This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft File: BqTXfcLhnm-WAydMCSOmGordtJY.mft (raw, json) Hash identifier: 6LVynb24uRptmUiI38bkbZhpBSnYOGe8ORSf+d+4bQA= Subject key identifier: 02:0D:78:93:90:89:D7:6A:50:F0:30:8A:B1:24:EC:A1:25:77:7E:70 Authority key identifier: 06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96 Certificate issuer: /CN=06a4d77dc2e19e6f9603274c0923a61a8addb496 Certificate serial: 019C4246AD5295DCE2933289BC366E6DBA8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft Manifest number: 0C9E Signing time: Mon 09 Feb 2026 12:00:53 +0000 Manifest this update: Mon 09 Feb 2026 12:00:53 +0000 Manifest next update: Tue 10 Feb 2026 12:00:53 +0000 Files and hashes: 1: BqTXfcLhnm-WAydMCSOmGordtJY.crl (hash: 5UwfPWnFyqOngQaI63D3IV7dthlas5C1p5WRI8XeGbs=) 2: WQZrCmnGTeVoS0hgL0YUsOv_fXU.roa (hash: eWCCmbbu8zh+FEmFkCBwJkZKgrWzGjOAichsxrS7Hww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:ad:52:95:dc:e2:93:32:89:bc:36:6e:6d:ba:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=06a4d77dc2e19e6f9603274c0923a61a8addb496 Validity Not Before: Feb 9 12:00:53 2026 GMT Not After : Feb 10 12:00:53 2026 GMT Subject: CN=020d78939089d76a50f0308ab124eca125777e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8e:71:fc:bc:64:64:72:da:5a:26:8e:9e:da: 42:c7:96:2d:73:7e:ac:15:80:2f:9c:97:94:4f:99: 65:e7:da:e7:27:cf:f5:3a:c7:b8:63:be:a7:e2:1f: 04:2b:ad:d5:1a:69:03:b8:fe:cf:76:4f:b5:fb:26: d5:b1:f9:b6:8e:e7:02:ad:8c:a9:c1:76:0f:a2:7b: f2:c6:b3:d0:d5:3c:4a:a6:70:00:1b:22:cf:e0:c4: d5:bc:30:69:64:9c:10:2e:b3:f7:1b:28:26:58:a3: e2:45:5f:d9:77:50:54:f2:34:de:28:34:07:ac:e4: 04:c5:7f:81:17:3a:a7:0f:bc:a6:96:46:48:7e:8a: a0:00:37:88:bc:8e:ef:8b:9c:b7:22:00:2a:5b:35: 7d:bc:d6:23:3f:c9:01:ac:75:69:cf:8d:4a:55:2c: bb:ae:35:18:6a:74:ea:dc:91:72:97:53:46:b0:12: 9b:b8:85:1a:31:d2:35:a3:86:0b:ec:7e:6a:ea:50: f3:ca:96:c3:7a:9b:8c:e1:0e:1b:10:f2:d6:b7:8a: 49:29:95:71:bd:bb:3c:08:1e:ce:3c:d4:71:0b:bc: 68:fc:cb:39:09:1d:34:a5:38:b4:49:b0:a7:ac:56: 16:c8:1b:66:22:df:53:8b:81:47:78:a2:40:07:fe: 9b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:0D:78:93:90:89:D7:6A:50:F0:30:8A:B1:24:EC:A1:25:77:7E:70 X509v3 Authority Key Identifier: keyid:06:A4:D7:7D:C2:E1:9E:6F:96:03:27:4C:09:23:A6:1A:8A:DD:B4:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BqTXfcLhnm-WAydMCSOmGordtJY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d3b542-6f21-4dc8-9e6f-4492d9f2f438/1/BqTXfcLhnm-WAydMCSOmGordtJY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:4f:03:fe:ad:8e:f8:78:6b:1a:48:0f:87:ac:65:13:0b:2c: 56:53:d4:c0:2f:c8:dd:d4:86:82:9b:de:24:57:84:70:0c:d1: 47:a8:1f:39:69:fb:1c:99:b4:0d:01:a7:0f:b0:7b:3b:44:fd: 66:c5:f1:98:a7:d7:43:9f:d4:f8:99:ef:a7:43:df:b6:a0:c0: 95:c1:7d:86:f9:b3:17:6f:d9:b9:1a:ac:17:5f:df:c6:9e:8c: 89:e3:89:79:93:59:f7:d2:91:06:81:3d:6f:fd:40:2d:f7:e0: e8:13:ba:23:1f:0e:6d:9f:b6:c2:ce:14:e0:32:20:61:a0:2c: 57:2d:4b:99:41:6a:fd:89:d2:6c:19:5e:ca:fb:be:37:aa:05: 89:8e:68:fa:7d:30:03:48:9a:cf:81:e1:1d:a9:5c:9c:44:32: 2b:21:86:65:f3:af:27:c2:f0:8a:14:b2:b4:7b:a1:3f:d1:63: f5:a2:3a:da:a1:34:9d:a2:2d:1a:96:29:86:fb:ba:a3:c0:de: de:28:11:9d:7e:94:b4:77:24:fb:b1:f5:21:f9:ae:30:ab:4b: 5a:59:5d:79:b4:86:68:93:e1:fb:df:8f:ac:18:cc:72:7f:8c: e6:42:49:1a:3c:45:73:46:9e:ee:a0:ba:95:b4:26:a6:dc:39: 65:3c:b4:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRq1SldzikzKJvDZubbqPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2YTRkNzdkYzJlMTllNmY5NjAzMjc0YzA5MjNhNjFhOGFk ZGI0OTYwHhcNMjYwMjA5MTIwMDUzWhcNMjYwMjEwMTIwMDUzWjAzMTEwLwYDVQQD EygwMjBkNzg5MzkwODlkNzZhNTBmMDMwOGFiMTI0ZWNhMTI1Nzc3ZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI5x/LxkZHLaWiaOntpCx5Ytc36s FYAvnJeUT5ll59rnJ8/1Ose4Y76n4h8EK63VGmkDuP7Pdk+1+ybVsfm2jucCrYyp wXYPonvyxrPQ1TxKpnAAGyLP4MTVvDBpZJwQLrP3GygmWKPiRV/Zd1BU8jTeKDQH rOQExX+BFzqnD7ymlkZIfoqgADeIvI7vi5y3IgAqWzV9vNYjP8kBrHVpz41KVSy7 rjUYanTq3JFyl1NGsBKbuIUaMdI1o4YL7H5q6lDzypbDepuM4Q4bEPLWt4pJKZVx vbs8CB7OPNRxC7xo/Ms5CR00pTi0SbCnrFYWyBtmIt9Ti4FHeKJAB/6b+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAINeJOQiddqUPAwirEk7KEld35wMB8GA1UdIwQY MBaAFAak133C4Z5vlgMnTAkjphqK3bSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYt NDQ5MmQ5ZjJmNDM4LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kM2I1NDItNmYyMS00ZGM4LTllNmYtNDQ5MmQ5ZjJmNDM4 LzEvQnFUWGZjTGhubS1XQXlkTUNTT21Hb3JkdEpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAE8D/q2O +HhrGkgPh6xlEwssVlPUwC/I3dSGgpveJFeEcAzRR6gfOWn7HJm0DQGnD7B7O0T9 ZsXxmKfXQ5/U+Jnvp0PftqDAlcF9hvmzF2/ZuRqsF1/fxp6MieOJeZNZ99KRBoE9 b/1ALffg6BO6Ix8ObZ+2ws4U4DIgYaAsVy1LmUFq/YnSbBleyvu+N6oFiY5o+n0w A0iaz4HhHalcnEQyKyGGZfOvJ8LwihSytHuhP9Fj9aI62qE0naItGpYphvu6o8De 3igRnX6UtHck+7H1IfmuMKtLWlldebSGaJPh+9+PrBjMcn+M5kJJGjxFc0ae7qC6 lbQmptw5ZTy0pg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:22 2026 by rpki-client