This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft File: BKSudHHI82IdUyVtdfEQt0iZeJg.mft (raw, json) Hash identifier: EaH+LMJE+oNYKrevUdHxepAydihCTr4bGER7IUAhCkI= Subject key identifier: 2D:9C:97:41:BD:86:5D:94:FC:58:16:91:08:D2:04:32:3D:96:EA:79 Authority key identifier: 04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98 Certificate issuer: /CN=04a4ae7471c8f3621d53256d75f110b748997898 Certificate serial: 019C427DBF3DDBB46DA30D8F85085502A757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 13:01:02 +0000 Manifest this update: Mon 09 Feb 2026 13:01:02 +0000 Manifest next update: Tue 10 Feb 2026 13:01:02 +0000 Files and hashes: 1: BKSudHHI82IdUyVtdfEQt0iZeJg.crl (hash: 0clFCUIx+dnUPILzzHBOy2I0hQPoO2/NIzdLcRVJ8g0=) 2: ZN4yF-e-6U6siCtfTnv-FW1OUx0.roa (hash: I9BYHq4fiuWBb+LO42h3XEWS7qzon5TJhCXafUyINuk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:bf:3d:db:b4:6d:a3:0d:8f:85:08:55:02:a7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04a4ae7471c8f3621d53256d75f110b748997898 Validity Not Before: Feb 9 13:01:02 2026 GMT Not After : Feb 10 13:01:02 2026 GMT Subject: CN=2d9c9741bd865d94fc58169108d204323d96ea79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:41:0c:54:c5:75:c8:ac:e4:26:a0:b8:07:4c: d5:a5:1d:8d:58:38:7f:76:b6:d5:5b:6a:2b:48:97: c2:25:3b:2c:3e:49:c2:de:fc:df:db:28:b9:df:87: 22:07:d9:46:95:bd:db:b7:31:89:ef:32:a4:f4:b7: d1:6f:7a:5f:3d:f5:b5:c1:b8:65:86:24:81:74:a6: 1e:e5:e5:d9:4b:ee:91:a4:5e:86:16:3f:21:ba:91: 49:a0:39:3c:ad:f3:6f:48:71:f0:66:a7:e7:e9:01: b7:da:8b:c6:94:47:0c:75:e5:c1:f8:70:f9:0e:a3: 3c:7b:c2:c1:92:7d:56:ad:52:cf:93:60:f0:cd:c4: 72:62:93:74:e6:16:08:22:47:b7:16:be:a9:9c:95: 02:f3:8d:26:a8:c3:27:04:bb:8c:80:4c:40:15:26: 4f:e6:e2:17:4d:c9:14:07:86:db:b6:f5:ce:e0:08: fe:e4:02:5d:5d:1a:ff:4d:08:c7:bf:10:ec:f0:81: 19:40:1c:b8:84:1b:03:04:76:3f:e5:ad:28:27:05: 27:c0:82:f4:ac:b5:86:9f:fb:e4:2e:3d:89:2b:49: 3a:5f:d1:4d:ac:8f:c3:52:a1:82:33:ac:8a:45:58: 20:bf:b5:49:5b:39:7d:c1:06:9a:7e:2f:7e:ea:79: 9b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:9C:97:41:BD:86:5D:94:FC:58:16:91:08:D2:04:32:3D:96:EA:79 X509v3 Authority Key Identifier: keyid:04:A4:AE:74:71:C8:F3:62:1D:53:25:6D:75:F1:10:B7:48:99:78:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKSudHHI82IdUyVtdfEQt0iZeJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/f3ba5e-898c-4fe9-bd88-3c3673d44905/1/BKSudHHI82IdUyVtdfEQt0iZeJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:5e:fe:5d:3e:d8:69:1f:4c:f0:1e:07:5d:7b:88:2e:e1:c8: 2c:fd:81:37:19:98:7f:ce:61:62:8b:79:f7:b7:87:3d:02:30: d9:86:1e:ad:02:0c:8c:8b:65:0f:75:fe:22:06:35:7f:f2:fb: 6e:7e:84:14:bc:cf:4b:b4:ab:a0:9a:95:f0:f7:90:81:90:59: b3:6d:f9:7f:3e:ac:b6:13:d2:cc:1b:64:fb:42:16:46:ea:fe: d4:59:5a:85:78:1d:13:23:56:f0:61:35:69:df:8a:b9:ab:60: 55:5b:e0:b6:94:e6:94:e0:a6:e7:4a:35:46:e4:18:f9:6f:cb: 22:cb:5b:32:cb:b8:c2:4c:5e:e3:98:1e:c5:f3:24:6d:e1:2a: 1e:91:c4:73:f6:b9:1e:3d:b0:e3:c8:52:35:a6:cf:78:ec:6d: 39:b7:81:3e:a3:c9:24:4c:7c:f6:89:99:f0:41:93:16:08:76: dc:c2:27:22:55:66:13:bd:95:0b:e7:76:bc:d7:b6:73:0f:1d: da:5d:1f:6c:6f:21:4d:cb:fc:1d:75:8f:d3:73:d6:09:be:85: f2:33:c5:8e:68:d1:b1:8d:69:bf:6e:2a:60:32:80:75:c0:c0: a1:cd:c9:0d:27:f9:ff:88:f0:91:f8:65:3d:0f:b2:91:21:21: cf:87:d4:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfb8927Rtow2PhQhVAqdXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0YTRhZTc0NzFjOGYzNjIxZDUzMjU2ZDc1ZjExMGI3NDg5 OTc4OTgwHhcNMjYwMjA5MTMwMTAyWhcNMjYwMjEwMTMwMTAyWjAzMTEwLwYDVQQD EygyZDljOTc0MWJkODY1ZDk0ZmM1ODE2OTEwOGQyMDQzMjNkOTZlYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEEMVMV1yKzkJqC4B0zVpR2NWDh/ drbVW2orSJfCJTssPknC3vzf2yi534ciB9lGlb3btzGJ7zKk9LfRb3pfPfW1wbhl hiSBdKYe5eXZS+6RpF6GFj8hupFJoDk8rfNvSHHwZqfn6QG32ovGlEcMdeXB+HD5 DqM8e8LBkn1WrVLPk2DwzcRyYpN05hYIIke3Fr6pnJUC840mqMMnBLuMgExAFSZP 5uIXTckUB4bbtvXO4Aj+5AJdXRr/TQjHvxDs8IEZQBy4hBsDBHY/5a0oJwUnwIL0 rLWGn/vkLj2JK0k6X9FNrI/DUqGCM6yKRVggv7VJWzl9wQaafi9+6nmb3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2cl0G9hl2U/FgWkQjSBDI9lup5MB8GA1UdIwQY MBaAFASkrnRxyPNiHVMlbXXxELdImXiYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgt M2MzNjczZDQ0OTA1LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mM2JhNWUtODk4Yy00ZmU5LWJkODgtM2MzNjczZDQ0OTA1 LzEvQktTdWRISEk4MklkVXlWdGRmRVF0MGlaZUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmV7+XT7Y aR9M8B4HXXuILuHILP2BNxmYf85hYot597eHPQIw2YYerQIMjItlD3X+IgY1f/L7 bn6EFLzPS7SroJqV8PeQgZBZs235fz6sthPSzBtk+0IWRur+1FlahXgdEyNW8GE1 ad+KuatgVVvgtpTmlOCm50o1RuQY+W/LIstbMsu4wkxe45gexfMkbeEqHpHEc/a5 Hj2w48hSNabPeOxtObeBPqPJJEx89omZ8EGTFgh23MInIlVmE72VC+d2vNe2cw8d 2l0fbG8hTcv8HXWP03PWCb6F8jPFjmjRsY1pv24qYDKAdcDAoc3JDSf5/4jwkfhl PQ+ykSEhz4fU8A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:42 2026 by rpki-client