This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft File: bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json) Hash identifier: bxcQyfrPsNMmFLd+QpZrkMpGeLrFQbnswUf4RFvkZL4= Subject key identifier: 25:54:84:F2:D6:B6:C2:8E:01:24:FC:6B:39:7C:4D:D7:FA:F6:55:80 Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9 Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9 Certificate serial: 019C43FE6B93F59CCAF561254F26449359DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft Manifest number: 027C Signing time: Mon 09 Feb 2026 20:01:12 +0000 Manifest this update: Mon 09 Feb 2026 20:01:12 +0000 Manifest next update: Tue 10 Feb 2026 20:01:12 +0000 Files and hashes: 1: 5keHs3ZF32HHKjKjaH3sZPymTNw.roa (hash: gQldWta3BCOowcdKdH4KVhP0tTXoPexAJ5F4Iq4GDNs=) 2: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: k7eXAwvp5eoVwhgGJJhe+Ra7acbYJ6LQTS0y+Chjfso=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:6b:93:f5:9c:ca:f5:61:25:4f:26:44:93:59:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9 Validity Not Before: Feb 9 20:01:12 2026 GMT Not After : Feb 10 20:01:12 2026 GMT Subject: CN=255484f2d6b6c28e0124fc6b397c4dd7faf65580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:5f:12:63:94:50:16:e1:5d:67:3f:de:f1: 2e:48:c1:43:9f:be:8d:7c:fa:a0:7c:f4:f4:be:fc: a4:0f:8d:f5:6d:42:f3:cc:2d:bf:e4:43:0c:6c:83: ca:fc:81:4f:b1:84:bb:45:32:a9:a6:63:09:6f:ab: 3d:10:62:ba:c2:12:8c:c6:9a:e8:a7:5a:b0:03:37: e3:51:01:d7:ef:3c:63:b1:ac:cc:2b:e6:d8:04:63: 8e:9d:f3:77:d8:33:ab:39:06:de:34:75:30:ed:34: ae:9e:ea:39:f8:b4:79:ba:91:86:be:3f:35:8f:e6: 0e:d3:a9:b4:21:00:35:2c:a2:49:bc:c3:94:fc:91: a3:3a:6e:b8:28:a4:35:03:d0:ed:6a:a4:e6:82:dd: f4:5a:46:5c:d8:4e:9c:46:3a:eb:25:ca:29:3d:58: 45:fe:6c:f6:f4:d3:dd:64:48:70:24:8d:17:95:81: 77:fe:41:cd:ea:2c:c3:48:57:dd:a4:44:fc:f2:be: d9:49:97:0d:43:e4:9b:d3:9a:f1:38:4e:8a:4d:de: 05:eb:29:46:7d:f8:fe:a6:0e:7b:6c:32:cd:f5:e3: e4:d9:03:83:c5:0a:34:7f:6d:4f:79:48:f5:64:3a: 7c:62:3a:01:44:c4:f8:ea:fd:df:e9:c4:8d:e3:78: 79:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:54:84:F2:D6:B6:C2:8E:01:24:FC:6B:39:7C:4D:D7:FA:F6:55:80 X509v3 Authority Key Identifier: keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:d8:bb:29:3f:c1:e5:c1:0f:c3:c1:a6:24:2e:ab:b1:3f:b1: 63:83:d0:25:fc:5b:92:b4:6d:fa:b4:1a:e0:59:31:c4:19:90: b9:31:07:ce:d6:b1:9c:b5:fb:11:3f:6c:c1:fe:a5:b8:14:ff: 77:20:a2:a5:25:82:ca:18:63:b1:4a:46:20:be:a6:14:1d:a6: 39:41:d6:96:2b:1c:cb:45:25:4c:75:b2:71:81:78:5f:2b:bd: 89:ad:84:da:1e:68:80:cb:20:40:b9:39:ab:d3:84:d3:98:d9: 3f:5c:aa:be:9e:6e:ec:71:03:93:01:88:ad:b5:1f:3a:e4:0b: a0:0d:68:fd:91:b2:26:47:95:ba:d9:38:23:11:33:2e:69:5d: 07:4a:7a:5c:2e:4e:79:a1:01:5a:74:e5:30:be:e7:59:a3:15: 44:7f:86:5d:65:b8:d5:90:92:62:8a:94:b6:12:4e:85:46:cd: 14:4e:d9:12:e1:45:3d:b2:94:52:e9:30:41:e7:e3:df:91:8f: a7:a2:68:ac:ca:55:60:50:bc:93:d6:89:06:c0:ca:d7:b4:b4: dc:de:f6:aa:14:dc:27:c4:3c:c4:99:d1:a9:b5:0c:6e:40:89: 1f:71:1c:75:9b:5a:c1:da:2e:f5:c8:d5:f2:e9:7d:b5:7f:08: 36:ee:90:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/muT9ZzK9WElTyZEk1ndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlN2ViMTMxOGEzY2M4ODM0ZjVjMDY4NTRiZWMxNGY1ODM3 NzQ2ZDkwHhcNMjYwMjA5MjAwMTEyWhcNMjYwMjEwMjAwMTEyWjAzMTEwLwYDVQQD EygyNTU0ODRmMmQ2YjZjMjhlMDEyNGZjNmIzOTdjNGRkN2ZhZjY1NTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfhfEmOUUBbhXWc/3vEuSMFDn76N fPqgfPT0vvykD431bULzzC2/5EMMbIPK/IFPsYS7RTKppmMJb6s9EGK6whKMxpro p1qwAzfjUQHX7zxjsazMK+bYBGOOnfN32DOrOQbeNHUw7TSunuo5+LR5upGGvj81 j+YO06m0IQA1LKJJvMOU/JGjOm64KKQ1A9DtaqTmgt30WkZc2E6cRjrrJcopPVhF /mz29NPdZEhwJI0XlYF3/kHN6izDSFfdpET88r7ZSZcNQ+Sb05rxOE6KTd4F6ylG ffj+pg57bDLN9ePk2QODxQo0f21PeUj1ZDp8YjoBRMT46v3f6cSN43h5pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCVUhPLWtsKOAST8azl8Tdf69lWAMB8GA1UdIwQY MBaAFG5+sTGKPMiDT1wGhUvsFPWDd0bZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDkt OTlhODA3MDBhNTViLzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yMjhjNDgtMGNjZS00YjgyLThhZDktOTlhODA3MDBhNTVi LzEvYm42eE1Zbzh5SU5QWEFhRlMtd1U5WU4zUnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9i7KT/B 5cEPw8GmJC6rsT+xY4PQJfxbkrRt+rQa4FkxxBmQuTEHztaxnLX7ET9swf6luBT/ dyCipSWCyhhjsUpGIL6mFB2mOUHWliscy0UlTHWycYF4Xyu9ia2E2h5ogMsgQLk5 q9OE05jZP1yqvp5u7HEDkwGIrbUfOuQLoA1o/ZGyJkeVutk4IxEzLmldB0p6XC5O eaEBWnTlML7nWaMVRH+GXWW41ZCSYoqUthJOhUbNFE7ZEuFFPbKUUukwQefj35GP p6JorMpVYFC8k9aJBsDK17S03N72qhTcJ8Q8xJnRqbUMbkCJH3EcdZtawdou9cjV 8ul9tX8INu6QWA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:11 2026 by rpki-client