This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json) Hash identifier: PGOkA+bwoivhYET2pe+JKCxpXoHgXglS7fKi2k/zsm8= Subject key identifier: C9:BE:18:E9:B5:F6:F5:AA:59:80:22:B3:DE:6D:BD:A1:C5:11:0E:5F Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2 Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2 Certificate serial: 019C438FB48D7802E1DF39B2666952B12B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 18:00:17 +0000 Manifest this update: Mon 09 Feb 2026 18:00:17 +0000 Manifest next update: Tue 10 Feb 2026 18:00:17 +0000 Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: 6eLl61In/AeJGR+V1aGQX3oKDPXOltmajQtMQTRjj4w=) 2: PlQCAe4FWjUSCOsaxJlS8rOMgYU.roa (hash: Ds9oHPXZ9drh6bet4k02ulHrCJ7yWBpxx33onOLcAs4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:b4:8d:78:02:e1:df:39:b2:66:69:52:b1:2b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2 Validity Not Before: Feb 9 18:00:17 2026 GMT Not After : Feb 10 18:00:17 2026 GMT Subject: CN=c9be18e9b5f6f5aa598022b3de6dbda1c5110e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:3e:ae:9c:6d:df:d4:42:9c:b6:01:fa:67: 46:9c:cf:ff:24:f4:ab:d8:34:0a:4e:61:1f:7b:07: 09:e1:13:88:69:e8:c8:02:f9:ab:0a:53:a3:26:00: d0:14:39:ea:e3:c1:78:7d:66:c2:43:9c:9e:e0:48: f4:82:1a:ac:db:30:a4:a5:fc:51:1f:86:08:28:df: 99:e4:f3:5a:38:21:e1:f3:29:c4:c2:98:eb:76:b0: fc:d3:50:5b:77:00:e4:b0:8c:00:53:74:47:7c:e8: 86:33:9b:00:36:3f:c8:33:81:d3:f5:2b:fc:6f:43: 07:7d:5b:30:da:ea:7a:22:74:f3:c0:6b:89:29:cf: 3c:c4:10:5d:6c:06:95:64:5c:81:9b:89:3c:3b:47: 61:6c:47:f9:c8:03:4e:70:ce:e9:59:1c:f2:80:bd: a9:bd:59:e9:61:91:16:be:4b:e7:f2:93:2c:3c:28: d3:92:b3:5e:74:48:45:7d:aa:6e:88:b2:c0:e7:0f: 0e:f1:54:02:89:e2:07:24:41:ff:66:7e:a0:fa:a1: 8b:23:e9:b0:25:8a:65:be:f3:f0:5c:98:d5:8c:2a: c3:f0:bc:bc:ac:73:9f:01:6d:a4:26:30:38:97:c6: bc:26:78:53:98:87:ad:73:de:06:a7:14:ae:c7:74: 95:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:BE:18:E9:B5:F6:F5:AA:59:80:22:B3:DE:6D:BD:A1:C5:11:0E:5F X509v3 Authority Key Identifier: keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:44:73:e0:99:d7:5e:b0:8f:9c:46:10:37:39:0f:7f:81:96: e4:e1:2b:4b:71:ae:6d:94:87:b8:b3:e7:8a:bf:02:56:b0:b9: f5:3b:58:c6:45:b8:3a:1d:d7:db:53:b0:9e:a2:e0:a5:35:5c: e1:8a:fa:b0:da:74:3f:3d:31:30:42:b0:15:3d:1c:7a:98:a5: d8:72:e9:a8:f5:22:22:d8:8f:79:83:f5:53:8a:11:e5:f0:0a: 0c:e7:ee:9c:38:ba:d8:a3:ea:0a:fa:f5:c4:68:f7:b8:ce:91: 7b:45:9d:7a:ef:23:f8:5f:e9:bc:8c:1a:50:17:dd:6e:ad:aa: 5c:5c:45:30:da:3b:3d:48:23:cc:79:1d:2d:af:ed:ca:75:75: 42:9b:8c:a9:6d:26:5e:43:c2:7d:06:20:35:20:4d:ae:90:16: 3e:56:e5:b8:8e:e6:0d:92:06:9a:05:c7:65:89:b1:d4:b9:2b: 9f:2b:cb:f9:b1:64:b0:ea:55:e0:88:81:e5:d4:0e:ca:f0:43: ca:d4:b7:f5:44:8a:a9:0c:12:aa:44:fc:2d:4b:b8:75:ac:e2: b6:e7:d1:db:a9:a4:72:86:4d:aa:79:97:66:a9:46:44:21:21: 1f:3a:fa:f3:96:89:1a:05:eb:5a:37:6e:58:70:04:f8:8a:75: df:08:39:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj7SNeALh3zmyZmlSsSs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1Y2Y2YWQ5Y2JlOWY3YjI4NjNlMGNlYzM2YzE1M2M1ZDA3 MzZhZTIwHhcNMjYwMjA5MTgwMDE3WhcNMjYwMjEwMTgwMDE3WjAzMTEwLwYDVQQD EyhjOWJlMThlOWI1ZjZmNWFhNTk4MDIyYjNkZTZkYmRhMWM1MTEwZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2M+rpxt39RCnLYB+mdGnM//JPSr 2DQKTmEfewcJ4ROIaejIAvmrClOjJgDQFDnq48F4fWbCQ5ye4Ej0ghqs2zCkpfxR H4YIKN+Z5PNaOCHh8ynEwpjrdrD801BbdwDksIwAU3RHfOiGM5sANj/IM4HT9Sv8 b0MHfVsw2up6InTzwGuJKc88xBBdbAaVZFyBm4k8O0dhbEf5yANOcM7pWRzygL2p vVnpYZEWvkvn8pMsPCjTkrNedEhFfapuiLLA5w8O8VQCieIHJEH/Zn6g+qGLI+mw JYplvvPwXJjVjCrD8Ly8rHOfAW2kJjA4l8a8JnhTmIetc94GpxSux3SVYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMm+GOm19vWqWYAis95tvaHFEQ5fMB8GA1UdIwQY MBaAFAXPatnL6feyhj4M7DbBU8XQc2riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2Yt NzQ4YWYxZjg0MDBlLzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80YmVjM2ItNGY1Ny00OGQ2LWJkY2YtNzQ4YWYxZjg0MDBl LzEvQmM5cTJjdnA5N0tHUGd6c05zRlR4ZEJ6YXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0Rz4JnX XrCPnEYQNzkPf4GW5OErS3GubZSHuLPnir8CVrC59TtYxkW4Oh3X21OwnqLgpTVc 4Yr6sNp0Pz0xMEKwFT0cepil2HLpqPUiItiPeYP1U4oR5fAKDOfunDi62KPqCvr1 xGj3uM6Re0Wdeu8j+F/pvIwaUBfdbq2qXFxFMNo7PUgjzHkdLa/tynV1QpuMqW0m XkPCfQYgNSBNrpAWPlbluI7mDZIGmgXHZYmx1LkrnyvL+bFksOpV4IiB5dQOyvBD ytS39USKqQwSqkT8LUu4dazitufR26mkcoZNqnmXZqlGRCEhHzr685aJGgXrWjdu WHAE+Ip13wg5Xg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:06 2026 by rpki-client