This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft File: bj5QHSUT5a7UQj1-smXmCCKo540.mft (raw, json) Hash identifier: XhElGsNYbNVHoHlMhMS9S5ELW/rigzunB5F+YwQ4N/0= Subject key identifier: 0A:52:C0:7A:39:ED:FA:57:F7:80:2F:83:49:CC:1F:28:CD:A3:D9:74 Authority key identifier: 6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D Certificate issuer: /CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d Certificate serial: 019C42EB3F7EA6BCA5FB2B5CBE451D47C64E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft Manifest number: 14FC Signing time: Mon 09 Feb 2026 15:00:39 +0000 Manifest this update: Mon 09 Feb 2026 15:00:39 +0000 Manifest next update: Tue 10 Feb 2026 15:00:39 +0000 Files and hashes: 1: Oon2IIrGkbnZaP-hb1ZNPn5crpM.roa (hash: aV6nVsAigskV1T2EnkJOb7mIfcRM6nE2dCNvULEtGlA=) 2: bj5QHSUT5a7UQj1-smXmCCKo540.crl (hash: A+DoozBaY9R7O7EtrbsOpAV46Kb4CtzXOGgAeYDUQRU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:3f:7e:a6:bc:a5:fb:2b:5c:be:45:1d:47:c6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e3e501d2513e5aed4423d7eb265e60822a8e78d Validity Not Before: Feb 9 15:00:39 2026 GMT Not After : Feb 10 15:00:39 2026 GMT Subject: CN=0a52c07a39edfa57f7802f8349cc1f28cda3d974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b2:39:a2:d1:5e:cb:4d:ed:85:2d:4b:64:db: 62:f0:5d:b9:ec:45:2d:be:34:8a:17:c9:ee:f4:7a: 39:8d:0e:04:a0:18:05:12:ce:f1:71:62:a5:7d:3a: 07:76:3c:9f:9f:9e:61:73:22:a8:35:1b:6f:e9:77: 6a:e7:98:b4:44:de:92:5a:41:fe:09:31:23:87:fa: 00:4b:10:ba:79:ef:b7:38:d6:1c:ae:9d:84:10:cf: cb:aa:78:a1:70:ec:4f:98:04:25:f6:80:b5:d2:4d: 9a:27:c5:be:32:cd:72:7a:d1:22:29:4a:74:a5:7f: ee:ce:df:71:f5:ef:05:8c:e6:ee:a7:3b:07:d0:77: 35:b7:12:5d:95:3b:f7:42:f9:12:10:2e:48:41:aa: b7:87:34:17:d1:fd:1b:52:1f:45:d9:12:59:58:87: 9b:b1:cb:8a:ca:cc:1c:8d:c1:cb:75:65:32:ce:49: 2d:51:2a:4a:9b:92:43:ea:5c:4e:90:4b:9e:69:d9: 7c:94:7b:03:4d:c6:f7:bc:4c:de:b3:95:45:03:d8: 24:4f:67:d7:79:57:39:60:2d:6b:ec:07:63:af:eb: ec:98:ba:cb:3c:4d:de:88:0a:2d:ac:d6:c3:b0:ac: fa:82:7b:d4:80:6d:0f:f2:72:29:4b:4a:24:06:fc: 72:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:52:C0:7A:39:ED:FA:57:F7:80:2F:83:49:CC:1F:28:CD:A3:D9:74 X509v3 Authority Key Identifier: keyid:6E:3E:50:1D:25:13:E5:AE:D4:42:3D:7E:B2:65:E6:08:22:A8:E7:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj5QHSUT5a7UQj1-smXmCCKo540.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9d5fdc-66b2-4718-8b24-11daf170d7cd/1/bj5QHSUT5a7UQj1-smXmCCKo540.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:db:5a:82:b7:ad:4b:d0:74:24:5f:34:3f:a2:9d:ce:55:61: ff:e8:35:2c:89:6c:a1:3b:53:b2:76:73:26:51:4d:9f:4e:79: 0e:77:28:a9:bc:78:51:f6:04:0b:18:d3:cc:4f:e3:95:11:60: 11:82:65:f9:23:98:87:0c:4f:d4:e9:5d:ab:c7:71:86:e1:9d: 03:7e:ef:16:b1:c9:6d:e9:d4:55:7f:0c:60:88:98:a1:2c:23: d0:f9:4a:53:3e:65:b0:d9:a5:22:e5:e2:01:7e:73:5f:37:86: 42:16:56:9c:98:e0:db:4e:48:33:5d:c7:4a:e8:b5:66:52:f5: 0f:2c:b0:5c:e3:c1:68:7f:12:6e:44:ed:d9:57:44:3d:1d:2f: a5:ac:5e:c5:d8:d6:9e:0c:7f:ec:27:f4:53:e5:9f:8a:17:5e: cf:8a:6a:98:74:3e:f9:95:a3:4a:72:ad:e4:3c:45:c0:e5:5d: ff:de:31:54:ee:e6:55:a4:9c:59:65:b0:8f:cf:c5:20:bb:ab: 11:60:2f:60:e1:c1:6f:56:a8:7b:50:88:f7:32:96:cd:9d:75: d7:50:cf:34:99:55:d1:df:f3:99:10:c8:fd:bb:7f:43:31:f2: 91:f2:09:43:85:ed:ea:37:36:13:f7:83:c2:57:b8:f9:1f:bc: fb:ea:f1:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6z9+pryl+ytcvkUdR8ZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlM2U1MDFkMjUxM2U1YWVkNDQyM2Q3ZWIyNjVlNjA4MjJh OGU3OGQwHhcNMjYwMjA5MTUwMDM5WhcNMjYwMjEwMTUwMDM5WjAzMTEwLwYDVQQD EygwYTUyYzA3YTM5ZWRmYTU3Zjc4MDJmODM0OWNjMWYyOGNkYTNkOTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bI5otFey03thS1LZNti8F257EUt vjSKF8nu9Ho5jQ4EoBgFEs7xcWKlfToHdjyfn55hcyKoNRtv6Xdq55i0RN6SWkH+ CTEjh/oASxC6ee+3ONYcrp2EEM/LqnihcOxPmAQl9oC10k2aJ8W+Ms1yetEiKUp0 pX/uzt9x9e8FjObupzsH0Hc1txJdlTv3QvkSEC5IQaq3hzQX0f0bUh9F2RJZWIeb scuKyswcjcHLdWUyzkktUSpKm5JD6lxOkEueadl8lHsDTcb3vEzes5VFA9gkT2fX eVc5YC1r7Adjr+vsmLrLPE3eiAotrNbDsKz6gnvUgG0P8nIpS0okBvxysQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApSwHo57fpX94Avg0nMHyjNo9l0MB8GA1UdIwQY MBaAFG4+UB0lE+Wu1EI9frJl5ggiqOeNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQt MTFkYWYxNzBkN2NkLzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85ZDVmZGMtNjZiMi00NzE4LThiMjQtMTFkYWYxNzBkN2Nk LzEvYmo1UUhTVVQ1YTdVUWoxLXNtWG1DQ0tvNTQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu9tagret S9B0JF80P6KdzlVh/+g1LIlsoTtTsnZzJlFNn055Dncoqbx4UfYECxjTzE/jlRFg EYJl+SOYhwxP1Oldq8dxhuGdA37vFrHJbenUVX8MYIiYoSwj0PlKUz5lsNmlIuXi AX5zXzeGQhZWnJjg205IM13HSui1ZlL1DyywXOPBaH8SbkTt2VdEPR0vpaxexdjW ngx/7Cf0U+Wfihdez4pqmHQ++ZWjSnKt5DxFwOVd/94xVO7mVaScWWWwj8/FILur EWAvYOHBb1aoe1CI9zKWzZ1111DPNJlV0d/zmRDI/bt/QzHykfIJQ4Xt6jc2E/eD wle4+R+8++rxXA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:05 2026 by rpki-client