This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json) Hash identifier: G/aVeY+MXMS8Z0ZGMekk9N4DNbBBON7A/ZyWZi9tZWg= Subject key identifier: 22:AE:F4:1A:08:77:01:62:17:75:DC:EB:B3:3E:0A:3C:98:B4:91:6F Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56 Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456 Certificate serial: 019C435956548DCEEE2A47E0A4467DE7DF4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft Manifest number: 1269 Signing time: Mon 09 Feb 2026 17:00:54 +0000 Manifest this update: Mon 09 Feb 2026 17:00:54 +0000 Manifest next update: Tue 10 Feb 2026 17:00:54 +0000 Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: GKYcQPxPceGLbyA9eQz7uW01jLVJxash7qf9GRd7hgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:56:54:8d:ce:ee:2a:47:e0:a4:46:7d:e7:df:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456 Validity Not Before: Feb 9 17:00:54 2026 GMT Not After : Feb 10 17:00:54 2026 GMT Subject: CN=22aef41a087701621775dcebb33e0a3c98b4916f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3b:f3:f7:2a:ad:b8:9c:c6:95:10:db:3b:c8: 96:13:c0:75:11:45:a5:0e:de:23:fb:7e:28:f9:e7: 13:82:5b:21:23:c3:ab:e2:59:59:5d:6e:48:85:91: cd:a9:40:97:5d:d8:4e:60:02:2f:66:64:0a:63:7d: 87:bc:a7:42:08:f7:e1:1f:c1:87:24:72:15:ff:da: e0:fa:f1:f1:23:97:e0:90:15:80:1a:4b:4d:e7:60: ef:e9:6e:05:5e:e9:35:8b:f0:47:72:e2:47:fd:1a: 8f:e6:81:c4:5a:90:d0:a7:2b:0d:d8:32:3b:be:e3: ec:3a:0c:c5:45:78:2a:7f:33:b9:e7:83:d9:f6:e0: 9d:9a:a5:e0:98:ff:68:8f:31:c6:05:9c:63:36:f5: 90:e2:b3:db:de:90:77:04:2a:68:23:ae:d8:28:e9: 34:83:fd:4e:b8:bc:3a:54:b4:82:f2:29:fa:61:03: 28:37:5b:7e:b1:de:0a:c4:ee:82:2f:44:91:3c:3c: 3a:02:60:37:fd:c0:15:48:28:9c:eb:77:a7:d1:99: 54:9d:c0:11:a6:2e:33:c3:d2:c9:01:23:58:76:62: c4:c0:ee:fa:c6:d1:10:30:a8:60:03:82:f8:a7:4b: 3a:c7:34:bd:d2:63:d3:4e:e4:8e:6d:ef:6f:1e:4b: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AE:F4:1A:08:77:01:62:17:75:DC:EB:B3:3E:0A:3C:98:B4:91:6F X509v3 Authority Key Identifier: keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:aa:1d:bb:16:1d:05:22:d0:93:a1:cb:01:cc:69:64:c1:e0: df:82:0f:c8:83:f2:45:da:43:60:8a:0e:23:ad:c4:bf:02:aa: b7:fe:ad:4c:52:15:02:2a:5e:c1:72:b2:78:0d:0c:6c:48:b5: f1:e4:0e:1f:af:86:70:ec:4f:06:78:a4:0a:e7:41:6d:c7:dd: 92:76:5e:75:5d:f0:b1:de:73:4d:e0:d5:36:10:7d:dc:66:21: 04:8b:3d:4a:bc:6f:37:b1:d3:1c:ad:25:bf:33:0b:96:25:17: 31:eb:ed:74:4d:39:ca:ff:e2:b2:81:df:30:83:4c:c6:48:0e: 1f:26:8d:3b:0f:8e:60:c2:81:7a:73:cd:52:ae:90:1c:8a:dc: 46:5c:8e:ac:f0:c9:93:51:ea:88:bd:9b:4a:ba:8f:8f:67:28: 51:38:83:2f:af:5e:db:0f:46:a1:cb:5c:56:c1:17:30:55:aa: df:ed:6a:45:a0:00:db:bc:55:18:8c:67:c1:15:ee:a5:9e:c7: ce:d4:d6:fa:29:97:c5:74:70:de:ef:49:1c:32:c3:9e:a0:ab: 31:91:91:d5:93:dd:c9:f9:aa:12:2e:dc:ce:65:22:9e:b0:8a: 38:cb:ea:b2:df:13:68:bf:f1:c8:cc:c1:e4:98:b6:e0:63:7b: 44:55:8b:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWVZUjc7uKkfgpEZ9599PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWQzNTE4YmRlNTk2MmJmZmU3M2U3OTg4NDcxOGU2ZWQw ZmE0NTYwHhcNMjYwMjA5MTcwMDU0WhcNMjYwMjEwMTcwMDU0WjAzMTEwLwYDVQQD EygyMmFlZjQxYTA4NzcwMTYyMTc3NWRjZWJiMzNlMGEzYzk4YjQ5MTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTvz9yqtuJzGlRDbO8iWE8B1EUWl Dt4j+34o+ecTglshI8Or4llZXW5IhZHNqUCXXdhOYAIvZmQKY32HvKdCCPfhH8GH JHIV/9rg+vHxI5fgkBWAGktN52Dv6W4FXuk1i/BHcuJH/RqP5oHEWpDQpysN2DI7 vuPsOgzFRXgqfzO554PZ9uCdmqXgmP9ojzHGBZxjNvWQ4rPb3pB3BCpoI67YKOk0 g/1OuLw6VLSC8in6YQMoN1t+sd4KxO6CL0SRPDw6AmA3/cAVSCic63en0ZlUncAR pi4zw9LJASNYdmLEwO76xtEQMKhgA4L4p0s6xzS90mPTTuSObe9vHksxUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKu9BoIdwFiF3Xc67M+CjyYtJFvMB8GA1UdIwQY MBaAFAUdNRi95ZYr/+c+eYhHGObtD6RWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mOWE2MDItYzRlYi00YjRjLWJlYWQt YzViZWIyZTI0NWZlLzEvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mOWE2MDItYzRlYi00YjRjLWJlYWQtYzViZWIyZTI0NWZl LzEvQlIwMUdMM2xsaXZfNXo1NWlFY1k1dTBQcEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6oduxYd BSLQk6HLAcxpZMHg34IPyIPyRdpDYIoOI63EvwKqt/6tTFIVAipewXKyeA0MbEi1 8eQOH6+GcOxPBnikCudBbcfdknZedV3wsd5zTeDVNhB93GYhBIs9SrxvN7HTHK0l vzMLliUXMevtdE05yv/isoHfMINMxkgOHyaNOw+OYMKBenPNUq6QHIrcRlyOrPDJ k1HqiL2bSrqPj2coUTiDL69e2w9GoctcVsEXMFWq3+1qRaAA27xVGIxnwRXupZ7H ztTW+imXxXRw3u9JHDLDnqCrMZGR1ZPdyfmqEi7czmUinrCKOMvqst8TaL/xyMzB 5Ji24GN7RFWLDg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:49 2026 by rpki-client