This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft File: bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json) Hash identifier: 6Edo4AkSqS67gRPMuXbRRm6CSRXxg1uvhMHB9mCeNeg= Subject key identifier: 3D:A4:3B:37:BB:FC:6D:9B:05:F0:47:85:82:12:0A:E4:47:AD:BF:F9 Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8 Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8 Certificate serial: 019C4358C371861B0801AE6D870DE8C43133 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 17:00:16 +0000 Manifest this update: Mon 09 Feb 2026 17:00:16 +0000 Manifest next update: Tue 10 Feb 2026 17:00:16 +0000 Files and hashes: 1: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: mP4iMMog8JuL+k6V1uudtzJSXw6QKQ0/N8We8XGIpCY=) 2: owEvoaLYmAtt2x6Ldrjk9RRIZAk.roa (hash: 9TpRwQpuHtfrhW+ZMSGdpj4DGSlbRkJ1Rg7NyhKguk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:c3:71:86:1b:08:01:ae:6d:87:0d:e8:c4:31:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8 Validity Not Before: Feb 9 17:00:16 2026 GMT Not After : Feb 10 17:00:16 2026 GMT Subject: CN=3da43b37bbfc6d9b05f0478582120ae447adbff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:0f:fc:bb:dd:4d:25:1d:ca:15:c0:ba:a7: e7:da:00:1f:0f:25:df:b0:b0:db:05:95:9b:84:90: 35:5b:c8:11:20:04:9f:50:b4:7e:30:00:f8:e6:57: e0:98:84:8c:8c:40:f5:fa:a4:cd:19:1b:c7:7b:00: 3b:33:89:9d:1c:b6:01:db:90:97:0a:c0:53:8b:61: af:f8:8a:8a:c1:1e:ac:e4:64:1c:cb:1f:4b:3e:52: 80:0f:36:22:eb:21:b4:6c:5c:6c:45:54:45:98:f7: 5d:41:73:2f:f0:98:84:5a:91:a9:ba:b0:ab:48:3f: e8:b5:88:19:15:1e:ed:6a:fa:dc:14:76:2a:bc:e5: 0e:78:df:36:c4:c6:5e:f9:58:3f:31:fa:26:b1:39: 36:15:0a:32:6b:68:ee:69:e8:ca:e4:6d:bc:85:4c: 05:81:31:e0:ba:71:0e:6e:83:c0:f3:9c:38:55:77: c3:72:d6:22:d5:1c:bc:9d:0a:33:0b:e7:e0:37:95: 38:5f:1f:4e:de:f6:8d:0f:b2:0d:5a:8f:c0:3b:35: 00:d7:75:42:00:e9:c5:6c:b7:04:2f:20:e5:82:53: 40:2b:d0:1a:b2:42:d2:14:bf:e0:96:85:01:02:99: ab:69:d1:ee:78:64:7c:75:81:13:1d:a7:be:48:a2: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A4:3B:37:BB:FC:6D:9B:05:F0:47:85:82:12:0A:E4:47:AD:BF:F9 X509v3 Authority Key Identifier: keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:03:2b:43:cc:82:1d:f2:ed:16:f9:e2:7f:ce:57:cc:de:e0: 7f:12:a0:77:9a:ad:38:8e:ac:35:e6:d7:e8:da:71:ca:ca:cc: 25:77:4f:4a:4a:ec:11:ba:21:68:18:e7:14:40:2e:cf:b7:3f: 03:d3:f4:93:65:01:ac:cb:a2:e5:6f:48:e7:5f:df:7c:c0:d4: 9a:59:e6:56:ad:d6:ea:cf:3a:89:a2:d8:47:f6:90:61:4d:a4: 59:7f:fd:34:8d:96:98:75:27:a9:59:7e:43:e9:23:21:ca:28: 17:a0:58:83:6c:8a:e4:d8:71:75:aa:bb:31:60:6b:e3:f8:ed: 27:26:99:89:96:3b:ef:fe:5d:d6:35:61:d2:83:24:7d:91:43: 9f:51:41:a5:3a:9c:89:07:af:6d:75:b9:79:72:44:03:30:79: 1b:37:e6:83:7d:c8:09:3a:b7:ed:8e:a9:56:d9:90:2d:71:ce: 89:dd:00:f1:43:f0:9d:76:c4:d4:b6:0a:a6:5e:e7:30:40:c9: 99:6e:ce:a3:b5:7c:d3:bf:3e:74:50:4e:5a:db:ac:29:f6:8e: df:1d:3d:c2:74:87:9e:38:9b:b7:e7:d2:e1:af:63:34:16:01: 4c:73:c0:42:7e:de:d6:c4:2b:7e:0d:d9:9c:fe:d7:08:31:df: 82:63:eb:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWMNxhhsIAa5thw3oxDEzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNWY4M2VlMDJiMTczNzQ4YmU1ZGUzYjNiOWMyNTMxNzk5 MjY4ZTgwHhcNMjYwMjA5MTcwMDE2WhcNMjYwMjEwMTcwMDE2WjAzMTEwLwYDVQQD EygzZGE0M2IzN2JiZmM2ZDliMDVmMDQ3ODU4MjEyMGFlNDQ3YWRiZmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1QP/LvdTSUdyhXAuqfn2gAfDyXf sLDbBZWbhJA1W8gRIASfULR+MAD45lfgmISMjED1+qTNGRvHewA7M4mdHLYB25CX CsBTi2Gv+IqKwR6s5GQcyx9LPlKADzYi6yG0bFxsRVRFmPddQXMv8JiEWpGpurCr SD/otYgZFR7tavrcFHYqvOUOeN82xMZe+Vg/MfomsTk2FQoya2juaejK5G28hUwF gTHgunEOboPA85w4VXfDctYi1Ry8nQozC+fgN5U4Xx9O3vaND7INWo/AOzUA13VC AOnFbLcELyDlglNAK9AaskLSFL/gloUBApmradHueGR8dYETHae+SKI+PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD2kOze7/G2bBfBHhYISCuRHrb/5MB8GA1UdIwQY MBaAFG1fg+4CsXN0i+XeOzucJTF5kmjoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9mOTUwM2UtZGE4NS00NWZjLWIwMzIt YjJlN2ZlZmY0MDJmLzEvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9mOTUwM2UtZGE4NS00NWZjLWIwMzItYjJlN2ZlZmY0MDJm LzEvYlYtRDdnS3hjM1NMNWQ0N081d2xNWG1TYU9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgMrQ8yC HfLtFvnif85XzN7gfxKgd5qtOI6sNebX6NpxysrMJXdPSkrsEbohaBjnFEAuz7c/ A9P0k2UBrMui5W9I51/ffMDUmlnmVq3W6s86iaLYR/aQYU2kWX/9NI2WmHUnqVl+ Q+kjIcooF6BYg2yK5Nhxdaq7MWBr4/jtJyaZiZY77/5d1jVh0oMkfZFDn1FBpTqc iQevbXW5eXJEAzB5Gzfmg33ICTq37Y6pVtmQLXHOid0A8UPwnXbE1LYKpl7nMEDJ mW7Oo7V8078+dFBOWtusKfaO3x09wnSHnjibt+fS4a9jNBYBTHPAQn7e1sQrfg3Z nP7XCDHfgmPrhg== -----END CERTIFICATE-----Generated at Tue Feb 10 02:50:14 2026 by rpki-client