This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft File: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft (raw, json) Hash identifier: rdmmU9KHMCLiZSmK/SUhhW0iz4qn3pnqndGWwu0rMTs= Subject key identifier: 1C:5E:B7:3D:4A:E0:FB:62:03:45:DB:95:3C:6F:62:90:0E:41:F9:39 Authority key identifier: 6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67 Certificate issuer: /CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67 Certificate serial: 019C420FAFA6CCD6678661832D2CA207F094 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft Manifest number: 130F Signing time: Mon 09 Feb 2026 11:00:50 +0000 Manifest this update: Mon 09 Feb 2026 11:00:50 +0000 Manifest next update: Tue 10 Feb 2026 11:00:50 +0000 Files and hashes: 1: bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl (hash: Wq7MRdgIQ/Nc+Cvcl8L8fCXqGdjZuQkTQeywRPTkgLI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:af:a6:cc:d6:67:86:61:83:2d:2c:a2:07:f0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e0c674040d2fdfa8b9ee27ba86c747d6b0ecb67 Validity Not Before: Feb 9 11:00:50 2026 GMT Not After : Feb 10 11:00:50 2026 GMT Subject: CN=1c5eb73d4ae0fb620345db953c6f62900e41f939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b3:bc:d7:82:c7:4e:2b:34:63:03:25:5f:38: 0c:a0:fc:ee:db:1a:5d:a2:ed:be:98:3f:88:64:55: dc:90:bf:14:df:97:90:a8:36:4e:76:6c:a8:44:93: 73:75:33:73:33:27:4c:a1:94:c2:35:5f:56:65:00: 04:fc:89:63:c8:48:53:f4:7a:82:de:54:83:04:3e: 0e:eb:15:70:c3:dc:6d:48:ee:61:62:d9:c1:ec:79: 22:c9:4c:56:f9:ef:ac:ca:72:bd:6b:dd:3f:d1:18: 25:fe:8e:48:65:3f:60:bc:d5:59:d4:43:5f:50:3c: 7a:ab:91:96:ab:eb:21:73:05:87:74:c4:a6:d2:ae: e9:28:e1:45:70:85:e2:8b:35:30:1f:3d:d1:fa:17: b0:4e:45:e5:38:62:32:b4:d1:cf:94:1c:d8:80:3d: cb:d2:3a:8e:d4:e0:34:84:03:d4:c3:a7:d0:79:f0: d8:2a:58:04:cb:14:53:c4:3f:da:d1:4c:93:fc:af: 0f:3d:5e:04:c5:66:43:c8:6f:f4:4e:60:b1:cd:f8: 29:ae:ea:dc:ff:b3:f1:be:f6:e0:a2:e6:ad:39:5b: 0f:fb:53:ac:50:c9:3d:3f:e5:22:3a:c9:19:6f:13: bf:ea:bd:c6:ff:bd:4c:7a:b6:b1:0d:6b:56:d0:03: 3a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:5E:B7:3D:4A:E0:FB:62:03:45:DB:95:3C:6F:62:90:0E:41:F9:39 X509v3 Authority Key Identifier: keyid:6E:0C:67:40:40:D2:FD:FA:8B:9E:E2:7B:A8:6C:74:7D:6B:0E:CB:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/915322-7657-4019-89a8-e264833ae175/1/bgxnQEDS_fqLnuJ7qGx0fWsOy2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:5d:6e:b6:1b:16:1b:9f:30:b9:61:d8:e4:fb:d2:7a:a7:43: 62:07:af:83:63:93:ae:26:7d:09:ae:f3:be:e7:03:4e:dd:34: e6:13:27:66:d1:6d:c0:3e:fa:55:fa:f8:fc:3e:9c:ed:62:dc: bb:15:15:3a:4b:e7:b2:70:4e:f1:85:5b:40:9a:1d:f8:84:8c: 6a:93:8e:29:7a:39:d4:ec:22:91:4c:9a:c4:7e:90:d9:9c:51: 63:c0:f9:85:fe:a3:fe:d9:b2:51:13:e4:18:61:12:4b:c7:07: 69:85:23:a4:a9:90:ad:b7:92:2f:f6:6b:8c:db:de:84:57:5e: f6:f8:4e:20:ad:97:a6:5e:6c:60:29:40:1f:75:3e:c0:39:c2: ff:f1:c0:68:7c:db:ff:ac:bb:e9:06:55:a9:22:0c:02:76:d4: f8:4c:b9:8c:52:da:02:1e:6c:3d:b6:a1:fd:f5:4d:d2:78:b1: d8:83:40:2f:ef:57:26:27:cd:c0:5d:07:cb:fe:9d:b3:01:bf: 3d:a2:f7:d8:75:0b:e0:33:00:1f:ca:b3:10:d5:3e:f7:58:be: 29:14:d5:70:76:19:36:15:b5:70:8f:0f:52:98:2b:8d:f0:5b: 33:a3:23:2c:65:d8:b2:a9:37:9a:2c:1b:05:15:75:9a:11:5c: e7:38:cb:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6+mzNZnhmGDLSyiB/CUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlMGM2NzQwNDBkMmZkZmE4YjllZTI3YmE4NmM3NDdkNmIw ZWNiNjcwHhcNMjYwMjA5MTEwMDUwWhcNMjYwMjEwMTEwMDUwWjAzMTEwLwYDVQQD EygxYzVlYjczZDRhZTBmYjYyMDM0NWRiOTUzYzZmNjI5MDBlNDFmOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrO814LHTis0YwMlXzgMoPzu2xpd ou2+mD+IZFXckL8U35eQqDZOdmyoRJNzdTNzMydMoZTCNV9WZQAE/IljyEhT9HqC 3lSDBD4O6xVww9xtSO5hYtnB7HkiyUxW+e+synK9a90/0Rgl/o5IZT9gvNVZ1ENf UDx6q5GWq+shcwWHdMSm0q7pKOFFcIXiizUwHz3R+hewTkXlOGIytNHPlBzYgD3L 0jqO1OA0hAPUw6fQefDYKlgEyxRTxD/a0UyT/K8PPV4ExWZDyG/0TmCxzfgprurc /7PxvvbgouatOVsP+1OsUMk9P+UiOskZbxO/6r3G/71MeraxDWtW0AM6NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxetz1K4PtiA0XblTxvYpAOQfk5MB8GA1UdIwQY MBaAFG4MZ0BA0v36i57ie6hsdH1rDstnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmd4blFFRFNfZnFMbnVKN3FHeDBmV3NPeTJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85MTUzMjItNzY1Ny00MDE5LTg5YTgt ZTI2NDgzM2FlMTc1LzEvYmd4blFFRFNfZnFMbnVKN3FHeDBmV3NPeTJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC85MTUzMjItNzY1Ny00MDE5LTg5YTgtZTI2NDgzM2FlMTc1 LzEvYmd4blFFRFNfZnFMbnVKN3FHeDBmV3NPeTJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKl1uthsW G58wuWHY5PvSeqdDYgevg2OTriZ9Ca7zvucDTt005hMnZtFtwD76Vfr4/D6c7WLc uxUVOkvnsnBO8YVbQJod+ISMapOOKXo51OwikUyaxH6Q2ZxRY8D5hf6j/tmyURPk GGESS8cHaYUjpKmQrbeSL/ZrjNvehFde9vhOIK2Xpl5sYClAH3U+wDnC//HAaHzb /6y76QZVqSIMAnbU+Ey5jFLaAh5sPbah/fVN0nix2INAL+9XJifNwF0Hy/6dswG/ PaL32HUL4DMAH8qzENU+91i+KRTVcHYZNhW1cI8PUpgrjfBbM6MjLGXYsqk3miwb BRV1mhFc5zjLkw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:41 2026 by rpki-client