This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft File: BtvCTgiywmrakK1jjxrcdH9ppF8.mft (raw, json) Hash identifier: mTLS++TyBO0zjxzvZwCmQ/9eZ62OQLfSQBBMaEP2pHg= Subject key identifier: 75:66:C4:FF:29:87:95:37:7C:20:A5:11:43:24:AF:3E:25:DF:23:6B Authority key identifier: 06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F Certificate issuer: /CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f Certificate serial: 019C420FACF1600B10DFC0285C4FF637D1BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft Manifest number: 175F Signing time: Mon 09 Feb 2026 11:00:49 +0000 Manifest this update: Mon 09 Feb 2026 11:00:49 +0000 Manifest next update: Tue 10 Feb 2026 11:00:49 +0000 Files and hashes: 1: BtvCTgiywmrakK1jjxrcdH9ppF8.crl (hash: d4rAzOd9ZvbS5QNECPHqMCrVtTIemJeOkyzJGqNSh44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ac:f1:60:0b:10:df:c0:28:5c:4f:f6:37:d1:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06dbc24e08b2c26ada90ad638f1adc747f69a45f Validity Not Before: Feb 9 11:00:49 2026 GMT Not After : Feb 10 11:00:49 2026 GMT Subject: CN=7566c4ff298795377c20a5114324af3e25df236b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:40:c0:8e:dd:e9:50:e1:7e:2e:87:04:e7:ce: 32:01:dd:91:48:70:86:42:d5:35:ad:69:cd:e5:ba: 85:cd:9c:bd:f9:4a:e7:1c:05:48:4d:f1:5f:21:50: 84:c8:77:97:e5:10:a2:7f:a9:3d:f4:44:dc:d1:eb: 3e:06:44:a0:c4:6d:00:03:6c:d9:dd:db:52:24:bd: 85:62:2b:20:d4:58:73:d3:4e:26:e6:90:d5:fb:e3: 25:7c:13:29:fd:3a:7d:11:91:de:e4:0d:56:7d:66: fc:44:5b:80:13:ac:bb:73:0c:87:1e:64:3f:54:e5: d6:b2:ec:e5:8c:74:54:4a:3b:9d:e9:ce:7c:ac:8b: b3:50:dc:d6:3e:ca:34:cf:47:51:1d:7e:54:7b:49: 04:7c:c5:6e:92:d8:b0:fd:0b:7e:51:fd:a8:90:c3: b9:54:7c:2d:01:b9:70:ac:7d:dc:3d:c3:a3:c8:a8: fb:90:a9:80:0c:ad:1a:a4:78:98:b8:f8:14:e7:92: c0:73:9a:de:fd:fd:c5:c0:16:67:25:25:2c:83:0a: 39:7d:28:01:73:1c:aa:c2:4b:7f:2f:06:64:a2:8b: da:b0:2a:e6:39:66:c5:ed:7c:cd:3e:36:77:ea:2f: 1d:ac:70:83:ca:c7:04:5f:7b:ab:9a:4e:ff:0a:a4: 0b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:66:C4:FF:29:87:95:37:7C:20:A5:11:43:24:AF:3E:25:DF:23:6B X509v3 Authority Key Identifier: keyid:06:DB:C2:4E:08:B2:C2:6A:DA:90:AD:63:8F:1A:DC:74:7F:69:A4:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BtvCTgiywmrakK1jjxrcdH9ppF8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33da71-0b4e-4b16-a9dc-beed916eb140/1/BtvCTgiywmrakK1jjxrcdH9ppF8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d8:ef:ea:2b:2f:72:41:f2:4a:4b:b7:f1:74:d2:2a:9e:17: 05:9f:69:27:f8:cc:b0:0d:ee:66:b7:58:4a:c1:4f:01:c5:a0: fe:1c:1e:3e:0f:8c:96:98:9d:97:e5:41:07:c6:02:73:74:73: f3:10:38:3c:90:f8:2c:30:ef:7e:f5:d5:ba:7c:84:8c:9b:06: 7c:2c:7b:31:4c:4c:ad:75:55:7b:13:f5:47:d8:91:26:62:78: 59:96:b8:07:69:32:4f:72:b7:a5:08:41:56:25:25:1b:e8:d0: c3:bc:cb:98:cc:26:9d:02:a4:82:8e:b9:2a:0f:2c:d5:ae:f7: cf:d0:12:f4:7b:8b:8d:96:be:d3:b7:a6:77:df:d9:b0:27:39: 09:49:c9:57:06:26:ad:dd:dc:2c:96:2d:2b:05:74:86:85:37: 8f:16:17:30:dc:9b:7b:4b:95:33:64:24:05:4d:1f:6c:f8:4b: 01:84:7f:27:13:ef:41:92:9e:ea:df:6d:a4:69:3e:4b:28:c6: ee:ef:b0:1a:49:a5:be:90:e5:ac:0a:c5:84:f7:84:4a:31:52: 88:1c:3c:2b:d6:30:d4:3a:06:cf:e2:c3:21:a5:2a:a9:cd:be: 31:e9:8f:9d:48:0e:93:bc:b9:fc:85:a7:d3:b9:b3:bd:61:97: db:f2:4b:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6zxYAsQ38AoXE/2N9G/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2ZGJjMjRlMDhiMmMyNmFkYTkwYWQ2MzhmMWFkYzc0N2Y2 OWE0NWYwHhcNMjYwMjA5MTEwMDQ5WhcNMjYwMjEwMTEwMDQ5WjAzMTEwLwYDVQQD Eyg3NTY2YzRmZjI5ODc5NTM3N2MyMGE1MTE0MzI0YWYzZTI1ZGYyMzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUDAjt3pUOF+LocE584yAd2RSHCG QtU1rWnN5bqFzZy9+UrnHAVITfFfIVCEyHeX5RCif6k99ETc0es+BkSgxG0AA2zZ 3dtSJL2FYisg1Fhz004m5pDV++MlfBMp/Tp9EZHe5A1WfWb8RFuAE6y7cwyHHmQ/ VOXWsuzljHRUSjud6c58rIuzUNzWPso0z0dRHX5Ue0kEfMVuktiw/Qt+Uf2okMO5 VHwtAblwrH3cPcOjyKj7kKmADK0apHiYuPgU55LAc5re/f3FwBZnJSUsgwo5fSgB cxyqwkt/LwZkoovasCrmOWbF7XzNPjZ36i8drHCDyscEX3urmk7/CqQL4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVmxP8ph5U3fCClEUMkrz4l3yNrMB8GA1UdIwQY MBaAFAbbwk4IssJq2pCtY48a3HR/aaRfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zM2RhNzEtMGI0ZS00YjE2LWE5ZGMt YmVlZDkxNmViMTQwLzEvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zM2RhNzEtMGI0ZS00YjE2LWE5ZGMtYmVlZDkxNmViMTQw LzEvQnR2Q1RnaXl3bXJha0sxamp4cmNkSDlwcEY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetjv6isv ckHySku38XTSKp4XBZ9pJ/jMsA3uZrdYSsFPAcWg/hwePg+Mlpidl+VBB8YCc3Rz 8xA4PJD4LDDvfvXVunyEjJsGfCx7MUxMrXVVexP1R9iRJmJ4WZa4B2kyT3K3pQhB ViUlG+jQw7zLmMwmnQKkgo65Kg8s1a73z9AS9HuLjZa+07emd9/ZsCc5CUnJVwYm rd3cLJYtKwV0hoU3jxYXMNybe0uVM2QkBU0fbPhLAYR/JxPvQZKe6t9tpGk+SyjG 7u+wGkmlvpDlrArFhPeESjFSiBw8K9Yw1DoGz+LDIaUqqc2+MemPnUgOk7y5/IWn 07mzvWGX2/JL0A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:40:36 2026 by rpki-client