This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft File: BBXVyVzXtY0pfUeSZ8dizekQY-I.mft (raw, json) Hash identifier: DbEUqGYbzg8AVhCtrCLMCaXNMBdfA6Rmjq4nWi3VIuE= Subject key identifier: 71:0E:33:ED:AC:2B:C8:0B:D5:CE:C7:ED:2B:BB:55:C3:B8:09:82:89 Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2 Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2 Certificate serial: 019C420F9B522F39B9C1B6AB9200072B4C48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft Manifest number: 0774 Signing time: Mon 09 Feb 2026 11:00:44 +0000 Manifest this update: Mon 09 Feb 2026 11:00:44 +0000 Manifest next update: Tue 10 Feb 2026 11:00:44 +0000 Files and hashes: 1: BBXVyVzXtY0pfUeSZ8dizekQY-I.crl (hash: RZMSjTcTUfVHl2tZQ4QRkvL+BJsFR5V0GHEheMxyj6k=) 2: MXaC2WjhU88QIu9NKuFBopRtFeQ.roa (hash: SbFLVwvUECsJmi8B9V6ZsiYyZg8UNBppk9dpgqP689Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:9b:52:2f:39:b9:c1:b6:ab:92:00:07:2b:4c:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2 Validity Not Before: Feb 9 11:00:44 2026 GMT Not After : Feb 10 11:00:44 2026 GMT Subject: CN=710e33edac2bc80bd5cec7ed2bbb55c3b8098289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:36:7b:a7:b4:c1:a5:80:84:da:23:b4:9a:d7: ad:a4:56:0e:00:d2:3e:9b:eb:32:c4:1d:a6:37:85: 15:49:78:ec:8d:ba:e8:42:21:e3:36:bb:8e:8c:e8: cf:92:27:d2:75:ed:8b:90:80:9b:78:56:f5:31:6a: 14:3b:66:e2:85:dc:a9:3b:bd:19:46:c4:9f:4a:15: c3:00:21:9c:c8:c4:6a:3c:45:eb:82:e4:68:35:2a: d4:e2:81:57:cc:5f:03:e0:f7:09:a9:b0:66:8e:35: b1:9b:81:4d:2d:46:08:db:6a:4b:71:18:c3:61:e0: c1:2f:59:70:f2:1c:c1:d8:e0:6c:33:f3:c3:e6:4b: 0c:04:38:86:9d:1c:a2:d8:16:0f:4a:f3:11:60:55: cc:fe:34:5d:eb:2c:95:7f:4c:f9:cc:da:20:74:0b: 51:aa:09:b8:6e:65:de:bc:01:d8:38:4e:03:84:7d: 54:28:64:c1:88:1e:9e:a2:df:58:76:ad:66:12:ab: 1d:15:9b:4a:28:86:72:8d:93:ad:b3:bf:dd:39:c6: 94:89:a7:68:35:7a:0e:30:d9:73:5c:8f:bc:f5:d8: 81:a9:4e:14:90:50:b9:8d:73:90:9d:a7:86:90:62: fc:c3:22:69:a0:7d:bf:ac:ec:41:c3:cf:6d:1b:c6: 1c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0E:33:ED:AC:2B:C8:0B:D5:CE:C7:ED:2B:BB:55:C3:B8:09:82:89 X509v3 Authority Key Identifier: keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:02:6e:bd:59:e1:10:a3:d3:2e:20:9b:f5:c3:aa:e2:52:bc: 2b:c1:e4:96:c5:06:65:e2:3d:51:46:8d:24:b7:f5:8d:da:7c: 06:ab:17:b9:22:5b:1d:32:2f:f9:73:a3:6e:3a:4a:c1:84:d6: 93:47:9c:c9:7b:bf:56:63:0c:b1:20:15:03:89:ee:a8:73:2a: 04:4d:50:ef:7c:f9:83:4d:f3:64:3b:a9:80:a5:99:91:4d:e1: 3c:9b:68:b4:e0:12:c1:fe:90:20:fe:06:74:d8:f1:6a:30:19: bc:d4:31:46:21:48:4d:87:7c:0b:e3:1a:3a:a0:b4:8c:b0:3e: f7:8d:03:e5:c0:05:5e:b2:c9:64:1a:83:71:62:95:c8:f4:58: 1c:63:b6:a2:ff:2c:08:51:76:ca:32:90:36:67:b6:e8:ed:0b: 36:c2:ce:17:c2:e8:66:ad:cf:1e:57:28:63:bd:2a:f6:e9:1e: 4f:92:7b:0c:8b:d7:17:05:df:da:2a:8c:f9:5f:cb:13:67:04: 91:1a:cc:17:2b:83:53:4d:00:7e:fe:16:cd:c0:c8:2d:cb:80: 73:55:cb:b0:f2:b0:f5:2a:f1:37:13:b4:cb:f4:37:9f:4b:87: 20:4d:e3:ab:11:aa:ca:05:e4:57:ad:32:04:7a:5c:70:7e:54: 41:08:85:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5tSLzm5wbarkgAHK0xIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MTVkNWM5NWNkN2I1OGQyOTdkNDc5MjY3Yzc2MmNkZTkx MDYzZTIwHhcNMjYwMjA5MTEwMDQ0WhcNMjYwMjEwMTEwMDQ0WjAzMTEwLwYDVQQD Eyg3MTBlMzNlZGFjMmJjODBiZDVjZWM3ZWQyYmJiNTVjM2I4MDk4Mjg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6jZ7p7TBpYCE2iO0mtetpFYOANI+ m+syxB2mN4UVSXjsjbroQiHjNruOjOjPkifSde2LkICbeFb1MWoUO2bihdypO70Z RsSfShXDACGcyMRqPEXrguRoNSrU4oFXzF8D4PcJqbBmjjWxm4FNLUYI22pLcRjD YeDBL1lw8hzB2OBsM/PD5ksMBDiGnRyi2BYPSvMRYFXM/jRd6yyVf0z5zNogdAtR qgm4bmXevAHYOE4DhH1UKGTBiB6eot9Ydq1mEqsdFZtKKIZyjZOts7/dOcaUiado NXoOMNlzXI+89diBqU4UkFC5jXOQnaeGkGL8wyJpoH2/rOxBw89tG8Yc5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEOM+2sK8gL1c7H7Su7VcO4CYKJMB8GA1UdIwQY MBaAFAQV1clc17WNKX1HkmfHYs3pEGPiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEt NTc5YzkwYzBkZTJhLzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEtNTc5YzkwYzBkZTJh LzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwJuvVnh EKPTLiCb9cOq4lK8K8HklsUGZeI9UUaNJLf1jdp8BqsXuSJbHTIv+XOjbjpKwYTW k0ecyXu/VmMMsSAVA4nuqHMqBE1Q73z5g03zZDupgKWZkU3hPJtotOASwf6QIP4G dNjxajAZvNQxRiFITYd8C+MaOqC0jLA+940D5cAFXrLJZBqDcWKVyPRYHGO2ov8s CFF2yjKQNme26O0LNsLOF8LoZq3PHlcoY70q9ukeT5J7DIvXFwXf2iqM+V/LE2cE kRrMFyuDU00Afv4WzcDILcuAc1XLsPKw9SrxNxO0y/Q3n0uHIE3jqxGqygXkV60y BHpccH5UQQiFlQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:49 2026 by rpki-client