This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft File: brk9vAG87DpLmI6PjVMwpaL8Smg.mft (raw, json) Hash identifier: JpIiQVcTWDdJhmlTAqZCOKFZ5+QDfp6e7AOoJIOYMa4= Subject key identifier: 20:E7:D1:AC:3F:9B:15:D9:03:DE:F4:AC:05:0C:A4:A8:6A:72:C7:07 Authority key identifier: 6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68 Certificate issuer: /CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68 Certificate serial: 019C44A26D77513CE1C4F324D26235B84BB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft Manifest number: 1145 Signing time: Mon 09 Feb 2026 23:00:21 +0000 Manifest this update: Mon 09 Feb 2026 23:00:21 +0000 Manifest next update: Tue 10 Feb 2026 23:00:21 +0000 Files and hashes: 1: brk9vAG87DpLmI6PjVMwpaL8Smg.crl (hash: SWzncB4T6SC/3zzIjBJq2QD0WXQhINHWFc4V3Cx53kE=) 2: ro3FcV_gSDQj6aKpD7QqUfZTKo4.roa (hash: ifg6Pv5RJOrKerf3tvB3sx7q9buzQmUPSyqAwJuLAQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:6d:77:51:3c:e1:c4:f3:24:d2:62:35:b8:4b:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6eb93dbc01bcec3a4b988e8f8d5330a5a2fc4a68 Validity Not Before: Feb 9 23:00:21 2026 GMT Not After : Feb 10 23:00:21 2026 GMT Subject: CN=20e7d1ac3f9b15d903def4ac050ca4a86a72c707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:dc:4c:47:32:20:ee:eb:72:4f:72:c9:dc:2c: c0:2f:23:3d:c6:05:d9:31:c7:75:e8:88:b5:c1:0b: 4b:63:67:7d:25:4e:17:67:26:fb:06:a9:ae:e7:80: ed:3e:c8:a6:ba:28:b2:5d:3d:97:98:89:9b:51:61: 6a:47:36:e4:dc:31:53:1d:63:1d:15:e9:b9:fa:6f: a8:7a:9b:88:2f:4c:9b:62:cc:dd:94:f7:b1:52:73: ac:28:11:63:0d:c1:d9:10:a5:3e:97:ad:72:c0:d8: 6b:b1:b4:54:f8:2f:6b:a4:a3:03:68:e6:f8:3c:47: 5c:24:14:71:0c:76:c3:3b:c5:07:cd:33:3d:5a:d4: 7f:7f:a0:fb:02:a3:0e:18:22:57:22:39:f9:44:38: bf:9d:05:76:8d:3e:20:67:78:44:ba:17:09:e7:49: b5:42:57:30:2a:ec:72:25:f8:a7:77:da:c9:00:22: df:5b:c2:c2:3f:f0:55:45:e0:dc:e8:d4:0c:5b:07: 8a:b3:33:6b:61:11:1d:a0:a1:da:a1:f3:6f:86:a7: d6:06:d6:03:7e:22:78:9d:f5:41:e2:5b:e8:82:a1: c5:d6:9c:14:1e:0e:d5:a1:9b:03:55:a0:97:55:64: e6:ce:0d:b1:85:92:33:3a:55:09:ce:32:b1:bf:f5: c1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E7:D1:AC:3F:9B:15:D9:03:DE:F4:AC:05:0C:A4:A8:6A:72:C7:07 X509v3 Authority Key Identifier: keyid:6E:B9:3D:BC:01:BC:EC:3A:4B:98:8E:8F:8D:53:30:A5:A2:FC:4A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brk9vAG87DpLmI6PjVMwpaL8Smg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7fdfea-be70-42a3-8a47-d5a0b098df34/1/brk9vAG87DpLmI6PjVMwpaL8Smg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ad:f9:40:bf:96:4b:91:ab:97:af:e5:b6:bb:bf:8c:ac:7a: 88:af:5d:a2:be:32:ea:93:1d:9c:e1:82:86:fc:81:38:6c:f5: ad:0c:e6:32:ce:89:5e:cc:ff:6b:ba:b2:34:fe:64:5b:3b:1e: 30:13:32:e3:15:66:09:1c:ae:1a:97:1d:25:1b:64:6f:d1:d0: b3:9f:5c:83:bf:fa:5e:42:88:4a:45:46:1e:72:69:5d:9a:ab: da:ea:05:25:8b:b9:22:b8:9b:d4:c6:e7:21:59:74:a5:74:dd: 43:62:98:e6:56:c0:8c:2d:4c:3f:76:4c:8a:28:88:1d:b6:ac: e0:c6:f3:32:1d:60:a6:92:80:d1:6a:df:e5:6a:28:67:92:d1: 24:9e:c8:d5:c8:51:b5:93:fb:f4:55:f8:9d:a0:d8:6a:ab:77: 49:00:de:3c:f9:9a:2f:5d:ab:ed:e5:d4:d5:da:c5:01:3e:87: 3f:2a:62:84:68:90:a4:ba:99:36:a0:ce:58:09:a8:ed:9f:2d: 88:a5:ca:b4:fe:53:70:f8:5a:eb:00:8f:f9:1d:04:f3:9c:f3: 93:c0:b6:56:a4:bd:b7:e0:8d:87:f0:5a:bd:fe:43:2c:14:e5: 6f:04:09:50:b6:d6:6e:b7:12:f6:79:9e:39:01:52:c7:7d:02: 62:13:1e:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEom13UTzhxPMk0mI1uEuwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYjkzZGJjMDFiY2VjM2E0Yjk4OGU4ZjhkNTMzMGE1YTJm YzRhNjgwHhcNMjYwMjA5MjMwMDIxWhcNMjYwMjEwMjMwMDIxWjAzMTEwLwYDVQQD EygyMGU3ZDFhYzNmOWIxNWQ5MDNkZWY0YWMwNTBjYTRhODZhNzJjNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNxMRzIg7utyT3LJ3CzALyM9xgXZ Mcd16Ii1wQtLY2d9JU4XZyb7Bqmu54DtPsimuiiyXT2XmImbUWFqRzbk3DFTHWMd Fem5+m+oepuIL0ybYszdlPexUnOsKBFjDcHZEKU+l61ywNhrsbRU+C9rpKMDaOb4 PEdcJBRxDHbDO8UHzTM9WtR/f6D7AqMOGCJXIjn5RDi/nQV2jT4gZ3hEuhcJ50m1 QlcwKuxyJfind9rJACLfW8LCP/BVReDc6NQMWweKszNrYREdoKHaofNvhqfWBtYD fiJ4nfVB4lvogqHF1pwUHg7VoZsDVaCXVWTmzg2xhZIzOlUJzjKxv/XBUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCDn0aw/mxXZA970rAUMpKhqcscHMB8GA1UdIwQY MBaAFG65PbwBvOw6S5iOj41TMKWi/EpoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83ZmRmZWEtYmU3MC00MmEzLThhNDct ZDVhMGIwOThkZjM0LzEvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83ZmRmZWEtYmU3MC00MmEzLThhNDctZDVhMGIwOThkZjM0 LzEvYnJrOXZBRzg3RHBMbUk2UGpWTXdwYUw4U21nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANK35QL+W S5Grl6/ltru/jKx6iK9dor4y6pMdnOGChvyBOGz1rQzmMs6JXsz/a7qyNP5kWzse MBMy4xVmCRyuGpcdJRtkb9HQs59cg7/6XkKISkVGHnJpXZqr2uoFJYu5Irib1Mbn IVl0pXTdQ2KY5lbAjC1MP3ZMiiiIHbas4MbzMh1gppKA0Wrf5WooZ5LRJJ7I1chR tZP79FX4naDYaqt3SQDePPmaL12r7eXU1drFAT6HPypihGiQpLqZNqDOWAmo7Z8t iKXKtP5TcPha6wCP+R0E85zzk8C2VqS9t+CNh/Bavf5DLBTlbwQJULbWbrcS9nme OQFSx30CYhMeYg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:52 2026 by rpki-client