This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft File: bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft (raw, json) Hash identifier: 81zDpJGRf9UHBXhLp0z3H3EupLX++aYi+dFmt0vdWsk= Subject key identifier: C8:2D:DE:59:38:83:5D:51:D1:9F:7D:59:4E:95:44:0C:F7:90:AA:8A Authority key identifier: 6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6 Certificate issuer: /CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6 Certificate serial: 019C1C8376439D82005BE8BA58BD1FC6BA1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft Manifest number: 127E Signing time: Mon 02 Feb 2026 04:01:43 +0000 Manifest this update: Mon 02 Feb 2026 04:01:43 +0000 Manifest next update: Tue 03 Feb 2026 04:01:43 +0000 Files and hashes: 1: bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl (hash: aY/QYLkMx4F+M245ZbW9tCe1wJXf5DYYmxaAlmQZAE0=) 2: z5T8Jeg-KRSBVrpJUiY8WPEbWHc.asa (hash: zIR+Jq1Supq4I4d8NJWheupQs8oviXsGrFqUkRsxnGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 04:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:83:76:43:9d:82:00:5b:e8:ba:58:bd:1f:c6:ba:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfb07febd5d00a923ae390a4190fe5644cdd4f6 Validity Not Before: Feb 2 04:01:43 2026 GMT Not After : Feb 3 04:01:43 2026 GMT Subject: CN=c82dde5938835d51d19f7d594e95440cf790aa8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a8:a8:a3:49:78:0e:ae:5b:94:7d:0b:9f:b2: 6a:02:d6:d5:9d:6b:09:98:ec:cc:a6:b0:bc:8e:4c: 78:84:b4:08:04:ae:62:58:51:60:fa:e6:c4:33:d4: e4:b1:f4:fe:a7:c8:5c:21:88:83:8f:9e:60:0f:15: c3:ea:58:49:f1:84:c9:15:54:8a:c1:9b:d0:d4:7e: d2:ba:2f:7e:92:b8:ed:e2:fd:0b:e9:0c:67:91:70: a2:75:d3:6e:49:b1:9c:f6:f0:77:c7:40:84:f8:64: 2a:29:67:40:30:3d:21:02:31:74:c4:a3:e2:97:b8: 10:55:ac:10:98:b2:02:51:c6:b2:bb:f4:bd:98:fc: 58:fc:a0:b7:4b:c4:2e:53:84:af:af:59:98:af:64: ee:a4:3c:00:79:c9:b3:55:cc:4d:03:f6:b3:54:ee: bd:3b:97:36:9c:23:17:17:02:47:d1:90:c6:98:10: ba:d2:b8:79:a1:7f:bf:b3:68:12:10:8f:fe:cb:a2: a5:62:95:d6:65:62:e8:c4:bb:b9:07:ef:3e:c9:22: a6:17:b6:60:99:ee:95:e8:99:4b:7a:52:75:fb:93: d6:ba:72:6b:69:58:84:b9:78:ac:68:76:1f:53:29: 59:5e:02:af:bf:13:6f:f5:41:23:9d:a9:9d:2f:1c: ad:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:2D:DE:59:38:83:5D:51:D1:9F:7D:59:4E:95:44:0C:F7:90:AA:8A X509v3 Authority Key Identifier: keyid:6D:FB:07:FE:BD:5D:00:A9:23:AE:39:0A:41:90:FE:56:44:CD:D4:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfsH_r1dAKkjrjkKQZD-VkTN1PY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f7f3b5-80bb-4a97-8fef-db85ba406c51/1/bfsH_r1dAKkjrjkKQZD-VkTN1PY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b1:ba:da:53:78:01:01:2c:88:97:25:46:98:76:6a:5e:9b: 17:73:ff:e4:07:8d:1b:42:e8:57:04:7e:11:f6:ad:ed:4c:df: 44:94:6e:ee:8c:11:a9:51:14:df:40:90:d9:50:d3:8c:ec:94: 9c:f2:62:f8:1b:16:ca:6a:fe:7e:29:47:b7:2f:92:85:32:fe: 4c:40:3d:82:fa:d6:23:af:f8:79:f6:75:f4:99:ba:3c:3c:25: a7:b0:9a:9a:dc:07:a5:00:5f:2c:b8:4b:ca:90:46:84:07:98: 1d:f1:7d:09:0f:99:01:ea:68:bf:a8:97:e3:35:17:45:5a:68: 67:1b:a2:57:2b:9c:8f:ea:8f:28:17:70:78:a6:b8:3e:1e:a6: 58:62:e3:00:1c:1e:60:6f:6a:43:a1:7b:55:99:7b:40:d0:63: eb:68:2e:06:42:80:1b:34:7b:79:ed:4b:55:ef:f8:48:54:3c: a7:b0:01:1d:41:dc:08:63:10:d4:b7:c9:1d:22:60:f0:51:5a: 02:f7:42:46:8c:3e:99:92:24:cf:74:e9:6f:dd:46:e0:42:7e: 59:52:5f:55:3d:20:ca:2e:2c:5d:f3:4c:ec:5e:be:e4:bf:9b: d0:bf:9f:b0:23:98:3a:01:59:cf:e5:4f:7c:cf:83:81:6c:30: 36:ea:7f:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcg3ZDnYIAW+i6WL0fxrofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmIwN2ZlYmQ1ZDAwYTkyM2FlMzkwYTQxOTBmZTU2NDRj ZGQ0ZjYwHhcNMjYwMjAyMDQwMTQzWhcNMjYwMjAzMDQwMTQzWjAzMTEwLwYDVQQD EyhjODJkZGU1OTM4ODM1ZDUxZDE5ZjdkNTk0ZTk1NDQwY2Y3OTBhYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaioo0l4Dq5blH0Ln7JqAtbVnWsJ mOzMprC8jkx4hLQIBK5iWFFg+ubEM9TksfT+p8hcIYiDj55gDxXD6lhJ8YTJFVSK wZvQ1H7Sui9+krjt4v0L6QxnkXCiddNuSbGc9vB3x0CE+GQqKWdAMD0hAjF0xKPi l7gQVawQmLICUcayu/S9mPxY/KC3S8QuU4Svr1mYr2TupDwAecmzVcxNA/azVO69 O5c2nCMXFwJH0ZDGmBC60rh5oX+/s2gSEI/+y6KlYpXWZWLoxLu5B+8+ySKmF7Zg me6V6JlLelJ1+5PWunJraViEuXisaHYfUylZXgKvvxNv9UEjnamdLxytzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMgt3lk4g11R0Z99WU6VRAz3kKqKMB8GA1UdIwQY MBaAFG37B/69XQCpI645CkGQ/lZEzdT2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9mN2YzYjUtODBiYi00YTk3LThmZWYt ZGI4NWJhNDA2YzUxLzEvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9mN2YzYjUtODBiYi00YTk3LThmZWYtZGI4NWJhNDA2YzUx LzEvYmZzSF9yMWRBS2tqcmprS1FaRC1Wa1ROMVBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABrG62lN4 AQEsiJclRph2al6bF3P/5AeNG0LoVwR+Efat7UzfRJRu7owRqVEU30CQ2VDTjOyU nPJi+BsWymr+filHty+ShTL+TEA9gvrWI6/4efZ19Jm6PDwlp7CamtwHpQBfLLhL ypBGhAeYHfF9CQ+ZAepov6iX4zUXRVpoZxuiVyucj+qPKBdweKa4Ph6mWGLjABwe YG9qQ6F7VZl7QNBj62guBkKAGzR7ee1LVe/4SFQ8p7ABHUHcCGMQ1LfJHSJg8FFa AvdCRow+mZIkz3Tpb91G4EJ+WVJfVT0gyi4sXfNM7F6+5L+b0L+fsCOYOgFZz+VP fM+DgWwwNup/Bg== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:48 2026 by rpki-client