This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft File: bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft (raw, json) Hash identifier: RfQI0kRrn+Cxbt+ZnACUG3nzwlJ8+EJwT/9LaBgIQPQ= Subject key identifier: FB:84:A4:10:81:4F:44:26:F8:E7:9B:51:FF:B8:BB:0E:36:1E:C5:9B Authority key identifier: 6C:0D:27:F0:D1:30:FE:E6:7D:82:D5:98:2F:7C:93:4F:87:91:CD:F0 Certificate issuer: /CN=6c0d27f0d130fee67d82d5982f7c934f8791cdf0 Certificate serial: 019C42B3F8E465A8DA1D696E5E796FB00782 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft Manifest number: 0232 Signing time: Mon 09 Feb 2026 14:00:16 +0000 Manifest this update: Mon 09 Feb 2026 14:00:16 +0000 Manifest next update: Tue 10 Feb 2026 14:00:16 +0000 Files and hashes: 1: bA0n8NEw_uZ9gtWYL3yTT4eRzfA.crl (hash: 2rgdNRYLMBLYVaCBXVjqimyVV5pspEapxfFDqt52JRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft rsync://rpki.ripe.net/repository/DEFAULT/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:f8:e4:65:a8:da:1d:69:6e:5e:79:6f:b0:07:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c0d27f0d130fee67d82d5982f7c934f8791cdf0 Validity Not Before: Feb 9 14:00:16 2026 GMT Not After : Feb 10 14:00:16 2026 GMT Subject: CN=fb84a410814f4426f8e79b51ffb8bb0e361ec59b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:40:fc:1f:ad:62:af:60:06:65:5a:58:3a:9f: 6d:46:17:f5:5c:14:37:aa:18:42:6a:4b:29:fa:a6: 5f:c3:b7:de:7d:c1:ad:1c:7d:95:22:70:f8:60:75: 75:c2:cf:5b:20:87:4c:df:77:07:c3:11:e0:d3:8e: 92:ea:3e:7d:db:18:dc:39:25:f0:47:88:dc:4c:02: 6c:26:0e:64:63:29:3d:db:be:ab:f1:d6:ed:d8:7f: 72:a9:a9:59:d6:46:f8:d7:42:e0:bf:0a:b3:1a:03: b2:d0:01:39:9a:f7:38:f9:f6:ce:67:00:d0:17:cf: 18:83:8a:d6:f9:02:d0:33:29:ba:67:de:93:fa:9d: 55:70:ba:62:08:7f:4b:18:36:76:b6:a2:50:4d:f5: e0:41:10:b6:8b:9f:5a:61:c1:90:87:55:f1:56:cf: c4:14:a3:fb:77:75:cf:3c:3f:02:95:02:3b:2c:e9: 1a:51:07:66:66:b7:0c:c5:a9:3c:0a:5d:6d:98:93: 36:01:e9:ae:c5:95:4f:94:c6:e0:3d:48:6a:63:2b: 61:ee:7b:d1:c5:d2:db:2f:f1:d3:3b:10:31:a7:1d: 7d:bb:48:ef:52:4e:6d:57:57:cb:55:f7:7d:fe:1c: 7d:46:e1:be:5a:ea:3f:14:87:69:c8:78:3e:05:95: f1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:84:A4:10:81:4F:44:26:F8:E7:9B:51:FF:B8:BB:0E:36:1E:C5:9B X509v3 Authority Key Identifier: keyid:6C:0D:27:F0:D1:30:FE:E6:7D:82:D5:98:2F:7C:93:4F:87:91:CD:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:9c:81:d1:04:c3:4b:af:a5:bd:37:12:29:ac:8a:0a:82:d4: 01:5a:87:5a:f4:7b:70:fd:41:e1:d7:fa:eb:f3:94:1a:38:f5: 32:3e:e0:d0:fa:73:06:0d:7f:cc:6f:d7:ef:b7:33:d9:cb:26: 04:1c:8e:80:a3:4e:f4:6f:12:67:ea:70:89:9b:1f:de:f2:98: 5b:e6:dd:45:af:67:47:bc:9b:ff:d8:d1:8d:48:1f:50:c1:41: c2:26:3e:7d:de:d5:50:87:c4:7c:b7:17:1a:64:84:c6:8a:a2: 2d:1b:27:bd:2f:c7:f0:11:cc:c1:bd:97:c0:cf:6a:59:07:ab: b5:d5:bd:72:fe:09:cc:5b:34:90:05:b6:a2:57:b1:e2:12:66: ae:f1:a1:32:13:65:56:ad:c5:1e:d5:da:31:ed:e9:c6:48:07: 3f:bd:0e:39:72:fc:a6:ee:ab:7c:fa:1e:6f:9b:cc:13:13:01: f6:a1:85:4c:5a:22:0c:22:f0:4e:1a:f8:b3:cf:14:1e:7c:aa: 20:0b:a3:53:44:4c:03:dd:7b:45:0b:38:56:17:42:da:f1:38: a0:b7:d5:94:98:5f:54:03:fc:4b:2a:46:fd:a5:5d:60:cb:da: 0a:83:d2:95:b5:ee:d0:0f:3b:de:c4:a1:32:29:2d:23:50:0d: 77:b0:95:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/jkZajaHWluXnlvsAeCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMGQyN2YwZDEzMGZlZTY3ZDgyZDU5ODJmN2M5MzRmODc5 MWNkZjAwHhcNMjYwMjA5MTQwMDE2WhcNMjYwMjEwMTQwMDE2WjAzMTEwLwYDVQQD EyhmYjg0YTQxMDgxNGY0NDI2ZjhlNzliNTFmZmI4YmIwZTM2MWVjNTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UD8H61ir2AGZVpYOp9tRhf1XBQ3 qhhCaksp+qZfw7fefcGtHH2VInD4YHV1ws9bIIdM33cHwxHg046S6j592xjcOSXw R4jcTAJsJg5kYyk9276r8dbt2H9yqalZ1kb410LgvwqzGgOy0AE5mvc4+fbOZwDQ F88Yg4rW+QLQMym6Z96T+p1VcLpiCH9LGDZ2tqJQTfXgQRC2i59aYcGQh1XxVs/E FKP7d3XPPD8ClQI7LOkaUQdmZrcMxak8Cl1tmJM2AemuxZVPlMbgPUhqYyth7nvR xdLbL/HTOxAxpx19u0jvUk5tV1fLVfd9/hx9RuG+Wuo/FIdpyHg+BZXx8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPuEpBCBT0Qm+OebUf+4uw42HsWbMB8GA1UdIwQY MBaAFGwNJ/DRMP7mfYLVmC98k0+Hkc3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkEwbjhORXdfdVo5Z3RXWUwzeVRUNGVSemZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85MjkyYzktMjRhYi00ZGJmLWJlYmUt ODk2M2Q1MjcxZjljLzEvYkEwbjhORXdfdVo5Z3RXWUwzeVRUNGVSemZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85MjkyYzktMjRhYi00ZGJmLWJlYmUtODk2M2Q1MjcxZjlj LzEvYkEwbjhORXdfdVo5Z3RXWUwzeVRUNGVSemZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5yB0QTD S6+lvTcSKayKCoLUAVqHWvR7cP1B4df66/OUGjj1Mj7g0PpzBg1/zG/X77cz2csm BByOgKNO9G8SZ+pwiZsf3vKYW+bdRa9nR7yb/9jRjUgfUMFBwiY+fd7VUIfEfLcX GmSExoqiLRsnvS/H8BHMwb2XwM9qWQertdW9cv4JzFs0kAW2olex4hJmrvGhMhNl Vq3FHtXaMe3pxkgHP70OOXL8pu6rfPoeb5vMExMB9qGFTFoiDCLwThr4s88UHnyq IAujU0RMA917RQs4VhdC2vE4oLfVlJhfVAP8SypG/aVdYMvaCoPSlbXu0A873sSh MiktI1ANd7CVqQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:07 2026 by rpki-client