This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json) Hash identifier: xzNYLwBKBmZhGJGwweSrCu2A16zXeQD7fNwm/YwcHlM= Subject key identifier: D7:D6:B7:7E:EB:C2:73:96:60:BE:1A:4C:78:B3:9E:11:A6:F3:F6:5F Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c Certificate serial: 019C446C50B3927435D2AE2C4BEB025AB5DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft Manifest number: 145C Signing time: Mon 09 Feb 2026 22:01:15 +0000 Manifest this update: Mon 09 Feb 2026 22:01:15 +0000 Manifest next update: Tue 10 Feb 2026 22:01:15 +0000 Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: Z+hndCrlCuZ07gwCwPRA0MzFHvcgkklqi/ji4TnBGvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:50:b3:92:74:35:d2:ae:2c:4b:eb:02:5a:b5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c Validity Not Before: Feb 9 22:01:15 2026 GMT Not After : Feb 10 22:01:15 2026 GMT Subject: CN=d7d6b77eebc2739660be1a4c78b39e11a6f3f65f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:e1:f5:70:e3:c9:1b:5f:54:fd:8b:9c:be: 09:b9:53:7e:d0:f1:95:8e:2e:40:94:80:e9:2a:dd: 39:0f:61:2b:50:26:8f:14:53:09:03:e1:1a:bb:0e: ce:52:9c:ec:6c:91:ed:9b:34:56:46:8a:58:de:3b: 0e:eb:ae:20:ab:90:d3:8a:be:37:b5:7f:f2:2e:35: f5:2f:aa:fc:cd:68:cd:ea:74:54:89:42:55:5c:30: f8:a8:f0:b2:03:cb:50:ac:ee:e3:f1:59:16:96:06: cd:da:fc:af:be:ed:b9:70:fe:41:32:4f:1a:11:e0: 8e:cb:90:ea:fe:8d:25:4a:fb:36:7c:fb:f9:47:cc: 6e:d3:ce:8f:1d:ce:1f:68:23:07:46:b6:fd:36:97: 10:11:d3:ab:a8:7c:2b:26:d8:34:c5:41:d1:60:c4: e0:cd:81:64:6a:73:ea:f3:40:f1:e5:40:a4:1c:2c: e5:ec:fa:17:84:a2:50:59:ce:eb:88:c0:06:4a:9b: 90:e0:15:64:2c:bd:42:b0:9d:bc:85:79:49:bf:90: a7:de:08:13:c8:01:5b:1b:ca:d4:f5:21:2e:db:1d: a9:95:b0:6b:6d:83:ca:4c:17:df:5f:64:81:ef:f8: 7e:c6:42:92:c3:a8:f3:e8:ef:3d:9d:c0:bc:ed:b6: 2b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D6:B7:7E:EB:C2:73:96:60:BE:1A:4C:78:B3:9E:11:A6:F3:F6:5F X509v3 Authority Key Identifier: keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:2b:94:ad:07:52:cd:ee:10:22:c2:e8:49:9b:0f:36:3e:40: 20:e9:27:34:d8:28:e1:22:82:92:8f:38:9e:3f:27:2f:a4:37: f4:0c:de:aa:ae:cc:f6:c6:a2:2d:50:b0:91:d6:00:46:fc:b7: 25:1c:e9:4e:57:39:56:14:40:f6:3b:b1:04:a7:12:4a:38:62: 5c:9d:52:59:f0:5c:3c:06:fa:f2:22:a8:58:c7:1a:62:36:04: 4f:c5:c4:a5:27:bf:1b:fd:40:b0:37:83:38:f1:0e:8a:c8:f5: 77:5c:44:e2:76:93:4e:0a:0a:d2:ee:9f:65:46:6b:0b:15:fa: 05:8c:37:a8:8f:49:36:37:e3:e3:11:2c:b4:57:9b:13:ab:c9: f1:eb:38:6d:f7:03:6a:16:b8:65:c7:83:3e:ab:ce:aa:0c:ae: cf:9f:90:ed:9b:e9:7f:30:f7:fb:c9:b6:9f:21:6a:54:93:65: 45:f5:2f:1d:ec:8f:59:51:c1:fe:f3:3f:1f:44:71:ef:23:ba: 26:bf:14:d8:b1:e3:2b:5f:a6:b1:35:2d:cc:77:30:87:16:34: 6c:a4:59:3c:d3:d8:dc:a4:f3:43:e1:70:50:75:ce:04:bf:89: 97:5a:90:57:60:dc:d6:79:60:42:47:c5:6a:1e:92:a4:a3:b8: c9:1e:93:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbFCzknQ10q4sS+sCWrXdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MWQ2MzljMWUwMmVkYTI1MzhkMzRiMGM4YjQ1MjEzYzY0 ZDZhM2MwHhcNMjYwMjA5MjIwMTE1WhcNMjYwMjEwMjIwMTE1WjAzMTEwLwYDVQQD EyhkN2Q2Yjc3ZWViYzI3Mzk2NjBiZTFhNGM3OGIzOWUxMWE2ZjNmNjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth7h9XDjyRtfVP2LnL4JuVN+0PGV ji5AlIDpKt05D2ErUCaPFFMJA+Eauw7OUpzsbJHtmzRWRopY3jsO664gq5DTir43 tX/yLjX1L6r8zWjN6nRUiUJVXDD4qPCyA8tQrO7j8VkWlgbN2vyvvu25cP5BMk8a EeCOy5Dq/o0lSvs2fPv5R8xu086PHc4faCMHRrb9NpcQEdOrqHwrJtg0xUHRYMTg zYFkanPq80Dx5UCkHCzl7PoXhKJQWc7riMAGSpuQ4BVkLL1CsJ28hXlJv5Cn3ggT yAFbG8rU9SEu2x2plbBrbYPKTBffX2SB7/h+xkKSw6jz6O89ncC87bYrcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfWt37rwnOWYL4aTHiznhGm8/ZfMB8GA1UdIwQY MBaAFAcdY5weAu2iU400sMi0UhPGTWo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQngxam5CNEM3YUpUalRTd3lMUlNFOFpOYWp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kMTJhNWYtZGQ1Yi00MjAxLTk4MTkt ODEzNzI2Y2VkN2QxLzEvQngxam5CNEM3YUpUalRTd3lMUlNFOFpOYWp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni9kMTJhNWYtZGQ1Yi00MjAxLTk4MTktODEzNzI2Y2VkN2Qx LzEvQngxam5CNEM3YUpUalRTd3lMUlNFOFpOYWp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyuUrQdS ze4QIsLoSZsPNj5AIOknNNgo4SKCko84nj8nL6Q39Azeqq7M9saiLVCwkdYARvy3 JRzpTlc5VhRA9juxBKcSSjhiXJ1SWfBcPAb68iKoWMcaYjYET8XEpSe/G/1AsDeD OPEOisj1d1xE4naTTgoK0u6fZUZrCxX6BYw3qI9JNjfj4xEstFebE6vJ8es4bfcD aha4ZceDPqvOqgyuz5+Q7ZvpfzD3+8m2nyFqVJNlRfUvHeyPWVHB/vM/H0Rx7yO6 Jr8U2LHjK1+msTUtzHcwhxY0bKRZPNPY3KTzQ+FwUHXOBL+Jl1qQV2Dc1nlgQkfF ah6SpKO4yR6TUA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:39:38 2026 by rpki-client