5c:62:b8:e3:7e: 15:41:65:ff:fc:ff:bf:4f:a9:f6:10:54:2a:3e:65: 80:0c:a5:bf:97:8a:49:28:58:2e:d1:35:54:e4:80: 76:d2:67:ed:6f:95:ef:cb:c4:20:e8:29:6c:f4:7f: 08:06:1e:7f:5d:cf:c4:e2:35:13:33:44:f8:e1:d3: 76:b9:7c:45:7a:20:47:67:4e:e0:41:6a:36:8f:49: 23:78:55:51:80:d9:7b:8a:93:6e:34:90:9f:08:85: 1f:bf:af:58:0a:dc:35:c0:df:b3:6b:75:57:17:68: 10:9f:63:11:ac:6e:8c:aa:37:cb:6d:40:f0:d5:98: fe:41:c3:fb:5e:b5:08:a3:6a:77:64:52:3c:f8:0a: ff:81:a6:2b:05:9c:94:64:d2:ea:96:60:ab:9d:97: 58:4c:8f:64:46:33:3f:5f:70:f7:49:2c:88:87:10: 82:98:a8:96:20:ca:d8:b9:8d:37:55:91:8d:e4:ea: c5:37:f4:8f:23:0d:56:bd:1c:27:28:1e:d1:1d:da: 08:43:ce:7b:81:05:a6:95:63:3e:93:26:43:0c:d6: df:d8:ba:09:48:10:13:93:f2:86:23:99:f3:1c:b6: 52:04:3e:85:d5:fc:bd:f7:74:4f:95:99:78:a0:29: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:43:B2:85:0F:95:62:84:2F:BC:4D:BD:5A:28:86:9B:0A:A4:46:50 X509v3 Authority Key Identifier: keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:37:82:95:90:54:c5:0d:03:b5:a0:72:2e:2b:3f:c7:87:03: 17:95:6f:71:05:06:1b:c2:10:3f:34:5c:37:5e:a3:1c:f9:71: 95:5c:5e:56:f7:fe:db:7b:ea:fb:0d:e6:09:69:d9:28:d6:0d: 51:cd:07:21:7e:8f:84:20:20:6a:cb:78:80:f8:fa:4c:bd:ac: f9:d3:ad:b0:d6:29:8c:19:c6:83:25:34:c3:63:a3:1b:1e:bc: df:bd:69:c8:30:3f:49:8a:c3:50:3b:95:30:07:5f:06:31:82: 32:b9:51:74:33:8a:34:a0:75:64:f1:60:c6:82:b8:db:a3:a2: 33:e8:df:2c:4a:b7:79:1c:b0:db:73:d3:b5:d2:0f:75:70:24: bc:f7:8f:7e:08:b0:68:ce:fa:3c:c4:59:8a:77:99:c7:b5:f6: ca:54:c7:b4:e3:61:f7:41:15:42:56:ad:32:28:84:53:72:eb: 1f:63:c3:df:a4:c1:7b:1e:b7:95:ac:ff:38:96:42:39:16:b7: 2a:eb:d2:cb:cf:2c:ce:ad:13:cc:a6:86:42:d2:84:bf:b1:38: 98:60:75:ba:2d:d6:8e:19:06:26:ff:e5:48:bf:c9:04:8a:e5: 15:81:06:72:1c:c9:c9:b8:b3:b4:24:24:47:59:be:88:a3:97: 6a:b6:8e:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBukwvW5BeFbBVsA+zVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MjY2YWRmYjE4YjE4OWYzZGM0ZDNiZTZkYzU5NjI1NGJl NWM5YjEwHhcNMjYwMjA5MTQwMDI1WhcNMjYwMjEwMTQwMDI1WjAzMTEwLwYDVQQD EygyMDQzYjI4NTBmOTU2Mjg0MmZiYzRkYmQ1YTI4ODY5YjBhYTQ0NjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AYEIBR3wEnmXGK4434VQWX//P+/ T6n2EFQqPmWADKW/l4pJKFgu0TVU5IB20mftb5Xvy8Qg6Cls9H8IBh5/Xc/E4jUT M0T44dN2uXxFeiBHZ07gQWo2j0kjeFVRgNl7ipNuNJCfCIUfv69YCtw1wN+za3VX F2gQn2MRrG6MqjfLbUDw1Zj+QcP7XrUIo2p3ZFI8+Ar/gaYrBZyUZNLqlmCrnZdY TI9kRjM/X3D3SSyIhxCCmKiWIMrYuY03VZGN5OrFN/SPIw1WvRwnKB7RHdoIQ857 gQWmlWM+kyZDDNbf2LoJSBATk/KGI5nzHLZSBD6F1fy993RPlZl4oCkumwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCBDsoUPlWKEL7xNvVoohpsKpEZQMB8GA1UdIwQY MBaAFAcmat+xixifPcTTvm3FliVL5cmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjct M2RhMDUzODhlOWFlLzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjctM2RhMDUzODhlOWFl LzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZDeClZBU xQ0DtaByLis/x4cDF5VvcQUGG8IQPzRcN16jHPlxlVxeVvf+23vq+w3mCWnZKNYN Uc0HIX6PhCAgast4gPj6TL2s+dOtsNYpjBnGgyU0w2OjGx68371pyDA/SYrDUDuV MAdfBjGCMrlRdDOKNKB1ZPFgxoK426OiM+jfLEq3eRyw23PTtdIPdXAkvPePfgiw aM76PMRZineZx7X2ylTHtONh90EVQlatMiiEU3LrH2PD36TBex63laz/OJZCORa3 KuvSy88szq0TzKaGQtKEv7E4mGB1ui3WjhkGJv/lSL/JBIrlFYEGchzJybiztCQk R1m+iKOXaraOrA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:13 2026 by rpki-client