This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft File: BkAThp4LzSd4EEBTjflc-mfhFy4.mft (raw, json) Hash identifier: 2CdY6U2D9E1r4MoeNlbe2TeSZAblHXu6h6bp+cOfMcE= Subject key identifier: CC:5B:2D:C3:8E:5A:11:90:FB:07:DB:AE:6C:EC:BC:81:D8:CF:BD:0D Authority key identifier: 06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E Certificate issuer: /CN=064013869e0bcd27781040538df95cfa67e1172e Certificate serial: 019C43FDB27635BF42C45CB212F43A231B92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft Manifest number: 0598 Signing time: Mon 09 Feb 2026 20:00:25 +0000 Manifest this update: Mon 09 Feb 2026 20:00:25 +0000 Manifest next update: Tue 10 Feb 2026 20:00:25 +0000 Files and hashes: 1: BkAThp4LzSd4EEBTjflc-mfhFy4.crl (hash: 3Ta0OclHvXNHPBMMWhid399cMVr1+omb/j0O+dJuT+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:b2:76:35:bf:42:c4:5c:b2:12:f4:3a:23:1b:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=064013869e0bcd27781040538df95cfa67e1172e Validity Not Before: Feb 9 20:00:25 2026 GMT Not After : Feb 10 20:00:25 2026 GMT Subject: CN=cc5b2dc38e5a1190fb07dbae6cecbc81d8cfbd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:99:d3:56:b1:14:6c:5b:94:80:6c:9d:45:1f: a5:60:71:5f:b8:45:0d:d0:bb:29:de:24:da:95:87: fa:cb:49:25:9c:02:47:8a:29:f0:0a:7a:58:15:f4: 1f:6d:50:52:d9:0a:e2:2b:e6:45:c4:a2:82:1c:96: 8c:90:c1:46:b1:54:84:b1:c6:da:74:bf:b2:03:2b: 3e:e9:63:33:ae:f3:c4:36:c2:ba:af:63:b1:93:6a: 95:92:c3:b8:4a:08:0a:4b:59:f0:03:43:bd:a8:1e: 91:85:46:59:7b:18:a6:16:18:e6:20:b0:03:24:a2: 63:a8:a6:fe:fa:98:5c:6d:2b:20:d1:ec:6e:25:96: bd:83:e2:63:fe:57:4f:dd:62:fa:05:80:7e:9a:a8: 4d:6e:47:19:3e:9b:bb:09:ce:35:4e:1b:55:ce:b8: 2e:81:03:72:38:a0:31:47:6d:82:e3:b4:de:29:c8: 53:5d:de:28:a7:d2:c8:69:25:00:12:58:94:9f:10: 74:1f:67:99:59:c8:cf:39:f5:2c:09:78:01:32:df: cd:2f:ec:e3:bf:66:09:43:3f:fc:fa:ed:54:b6:97: 11:d0:53:9c:9a:49:86:e0:5c:80:d9:dc:d8:22:04: 0f:4e:35:75:e9:c1:d7:f4:05:86:35:d8:9f:e3:2b: 00:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5B:2D:C3:8E:5A:11:90:FB:07:DB:AE:6C:EC:BC:81:D8:CF:BD:0D X509v3 Authority Key Identifier: keyid:06:40:13:86:9E:0B:CD:27:78:10:40:53:8D:F9:5C:FA:67:E1:17:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BkAThp4LzSd4EEBTjflc-mfhFy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/50f64d-2be9-4289-a48e-409bd4aa162b/1/BkAThp4LzSd4EEBTjflc-mfhFy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ea:6b:7a:16:09:fc:47:ce:af:e9:ea:21:16:3c:2a:16:29: d4:fd:69:3c:f8:e5:31:08:2e:8b:9b:3c:5f:78:58:e7:bf:f3: 78:c1:bb:8a:4a:b2:03:13:95:7c:13:fe:a2:e7:a2:37:cf:80: 01:17:f4:53:c3:84:70:1b:d2:ef:5c:cb:8d:cd:c7:9b:a9:70: f2:5a:20:31:54:45:7a:c0:0e:5c:a1:3a:88:27:ea:8d:87:4a: 6b:93:02:86:6a:9f:03:85:98:47:a5:2e:64:85:fa:ba:8e:6b: cf:b4:b7:b5:d1:05:40:c6:1f:ea:46:91:87:5f:36:c3:b5:a2: 1d:31:45:3c:5c:cb:b9:4e:d6:c6:6f:96:a5:cb:0b:12:c9:37: 20:09:63:79:29:fd:a7:10:06:2c:f7:c2:a6:f7:ec:ad:28:43: ee:66:03:f8:63:9a:f8:6e:84:67:12:10:6f:18:2f:06:ec:4a: f6:fd:81:a8:aa:45:46:be:61:d1:b0:09:82:67:01:3c:45:71: 2f:5e:a1:06:a0:26:ff:df:a9:8e:cb:2a:d6:74:55:ae:a4:0f: 20:f9:b0:7c:55:8a:e6:2e:aa:7b:a9:d3:0c:33:a5:9f:00:20: 9f:0b:b2:20:5f:9b:a8:b6:d0:c0:43:a9:21:b4:6d:8e:0b:26: 45:45:f8:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/bJ2Nb9CxFyyEvQ6IxuSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2NDAxMzg2OWUwYmNkMjc3ODEwNDA1MzhkZjk1Y2ZhNjdl MTE3MmUwHhcNMjYwMjA5MjAwMDI1WhcNMjYwMjEwMjAwMDI1WjAzMTEwLwYDVQQD EyhjYzViMmRjMzhlNWExMTkwZmIwN2RiYWU2Y2VjYmM4MWQ4Y2ZiZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypnTVrEUbFuUgGydRR+lYHFfuEUN 0Lsp3iTalYf6y0klnAJHiinwCnpYFfQfbVBS2QriK+ZFxKKCHJaMkMFGsVSEscba dL+yAys+6WMzrvPENsK6r2Oxk2qVksO4SggKS1nwA0O9qB6RhUZZeximFhjmILAD JKJjqKb++phcbSsg0exuJZa9g+Jj/ldP3WL6BYB+mqhNbkcZPpu7Cc41ThtVzrgu gQNyOKAxR22C47TeKchTXd4op9LIaSUAEliUnxB0H2eZWcjPOfUsCXgBMt/NL+zj v2YJQz/8+u1UtpcR0FOcmkmG4FyA2dzYIgQPTjV16cHX9AWGNdif4ysAcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxbLcOOWhGQ+wfbrmzsvIHYz70NMB8GA1UdIwQY MBaAFAZAE4aeC80neBBAU435XPpn4RcuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81MGY2NGQtMmJlOS00Mjg5LWE0OGUt NDA5YmQ0YWExNjJiLzEvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81MGY2NGQtMmJlOS00Mjg5LWE0OGUtNDA5YmQ0YWExNjJi LzEvQmtBVGhwNEx6U2Q0RUVCVGpmbGMtbWZoRnk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuprehYJ /EfOr+nqIRY8KhYp1P1pPPjlMQgui5s8X3hY57/zeMG7ikqyAxOVfBP+oueiN8+A ARf0U8OEcBvS71zLjc3Hm6lw8logMVRFesAOXKE6iCfqjYdKa5MChmqfA4WYR6Uu ZIX6uo5rz7S3tdEFQMYf6kaRh182w7WiHTFFPFzLuU7Wxm+WpcsLEsk3IAljeSn9 pxAGLPfCpvfsrShD7mYD+GOa+G6EZxIQbxgvBuxK9v2BqKpFRr5h0bAJgmcBPEVx L16hBqAm/9+pjssq1nRVrqQPIPmwfFWK5i6qe6nTDDOlnwAgnwuyIF+bqLbQwEOp IbRtjgsmRUX4nA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:12 2026 by rpki-client