This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft File: BYmfOXZIcDij-mNDlSsUtNBysz0.mft (raw, json) Hash identifier: GSdx4McIwl2iCeH0SVTNjZ4cqYEinYyW87gjxyiy4X0= Subject key identifier: 8D:E1:B9:95:17:17:FA:31:73:5C:27:25:22:7B:DB:70:C0:30:AC:D8 Authority key identifier: 05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D Certificate issuer: /CN=05899f3976487038a3fa6343952b14b4d072b33d Certificate serial: 019C420F5B110C7A1911DA9E206B4A678609 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft Manifest number: 1544 Signing time: Mon 09 Feb 2026 11:00:28 +0000 Manifest this update: Mon 09 Feb 2026 11:00:28 +0000 Manifest next update: Tue 10 Feb 2026 11:00:28 +0000 Files and hashes: 1: 0JPqCz5cVo8rTb1eJx0gidaWu88.roa (hash: SDGEZvOiOT/nixCGJaFSNPktvCrQB07+Pf6zV5KlOY4=) 2: BYmfOXZIcDij-mNDlSsUtNBysz0.crl (hash: Gudr3ShbETz36spcohvrCbT7b5IpOf3pilbMIW1wv5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:5b:11:0c:7a:19:11:da:9e:20:6b:4a:67:86:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05899f3976487038a3fa6343952b14b4d072b33d Validity Not Before: Feb 9 11:00:28 2026 GMT Not After : Feb 10 11:00:28 2026 GMT Subject: CN=8de1b9951717fa31735c2725227bdb70c030acd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:0e:75:e5:9c:71:92:b2:39:0e:17:89:34: ab:43:9e:c7:55:f4:d5:7e:ca:5e:ed:0a:f1:3a:9d: 94:90:e9:ec:a9:da:1a:c1:db:c9:2d:a0:ca:b8:18: 3e:8b:67:ce:4c:dc:54:1c:e5:1a:42:3d:f5:17:94: 11:f6:a9:d9:d0:6b:dc:d3:e4:97:83:27:39:0d:c6: b6:c9:47:3a:19:6d:7e:22:ae:62:c4:4f:93:7e:6b: b3:77:2b:2e:ff:b7:0c:0e:88:16:a7:ed:33:55:11: 00:4c:48:5e:ff:d0:46:75:d7:9a:c1:7e:38:dc:a7: 9b:cc:84:ab:90:61:23:c5:51:54:eb:00:0c:a3:b3: 3e:c3:c8:f0:fe:a9:a6:36:ef:80:79:75:d4:fd:40: f5:d2:d2:91:62:fe:e7:fd:74:50:97:d6:b5:40:21: fb:2c:ca:b5:5a:35:8b:53:fc:92:a5:6f:62:d8:82: 92:d4:81:be:68:14:64:51:03:da:e3:72:f5:72:22: 8e:ee:ab:56:2b:ff:59:a1:b8:b9:99:50:0c:46:29: 5d:a7:67:a9:f2:57:36:ec:49:1c:16:3d:bd:3d:57: c0:ed:d3:ef:30:df:3c:0e:03:75:f2:88:d4:9d:79: 33:2f:fa:a3:f4:54:36:d7:b8:77:20:a9:d2:99:9a: 60:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E1:B9:95:17:17:FA:31:73:5C:27:25:22:7B:DB:70:C0:30:AC:D8 X509v3 Authority Key Identifier: keyid:05:89:9F:39:76:48:70:38:A3:FA:63:43:95:2B:14:B4:D0:72:B3:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYmfOXZIcDij-mNDlSsUtNBysz0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/1fce93-02ea-4f99-99c2-08c2123580ed/1/BYmfOXZIcDij-mNDlSsUtNBysz0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:fb:dc:74:5e:a8:9b:37:de:ab:2a:b1:d9:d9:e5:17:78:c1: a2:95:3d:28:d7:22:cd:33:c1:ff:4f:9e:e5:2b:8e:cb:3f:89: ef:66:f5:55:7e:ba:03:33:ea:26:03:46:af:01:23:62:d5:94: 1e:73:5d:be:7d:d5:5e:ca:9a:d5:26:0d:85:fc:ba:52:65:c5: 80:15:f6:6c:ff:1b:fe:32:66:32:08:b1:7a:4f:04:5c:62:d2: 1d:0d:bb:4c:1a:56:ad:bf:3a:0b:fb:e1:e1:20:5f:d0:53:9e: 0b:35:47:10:ec:4f:03:03:38:90:51:f2:17:fd:42:d9:27:7b: c7:d9:28:b0:07:45:09:1b:9a:50:b0:3c:e5:52:e9:ef:ba:ea: ea:40:8d:7d:17:95:45:47:3b:cd:41:e9:b5:47:6b:b2:38:ab: 41:54:1e:65:f1:c0:55:05:db:29:e1:80:8d:06:3a:9f:e6:4a: 3f:56:12:0c:0b:8a:87:74:c7:64:16:4b:b2:53:0f:d0:19:70: 6b:bf:7c:dd:33:62:8f:d1:c8:7e:95:51:ef:aa:2c:d0:24:75: 52:27:0c:e8:23:2d:c4:c4:e7:a9:9a:82:af:70:56:f4:e5:ad: b3:ea:31:1d:36:06:d4:1b:4f:de:b5:8e:0f:bd:f4:4f:f3:1c: a9:3e:cb:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD1sRDHoZEdqeIGtKZ4YJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1ODk5ZjM5NzY0ODcwMzhhM2ZhNjM0Mzk1MmIxNGI0ZDA3 MmIzM2QwHhcNMjYwMjA5MTEwMDI4WhcNMjYwMjEwMTEwMDI4WjAzMTEwLwYDVQQD Eyg4ZGUxYjk5NTE3MTdmYTMxNzM1YzI3MjUyMjdiZGI3MGMwMzBhY2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4IOdeWccZKyOQ4XiTSrQ57HVfTV fspe7QrxOp2UkOnsqdoawdvJLaDKuBg+i2fOTNxUHOUaQj31F5QR9qnZ0Gvc0+SX gyc5Dca2yUc6GW1+Iq5ixE+Tfmuzdysu/7cMDogWp+0zVREATEhe/9BGddeawX44 3KebzISrkGEjxVFU6wAMo7M+w8jw/qmmNu+AeXXU/UD10tKRYv7n/XRQl9a1QCH7 LMq1WjWLU/ySpW9i2IKS1IG+aBRkUQPa43L1ciKO7qtWK/9Zobi5mVAMRildp2ep 8lc27EkcFj29PVfA7dPvMN88DgN18ojUnXkzL/qj9FQ217h3IKnSmZpg9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI3huZUXF/oxc1wnJSJ723DAMKzYMB8GA1UdIwQY MBaAFAWJnzl2SHA4o/pjQ5UrFLTQcrM9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzIt MDhjMjEyMzU4MGVkLzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS8xZmNlOTMtMDJlYS00Zjk5LTk5YzItMDhjMjEyMzU4MGVk LzEvQlltZk9YWkljRGlqLW1ORGxTc1V0TkJ5c3owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvvcdF6o mzfeqyqx2dnlF3jBopU9KNcizTPB/0+e5SuOyz+J72b1VX66AzPqJgNGrwEjYtWU HnNdvn3VXsqa1SYNhfy6UmXFgBX2bP8b/jJmMgixek8EXGLSHQ27TBpWrb86C/vh 4SBf0FOeCzVHEOxPAwM4kFHyF/1C2Sd7x9kosAdFCRuaULA85VLp77rq6kCNfReV RUc7zUHptUdrsjirQVQeZfHAVQXbKeGAjQY6n+ZKP1YSDAuKh3THZBZLslMP0Blw a7983TNij9HIfpVR76os0CR1UicM6CMtxMTnqZqCr3BW9OWts+oxHTYG1BtP3rWO D730T/McqT7LaQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:26 2026 by rpki-client