This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft File: B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft (raw, json) Hash identifier: 9cSRJ3SmzGYJJOglP0fZ6MXGJnKkXIzuJr/bdfP9brg= Subject key identifier: 1B:C6:10:85:E0:8F:5D:D1:FC:B8:7A:5B:C0:E6:1B:9B:BF:17:4C:E6 Authority key identifier: 07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F Certificate issuer: /CN=078b3739f78d96844a4ef68626dc87ac2eefa50f Certificate serial: 019C427DF1DB07C4461127E0D7C21613E1D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft Manifest number: 08E7 Signing time: Mon 09 Feb 2026 13:01:15 +0000 Manifest this update: Mon 09 Feb 2026 13:01:15 +0000 Manifest next update: Tue 10 Feb 2026 13:01:15 +0000 Files and hashes: 1: 5sr_tmVIe_M0JW4wdYFpjoaZGuw.roa (hash: 38smcDw7DmiaLV5Ct4qOokRzF5bM7bVQS48BSQwDUec=) 2: B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl (hash: sQa6wF1jnU0TrmpuH43Gydq5cD6XoYd/VPCr1/RrjsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f1:db:07:c4:46:11:27:e0:d7:c2:16:13:e1:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=078b3739f78d96844a4ef68626dc87ac2eefa50f Validity Not Before: Feb 9 13:01:15 2026 GMT Not After : Feb 10 13:01:15 2026 GMT Subject: CN=1bc61085e08f5dd1fcb87a5bc0e61b9bbf174ce6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:6f:f1:b2:ab:36:b6:ab:d0:0f:de:55:e5:b2: 03:57:7b:7b:5b:e4:fc:90:43:e2:a4:07:f9:32:44: 3b:08:c9:e3:ca:5d:a4:ba:2a:57:f3:30:fd:7b:52: 95:3d:2d:c1:ac:02:69:87:74:cd:85:31:fd:be:6c: b7:bb:fd:c7:71:2c:d1:04:7f:09:fd:e3:8a:f9:ed: ef:d2:57:1b:27:e4:fe:95:82:84:54:91:28:c9:a8: e7:a1:28:17:7e:39:c4:ab:30:c9:bf:91:f0:d1:44: 06:fc:12:5d:28:4c:75:46:9f:cc:69:2c:62:94:71: 3e:ea:e2:cd:dd:46:d0:4d:e5:02:14:89:4f:06:6d: bd:4a:55:7a:33:90:25:73:97:be:3b:dd:38:23:82: 9a:ea:30:ca:d3:dd:c9:a3:e8:74:2f:6c:2d:a4:7c: 0f:18:76:3c:3b:3f:41:df:c7:43:05:df:51:94:7d: 3b:49:99:41:b2:7d:d7:46:3a:1e:41:cd:fc:02:87: 61:4b:84:79:ae:52:9e:cd:a8:67:0b:37:89:0d:a0: f4:70:38:12:fd:52:c9:ce:06:c2:bf:c1:8c:70:eb: 9f:f9:4d:ef:b3:52:4f:f5:02:49:fd:b3:04:34:f6: 06:c1:c2:2c:bc:49:15:49:db:40:08:a9:5c:86:39: 50:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C6:10:85:E0:8F:5D:D1:FC:B8:7A:5B:C0:E6:1B:9B:BF:17:4C:E6 X509v3 Authority Key Identifier: keyid:07:8B:37:39:F7:8D:96:84:4A:4E:F6:86:26:DC:87:AC:2E:EF:A5:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4s3OfeNloRKTvaGJtyHrC7vpQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b66d75-a0bb-4960-beea-0117841d255b/1/B4s3OfeNloRKTvaGJtyHrC7vpQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:7d:ff:db:00:f1:a3:f0:27:74:fc:ea:7f:00:d8:49:70:21: ef:0b:db:b9:c9:68:48:e1:14:c5:38:07:0a:06:81:0f:a7:d7: 94:70:75:2e:2f:f0:bf:28:3a:9e:3b:79:b2:86:43:d0:4a:ad: 57:18:67:f0:c2:fc:c2:54:bb:92:ac:36:78:ee:c5:d0:b7:f3: 9f:92:c3:da:3e:80:f2:f9:4b:f7:31:60:20:7f:e1:5e:84:11: f3:44:1a:68:c1:21:47:f1:a9:1d:60:ce:19:dd:ad:0a:e7:48: 70:16:44:fb:a2:3c:f2:51:f2:4a:12:3f:98:1f:d0:e0:e6:0d: 0a:f4:d5:f5:82:72:db:24:7e:02:21:b1:60:4f:df:44:e9:74: 83:9d:34:20:c3:17:e8:0c:09:c5:2c:1b:52:80:46:03:5a:16: 2f:d1:98:6d:19:20:6f:d5:81:5b:cf:fb:37:e5:33:1b:ce:7b: 0e:70:90:f6:c7:fb:2f:9f:2a:77:7d:b1:34:97:f3:f8:41:aa: 9e:fd:37:f7:47:55:6f:c6:25:1d:42:a5:7b:7b:40:3e:58:d9: 8c:68:4a:82:b9:0a:76:81:25:f6:b6:ef:b3:d1:d2:d3:59:7b: b9:d6:bd:e7:5a:a7:6d:c3:e0:b7:da:1f:e0:96:8e:e3:2f:91: ef:6a:df:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffHbB8RGESfg18IWE+HYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3OGIzNzM5Zjc4ZDk2ODQ0YTRlZjY4NjI2ZGM4N2FjMmVl ZmE1MGYwHhcNMjYwMjA5MTMwMTE1WhcNMjYwMjEwMTMwMTE1WjAzMTEwLwYDVQQD EygxYmM2MTA4NWUwOGY1ZGQxZmNiODdhNWJjMGU2MWI5YmJmMTc0Y2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32/xsqs2tqvQD95V5bIDV3t7W+T8 kEPipAf5MkQ7CMnjyl2kuipX8zD9e1KVPS3BrAJph3TNhTH9vmy3u/3HcSzRBH8J /eOK+e3v0lcbJ+T+lYKEVJEoyajnoSgXfjnEqzDJv5Hw0UQG/BJdKEx1Rp/MaSxi lHE+6uLN3UbQTeUCFIlPBm29SlV6M5Alc5e+O904I4Ka6jDK093Jo+h0L2wtpHwP GHY8Oz9B38dDBd9RlH07SZlBsn3XRjoeQc38AodhS4R5rlKezahnCzeJDaD0cDgS /VLJzgbCv8GMcOuf+U3vs1JP9QJJ/bMENPYGwcIsvEkVSdtACKlchjlQnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvGEIXgj13R/Lh6W8DmG5u/F0zmMB8GA1UdIwQY MBaAFAeLNzn3jZaESk72hibch6wu76UPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEt MDExNzg0MWQyNTViLzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iNjZkNzUtYTBiYi00OTYwLWJlZWEtMDExNzg0MWQyNTVi LzEvQjRzM09mZU5sb1JLVHZhR0p0eUhyQzd2cFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL33/2wDx o/AndPzqfwDYSXAh7wvbucloSOEUxTgHCgaBD6fXlHB1Li/wvyg6njt5soZD0Eqt Vxhn8ML8wlS7kqw2eO7F0Lfzn5LD2j6A8vlL9zFgIH/hXoQR80QaaMEhR/GpHWDO Gd2tCudIcBZE+6I88lHyShI/mB/Q4OYNCvTV9YJy2yR+AiGxYE/fROl0g500IMMX 6AwJxSwbUoBGA1oWL9GYbRkgb9WBW8/7N+UzG857DnCQ9sf7L58qd32xNJfz+EGq nv0390dVb8YlHUKle3tAPljZjGhKgrkKdoEl9rbvs9HS01l7uda951qnbcPgt9of 4JaO4y+R72rftA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:01 2026 by rpki-client