This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft File: bMs_hCGEjxE5UekHCz92OVkzE5k.mft (raw, json) Hash identifier: 2uwodtBl+7lcIajVhFuEkJriF0Xs/LNBuxL6zpVi7XE= Subject key identifier: DA:A4:2B:56:86:5C:15:C4:E5:FC:FB:EB:16:0E:5B:98:B5:B9:04:41 Authority key identifier: 6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99 Certificate issuer: /CN=6ccb3f8421848f113951e9070b3f763959331399 Certificate serial: 019C1B706DE9B00FC983058C0AD0E3572406 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft Manifest number: 90 Signing time: Sun 01 Feb 2026 23:01:18 +0000 Manifest this update: Sun 01 Feb 2026 23:01:18 +0000 Manifest next update: Mon 02 Feb 2026 23:01:18 +0000 Files and hashes: 1: bMs_hCGEjxE5UekHCz92OVkzE5k.crl (hash: RnhdHORC9pXB2gpH2TxBK//1SztmMAtxpWwIp/SRGPI=) 2: bUiH3VbW9e4DGEI6aQ_GDMaBXuU.asa (hash: HiJMoQ+7Z+6mLU3L+V1v5bPyuxJiyPA9eVSUrGC2/Yk=) 3: vWTFnToMRwpADtfp8rKVJDhq4z0.roa (hash: 9KBYCbKq8EeH9dzn6Vsl+J3/PeNavFQcjtRw+/WBxiY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 23:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:70:6d:e9:b0:0f:c9:83:05:8c:0a:d0:e3:57:24:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ccb3f8421848f113951e9070b3f763959331399 Validity Not Before: Feb 1 23:01:18 2026 GMT Not After : Feb 2 23:01:18 2026 GMT Subject: CN=daa42b56865c15c4e5fcfbeb160e5b98b5b90441 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1f:f3:95:f2:54:26:bc:f7:f4:91:03:28:5f: ae:de:79:d3:ef:7b:c4:04:94:cf:50:9d:16:e8:14: ef:14:64:7b:b7:20:44:fb:ce:41:da:77:3a:3b:1f: 8b:5a:02:c7:52:35:4d:96:b5:5f:17:5c:98:57:bb: fa:78:e7:0f:9c:a7:75:e3:3f:70:0e:82:a5:5d:88: 4a:71:fe:33:ad:f8:1c:dc:28:9a:98:11:4e:e6:cf: 60:4a:f0:ac:75:b5:29:73:f1:1d:5d:15:35:bd:a6: 5d:04:ea:d9:75:95:cc:16:88:bf:79:09:ea:8d:20: 76:b0:54:5f:61:01:cc:63:e7:ed:1f:8a:83:fa:a9: 07:61:f4:1b:79:94:bd:76:04:b9:c0:bd:df:78:2e: 2c:42:bd:7d:73:db:66:93:43:79:37:2e:cd:1b:c1: b6:21:2b:66:fe:90:3e:a2:81:cf:cd:f0:ca:80:10: 20:e6:43:46:f0:5d:85:23:c1:de:10:48:19:cf:49: 1c:ca:a2:c0:22:6c:00:97:82:8e:90:b5:70:98:b0: c0:f4:82:9c:c0:25:51:0c:34:c2:32:44:35:d3:1c: ce:04:86:53:b1:d0:ba:a3:d3:68:4b:03:55:7c:e4: 7f:3a:f2:33:58:90:ca:ba:94:cf:ce:99:40:57:8e: 21:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A4:2B:56:86:5C:15:C4:E5:FC:FB:EB:16:0E:5B:98:B5:B9:04:41 X509v3 Authority Key Identifier: keyid:6C:CB:3F:84:21:84:8F:11:39:51:E9:07:0B:3F:76:39:59:33:13:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMs_hCGEjxE5UekHCz92OVkzE5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/251684-ea53-42ff-86d4-459e34e6ff20/1/bMs_hCGEjxE5UekHCz92OVkzE5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d8:95:21:19:8f:dd:38:ce:8d:2e:db:8d:3c:39:71:ca:3a: 7f:c3:ec:a7:a6:2f:b6:84:a6:40:bb:2a:1c:97:d1:64:29:df: d5:3c:7c:9f:cd:01:df:27:8b:51:48:7f:b7:9b:c4:64:52:a5: dc:48:66:49:6d:30:fd:02:6c:92:ea:cd:b6:24:e1:b0:e0:71: 26:53:8e:22:c2:f5:90:d4:a2:46:18:ab:a9:df:04:5d:7e:f4: 49:15:68:a4:d6:41:1a:97:c2:52:ba:0b:45:ab:3b:de:73:7f: 2e:7a:78:82:fa:ea:12:50:09:32:b5:5e:2c:f1:2f:93:a2:9b: 88:05:f1:01:a0:8a:5e:19:95:fb:c1:84:d5:a6:f4:de:51:08: a5:b7:5b:d5:4e:fe:28:15:3c:ef:12:78:20:8d:ca:6e:45:f3: 06:c5:1a:e2:d1:6c:f1:18:ae:27:17:bb:ea:6f:ac:ea:60:bf: b8:63:a8:56:23:b0:d6:60:d9:39:1c:d4:49:80:1f:0b:46:51: ff:e6:67:60:a0:ce:7d:2c:37:38:82:74:70:7d:8d:d2:2b:18: f6:2c:11:f7:c0:c1:d6:4a:6b:7c:90:43:ec:74:0a:fc:dc:16: 27:ad:4f:98:db:ae:6f:2f:53:c4:24:66:f7:02:5d:87:80:fa: 5c:3e:db:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbcG3psA/JgwWMCtDjVyQGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjY2IzZjg0MjE4NDhmMTEzOTUxZTkwNzBiM2Y3NjM5NTkz MzEzOTkwHhcNMjYwMjAxMjMwMTE4WhcNMjYwMjAyMjMwMTE4WjAzMTEwLwYDVQQD EyhkYWE0MmI1Njg2NWMxNWM0ZTVmY2ZiZWIxNjBlNWI5OGI1YjkwNDQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B/zlfJUJrz39JEDKF+u3nnT73vE BJTPUJ0W6BTvFGR7tyBE+85B2nc6Ox+LWgLHUjVNlrVfF1yYV7v6eOcPnKd14z9w DoKlXYhKcf4zrfgc3CiamBFO5s9gSvCsdbUpc/EdXRU1vaZdBOrZdZXMFoi/eQnq jSB2sFRfYQHMY+ftH4qD+qkHYfQbeZS9dgS5wL3feC4sQr19c9tmk0N5Ny7NG8G2 IStm/pA+ooHPzfDKgBAg5kNG8F2FI8HeEEgZz0kcyqLAImwAl4KOkLVwmLDA9IKc wCVRDDTCMkQ10xzOBIZTsdC6o9NoSwNVfOR/OvIzWJDKupTPzplAV44hpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqkK1aGXBXE5fz76xYOW5i1uQRBMB8GA1UdIwQY MBaAFGzLP4QhhI8ROVHpBws/djlZMxOZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk1zX2hDR0VqeEU1VWVrSEN6OTJPVmt6RTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8yNTE2ODQtZWE1My00MmZmLTg2ZDQt NDU5ZTM0ZTZmZjIwLzEvYk1zX2hDR0VqeEU1VWVrSEN6OTJPVmt6RTVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC8yNTE2ODQtZWE1My00MmZmLTg2ZDQtNDU5ZTM0ZTZmZjIw LzEvYk1zX2hDR0VqeEU1VWVrSEN6OTJPVmt6RTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9iVIRmP 3TjOjS7bjTw5cco6f8Psp6YvtoSmQLsqHJfRZCnf1Tx8n80B3yeLUUh/t5vEZFKl 3EhmSW0w/QJskurNtiThsOBxJlOOIsL1kNSiRhirqd8EXX70SRVopNZBGpfCUroL Ras73nN/Lnp4gvrqElAJMrVeLPEvk6KbiAXxAaCKXhmV+8GE1ab03lEIpbdb1U7+ KBU87xJ4II3KbkXzBsUa4tFs8RiuJxe76m+s6mC/uGOoViOw1mDZORzUSYAfC0ZR /+ZnYKDOfSw3OIJ0cH2N0isY9iwR98DB1kprfJBD7HQK/NwWJ61PmNuuby9TxCRm 9wJdh4D6XD7baQ== -----END CERTIFICATE-----Generated at Mon Feb 2 09:43:15 2026 by rpki-client