This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft File: btAxXocokhqZ_GNGtM6PELXbhnw.mft (raw, json) Hash identifier: wQ04nrR5FxpySS5Nh8d1OUPNq1J8KTZM8HfBfZZvScY= Subject key identifier: 34:DD:21:18:F6:D2:49:0C:1D:A5:41:83:6A:F1:D9:AF:D0:E5:38:60 Authority key identifier: 6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C Certificate issuer: /CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c Certificate serial: 019C4322D7374CC69787DC36B7FC4855CAED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft Manifest number: 0E50 Signing time: Mon 09 Feb 2026 16:01:22 +0000 Manifest this update: Mon 09 Feb 2026 16:01:22 +0000 Manifest next update: Tue 10 Feb 2026 16:01:22 +0000 Files and hashes: 1: btAxXocokhqZ_GNGtM6PELXbhnw.crl (hash: NDgIz7hInq40FuiyYhVp9q7uZnEYC/3nePkBxcTD3Lk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d7:37:4c:c6:97:87:dc:36:b7:fc:48:55:ca:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed0315e8728921a99fc6346b4ce8f10b5db867c Validity Not Before: Feb 9 16:01:22 2026 GMT Not After : Feb 10 16:01:22 2026 GMT Subject: CN=34dd2118f6d2490c1da541836af1d9afd0e53860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f1:d8:6e:01:6b:92:75:34:18:e4:b8:3e:e5: b2:24:cd:75:c3:e3:be:57:04:67:46:79:d5:31:85: 09:08:ea:90:46:ac:26:4c:ed:66:3c:ce:7b:fe:92: a6:6f:94:4b:02:d1:a9:d6:fc:f8:6c:20:7c:bc:db: 00:78:6a:e3:36:93:64:82:dd:80:a7:50:17:d8:30: 5c:05:48:7b:72:85:7d:99:07:90:3c:ce:3e:08:69: 06:bd:4e:4a:53:2b:7e:ee:b9:2b:f7:57:32:18:62: 63:33:15:64:1d:90:2b:48:54:88:09:90:14:66:a7: 20:e5:4c:b8:08:94:10:bc:a4:35:1f:da:ff:0a:8c: 9c:1c:a5:82:70:a9:b3:bf:71:a7:98:bb:eb:a9:da: 33:4c:c6:48:26:2b:00:61:cd:20:e7:35:a7:bd:0e: a6:7b:b1:94:74:9b:60:fd:da:d1:40:ec:02:a3:26: 71:29:07:e8:8e:01:63:ee:68:30:dc:b9:83:a3:ab: 6d:3d:67:6e:0d:c6:6c:74:bb:4a:fb:e9:89:bd:bf: 04:e8:d4:22:5b:06:ca:6e:fa:83:c5:dc:b2:d2:9a: ce:7b:f9:0f:98:06:b8:76:66:eb:b9:db:60:d3:fb: b5:f5:e1:be:a1:71:bc:17:37:a6:4a:c9:b4:7f:3d: 3d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DD:21:18:F6:D2:49:0C:1D:A5:41:83:6A:F1:D9:AF:D0:E5:38:60 X509v3 Authority Key Identifier: keyid:6E:D0:31:5E:87:28:92:1A:99:FC:63:46:B4:CE:8F:10:B5:DB:86:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btAxXocokhqZ_GNGtM6PELXbhnw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/2a62c2-17d5-44cd-90ef-5b337ac2ef79/1/btAxXocokhqZ_GNGtM6PELXbhnw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ce:e7:01:e4:ef:84:a0:ae:67:77:11:07:20:ae:90:b0:bf: 8d:22:61:84:e5:f5:d4:98:94:5e:48:9c:a3:5f:5e:f0:1b:75: df:be:f1:29:4d:34:50:e0:db:65:c3:b4:24:f4:e6:7a:37:ea: 42:58:2a:6d:6b:dd:9f:28:ad:94:6d:e7:3b:2c:9f:6a:82:e3: d6:59:47:12:f3:18:39:fe:22:c5:a6:3b:ab:cf:22:65:2c:b2: e7:43:9d:93:86:1f:3a:37:e0:d4:01:ad:de:73:25:00:56:88: 7f:3d:3a:ed:c9:3a:a3:95:0f:0c:74:ca:4c:7b:b4:77:61:1d: b5:4c:cf:e2:27:0c:21:36:8c:a6:db:58:ee:b4:09:fc:aa:8b: 41:a2:17:aa:bb:f1:f7:ea:73:e6:81:54:23:22:21:34:d8:66: 1f:3b:05:2b:47:dc:f3:a4:07:76:e7:ce:3b:d0:b5:e2:7b:c1: 7f:6f:38:e1:38:bd:03:81:b1:6e:43:a0:38:9e:ad:9f:c6:35: 66:0c:2e:ce:f4:e8:dd:50:f2:cc:0f:69:26:0b:fb:89:f1:53: 3b:b5:74:7f:f9:99:12:ba:11:1c:7c:e3:6a:c3:ee:e3:58:eb: 33:e2:2d:1f:2c:0d:8d:56:ea:97:01:43:74:60:72:6d:87:22: ba:09:5e:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItc3TMaXh9w2t/xIVcrtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlZDAzMTVlODcyODkyMWE5OWZjNjM0NmI0Y2U4ZjEwYjVk Yjg2N2MwHhcNMjYwMjA5MTYwMTIyWhcNMjYwMjEwMTYwMTIyWjAzMTEwLwYDVQQD EygzNGRkMjExOGY2ZDI0OTBjMWRhNTQxODM2YWYxZDlhZmQwZTUzODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfHYbgFrknU0GOS4PuWyJM11w+O+ VwRnRnnVMYUJCOqQRqwmTO1mPM57/pKmb5RLAtGp1vz4bCB8vNsAeGrjNpNkgt2A p1AX2DBcBUh7coV9mQeQPM4+CGkGvU5KUyt+7rkr91cyGGJjMxVkHZArSFSICZAU Zqcg5Uy4CJQQvKQ1H9r/CoycHKWCcKmzv3GnmLvrqdozTMZIJisAYc0g5zWnvQ6m e7GUdJtg/drRQOwCoyZxKQfojgFj7mgw3LmDo6ttPWduDcZsdLtK++mJvb8E6NQi WwbKbvqDxdyy0prOe/kPmAa4dmbrudtg0/u19eG+oXG8FzemSsm0fz09cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTdIRj20kkMHaVBg2rx2a/Q5ThgMB8GA1UdIwQY MBaAFG7QMV6HKJIamfxjRrTOjxC124Z8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYt NWIzMzdhYzJlZjc5LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8yYTYyYzItMTdkNS00NGNkLTkwZWYtNWIzMzdhYzJlZjc5 LzEvYnRBeFhvY29raHFaX0dOR3RNNlBFTFhiaG53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM87nAeTv hKCuZ3cRByCukLC/jSJhhOX11JiUXkico19e8Bt1377xKU00UODbZcO0JPTmejfq QlgqbWvdnyitlG3nOyyfaoLj1llHEvMYOf4ixaY7q88iZSyy50Odk4YfOjfg1AGt 3nMlAFaIfz067ck6o5UPDHTKTHu0d2EdtUzP4icMITaMpttY7rQJ/KqLQaIXqrvx 9+pz5oFUIyIhNNhmHzsFK0fc86QHdufOO9C14nvBf2844Ti9A4GxbkOgOJ6tn8Y1 ZgwuzvTo3VDyzA9pJgv7ifFTO7V0f/mZEroRHHzjasPu41jrM+ItHywNjVbqlwFD dGBybYciuglevA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:55 2026 by rpki-client