This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json) Hash identifier: 4hPbt6u06kqdyvIeH5s0JjhfTDl5udb2o+QFXbia1YE= Subject key identifier: 33:83:49:DE:BC:82:83:FB:F5:60:47:F4:3C:22:DE:CA:8A:43:76:D2 Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d Certificate serial: 019C41A1FAFB956E11289427B201FC47C1F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 09:01:00 +0000 Manifest this update: Mon 09 Feb 2026 09:01:00 +0000 Manifest next update: Tue 10 Feb 2026 09:01:00 +0000 Files and hashes: 1: 8GCiWcx8mqq89-eKSSRHyEp78Jk.roa (hash: 1VoDgs3kjOrw6G1rdHG1fmbKleZRoSt+eF4wHzGq/bs=) 2: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: W9aiG67lVOFdYqRJ6pPjO1YTYK+GMFcP0VdE3E85O8Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:fa:fb:95:6e:11:28:94:27:b2:01:fc:47:c1:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d Validity Not Before: Feb 9 09:01:00 2026 GMT Not After : Feb 10 09:01:00 2026 GMT Subject: CN=338349debc8283fbf56047f43c22deca8a4376d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ea:55:8c:be:12:ea:c1:4d:9f:f2:2d:eb:09: b5:36:88:12:22:be:77:3d:b1:51:ec:b5:9f:68:cc: fd:91:b2:e2:60:48:9b:ad:db:2d:3f:1d:40:cf:68: e3:87:e5:5e:45:5c:2b:86:a1:d3:9b:76:2e:b2:71: ec:12:f7:2d:87:7b:d4:67:59:d1:96:0c:88:f3:8f: e9:2b:c7:76:92:d3:0b:7d:4d:22:3b:cd:2c:a0:0b: 17:95:3d:b6:79:15:38:04:fb:b0:64:d8:70:d4:5c: 10:ef:da:0c:60:0a:e1:fb:8f:5c:d4:9e:b7:77:fb: 4f:6f:d3:94:17:fb:5a:db:a2:d2:94:88:f8:c1:3e: b6:29:18:de:9b:9c:c1:b8:94:ac:eb:ea:11:89:16: dc:74:27:56:f2:4d:4c:04:7a:5b:be:09:a8:a2:1c: ad:d7:9a:0d:ed:c5:b6:67:83:76:09:c3:d8:aa:e4: 2f:88:f4:37:37:7d:a9:5e:86:65:37:88:a5:a7:6a: 7c:02:97:c0:16:b9:0e:84:d3:eb:89:8f:ac:d2:a0: 95:6b:61:9e:3f:40:12:e2:39:1d:17:c0:e4:cb:ba: e7:bc:07:3b:5a:70:70:ce:aa:d8:b8:d3:f1:17:2f: 6f:82:98:07:88:bc:e2:bf:96:e4:82:71:25:62:9c: 59:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:83:49:DE:BC:82:83:FB:F5:60:47:F4:3C:22:DE:CA:8A:43:76:D2 X509v3 Authority Key Identifier: keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e9:2d:83:78:e7:bd:4f:82:f2:be:a5:10:c9:de:51:e0:60: fd:2a:ed:89:ee:38:6b:b3:68:46:69:9f:f4:48:05:18:a4:32: 87:60:1f:b4:38:f7:01:6d:5f:04:80:27:3c:dd:73:ac:67:6a: d0:6c:23:a6:93:88:69:7c:94:c0:ba:b4:8c:b5:26:65:95:e8: 79:59:5e:af:8e:d9:b6:59:43:2a:90:3a:74:84:12:7d:82:cc: d1:c8:67:b4:1b:20:36:12:ef:90:4b:e8:75:f6:27:d9:e9:d8: 98:41:2a:41:73:f3:20:2a:9f:44:ff:1c:e9:06:7b:a8:bb:7a: 0a:31:33:fe:93:b8:ea:33:d5:1a:03:cd:e6:c2:7a:ed:e2:08: 95:e2:22:72:a4:f5:47:53:c3:e7:b8:ae:02:ca:b9:8f:52:7d: 74:72:d1:82:15:d3:81:d7:9d:68:58:38:53:06:f3:ff:a7:95: 91:45:93:33:d8:6a:99:7d:01:b8:29:d7:4e:9d:a6:37:0d:9b: 03:ff:56:e1:fb:eb:11:c3:6f:4f:76:71:dd:64:1f:43:54:b7: bd:9a:52:f6:ec:9d:a6:91:65:4f:42:11:28:4d:32:cd:d4:7a: 4b:86:fc:1c:23:96:11:11:90:0f:41:a1:1e:3a:4e:2d:7f:4e: 51:ae:29:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBofr7lW4RKJQnsgH8R8HwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZmYzZDg5OWUyNmZjODRmYjQzNzlmYjMyNWYxNzRiNTA3 NWNlMGQwHhcNMjYwMjA5MDkwMTAwWhcNMjYwMjEwMDkwMTAwWjAzMTEwLwYDVQQD EygzMzgzNDlkZWJjODI4M2ZiZjU2MDQ3ZjQzYzIyZGVjYThhNDM3NmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlupVjL4S6sFNn/It6wm1NogSIr53 PbFR7LWfaMz9kbLiYEibrdstPx1Az2jjh+VeRVwrhqHTm3YusnHsEvcth3vUZ1nR lgyI84/pK8d2ktMLfU0iO80soAsXlT22eRU4BPuwZNhw1FwQ79oMYArh+49c1J63 d/tPb9OUF/ta26LSlIj4wT62KRjem5zBuJSs6+oRiRbcdCdW8k1MBHpbvgmoohyt 15oN7cW2Z4N2CcPYquQviPQ3N32pXoZlN4ilp2p8ApfAFrkOhNPriY+s0qCVa2Ge P0AS4jkdF8Dky7rnvAc7WnBwzqrYuNPxFy9vgpgHiLziv5bkgnElYpxZkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDODSd68goP79WBH9Dwi3sqKQ3bSMB8GA1UdIwQY MBaAFGz/PYmeJvyE+0N5+zJfF0tQdc4NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQt NTQwOGY4ZDlkZmIxLzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9iMGM4NzUtMjRlMS00NDRkLWIwMWQtNTQwOGY4ZDlkZmIx LzEvYlA4OWlaNG1fSVQ3UTNuN01sOFhTMUIxemcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOktg3jn vU+C8r6lEMneUeBg/Srtie44a7NoRmmf9EgFGKQyh2AftDj3AW1fBIAnPN1zrGdq 0GwjppOIaXyUwLq0jLUmZZXoeVler47ZtllDKpA6dIQSfYLM0chntBsgNhLvkEvo dfYn2enYmEEqQXPzICqfRP8c6QZ7qLt6CjEz/pO46jPVGgPN5sJ67eIIleIicqT1 R1PD57iuAsq5j1J9dHLRghXTgdedaFg4Uwbz/6eVkUWTM9hqmX0BuCnXTp2mNw2b A/9W4fvrEcNvT3Zx3WQfQ1S3vZpS9uydppFlT0IRKE0yzdR6S4b8HCOWERGQD0Gh HjpOLX9OUa4pFg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:31 2026 by rpki-client