This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft File: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft (raw, json) Hash identifier: /vLKiuohtYrx0vdVkqQsQ92wAHQmfgzLc1HkuGw9EfU= Subject key identifier: 35:41:DE:71:A6:78:6D:F5:34:6E:E2:62:85:9A:B6:23:A2:AF:79:AC Authority key identifier: 6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F Certificate issuer: /CN=6dffcb87c2246fa389c428e0f153edf259e5450f Certificate serial: 019C42103C7A9A3DF41B934DAD0420997303 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft Manifest number: 0C Signing time: Mon 09 Feb 2026 11:01:26 +0000 Manifest this update: Mon 09 Feb 2026 11:01:26 +0000 Manifest next update: Tue 10 Feb 2026 11:01:26 +0000 Files and hashes: 1: bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl (hash: Wskj+PJ/XadEvzeZjsYndS28Esr8UfCNRWmfB5T0nVA=) 2: cQwjsCo9gkIA6iPJNtB7F11xkU0.roa (hash: v4xVa178+XaCuwEjmAANdS9KMbdbv5lyk3k50cP3nxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:3c:7a:9a:3d:f4:1b:93:4d:ad:04:20:99:73:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dffcb87c2246fa389c428e0f153edf259e5450f Validity Not Before: Feb 9 11:01:26 2026 GMT Not After : Feb 10 11:01:26 2026 GMT Subject: CN=3541de71a6786df5346ee262859ab623a2af79ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:24:dc:66:91:e4:e8:bb:1b:8b:16:7e:e2:88: c6:32:3e:9e:ae:34:a5:45:02:3c:fe:67:8d:32:20: ab:d0:45:c9:7b:b8:b3:24:b9:81:8e:76:ff:45:74: ef:b5:dc:69:98:da:a6:df:4e:ff:32:be:b4:c9:b8: 13:c5:f6:4e:1f:e1:01:b2:26:b4:b2:35:60:cb:62: 1d:03:6f:0f:ea:87:4b:84:86:ac:0d:17:3f:81:27: 30:be:6c:9e:33:48:5b:41:b6:e1:07:23:22:10:da: 50:2a:ef:8c:70:da:70:cc:eb:de:e4:c3:15:84:20: bc:f5:55:91:90:5d:62:c0:56:44:65:2d:2a:3f:0e: 15:f3:bd:94:a6:d8:ee:26:1b:8b:a0:24:33:c4:69: 2b:94:99:57:b4:ac:19:02:e6:a4:20:9e:e5:de:84: e8:1f:3c:3a:36:88:5e:18:17:19:7f:0d:2c:5e:a2: 99:d1:a3:55:0d:a7:06:b2:b7:9a:e3:7b:11:1f:fa: bd:f4:7c:d7:95:eb:34:ae:40:a7:05:3c:be:25:93: ab:ac:97:53:eb:fe:8d:88:31:99:3f:6a:0b:e9:62: 8e:ea:6a:c4:67:88:b9:26:8c:f3:fa:5a:40:96:53: a6:55:ad:b3:57:1f:e5:ca:cd:34:da:cc:12:98:89: bd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:41:DE:71:A6:78:6D:F5:34:6E:E2:62:85:9A:B6:23:A2:AF:79:AC X509v3 Authority Key Identifier: keyid:6D:FF:CB:87:C2:24:6F:A3:89:C4:28:E0:F1:53:ED:F2:59:E5:45:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a633a6-27b2-4174-a7b0-6aedf1043c73/1/bf_Lh8Ikb6OJxCjg8VPt8lnlRQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:59:9c:8f:8c:0a:34:bf:ba:28:63:e4:bf:b3:01:97:24:01: 7e:f5:15:47:d7:14:34:20:6c:0b:a1:0f:f5:54:23:fc:13:04: 2a:90:b2:d0:3d:af:af:eb:13:8a:16:a7:13:be:ca:67:ec:13: 07:a1:af:23:38:22:10:a5:bb:4d:3d:c0:33:e8:83:f8:e1:07: e4:fe:dd:fc:d8:d4:05:e8:a9:db:2f:7c:c9:4b:1a:73:8a:d8: c7:24:e7:51:13:c5:ab:dc:70:45:d1:7f:59:bd:a9:f6:29:4c: 4c:95:ec:b8:02:33:12:3b:b4:26:ac:cc:4b:a4:96:be:cf:0f: 43:64:9f:d8:2c:8d:17:e4:63:0b:8c:9b:b6:90:3b:c3:0c:4e: 58:ab:cb:42:bf:0c:ba:89:d8:3f:95:86:8b:23:25:93:05:36: 8e:e2:81:de:cf:35:e8:31:a7:58:b3:47:28:cc:b3:8a:10:79: 11:f4:f8:e9:4b:f4:c8:0b:d3:e8:2b:d0:fb:d9:f7:e4:3e:5b: bf:17:8f:00:f3:82:bd:29:e8:c7:37:31:7d:bf:74:0c:89:59: 98:34:94:0a:52:f7:11:7d:15:68:8e:17:73:0a:cc:ac:7b:77: 8d:61:fa:db:af:9c:e5:96:17:82:28:1c:af:6d:ec:75:24:22: 15:98:d8:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEDx6mj30G5NNrQQgmXMDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmZjYjg3YzIyNDZmYTM4OWM0MjhlMGYxNTNlZGYyNTll NTQ1MGYwHhcNMjYwMjA5MTEwMTI2WhcNMjYwMjEwMTEwMTI2WjAzMTEwLwYDVQQD EygzNTQxZGU3MWE2Nzg2ZGY1MzQ2ZWUyNjI4NTlhYjYyM2EyYWY3OWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiTcZpHk6LsbixZ+4ojGMj6erjSl RQI8/meNMiCr0EXJe7izJLmBjnb/RXTvtdxpmNqm307/Mr60ybgTxfZOH+EBsia0 sjVgy2IdA28P6odLhIasDRc/gScwvmyeM0hbQbbhByMiENpQKu+McNpwzOve5MMV hCC89VWRkF1iwFZEZS0qPw4V872UptjuJhuLoCQzxGkrlJlXtKwZAuakIJ7l3oTo Hzw6NoheGBcZfw0sXqKZ0aNVDacGsrea43sRH/q99HzXles0rkCnBTy+JZOrrJdT 6/6NiDGZP2oL6WKO6mrEZ4i5Jozz+lpAllOmVa2zVx/lys002swSmIm9cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVB3nGmeG31NG7iYoWatiOir3msMB8GA1UdIwQY MBaAFG3/y4fCJG+jicQo4PFT7fJZ5UUPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZfTGg4SWtiNk9KeENqZzhWUHQ4bG5sUlE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hNjMzYTYtMjdiMi00MTc0LWE3YjAt NmFlZGYxMDQzYzczLzEvYmZfTGg4SWtiNk9KeENqZzhWUHQ4bG5sUlE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hNjMzYTYtMjdiMi00MTc0LWE3YjAtNmFlZGYxMDQzYzcz LzEvYmZfTGg4SWtiNk9KeENqZzhWUHQ4bG5sUlE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbFmcj4wK NL+6KGPkv7MBlyQBfvUVR9cUNCBsC6EP9VQj/BMEKpCy0D2vr+sTihanE77KZ+wT B6GvIzgiEKW7TT3AM+iD+OEH5P7d/NjUBeip2y98yUsac4rYxyTnURPFq9xwRdF/ Wb2p9ilMTJXsuAIzEju0JqzMS6SWvs8PQ2Sf2CyNF+RjC4ybtpA7wwxOWKvLQr8M uonYP5WGiyMlkwU2juKB3s816DGnWLNHKMyzihB5EfT46Uv0yAvT6CvQ+9n35D5b vxePAPOCvSnoxzcxfb90DIlZmDSUClL3EX0VaI4XcwrMrHt3jWH626+c5ZYXgigc r23sdSQiFZjYEQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:03 2026 by rpki-client