This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft File: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft (raw, json) Hash identifier: n2xndpwOqdWl8WoNaW3nebAVgUbYbskmA8rPVmhSG4w= Subject key identifier: 5F:A6:CA:12:21:49:41:E3:75:6B:8D:13:E4:57:4C:3C:35:D0:EF:C2 Authority key identifier: 06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D Certificate issuer: /CN=06720eb407d5b1b9b24453b826caa6f074e7d12d Certificate serial: 019C1B3980F1DEC7E8A9299ABF583332FD88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft Manifest number: B6 Signing time: Sun 01 Feb 2026 22:01:19 +0000 Manifest this update: Sun 01 Feb 2026 22:01:19 +0000 Manifest next update: Mon 02 Feb 2026 22:01:19 +0000 Files and hashes: 1: 7lQobzQt-5q29EiSIIISjIEGm7I.roa (hash: KDl0HvpgkkQD8R6H4Y75QdJhIr3+SLg/51QYF1pKsL8=) 2: BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl (hash: KixByClEnO13729ECdsYENJ8mU78fbAy9C+XWm5kYb0=) 3: joLWUuWtNpnkb1ExukMjJe0diao.asa (hash: 1ErfkIq/8qmG1QuEQD1Vjmn8g7p8pDBX+uSLXcofoPQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:39:80:f1:de:c7:e8:a9:29:9a:bf:58:33:32:fd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06720eb407d5b1b9b24453b826caa6f074e7d12d Validity Not Before: Feb 1 22:01:19 2026 GMT Not After : Feb 2 22:01:19 2026 GMT Subject: CN=5fa6ca12214941e3756b8d13e4574c3c35d0efc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:dd:9e:09:f8:cf:fe:72:f0:74:8c:d4:bd: d7:c9:64:5e:e5:cf:02:70:3c:34:15:8a:46:02:79: 53:d3:df:92:5e:2e:61:de:29:dd:75:3b:de:72:b9: 58:0b:4f:92:3d:94:5d:88:40:d3:c9:32:30:7c:fb: 70:0a:87:f0:40:8b:2a:16:61:8b:de:35:90:71:42: ca:c9:a9:06:b4:e5:8a:b1:7f:ff:e8:33:76:0f:9a: 79:40:f6:74:1b:d4:84:ce:d6:7e:fb:eb:6b:3d:be: 6a:f9:1a:44:af:0b:f9:39:fa:55:c3:fe:cb:6b:33: 1e:bb:c8:5f:77:0f:9b:90:f9:d7:3d:d8:73:4b:a1: c8:af:13:08:24:04:44:65:b8:98:c1:8b:d6:5f:45: 86:63:10:0b:3d:e0:96:4d:83:44:f0:25:e7:1a:a4: 61:a1:b6:a4:31:fa:1a:69:34:ff:36:a1:00:e1:d0: 06:b2:df:06:a8:e2:06:b7:cc:91:1b:4d:f9:f7:36: cc:d7:50:bc:8c:2d:3c:40:77:44:be:df:c0:df:6e: 28:a1:72:53:82:fc:32:61:71:04:25:72:2f:90:09: 18:e8:e5:07:bf:a0:81:39:8a:10:d2:08:34:9e:8f: 28:07:4d:a3:a7:58:f4:2c:46:ad:20:4a:b1:7c:93: be:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:A6:CA:12:21:49:41:E3:75:6B:8D:13:E4:57:4C:3C:35:D0:EF:C2 X509v3 Authority Key Identifier: keyid:06:72:0E:B4:07:D5:B1:B9:B2:44:53:B8:26:CA:A6:F0:74:E7:D1:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/9157d6-1f05-4510-8037-78c0c02f78a2/1/BnIOtAfVsbmyRFO4Jsqm8HTn0S0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:da:07:b9:f0:bd:99:61:0f:62:87:85:e2:ba:77:f6:1e:ed: 78:ad:a0:f7:f0:d4:39:40:bc:5e:8e:65:58:d8:61:14:62:83: 31:0e:bd:ff:55:45:ce:68:cb:66:58:46:b4:29:97:08:37:53: 87:b2:10:6a:d0:c3:9b:5b:41:1c:21:f8:23:6a:89:c1:d0:04: 8c:62:73:a2:77:a6:06:4e:52:83:0b:5a:85:e1:fb:59:d4:c3: ea:93:45:c8:16:eb:cf:79:08:ec:8f:9a:27:7f:43:91:58:65: 49:7e:51:df:32:9f:6b:1e:fc:93:d3:d9:b2:11:fc:35:71:5b: 5c:06:cf:2a:2a:30:bb:34:c7:c7:16:71:af:e9:5f:c2:84:2f: 08:3a:24:65:55:6e:35:9e:b0:65:23:11:40:a2:2c:d8:35:87: b3:fc:f1:09:77:cb:ee:68:1e:82:65:f2:cd:38:73:e4:27:28: f0:71:99:90:27:06:88:f1:1e:47:c8:31:3b:c7:89:19:ac:aa: f5:f8:f5:d3:c8:1a:4b:e1:16:ad:f2:62:8c:e1:ce:46:05:27: 7b:e2:d8:f6:04:59:e1:78:70:df:88:57:bb:a6:ae:f6:3a:63: 5c:66:25:84:63:00:8d:82:cd:45:04:81:04:1c:18:ab:99:13: 73:5c:1f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbOYDx3sfoqSmav1gzMv2IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NzIwZWI0MDdkNWIxYjliMjQ0NTNiODI2Y2FhNmYwNzRl N2QxMmQwHhcNMjYwMjAxMjIwMTE5WhcNMjYwMjAyMjIwMTE5WjAzMTEwLwYDVQQD Eyg1ZmE2Y2ExMjIxNDk0MWUzNzU2YjhkMTNlNDU3NGMzYzM1ZDBlZmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZvdngn4z/5y8HSM1L3XyWRe5c8C cDw0FYpGAnlT09+SXi5h3inddTvecrlYC0+SPZRdiEDTyTIwfPtwCofwQIsqFmGL 3jWQcULKyakGtOWKsX//6DN2D5p5QPZ0G9SEztZ+++trPb5q+RpErwv5OfpVw/7L azMeu8hfdw+bkPnXPdhzS6HIrxMIJAREZbiYwYvWX0WGYxALPeCWTYNE8CXnGqRh obakMfoaaTT/NqEA4dAGst8GqOIGt8yRG0359zbM11C8jC08QHdEvt/A324ooXJT gvwyYXEEJXIvkAkY6OUHv6CBOYoQ0gg0no8oB02jp1j0LEatIEqxfJO+RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+myhIhSUHjdWuNE+RXTDw10O/CMB8GA1UdIwQY MBaAFAZyDrQH1bG5skRTuCbKpvB059EtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS85MTU3ZDYtMWYwNS00NTEwLTgwMzct NzhjMGMwMmY3OGEyLzEvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS85MTU3ZDYtMWYwNS00NTEwLTgwMzctNzhjMGMwMmY3OGEy LzEvQm5JT3RBZlZzYm15UkZPNEpzcW04SFRuMFMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd9oHufC9 mWEPYoeF4rp39h7teK2g9/DUOUC8Xo5lWNhhFGKDMQ69/1VFzmjLZlhGtCmXCDdT h7IQatDDm1tBHCH4I2qJwdAEjGJzonemBk5SgwtaheH7WdTD6pNFyBbrz3kI7I+a J39DkVhlSX5R3zKfax78k9PZshH8NXFbXAbPKiowuzTHxxZxr+lfwoQvCDokZVVu NZ6wZSMRQKIs2DWHs/zxCXfL7mgegmXyzThz5Cco8HGZkCcGiPEeR8gxO8eJGayq 9fj108gaS+EWrfJijOHORgUne+LY9gRZ4Xhw34hXu6au9jpjXGYlhGMAjYLNRQSB BBwYq5kTc1wfCw== -----END CERTIFICATE-----Generated at Mon Feb 2 08:17:41 2026 by rpki-client