This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft File: BSQGb4Zs826cup6b5vkCZNo3Lz4.mft (raw, json) Hash identifier: oMv04G2MTWLy8dck+5snFY5rur3VI9ed/TrjIIsZyBg= Subject key identifier: D2:E7:B9:72:67:60:EF:B2:7E:3A:16:CA:73:59:20:C7:7B:78:BF:B2 Authority key identifier: 05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E Certificate issuer: /CN=0524066f866cf36e9cba9e9be6f90264da372f3e Certificate serial: 019C432247F384EBF124B81FB8F3320F60E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 16:00:45 +0000 Manifest this update: Mon 09 Feb 2026 16:00:45 +0000 Manifest next update: Tue 10 Feb 2026 16:00:45 +0000 Files and hashes: 1: BSQGb4Zs826cup6b5vkCZNo3Lz4.crl (hash: fC/RQLq0g6c08tz7BQRIBzBp2i7Bs2I/IxBhS+tHiK0=) 2: G2r9KsUTtbxHKB5JKNC2RVQtxUM.roa (hash: tpJ2/AVYhiDqHmd6oabX9AFZV9PFSJLtrHg1I6lP9Xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:47:f3:84:eb:f1:24:b8:1f:b8:f3:32:0f:60:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0524066f866cf36e9cba9e9be6f90264da372f3e Validity Not Before: Feb 9 16:00:45 2026 GMT Not After : Feb 10 16:00:45 2026 GMT Subject: CN=d2e7b9726760efb27e3a16ca735920c77b78bfb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b2:66:99:0c:c2:c2:b6:92:29:93:13:2a:2c: 5d:21:1c:1b:37:0f:5b:60:80:83:50:4f:a2:95:ed: ff:15:23:97:b2:c1:b7:e0:4e:21:29:a5:b8:f8:10: 45:da:c3:a7:ff:29:14:db:79:ab:b7:b2:52:66:d1: b1:4d:21:9e:91:50:a2:da:ba:57:f7:ab:84:32:31: 71:33:35:18:61:3b:47:d9:7c:18:c2:c0:c3:ea:af: d9:cb:d6:5c:1c:bb:98:80:4d:6b:dd:e5:34:0e:f7: 5c:07:38:b3:18:69:ea:be:9e:38:c0:24:da:6e:ca: 7d:73:43:52:c2:5e:27:a2:60:11:d0:6e:e6:d7:59: 01:c3:6b:61:3a:a6:95:82:80:d1:5a:ad:1c:13:69: ac:aa:71:14:de:18:73:9d:86:09:00:30:cc:0e:f0: 86:c5:41:87:41:b3:f3:fb:c0:f2:e7:92:38:35:0e: 10:5f:c4:fc:d6:02:c8:4e:dc:14:78:08:f2:9a:5f: 93:63:1f:10:0a:17:9e:b3:d9:d7:b3:4e:b5:b9:da: 6d:ed:ad:b4:31:e0:28:d0:c4:5f:ea:8d:52:ff:94: 53:8f:c9:4d:a9:3c:2b:e4:38:00:22:ab:3c:5a:c4: 05:8f:81:77:05:c6:23:cd:3c:b8:57:19:b8:5a:13: a8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:E7:B9:72:67:60:EF:B2:7E:3A:16:CA:73:59:20:C7:7B:78:BF:B2 X509v3 Authority Key Identifier: keyid:05:24:06:6F:86:6C:F3:6E:9C:BA:9E:9B:E6:F9:02:64:DA:37:2F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BSQGb4Zs826cup6b5vkCZNo3Lz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/217451-e1fb-4cc6-8165-804c4679093f/1/BSQGb4Zs826cup6b5vkCZNo3Lz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:88:c5:af:3b:ae:f0:9c:bd:bb:bc:f0:32:28:b4:9d:83:75: 6b:45:52:24:8e:b8:12:5c:cc:fd:cd:e5:50:26:e8:66:6b:cb: 24:69:90:75:16:c7:cf:40:3f:83:9c:90:21:62:a1:12:cd:df: 06:a0:1e:b4:c0:f4:5f:37:87:c9:75:8f:32:c3:c3:17:22:7a: 72:90:44:13:2b:8d:8c:3c:87:62:5e:9e:86:84:e4:57:5c:a7: bd:ac:c1:e8:ed:a1:ec:b6:6c:f7:2d:45:db:85:8d:36:30:06: fa:6c:95:96:5c:67:92:9d:38:fb:fd:07:0d:08:a7:1b:95:80: b9:af:5e:d9:f6:9c:65:3a:dc:37:a4:bb:79:b5:a7:0b:79:3e: bb:ea:2d:4b:81:eb:d0:92:28:78:c7:e8:aa:8a:63:23:ce:80: d7:f0:18:eb:71:8f:87:c2:73:a5:31:f4:09:fb:e3:eb:e8:5d: 93:56:ab:c7:03:67:31:81:ae:41:35:31:6d:b8:42:35:33:69: 8f:71:dd:4f:0a:98:c4:82:b5:6d:26:25:d2:0c:18:84:2d:bb: 27:7a:fb:4a:d3:96:c1:05:90:66:42:7f:28:c9:0a:cc:c9:3e: c5:77:3f:dd:cc:79:ac:8c:a3:f7:f5:40:87:4a:df:89:83:ab: 96:e1:06:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkfzhOvxJLgfuPMyD2DlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MjQwNjZmODY2Y2YzNmU5Y2JhOWU5YmU2ZjkwMjY0ZGEz NzJmM2UwHhcNMjYwMjA5MTYwMDQ1WhcNMjYwMjEwMTYwMDQ1WjAzMTEwLwYDVQQD EyhkMmU3Yjk3MjY3NjBlZmIyN2UzYTE2Y2E3MzU5MjBjNzdiNzhiZmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLJmmQzCwraSKZMTKixdIRwbNw9b YICDUE+ile3/FSOXssG34E4hKaW4+BBF2sOn/ykU23mrt7JSZtGxTSGekVCi2rpX 96uEMjFxMzUYYTtH2XwYwsDD6q/Zy9ZcHLuYgE1r3eU0DvdcBzizGGnqvp44wCTa bsp9c0NSwl4nomAR0G7m11kBw2thOqaVgoDRWq0cE2msqnEU3hhznYYJADDMDvCG xUGHQbPz+8Dy55I4NQ4QX8T81gLITtwUeAjyml+TYx8QChees9nXs061udpt7a20 MeAo0MRf6o1S/5RTj8lNqTwr5DgAIqs8WsQFj4F3BcYjzTy4Vxm4WhOoxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLnuXJnYO+yfjoWynNZIMd7eL+yMB8GA1UdIwQY MBaAFAUkBm+GbPNunLqem+b5AmTaNy8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUt ODA0YzQ2NzkwOTNmLzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS8yMTc0NTEtZTFmYi00Y2M2LTgxNjUtODA0YzQ2NzkwOTNm LzEvQlNRR2I0WnM4MjZjdXA2YjV2a0NaTm8zTHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcojFrzuu 8Jy9u7zwMii0nYN1a0VSJI64ElzM/c3lUCboZmvLJGmQdRbHz0A/g5yQIWKhEs3f BqAetMD0XzeHyXWPMsPDFyJ6cpBEEyuNjDyHYl6ehoTkV1ynvazB6O2h7LZs9y1F 24WNNjAG+myVllxnkp04+/0HDQinG5WAua9e2facZTrcN6S7ebWnC3k+u+otS4Hr 0JIoeMfoqopjI86A1/AY63GPh8JzpTH0Cfvj6+hdk1arxwNnMYGuQTUxbbhCNTNp j3HdTwqYxIK1bSYl0gwYhC27J3r7StOWwQWQZkJ/KMkKzMk+xXc/3cx5rIyj9/VA h0rfiYOrluEGRw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:34 2026 by rpki-client