This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft File: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft (raw, json) Hash identifier: ou41537veWpVDGqdSbX9OC4pmt0uRdZGq7Dz9xUtwWU= Subject key identifier: 4B:5A:72:78:E3:20:A2:21:14:77:32:45:C5:28:A7:99:19:DC:EE:26 Authority key identifier: 6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4 Certificate issuer: /CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4 Certificate serial: 019C420FA9C4D7C3433A47D87C5D6923A5A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft Manifest number: 09F8 Signing time: Mon 09 Feb 2026 11:00:48 +0000 Manifest this update: Mon 09 Feb 2026 11:00:48 +0000 Manifest next update: Tue 10 Feb 2026 11:00:48 +0000 Files and hashes: 1: bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl (hash: /SMCxEZkPJ6eeE2QYF9zLIvl+V9g2qIKbLzkVQnY+JQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:a9:c4:d7:c3:43:3a:47:d8:7c:5d:69:23:a5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfc3da2b8b2e49cb531171e910edcee79ae58a4 Validity Not Before: Feb 9 11:00:48 2026 GMT Not After : Feb 10 11:00:48 2026 GMT Subject: CN=4b5a7278e320a22114773245c528a79919dcee26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:53:a7:63:e0:45:ff:13:cc:8a:cb:e1:59:f9: 98:af:de:72:d4:eb:a5:f1:ce:ac:9a:29:a0:28:c9: 52:b9:ac:f8:3b:43:ea:51:9b:b6:59:f1:4a:7b:fa: 16:ad:0b:7e:71:92:9c:65:b8:b8:14:b8:d3:74:8e: 7e:11:67:f1:b9:12:c9:f9:f1:87:05:51:a6:c9:66: 03:05:ca:b7:49:da:7a:0d:8b:bd:b3:f1:90:3e:56: ab:a5:55:fe:61:f0:8d:f2:93:d8:23:bc:e1:6c:43: 2a:43:1a:c3:79:e0:28:3a:2b:9d:ca:e5:f6:60:1c: a9:4e:84:44:d8:c7:71:0f:e2:1c:ab:ca:94:85:c2: b4:16:4b:b8:5e:a8:e0:d8:17:10:a1:3b:0b:92:c3: ea:9c:11:b8:39:79:51:0c:22:93:5c:32:6c:83:9d: dc:13:80:88:0a:d3:1e:76:07:9f:ae:82:1f:0a:e7: be:98:e6:7d:b8:f1:3c:d5:68:be:13:87:ce:fd:51: d1:bc:e9:dc:36:ca:14:5f:8c:48:be:10:44:5e:97: 3e:c3:11:f4:9a:0f:91:db:fd:d4:8d:45:87:03:b2: c2:33:d6:23:5c:13:a7:c0:cb:bb:18:ab:85:c0:13: 8e:d8:4b:36:77:07:5e:16:76:7c:cc:a4:74:6c:c8: 65:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5A:72:78:E3:20:A2:21:14:77:32:45:C5:28:A7:99:19:DC:EE:26 X509v3 Authority Key Identifier: keyid:6D:FC:3D:A2:B8:B2:E4:9C:B5:31:17:1E:91:0E:DC:EE:79:AE:58:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7d9a98-5ff7-4282-b5fd-ddd4b0a1b9a6/1/bfw9oriy5Jy1MRcekQ7c7nmuWKQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:bc:3c:1c:7a:c5:b1:63:23:e4:13:de:6d:1d:ba:74:99:72: 61:74:d3:bb:b1:67:3c:b6:2a:22:9e:a7:24:5a:4b:de:58:1e: 52:38:4b:3f:d5:66:1c:62:45:0b:b5:dc:46:e2:b8:80:40:8d: 45:63:bc:de:ed:99:28:7b:7a:0e:a5:7e:ea:ed:51:4d:22:80: 90:d7:5f:76:35:a7:6d:2e:b3:c6:45:9c:63:fa:2f:1b:29:58: bb:f4:41:90:df:c9:be:fd:a8:62:b7:aa:16:8b:e6:2d:67:f1: 10:36:a3:8f:3e:e2:e6:e9:c7:44:b0:c7:0b:f0:53:29:56:13: 65:26:46:59:fe:c4:d2:07:da:33:30:dd:07:15:a2:50:61:ff: 0f:02:e6:f2:6a:a9:5a:bf:83:00:02:fa:6a:5b:f0:74:b7:c0: bb:32:b6:17:cf:28:e4:7d:70:e0:df:d9:26:33:d9:e2:82:fb: 2f:f8:39:09:68:ab:a0:11:58:6d:00:ca:4e:f2:d3:da:28:c2: 5f:6c:c0:ab:8b:b9:b9:d0:95:c3:60:73:7c:2c:82:97:08:73: 04:e8:6d:9e:d0:79:6c:4e:94:3f:a8:af:37:50:9c:87:27:75: 10:bc:73:4f:b6:2a:39:32:53:bc:42:49:cf:13:37:70:b7:29: 05:fc:46:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6nE18NDOkfYfF1pI6WnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmMzZGEyYjhiMmU0OWNiNTMxMTcxZTkxMGVkY2VlNzlh ZTU4YTQwHhcNMjYwMjA5MTEwMDQ4WhcNMjYwMjEwMTEwMDQ4WjAzMTEwLwYDVQQD Eyg0YjVhNzI3OGUzMjBhMjIxMTQ3NzMyNDVjNTI4YTc5OTE5ZGNlZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1OnY+BF/xPMisvhWfmYr95y1Oul 8c6smimgKMlSuaz4O0PqUZu2WfFKe/oWrQt+cZKcZbi4FLjTdI5+EWfxuRLJ+fGH BVGmyWYDBcq3Sdp6DYu9s/GQPlarpVX+YfCN8pPYI7zhbEMqQxrDeeAoOiudyuX2 YBypToRE2MdxD+Icq8qUhcK0Fku4Xqjg2BcQoTsLksPqnBG4OXlRDCKTXDJsg53c E4CICtMedgefroIfCue+mOZ9uPE81Wi+E4fO/VHRvOncNsoUX4xIvhBEXpc+wxH0 mg+R2/3UjUWHA7LCM9YjXBOnwMu7GKuFwBOO2Es2dwdeFnZ8zKR0bMhlSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtacnjjIKIhFHcyRcUop5kZ3O4mMB8GA1UdIwQY MBaAFG38PaK4suSctTEXHpEO3O55rlikMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83ZDlhOTgtNWZmNy00MjgyLWI1ZmQt ZGRkNGIwYTFiOWE2LzEvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS83ZDlhOTgtNWZmNy00MjgyLWI1ZmQtZGRkNGIwYTFiOWE2 LzEvYmZ3OW9yaXk1SnkxTVJjZWtRN2M3bm11V0tRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7w8HHrF sWMj5BPebR26dJlyYXTTu7FnPLYqIp6nJFpL3lgeUjhLP9VmHGJFC7XcRuK4gECN RWO83u2ZKHt6DqV+6u1RTSKAkNdfdjWnbS6zxkWcY/ovGylYu/RBkN/Jvv2oYreq FovmLWfxEDajjz7i5unHRLDHC/BTKVYTZSZGWf7E0gfaMzDdBxWiUGH/DwLm8mqp Wr+DAAL6alvwdLfAuzK2F88o5H1w4N/ZJjPZ4oL7L/g5CWiroBFYbQDKTvLT2ijC X2zAq4u5udCVw2BzfCyClwhzBOhtntB5bE6UP6ivN1Cchyd1ELxzT7YqOTJTvEJJ zxM3cLcpBfxGJA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:00 2026 by rpki-client