This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft File: BrFkGJ99th6LYf3a5WIqCxNPXBY.mft (raw, json) Hash identifier: J56b3rLApjabCU/zPFTmbdn+LegIvq1u6D4b6lZNiyY= Subject key identifier: 89:1E:83:C9:64:4C:2D:BE:06:81:F4:B0:82:B4:74:24:C9:A7:39:9A Authority key identifier: 06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16 Certificate issuer: /CN=06b164189f7db61e8b61fddae5622a0b134f5c16 Certificate serial: 019C4322271C89FE63A807F58B36D49E2697 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft Manifest number: 08F4 Signing time: Mon 09 Feb 2026 16:00:37 +0000 Manifest this update: Mon 09 Feb 2026 16:00:37 +0000 Manifest next update: Tue 10 Feb 2026 16:00:37 +0000 Files and hashes: 1: BrFkGJ99th6LYf3a5WIqCxNPXBY.crl (hash: lNZ9zNE/lgbFkSsVGwfd+2VJGgJjk0fJAxy6XIYKgew=) 2: xLtMHLRVofBlv_rz48mjyhzxYcU.roa (hash: zhHhuq3ChHSPhA7wiwVbd31QtxXigerSvof7E12nmVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:27:1c:89:fe:63:a8:07:f5:8b:36:d4:9e:26:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06b164189f7db61e8b61fddae5622a0b134f5c16 Validity Not Before: Feb 9 16:00:37 2026 GMT Not After : Feb 10 16:00:37 2026 GMT Subject: CN=891e83c9644c2dbe0681f4b082b47424c9a7399a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:97:76:46:82:ab:6d:68:e7:9e:8d:22:1a:3a: c9:86:1a:b0:c6:1c:9d:ec:6c:e1:db:70:c7:3f:1b: 94:79:79:3f:83:51:d4:3a:f7:b7:93:9c:8c:48:f4: 78:48:6e:1b:d5:8a:65:87:20:e3:9b:be:5f:9f:3f: 6f:0d:11:58:a3:6f:8c:6a:dc:be:27:64:1e:6e:65: 07:42:1f:4a:5a:6e:5b:22:df:7d:2b:38:1c:b0:af: 12:86:de:f1:7c:6d:84:dc:f6:5b:03:a1:5d:b6:21: f2:40:e1:93:01:1e:ea:16:20:d6:2e:1e:01:db:ef: 65:8c:90:1e:df:1e:4f:8f:1d:99:b1:1d:91:8f:ed: 7d:54:76:ba:5b:90:60:02:03:1f:d9:7a:b4:d7:a1: 4b:d9:b2:94:47:8a:19:60:14:78:13:00:2f:59:c7: 12:25:d2:03:91:c5:35:50:8d:0c:35:2c:30:d2:ee: 08:b4:71:81:11:73:d4:70:bf:8f:4f:c2:90:fa:ff: 46:8b:d4:ac:35:45:83:30:10:2f:65:8c:79:1f:08: 12:a4:0f:10:66:47:43:e7:f2:00:89:82:90:90:50: ec:87:34:3c:00:1d:83:c4:a7:e5:a1:97:cb:61:fc: 24:49:99:02:a7:6c:be:b4:03:4e:92:4e:d1:46:19: 71:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1E:83:C9:64:4C:2D:BE:06:81:F4:B0:82:B4:74:24:C9:A7:39:9A X509v3 Authority Key Identifier: keyid:06:B1:64:18:9F:7D:B6:1E:8B:61:FD:DA:E5:62:2A:0B:13:4F:5C:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BrFkGJ99th6LYf3a5WIqCxNPXBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f2db2e-af17-4b4f-8e1f-fba64c23d3da/1/BrFkGJ99th6LYf3a5WIqCxNPXBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:2f:4e:bc:8e:0c:2d:25:8e:c7:45:e3:de:dc:d8:88:2a:e7: 3b:be:da:c2:b9:b5:7e:9a:ec:86:3a:22:24:eb:c1:bc:a0:e3: 6e:75:49:cf:29:d7:2d:5e:f9:bf:df:f9:74:01:e4:a9:1c:b9: d6:f3:ae:1b:88:0c:45:f3:de:fa:b1:c8:68:ce:38:b0:76:ee: 68:bc:34:09:b7:e8:54:a4:80:41:76:93:97:cd:47:73:7a:c2: 3b:78:38:35:ec:d0:e4:18:1e:16:2f:d0:86:f8:ce:d8:78:c0: 44:cb:10:db:8c:12:12:e8:00:7d:3d:8d:1d:ac:26:75:95:94: 09:02:5f:23:2e:0f:73:b7:82:40:58:2d:e0:6b:6c:84:3e:3c: 41:a2:3a:dd:b4:94:7d:a4:b2:5d:18:e8:8c:c6:c9:03:ae:6a: 88:ba:78:e7:74:a4:3a:5c:11:c6:72:1c:c8:87:4b:9b:9e:2b: 32:26:69:88:ea:92:ec:60:bd:69:4b:56:ee:64:90:af:e8:88: 11:c4:e4:fd:be:e8:c6:9c:23:e1:f0:70:e9:41:25:65:85:c5: 0c:f0:f2:49:e9:47:f4:ee:7a:6a:90:f3:49:c0:5d:ae:9c:64: 76:0d:76:ba:e5:2d:5e:03:42:f1:fb:63:40:d4:a3:36:59:54: 1d:f2:9c:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiccif5jqAf1izbUniaXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YjE2NDE4OWY3ZGI2MWU4YjYxZmRkYWU1NjIyYTBiMTM0 ZjVjMTYwHhcNMjYwMjA5MTYwMDM3WhcNMjYwMjEwMTYwMDM3WjAzMTEwLwYDVQQD Eyg4OTFlODNjOTY0NGMyZGJlMDY4MWY0YjA4MmI0NzQyNGM5YTczOTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJd2RoKrbWjnno0iGjrJhhqwxhyd 7Gzh23DHPxuUeXk/g1HUOve3k5yMSPR4SG4b1YplhyDjm75fnz9vDRFYo2+Maty+ J2QebmUHQh9KWm5bIt99KzgcsK8Sht7xfG2E3PZbA6FdtiHyQOGTAR7qFiDWLh4B 2+9ljJAe3x5Pjx2ZsR2Rj+19VHa6W5BgAgMf2Xq016FL2bKUR4oZYBR4EwAvWccS JdIDkcU1UI0MNSww0u4ItHGBEXPUcL+PT8KQ+v9Gi9SsNUWDMBAvZYx5HwgSpA8Q ZkdD5/IAiYKQkFDshzQ8AB2DxKfloZfLYfwkSZkCp2y+tANOkk7RRhlxxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkeg8lkTC2+BoH0sIK0dCTJpzmaMB8GA1UdIwQY MBaAFAaxZBiffbYei2H92uViKgsTT1wWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnJGa0dKOTl0aDZMWWYzYTVXSXFDeE5QWEJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9mMmRiMmUtYWYxNy00YjRmLThlMWYt ZmJhNjRjMjNkM2RhLzEvQnJGa0dKOTl0aDZMWWYzYTVXSXFDeE5QWEJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy9mMmRiMmUtYWYxNy00YjRmLThlMWYtZmJhNjRjMjNkM2Rh LzEvQnJGa0dKOTl0aDZMWWYzYTVXSXFDeE5QWEJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFy9OvI4M LSWOx0Xj3tzYiCrnO77awrm1fprshjoiJOvBvKDjbnVJzynXLV75v9/5dAHkqRy5 1vOuG4gMRfPe+rHIaM44sHbuaLw0CbfoVKSAQXaTl81Hc3rCO3g4NezQ5BgeFi/Q hvjO2HjARMsQ24wSEugAfT2NHawmdZWUCQJfIy4Pc7eCQFgt4GtshD48QaI63bSU faSyXRjojMbJA65qiLp453SkOlwRxnIcyIdLm54rMiZpiOqS7GC9aUtW7mSQr+iI EcTk/b7oxpwj4fBw6UElZYXFDPDySelH9O56apDzScBdrpxkdg12uuUtXgNC8ftj QNSjNllUHfKcLg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:09 2026 by rpki-client