This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft File: bLm_6TNtoFV5BgineljMq8SWhpQ.mft (raw, json) Hash identifier: wDiNz/q2ayhcyiH1iARUt6kOP9yftizOZKDMWONeB8o= Subject key identifier: 39:2B:62:2E:F6:A7:57:1C:BA:B4:5E:6E:14:F7:0E:B5:23:26:B7:82 Authority key identifier: 6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94 Certificate issuer: /CN=6cb9bfe9336da055790608a77a58ccabc4968694 Certificate serial: 019C43904DA5F28A4D1A15936B61A295B8F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft Manifest number: 0EB5 Signing time: Mon 09 Feb 2026 18:00:56 +0000 Manifest this update: Mon 09 Feb 2026 18:00:56 +0000 Manifest next update: Tue 10 Feb 2026 18:00:56 +0000 Files and hashes: 1: bLm_6TNtoFV5BgineljMq8SWhpQ.crl (hash: Qt9rS46nmtApHx7Vt7Cb2ezCWwsA9wVFDiap5jaTKvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:4d:a5:f2:8a:4d:1a:15:93:6b:61:a2:95:b8:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb9bfe9336da055790608a77a58ccabc4968694 Validity Not Before: Feb 9 18:00:56 2026 GMT Not After : Feb 10 18:00:56 2026 GMT Subject: CN=392b622ef6a7571cbab45e6e14f70eb52326b782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d0:5e:2c:9f:bc:b0:6e:bb:a8:09:ee:81:76: f4:7d:c5:79:e7:3e:e4:a1:17:ce:97:a7:af:e0:2b: 8a:3b:05:37:8e:35:3a:6a:fb:f9:30:0c:47:94:ef: 6b:89:f5:19:4d:0d:d4:15:8a:70:ae:28:ea:b4:1b: 77:b5:39:e1:7c:0f:f3:b6:d3:31:fa:8d:b9:09:cf: b3:90:61:ab:ec:07:4a:7b:3e:8b:2b:05:a4:96:16: 52:be:da:c4:5d:2a:77:39:fd:2a:21:7e:28:36:97: f7:ef:2f:4b:94:a3:c2:8f:44:30:49:a1:c3:8f:d3: e7:fb:ca:49:06:88:51:d7:ed:00:ee:55:5b:53:1c: 08:8f:c5:34:cf:10:8f:0f:2c:b4:fd:ad:92:b2:8f: 40:2e:46:f5:23:0c:08:cc:95:0e:43:db:6d:db:01: 7d:d8:f5:b8:e6:61:01:92:27:c5:95:e0:ec:7a:96: e4:6d:b9:50:a7:4e:88:68:ac:68:b7:64:b2:4c:68: a0:71:58:29:22:06:cd:37:41:47:91:db:b1:bd:98: 64:14:e5:f6:2b:ae:c5:ff:ce:f5:b4:0b:b0:5f:3e: 0a:0a:4e:a5:ac:4e:03:02:44:55:bd:5f:d8:76:7d: 0c:b1:a7:c5:e3:71:a7:04:c6:25:68:05:5f:1b:3b: 95:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2B:62:2E:F6:A7:57:1C:BA:B4:5E:6E:14:F7:0E:B5:23:26:B7:82 X509v3 Authority Key Identifier: keyid:6C:B9:BF:E9:33:6D:A0:55:79:06:08:A7:7A:58:CC:AB:C4:96:86:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLm_6TNtoFV5BgineljMq8SWhpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6fe3fa-9682-4807-9272-cfd00dd827ee/1/bLm_6TNtoFV5BgineljMq8SWhpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:59:de:f1:f1:89:52:ed:34:8c:49:8f:d8:2b:1d:f7:54:33: 85:3a:35:22:d9:94:bb:5d:a4:d5:7a:b8:45:67:ee:95:34:18: 9a:49:f4:51:26:6e:a8:c4:26:14:1e:e1:28:5e:52:88:5a:07: 0e:ae:0e:c2:5d:0b:3e:70:77:2f:0b:86:ab:91:f3:78:c3:d4: c6:77:dc:a8:8d:d4:8a:b6:04:3d:09:b2:c2:df:41:1c:2f:af: 47:b8:b5:a7:a8:98:fa:0e:2d:db:7d:99:2d:65:df:d5:e8:7b: 9b:b3:56:22:74:cb:35:c3:e8:f2:39:28:1c:44:96:99:7c:98: bf:b2:ec:34:6d:27:c4:2b:be:37:d3:89:76:95:2d:8e:42:fd: 77:bf:59:1a:c7:ea:57:55:b6:5c:11:e7:42:4d:35:ec:ea:8a: 7f:26:09:c6:25:07:62:3e:b6:34:5b:ef:09:ad:4d:b8:cd:96: 87:27:d4:20:12:89:66:c4:f1:a5:1d:72:db:d8:5f:f2:61:51: aa:4f:87:05:01:45:2a:a6:ac:1c:fd:40:c8:2d:54:b5:6b:f3: fa:1e:f3:af:c2:21:dc:09:56:43:6c:15:41:5b:09:1d:fb:46: a9:5d:a7:94:1f:70:75:e7:3e:35:57:af:9a:f0:0b:51:58:d7: 0d:83:67:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkE2l8opNGhWTa2Gilbj4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjYjliZmU5MzM2ZGEwNTU3OTA2MDhhNzdhNThjY2FiYzQ5 Njg2OTQwHhcNMjYwMjA5MTgwMDU2WhcNMjYwMjEwMTgwMDU2WjAzMTEwLwYDVQQD EygzOTJiNjIyZWY2YTc1NzFjYmFiNDVlNmUxNGY3MGViNTIzMjZiNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NBeLJ+8sG67qAnugXb0fcV55z7k oRfOl6ev4CuKOwU3jjU6avv5MAxHlO9rifUZTQ3UFYpwrijqtBt3tTnhfA/zttMx +o25Cc+zkGGr7AdKez6LKwWklhZSvtrEXSp3Of0qIX4oNpf37y9LlKPCj0QwSaHD j9Pn+8pJBohR1+0A7lVbUxwIj8U0zxCPDyy0/a2Sso9ALkb1IwwIzJUOQ9tt2wF9 2PW45mEBkifFleDsepbkbblQp06IaKxot2SyTGigcVgpIgbNN0FHkduxvZhkFOX2 K67F/871tAuwXz4KCk6lrE4DAkRVvV/Ydn0MsafF43GnBMYlaAVfGzuVgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkrYi72p1ccurRebhT3DrUjJreCMB8GA1UdIwQY MBaAFGy5v+kzbaBVeQYIp3pYzKvEloaUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkxtXzZUTnRvRlY1QmdpbmVsak1xOFNXaHBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi82ZmUzZmEtOTY4Mi00ODA3LTkyNzIt Y2ZkMDBkZDgyN2VlLzEvYkxtXzZUTnRvRlY1QmdpbmVsak1xOFNXaHBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi82ZmUzZmEtOTY4Mi00ODA3LTkyNzItY2ZkMDBkZDgyN2Vl LzEvYkxtXzZUTnRvRlY1QmdpbmVsak1xOFNXaHBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1ne8fGJ Uu00jEmP2Csd91QzhTo1ItmUu12k1Xq4RWfulTQYmkn0USZuqMQmFB7hKF5SiFoH Dq4Owl0LPnB3LwuGq5HzeMPUxnfcqI3UirYEPQmywt9BHC+vR7i1p6iY+g4t232Z LWXf1eh7m7NWInTLNcPo8jkoHESWmXyYv7LsNG0nxCu+N9OJdpUtjkL9d79ZGsfq V1W2XBHnQk017OqKfyYJxiUHYj62NFvvCa1NuM2WhyfUIBKJZsTxpR1y29hf8mFR qk+HBQFFKqasHP1AyC1UtWvz+h7zr8Ih3AlWQ2wVQVsJHftGqV2nlB9wdec+NVev mvALUVjXDYNnfg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:50 2026 by rpki-client