This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft File: bkif4cfiCgsMY4QsRcFsV2MXhdM.mft (raw, json) Hash identifier: 6pWOGVqBPssKNOcDwCBuKMfIVc40iigk1davGUpCnuo= Subject key identifier: 90:AB:15:B6:CB:02:25:99:9F:AC:AD:4E:2E:7E:7D:4D:B5:9B:F4:D7 Authority key identifier: 6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3 Certificate issuer: /CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3 Certificate serial: 019C43592BEAFEA0CA95DC7655E12858760E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 17:00:43 +0000 Manifest this update: Mon 09 Feb 2026 17:00:43 +0000 Manifest next update: Tue 10 Feb 2026 17:00:43 +0000 Files and hashes: 1: 7y9hj1vi8evyxMWsiJIGH1_53AM.roa (hash: Q69uQTzaOq7UQxdu+Czlq7rx75YhJrEs8hTR3Ul9WN0=) 2: bkif4cfiCgsMY4QsRcFsV2MXhdM.crl (hash: daHqrOkZvS/h2lZN2qMDUFKJZTdFkyW2Zx4PR10MH+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:2b:ea:fe:a0:ca:95:dc:76:55:e1:28:58:76:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e489fe1c7e20a0b0c63842c45c16c57631785d3 Validity Not Before: Feb 9 17:00:43 2026 GMT Not After : Feb 10 17:00:43 2026 GMT Subject: CN=90ab15b6cb0225999facad4e2e7e7d4db59bf4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:90:ea:de:92:9d:ee:83:1f:b8:95:58:66:b4: 5c:0a:6d:5a:fc:ef:56:37:25:ff:7b:f1:0a:a4:dd: be:b5:2c:db:cc:fa:9c:6f:c4:75:b0:97:23:fc:a4: 58:0d:bb:94:2a:bb:bf:d0:5d:41:26:b7:a4:a3:9e: 64:bf:cf:8c:33:f4:89:f2:4a:55:07:c3:37:83:eb: 41:0b:27:a1:16:a0:1f:14:cc:59:74:21:bb:76:c7: 16:45:42:9c:54:c2:cf:5f:66:86:f9:fb:87:bf:4b: 86:c9:2f:a4:1b:8b:6d:59:7f:91:fc:98:91:c7:be: 81:67:45:67:50:34:7f:23:c0:70:fa:6d:42:1c:ef: 33:5c:97:7d:7e:a8:e4:58:7e:59:9a:36:b9:22:c0: c7:dd:d5:4b:a1:53:2b:de:b4:aa:78:69:31:34:7a: 87:f5:92:0b:b6:2a:11:4c:be:80:c0:2b:cd:7e:a8: 4b:bf:c9:e3:5f:81:9a:bd:bf:f0:a3:a8:22:61:9d: 6e:c3:47:dc:ff:47:36:e0:f5:8e:b5:05:90:a9:31: fb:8a:bc:f9:e7:4b:9c:2b:ce:b9:a4:d6:c8:aa:02: 01:6c:d5:92:e6:b4:f6:30:16:5f:cd:e9:18:fb:6e: 7e:b0:9b:10:c5:dd:57:b3:13:e0:d9:e2:17:77:6a: da:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AB:15:B6:CB:02:25:99:9F:AC:AD:4E:2E:7E:7D:4D:B5:9B:F4:D7 X509v3 Authority Key Identifier: keyid:6E:48:9F:E1:C7:E2:0A:0B:0C:63:84:2C:45:C1:6C:57:63:17:85:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkif4cfiCgsMY4QsRcFsV2MXhdM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/f84198-2bdb-447d-8722-d8869311499a/1/bkif4cfiCgsMY4QsRcFsV2MXhdM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:9f:ae:49:44:0c:9b:ca:24:bd:24:e0:47:cf:5e:e3:9b:d4: de:02:72:11:33:7b:e3:d9:40:43:0b:54:dc:d1:c5:d2:08:29: 2e:0c:28:70:d3:56:2d:7e:c8:db:c5:28:a5:db:ba:35:e5:ee: ca:4c:5c:8e:20:c8:b8:26:40:85:ab:a5:cd:7f:4b:2f:b4:f3: b3:6a:6f:92:9e:2f:30:1e:98:8c:17:16:b8:31:26:60:4f:4c: d1:ae:05:7b:6b:f4:44:33:05:f1:d8:09:0d:72:f4:b2:8a:27: f1:f8:f8:7b:2b:23:06:89:9c:22:17:73:ee:e9:e9:b7:6e:0b: 4f:cc:5d:aa:02:45:b0:a6:25:80:27:1f:91:b2:6a:be:b3:80: 1c:2c:e1:02:8d:4e:07:81:bd:4c:52:6f:d2:ea:6f:de:e3:cd: 52:9d:bb:38:64:35:6d:e3:fa:47:27:fa:d3:d1:34:b8:57:a3: a7:73:1c:e9:7c:67:bc:be:24:36:97:23:41:6e:48:68:d7:33: 8b:8f:1d:a6:06:c6:4f:89:53:3e:e2:44:e1:c5:09:e4:b1:da: 19:71:37:95:2e:3c:7b:ab:82:d3:d1:93:1f:81:cc:e1:35:bc: c2:22:e9:70:e4:a0:df:80:06:3b:6c:24:8c:b1:cd:8c:65:63: c1:54:36:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSvq/qDKldx2VeEoWHYOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlNDg5ZmUxYzdlMjBhMGIwYzYzODQyYzQ1YzE2YzU3NjMx Nzg1ZDMwHhcNMjYwMjA5MTcwMDQzWhcNMjYwMjEwMTcwMDQzWjAzMTEwLwYDVQQD Eyg5MGFiMTViNmNiMDIyNTk5OWZhY2FkNGUyZTdlN2Q0ZGI1OWJmNGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZDq3pKd7oMfuJVYZrRcCm1a/O9W NyX/e/EKpN2+tSzbzPqcb8R1sJcj/KRYDbuUKru/0F1BJreko55kv8+MM/SJ8kpV B8M3g+tBCyehFqAfFMxZdCG7dscWRUKcVMLPX2aG+fuHv0uGyS+kG4ttWX+R/JiR x76BZ0VnUDR/I8Bw+m1CHO8zXJd9fqjkWH5Zmja5IsDH3dVLoVMr3rSqeGkxNHqH 9ZILtioRTL6AwCvNfqhLv8njX4Gavb/wo6giYZ1uw0fc/0c24PWOtQWQqTH7irz5 50ucK865pNbIqgIBbNWS5rT2MBZfzekY+25+sJsQxd1XsxPg2eIXd2rauwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCrFbbLAiWZn6ytTi5+fU21m/TXMB8GA1UdIwQY MBaAFG5In+HH4goLDGOELEXBbFdjF4XTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9mODQxOTgtMmJkYi00NDdkLTg3MjIt ZDg4NjkzMTE0OTlhLzEvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9mODQxOTgtMmJkYi00NDdkLTg3MjItZDg4NjkzMTE0OTlh LzEvYmtpZjRjZmlDZ3NNWTRRc1JjRnNWMk1YaGRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp5+uSUQM m8okvSTgR89e45vU3gJyETN749lAQwtU3NHF0ggpLgwocNNWLX7I28Uopdu6NeXu ykxcjiDIuCZAhaulzX9LL7Tzs2pvkp4vMB6YjBcWuDEmYE9M0a4Fe2v0RDMF8dgJ DXL0soon8fj4eysjBomcIhdz7unpt24LT8xdqgJFsKYlgCcfkbJqvrOAHCzhAo1O B4G9TFJv0upv3uPNUp27OGQ1beP6Ryf609E0uFejp3Mc6XxnvL4kNpcjQW5IaNcz i48dpgbGT4lTPuJE4cUJ5LHaGXE3lS48e6uC09GTH4HM4TW8wiLpcOSg34AGO2wk jLHNjGVjwVQ2KA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:25 2026 by rpki-client