This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft File: bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json) Hash identifier: hwA4FW2h2seAW6HCJ97op9/OhlTt0xinm98f1p1ucts= Subject key identifier: 8C:5F:88:3B:10:EB:52:38:8B:D9:8B:7E:92:BB:D0:BF:AB:BD:30:A6 Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17 Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17 Certificate serial: 019C43FDCA7BFD876493997D24704B33274A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft Manifest number: 0C4A Signing time: Mon 09 Feb 2026 20:00:31 +0000 Manifest this update: Mon 09 Feb 2026 20:00:31 +0000 Manifest next update: Tue 10 Feb 2026 20:00:31 +0000 Files and hashes: 1: MAO8I-LZ9iHTC6WiehAybTQU_B4.roa (hash: 04HbiqGE+p2D11Yo0yq+6HVjeybJAO92Br5TbkWk9sA=) 2: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: lUVQ48OLXFpxr1fdtCLxtme0BLE4hvhUNfaWgVwmS1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:ca:7b:fd:87:64:93:99:7d:24:70:4b:33:27:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17 Validity Not Before: Feb 9 20:00:31 2026 GMT Not After : Feb 10 20:00:31 2026 GMT Subject: CN=8c5f883b10eb52388bd98b7e92bbd0bfabbd30a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c3:e2:50:52:3b:aa:d2:07:a1:dc:93:3f:d8: 5b:3d:05:91:45:e9:f7:80:8b:05:2a:c7:f1:3c:73: d1:cb:7d:a2:ea:d3:a1:3d:4c:75:2f:71:91:f1:e3: fe:d9:45:04:e6:a0:ee:7c:ed:ef:0b:ff:75:0b:fb: 69:66:00:b8:21:e8:32:f6:f1:78:11:df:2f:0a:63: 26:af:a1:5c:09:c4:af:57:d0:75:6c:41:f4:17:32: 3d:d3:d4:3b:cf:6d:48:d5:58:c1:6b:a8:08:4e:0f: 14:9a:10:01:86:7d:87:a8:7a:9d:c1:d7:85:0e:af: 90:d4:6b:6a:ee:af:6b:7c:a9:ca:e2:82:e3:ab:34: a7:a1:2f:fd:8a:24:76:58:57:69:d7:73:e8:90:fd: 12:8d:1b:fb:1a:b0:10:de:59:56:2a:a1:7f:3e:a1: 8e:3d:2a:7d:12:c5:57:a7:47:12:fc:22:f1:42:cd: d4:fb:ba:9f:d0:c8:79:3c:fd:2e:4f:0b:fc:40:cd: 68:e2:44:8f:68:8d:4b:ff:24:50:58:e3:1a:01:59: b6:5d:84:87:d1:25:be:19:e7:1a:b4:b3:1a:8b:97: 50:30:36:be:99:eb:bd:47:d2:a6:6a:66:65:2c:13: aa:9b:7c:05:af:d2:7c:4e:9d:00:09:18:fe:19:9b: fd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5F:88:3B:10:EB:52:38:8B:D9:8B:7E:92:BB:D0:BF:AB:BD:30:A6 X509v3 Authority Key Identifier: keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:98:ac:22:50:44:bc:c7:54:35:4a:15:48:3d:92:7c:2e:40: bf:93:6f:14:d0:f5:7b:8c:73:cc:cf:59:1a:6c:b3:e4:63:4b: ce:0d:1f:50:df:18:1c:b5:c1:bf:a4:36:44:6c:80:3c:bf:b1: 9a:6b:5a:b3:c6:3a:34:1c:25:99:e8:83:49:8d:4e:70:b3:38: 39:ae:b7:cf:8f:65:e2:0a:94:59:76:58:a9:c5:44:09:7e:27: ea:28:40:85:58:5b:2b:17:a5:f0:32:a7:c5:2a:bd:de:ae:62: a4:41:d0:d5:5b:b8:df:5a:4d:86:00:7a:0c:ca:ff:d5:dd:d9: 06:1b:61:40:d7:90:2e:c3:af:f6:ff:fc:9e:fd:bf:9f:32:3f: 86:e8:d4:17:c6:86:92:ae:04:f8:c3:e2:c7:da:46:36:0d:77: 31:e6:63:c8:7f:21:12:69:68:0e:e4:2a:d8:de:59:b3:38:48: d5:c3:20:9a:2a:72:a2:88:ea:a4:ab:d6:9c:c4:79:4f:da:a5: 8a:f0:09:b6:e5:3a:a8:de:63:2e:89:65:6e:b2:7c:7a:b7:2e: c5:60:27:35:09:62:36:67:42:fd:4a:57:1a:eb:f0:f6:bf:c0: 0d:69:cd:41:1c:b0:b9:7f:41:7a:ff:c7:d6:de:8f:25:b5:d6: d4:be:01:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/cp7/Ydkk5l9JHBLMydKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMTY0ZDliNmIzYzdjYmQxZTlkMjc5YzZjODY3YmFkMzk3 ZDFlMTcwHhcNMjYwMjA5MjAwMDMxWhcNMjYwMjEwMjAwMDMxWjAzMTEwLwYDVQQD Eyg4YzVmODgzYjEwZWI1MjM4OGJkOThiN2U5MmJiZDBiZmFiYmQzMGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18PiUFI7qtIHodyTP9hbPQWRRen3 gIsFKsfxPHPRy32i6tOhPUx1L3GR8eP+2UUE5qDufO3vC/91C/tpZgC4Iegy9vF4 Ed8vCmMmr6FcCcSvV9B1bEH0FzI909Q7z21I1VjBa6gITg8UmhABhn2HqHqdwdeF Dq+Q1Gtq7q9rfKnK4oLjqzSnoS/9iiR2WFdp13PokP0SjRv7GrAQ3llWKqF/PqGO PSp9EsVXp0cS/CLxQs3U+7qf0Mh5PP0uTwv8QM1o4kSPaI1L/yRQWOMaAVm2XYSH 0SW+GecatLMai5dQMDa+meu9R9KmamZlLBOqm3wFr9J8Tp0ACRj+GZv95wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxfiDsQ61I4i9mLfpK70L+rvTCmMB8GA1UdIwQY MBaAFG0WTZtrPHy9Hp0nnGyGe605fR4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzIt M2Q3ZTRiNDk2YjIzLzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9hZWIyM2EtZjhkOC00YTFiLWEyMzItM2Q3ZTRiNDk2YjIz LzEvYlJaTm0yczhmTDBlblNlY2JJWjdyVGw5SGhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB5isIlBE vMdUNUoVSD2SfC5Av5NvFND1e4xzzM9ZGmyz5GNLzg0fUN8YHLXBv6Q2RGyAPL+x mmtas8Y6NBwlmeiDSY1OcLM4Oa63z49l4gqUWXZYqcVECX4n6ihAhVhbKxel8DKn xSq93q5ipEHQ1Vu431pNhgB6DMr/1d3ZBhthQNeQLsOv9v/8nv2/nzI/hujUF8aG kq4E+MPix9pGNg13MeZjyH8hEmloDuQq2N5ZszhI1cMgmipyoojqpKvWnMR5T9ql ivAJtuU6qN5jLollbrJ8ercuxWAnNQliNmdC/UpXGuvw9r/ADWnNQRywuX9Bev/H 1t6PJbXW1L4BYQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:37 2026 by rpki-client