This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft File: BXEVMhUM58l6fqSMDXekLm8NX8M.mft (raw, json) Hash identifier: pCqgQHMDiD9R2Vk1bsch7fWq8Tl0h4/M6gvp3VEeZBc= Subject key identifier: 81:D2:10:6C:46:08:64:CB:1B:5C:BE:C0:A7:FC:56:22:C8:0D:57:EE Authority key identifier: 05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3 Certificate issuer: /CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3 Certificate serial: 019C4246B006912CBADFE3A2A703E3136B40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft Manifest number: 0897 Signing time: Mon 09 Feb 2026 12:00:54 +0000 Manifest this update: Mon 09 Feb 2026 12:00:54 +0000 Manifest next update: Tue 10 Feb 2026 12:00:54 +0000 Files and hashes: 1: 2gFrlERikbTFKdI9rMWrqLB3sHI.roa (hash: +aPRdRcOO01yT/CtMcgLBuyFBxEuzS6PPgSrwq5FEhk=) 2: BXEVMhUM58l6fqSMDXekLm8NX8M.crl (hash: 6LCX4cajIxdQApYFRFNC++tED0f79IlFrp54Qgw8mfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b0:06:91:2c:ba:df:e3:a2:a7:03:e3:13:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05711532150ce7c97a7ea48c0d77a42e6f0d5fc3 Validity Not Before: Feb 9 12:00:54 2026 GMT Not After : Feb 10 12:00:54 2026 GMT Subject: CN=81d2106c460864cb1b5cbec0a7fc5622c80d57ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b3:1b:42:08:73:f4:99:f8:e5:71:c0:7c:34: d0:30:dc:52:78:06:77:07:f0:c1:6f:4d:e1:24:bf: 86:bb:a0:36:b9:4e:cf:58:6e:cd:a9:d2:e6:f4:2c: 62:89:14:58:6e:41:f7:78:66:82:cb:92:29:4f:cb: bf:ba:33:78:3e:d4:50:d9:3c:39:40:ba:ad:dd:b3: bf:c6:a0:f5:b2:a9:00:1d:90:1d:78:fc:6d:5c:c8: 4c:63:dc:11:4f:4c:5b:c6:11:29:69:12:c9:30:96: ab:fc:63:da:8c:24:11:4f:04:b7:26:13:98:b2:2a: 6e:44:d0:7c:1f:80:f2:ca:7a:e2:a7:05:75:49:e3: 29:90:cb:c8:31:64:92:83:92:8a:a4:b6:22:bf:b6: 67:1c:67:bd:da:37:db:72:04:ea:fb:54:d9:3e:2b: b0:61:97:30:f3:b8:2a:95:30:5d:d3:84:04:85:75: 2d:62:3c:d4:a7:ad:6a:89:9b:5e:21:6a:01:39:c7: fd:6d:1e:37:17:0e:7b:00:df:f9:3a:66:a0:65:84: cf:c2:a0:3c:fa:53:08:23:29:ea:0e:ad:b6:10:15: e5:ed:e2:0a:2b:de:1c:15:57:93:9a:80:d5:12:19: a9:2c:52:b8:16:b4:03:a2:22:b4:46:1d:55:d5:10: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:D2:10:6C:46:08:64:CB:1B:5C:BE:C0:A7:FC:56:22:C8:0D:57:EE X509v3 Authority Key Identifier: keyid:05:71:15:32:15:0C:E7:C9:7A:7E:A4:8C:0D:77:A4:2E:6F:0D:5F:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEVMhUM58l6fqSMDXekLm8NX8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/4d89d6-4465-4321-9282-7bcfd64e0288/1/BXEVMhUM58l6fqSMDXekLm8NX8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:4b:3f:ba:07:aa:89:f5:66:c4:db:04:9b:af:cd:96:69:41: 0b:e6:58:89:3f:73:18:69:c5:7b:33:14:14:b0:83:1d:d1:32: 83:b1:ba:7b:66:fd:90:78:c7:6f:94:f6:0b:f6:6e:af:d0:32: 9f:24:40:4c:31:c4:38:bb:e8:76:b1:2d:31:ca:4b:79:2a:79: fe:36:56:4f:1b:90:d9:94:a6:58:9c:32:76:ea:66:23:d3:53: 5a:3d:0f:ae:be:cc:76:a9:c5:8a:39:99:ba:b5:55:d1:f1:ed: 20:b9:72:f3:11:2f:b3:8e:66:eb:12:ca:ce:4b:9e:85:c6:34: 37:4f:03:75:e7:be:41:96:41:f5:77:52:d4:07:04:f6:31:e7: 01:e2:7d:6e:d8:40:09:1a:10:be:99:cd:57:38:e7:15:23:a5: 42:4f:c4:0c:4a:e4:c3:62:73:f0:50:d5:ba:10:c3:3d:bc:7a: 18:7f:e7:f3:81:2c:22:f8:83:46:cf:0c:cc:81:86:29:14:6d: 7b:9a:10:eb:f7:34:61:9e:f0:a5:8a:cb:79:a3:9d:5e:59:77: 11:69:10:66:4d:1e:aa:0d:91:04:89:13:18:8a:a1:98:a0:f2: 1c:3f:2d:7d:01:cc:3c:ef:89:17:7f:46:46:9d:85:11:bf:df: cd:62:39:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrAGkSy63+OipwPjE2tAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NzExNTMyMTUwY2U3Yzk3YTdlYTQ4YzBkNzdhNDJlNmYw ZDVmYzMwHhcNMjYwMjA5MTIwMDU0WhcNMjYwMjEwMTIwMDU0WjAzMTEwLwYDVQQD Eyg4MWQyMTA2YzQ2MDg2NGNiMWI1Y2JlYzBhN2ZjNTYyMmM4MGQ1N2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLMbQghz9Jn45XHAfDTQMNxSeAZ3 B/DBb03hJL+Gu6A2uU7PWG7NqdLm9CxiiRRYbkH3eGaCy5IpT8u/ujN4PtRQ2Tw5 QLqt3bO/xqD1sqkAHZAdePxtXMhMY9wRT0xbxhEpaRLJMJar/GPajCQRTwS3JhOY sipuRNB8H4DyynripwV1SeMpkMvIMWSSg5KKpLYiv7ZnHGe92jfbcgTq+1TZPiuw YZcw87gqlTBd04QEhXUtYjzUp61qiZteIWoBOcf9bR43Fw57AN/5OmagZYTPwqA8 +lMIIynqDq22EBXl7eIKK94cFVeTmoDVEhmpLFK4FrQDoiK0Rh1V1RAyxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHSEGxGCGTLG1y+wKf8ViLIDVfuMB8GA1UdIwQY MBaAFAVxFTIVDOfJen6kjA13pC5vDV/DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODIt N2JjZmQ2NGUwMjg4LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS80ZDg5ZDYtNDQ2NS00MzIxLTkyODItN2JjZmQ2NGUwMjg4 LzEvQlhFVk1oVU01OGw2ZnFTTURYZWtMbThOWDhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUs/ugeq ifVmxNsEm6/NlmlBC+ZYiT9zGGnFezMUFLCDHdEyg7G6e2b9kHjHb5T2C/Zur9Ay nyRATDHEOLvodrEtMcpLeSp5/jZWTxuQ2ZSmWJwydupmI9NTWj0Prr7MdqnFijmZ urVV0fHtILly8xEvs45m6xLKzkuehcY0N08Ddee+QZZB9XdS1AcE9jHnAeJ9bthA CRoQvpnNVzjnFSOlQk/EDErkw2Jz8FDVuhDDPbx6GH/n84EsIviDRs8MzIGGKRRt e5oQ6/c0YZ7wpYrLeaOdXll3EWkQZk0eqg2RBIkTGIqhmKDyHD8tfQHMPO+JF39G Rp2FEb/fzWI57Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:41 2026 by rpki-client