This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft File: BqTBjS4g22T_nbUpKzefU4t2oVE.mft (raw, json) Hash identifier: uZ1rE/GW4QnPDT/jGEKkbKZ1VMrqjjcoRRodM8cOcrw= Subject key identifier: 7C:D5:EF:9C:48:8F:46:82:DC:C1:B2:0A:22:C6:31:8A:D9:A0:FE:96 Authority key identifier: 06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51 Certificate issuer: /CN=06a4c18d2e20db64ff9db5292b379f538b76a151 Certificate serial: 019C43904C91EFD1D0965357067EE9C39172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft Manifest number: 0F0E Signing time: Mon 09 Feb 2026 18:00:56 +0000 Manifest this update: Mon 09 Feb 2026 18:00:56 +0000 Manifest next update: Tue 10 Feb 2026 18:00:56 +0000 Files and hashes: 1: BqTBjS4g22T_nbUpKzefU4t2oVE.crl (hash: mzkpq/9+JTL1dnZns3EmeXlD+DOcuKXQzeICxf0fd+E=) 2: zv32VZMT2QpjwCNJQuKZWRRffIQ.roa (hash: kObmfO3vi0I5D4zj8YBTzKwtPE3NArat9hAGR+jsK8A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:4c:91:ef:d1:d0:96:53:57:06:7e:e9:c3:91:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a4c18d2e20db64ff9db5292b379f538b76a151 Validity Not Before: Feb 9 18:00:56 2026 GMT Not After : Feb 10 18:00:56 2026 GMT Subject: CN=7cd5ef9c488f4682dcc1b20a22c6318ad9a0fe96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b4:9a:37:2d:14:1f:0f:48:00:61:b6:31:ea: e8:08:ef:84:0c:a1:82:9b:5e:72:f3:6b:cf:7c:d2: 46:8c:f6:2a:b8:4f:f8:4f:d9:58:32:b3:27:dc:7b: 85:01:d0:7a:3a:2e:6c:32:bb:18:6d:ca:d2:61:27: fa:5a:75:91:9b:74:25:84:62:52:fa:b0:26:dd:38: 3a:6b:ee:4a:77:18:83:52:11:c9:b7:67:01:f0:8f: c8:2b:e9:f6:ba:7e:ee:5b:e4:ad:ad:68:b8:b8:fd: 52:79:65:e3:32:ea:0a:ed:ed:60:a4:bd:cf:3a:08: 9c:bb:8b:fe:fc:99:e2:aa:9d:62:9f:66:9c:c7:29: 1d:82:7d:74:48:63:ef:72:1f:bd:f9:2b:dd:08:1d: 4b:8f:62:b4:15:80:2c:82:25:aa:b5:61:0b:5e:73: f8:c5:48:85:d8:9a:e4:89:fa:c3:6b:02:c2:6c:87: 79:15:55:78:87:2a:d4:d5:b2:7e:d7:be:c8:bc:1c: 2e:e8:d9:89:9e:b6:d0:93:3c:38:ac:92:98:ba:56: 3a:bd:6e:a1:0a:c6:26:f8:06:15:44:15:60:a0:2a: 90:a4:12:5d:f6:91:17:62:23:38:44:48:aa:95:e5: a5:33:e1:49:80:3a:d7:d2:06:ca:97:1f:f2:9f:2f: 89:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D5:EF:9C:48:8F:46:82:DC:C1:B2:0A:22:C6:31:8A:D9:A0:FE:96 X509v3 Authority Key Identifier: keyid:06:A4:C1:8D:2E:20:DB:64:FF:9D:B5:29:2B:37:9F:53:8B:76:A1:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTBjS4g22T_nbUpKzefU4t2oVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3d2894-32e9-4f02-a8b9-532ed2567e9b/1/BqTBjS4g22T_nbUpKzefU4t2oVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:82:5f:82:5b:de:76:de:9b:06:48:cc:a3:ae:48:38:37:f1: 3a:2c:3a:76:97:92:ec:51:75:7c:c9:6b:28:2d:af:3e:00:df: b9:c1:f9:d7:e2:14:85:d5:66:52:cf:f3:73:3e:c4:54:ba:33: a4:6e:8c:f7:a4:62:ec:40:9f:42:05:80:71:6b:76:78:cb:13: 7a:88:c8:31:e1:73:36:32:14:7c:73:1c:77:7b:b7:5e:77:ea: 82:97:44:ac:f8:25:18:02:fe:5e:fb:ec:92:28:1f:15:c3:38: b6:d3:41:76:2d:f9:7c:81:f4:5b:66:b0:6b:b1:2b:1c:b3:e5: 35:e1:64:fb:07:a3:2c:26:67:15:de:b1:26:44:dd:9d:ad:ef: ad:fd:d5:79:51:f7:1b:2f:fc:28:ae:9a:87:28:e5:89:0d:66: b9:b7:35:c4:6b:62:f7:20:9b:14:53:72:7c:8e:7a:e2:d1:2c: e1:c5:f9:8e:bf:f6:9e:51:b5:ca:78:e8:63:c2:ab:a2:52:42: d3:ba:1e:74:d6:e9:ee:60:e9:6c:26:1e:5f:0d:19:cb:e1:4b: 90:a8:78:d6:a8:30:ef:db:d9:ad:99:d0:34:2c:f3:d5:9e:48: 42:d5:bc:ae:cb:d7:69:dd:a1:11:13:ff:85:ae:34:20:ab:c6: ee:2d:db:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkEyR79HQllNXBn7pw5FyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTRjMThkMmUyMGRiNjRmZjlkYjUyOTJiMzc5ZjUzOGI3 NmExNTEwHhcNMjYwMjA5MTgwMDU2WhcNMjYwMjEwMTgwMDU2WjAzMTEwLwYDVQQD Eyg3Y2Q1ZWY5YzQ4OGY0NjgyZGNjMWIyMGEyMmM2MzE4YWQ5YTBmZTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLSaNy0UHw9IAGG2MeroCO+EDKGC m15y82vPfNJGjPYquE/4T9lYMrMn3HuFAdB6Oi5sMrsYbcrSYSf6WnWRm3QlhGJS +rAm3Tg6a+5KdxiDUhHJt2cB8I/IK+n2un7uW+StrWi4uP1SeWXjMuoK7e1gpL3P Ogicu4v+/Jniqp1in2acxykdgn10SGPvch+9+SvdCB1Lj2K0FYAsgiWqtWELXnP4 xUiF2JrkifrDawLCbId5FVV4hyrU1bJ+177IvBwu6NmJnrbQkzw4rJKYulY6vW6h CsYm+AYVRBVgoCqQpBJd9pEXYiM4REiqleWlM+FJgDrX0gbKlx/yny+JrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHzV75xIj0aC3MGyCiLGMYrZoP6WMB8GA1UdIwQY MBaAFAakwY0uINtk/521KSs3n1OLdqFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zZDI4OTQtMzJlOS00ZjAyLWE4Yjkt NTMyZWQyNTY3ZTliLzEvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zZDI4OTQtMzJlOS00ZjAyLWE4YjktNTMyZWQyNTY3ZTli LzEvQnFUQmpTNGcyMlRfbmJVcEt6ZWZVNHQyb1ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYJfglve dt6bBkjMo65IODfxOiw6dpeS7FF1fMlrKC2vPgDfucH51+IUhdVmUs/zcz7EVLoz pG6M96Ri7ECfQgWAcWt2eMsTeojIMeFzNjIUfHMcd3u3XnfqgpdErPglGAL+Xvvs kigfFcM4ttNBdi35fIH0W2awa7ErHLPlNeFk+wejLCZnFd6xJkTdna3vrf3VeVH3 Gy/8KK6ahyjliQ1mubc1xGti9yCbFFNyfI564tEs4cX5jr/2nlG1ynjoY8KrolJC 07oedNbp7mDpbCYeXw0Zy+FLkKh41qgw79vZrZnQNCzz1Z5IQtW8rsvXad2hERP/ ha40IKvG7i3bGw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:34 2026 by rpki-client