This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft File: bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json) Hash identifier: 4qHEr+pbWbpmMAEj+l/cE7PnxEegKPqhh9yqhREE0FY= Subject key identifier: 49:C3:15:ED:30:9B:FA:33:C4:B2:D2:9E:15:08:50:C5:71:CD:37:82 Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7 Certificate issuer: /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7 Certificate serial: 019C438FEF0D164DB30AF0C7E2647BCAA24A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft Manifest number: 14A2 Signing time: Mon 09 Feb 2026 18:00:32 +0000 Manifest this update: Mon 09 Feb 2026 18:00:32 +0000 Manifest next update: Tue 10 Feb 2026 18:00:32 +0000 Files and hashes: 1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: GJcvVG+vJY/oSxvWgmguIYjy8cKAdVLKW2swB1fV1hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:ef:0d:16:4d:b3:0a:f0:c7:e2:64:7b:ca:a2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7 Validity Not Before: Feb 9 18:00:32 2026 GMT Not After : Feb 10 18:00:32 2026 GMT Subject: CN=49c315ed309bfa33c4b2d29e150850c571cd3782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5e:25:89:28:fc:2f:99:e3:46:f7:43:bf:86: a8:b9:80:d3:b6:88:a2:ec:25:72:91:37:5b:cf:6b: b1:39:3b:76:f8:fc:32:93:f6:62:80:b2:7f:14:0c: 7e:c0:ca:e2:a6:f5:eb:b8:7d:e0:a3:57:90:89:98: 7b:91:e4:9c:61:9c:02:f1:90:ad:1b:d0:54:54:de: e0:00:8a:14:78:b6:29:d5:49:94:d9:e3:c6:70:fe: c6:1e:2f:8f:6a:aa:7d:84:a1:c0:0c:10:7f:9f:7e: 3b:93:1e:2b:c4:a9:ff:f0:cf:93:03:3e:78:fd:b1: b5:99:3b:14:43:b3:1e:a1:cd:88:79:76:4e:90:6f: 0f:3e:0f:b5:33:6f:2e:44:ae:d2:71:d1:48:4d:3b: 2b:1a:85:7d:13:95:7e:3c:c7:d1:bc:ed:60:c8:17: 20:da:02:46:e9:f6:5d:67:a3:d3:e4:68:97:68:84: e5:6f:c5:0d:3f:8b:b7:4c:9d:55:c2:44:e6:63:31: fe:7e:dc:f6:92:0b:1c:3a:45:66:0e:2b:2a:4b:ca: 2c:d0:1e:7b:48:3a:5f:52:ee:4f:98:f6:11:63:ca: cb:b4:fc:76:62:81:7f:1d:c7:62:5d:0a:4c:50:f7: 32:69:95:a3:91:69:b5:a7:e3:6c:c6:cb:61:21:1f: 34:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C3:15:ED:30:9B:FA:33:C4:B2:D2:9E:15:08:50:C5:71:CD:37:82 X509v3 Authority Key Identifier: keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:2e:21:35:00:2e:cd:99:6e:19:ad:87:f9:93:f6:43:e7:20: 2b:9e:96:75:40:c9:af:b8:5a:fb:69:c4:91:c9:bc:9d:c3:2b: 13:50:9e:fa:ee:3e:15:00:45:77:b3:b0:54:65:8c:4c:a8:49: cc:f3:9c:57:24:16:55:55:54:09:5f:ae:71:bd:79:07:95:a8: 30:8f:2c:71:7a:38:d4:58:72:d4:26:2a:5e:82:9f:fb:09:42: c5:f4:99:27:bb:f3:3c:54:42:dc:92:e8:81:18:16:9b:14:33: 2e:aa:d3:61:c5:7b:05:e4:0d:c5:1b:91:6b:c7:d4:56:51:68: 2a:ab:b3:97:8f:13:bc:ec:5e:af:7e:31:d8:35:21:81:63:a5: 6c:03:34:a3:77:d4:9c:a7:4c:ed:9d:38:2e:78:68:dd:74:8d: a9:65:35:e9:ec:3a:70:40:75:93:f9:dd:40:a6:01:70:8a:dc: 7c:08:ca:c8:bd:da:a5:b2:8c:ba:9c:ee:3b:93:42:df:4e:c9: 85:bf:65:76:39:f0:14:79:01:e2:e6:57:21:05:1d:32:d4:70: 58:d4:cb:c4:4e:82:8e:d3:45:43:8c:ee:d7:5e:36:77:1a:9d: 0a:e5:83:68:78:55:23:ab:15:75:46:91:26:42:6c:4e:1c:1f: aa:d9:99:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj+8NFk2zCvDH4mR7yqJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNTE2MTRiNmJmYjZjNjE4NzgzNjc2OTExYmRmM2JjODI5 Zjk3ZDcwHhcNMjYwMjA5MTgwMDMyWhcNMjYwMjEwMTgwMDMyWjAzMTEwLwYDVQQD Eyg0OWMzMTVlZDMwOWJmYTMzYzRiMmQyOWUxNTA4NTBjNTcxY2QzNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF4liSj8L5njRvdDv4aouYDTtoii 7CVykTdbz2uxOTt2+Pwyk/ZigLJ/FAx+wMripvXruH3go1eQiZh7keScYZwC8ZCt G9BUVN7gAIoUeLYp1UmU2ePGcP7GHi+Paqp9hKHADBB/n347kx4rxKn/8M+TAz54 /bG1mTsUQ7Meoc2IeXZOkG8PPg+1M28uRK7ScdFITTsrGoV9E5V+PMfRvO1gyBcg 2gJG6fZdZ6PT5GiXaITlb8UNP4u3TJ1VwkTmYzH+ftz2kgscOkVmDisqS8os0B57 SDpfUu5PmPYRY8rLtPx2YoF/HcdiXQpMUPcyaZWjkWm1p+NsxsthIR80fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnDFe0wm/ozxLLSnhUIUMVxzTeCMB8GA1UdIwQY MBaAFGxRYUtr+2xhh4NnaRG987yCn5fXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkZGaFMydjdiR0dIZzJkcEViM3p2SUtmbDljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MGNlN2UtMTkyMy00OTkzLTkwMGMt N2Q1ZWIxODMxZWYxLzEvYkZGaFMydjdiR0dIZzJkcEViM3p2SUtmbDljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi82MGNlN2UtMTkyMy00OTkzLTkwMGMtN2Q1ZWIxODMxZWYx LzEvYkZGaFMydjdiR0dIZzJkcEViM3p2SUtmbDljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGi4hNQAu zZluGa2H+ZP2Q+cgK56WdUDJr7ha+2nEkcm8ncMrE1Ce+u4+FQBFd7OwVGWMTKhJ zPOcVyQWVVVUCV+ucb15B5WoMI8scXo41Fhy1CYqXoKf+wlCxfSZJ7vzPFRC3JLo gRgWmxQzLqrTYcV7BeQNxRuRa8fUVlFoKquzl48TvOxer34x2DUhgWOlbAM0o3fU nKdM7Z04Lnho3XSNqWU16ew6cEB1k/ndQKYBcIrcfAjKyL3apbKMupzuO5NC307J hb9ldjnwFHkB4uZXIQUdMtRwWNTLxE6CjtNFQ4zu1142dxqdCuWDaHhVI6sVdUaR JkJsThwfqtmZgA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:16 2026 by rpki-client