This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft File: BpSFf1Ib4h4SZzna13O05qGKxps.mft (raw, json) Hash identifier: 4/beBsatC+KSRsfBv/IqRWBSPIaAAS2vVRReRK9Pk1s= Subject key identifier: 64:2F:35:8F:20:76:6D:74:74:AA:61:D3:7A:C7:BD:83:C6:C9:1C:3F Authority key identifier: 06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B Certificate issuer: /CN=0694857f521be21e126739dad773b4e6a18ac69b Certificate serial: 019C4322CEA3BA69192AF6A39EFA07BD857F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft Manifest number: 0B50 Signing time: Mon 09 Feb 2026 16:01:20 +0000 Manifest this update: Mon 09 Feb 2026 16:01:20 +0000 Manifest next update: Tue 10 Feb 2026 16:01:20 +0000 Files and hashes: 1: BpSFf1Ib4h4SZzna13O05qGKxps.crl (hash: JIOQBcORkKeU8lPtd3OGdSpSUGGWHxND2JBbWNli2Z4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ce:a3:ba:69:19:2a:f6:a3:9e:fa:07:bd:85:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0694857f521be21e126739dad773b4e6a18ac69b Validity Not Before: Feb 9 16:01:20 2026 GMT Not After : Feb 10 16:01:20 2026 GMT Subject: CN=642f358f20766d7474aa61d37ac7bd83c6c91c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2c:c4:03:cd:82:54:04:d1:49:81:64:36:26: 08:a2:7f:ee:ad:61:cb:d0:84:eb:1d:c4:88:26:b0: eb:75:47:07:ba:8c:b9:9f:3c:b8:09:7f:e1:5d:4e: 89:1b:90:80:d4:42:f7:71:6e:ac:38:e2:ff:35:54: 50:e0:bc:7f:d5:d7:3b:cb:22:fd:0d:9b:ec:c1:18: d2:4d:5d:d7:55:94:51:30:d2:b1:97:9c:5c:5b:22: 4d:e9:c4:a4:73:ad:54:61:3c:ef:04:d2:9e:b7:0e: 81:63:4b:8c:5e:2a:bd:ae:a5:24:2c:d8:f7:d7:d6: 0d:6a:52:f9:5d:bf:a1:03:6a:f2:74:ab:73:3f:a3: d0:09:51:7a:f3:9c:b0:ee:e0:c2:58:05:19:d6:44: 3c:76:26:9a:5d:91:a2:5b:72:61:16:9c:8a:e8:36: a8:ec:62:5f:31:80:67:e2:b9:e6:70:06:f5:c2:ee: 73:d8:a4:06:32:9c:f9:87:f7:d0:fe:d0:ca:96:40: da:e2:f3:2a:2d:e0:34:7b:51:ad:4b:f8:df:09:3c: 24:dd:42:ed:f2:3c:fe:8e:92:16:d6:0f:0f:91:32: fe:57:3b:53:1c:a2:1d:6c:67:37:a4:29:59:ce:e5: 0b:c3:ae:ea:1c:fb:8c:b0:4e:d3:82:3b:82:fc:e1: 34:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:2F:35:8F:20:76:6D:74:74:AA:61:D3:7A:C7:BD:83:C6:C9:1C:3F X509v3 Authority Key Identifier: keyid:06:94:85:7F:52:1B:E2:1E:12:67:39:DA:D7:73:B4:E6:A1:8A:C6:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpSFf1Ib4h4SZzna13O05qGKxps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/5eb14c-f03b-48e8-ae3f-88afbd4a3dd2/1/BpSFf1Ib4h4SZzna13O05qGKxps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:2a:23:ec:84:36:28:e6:9d:40:1b:01:8a:04:c7:20:f7:58: 5f:ba:ba:94:5a:34:86:c4:cf:16:c0:31:a7:0d:0a:40:05:41: f9:36:a2:85:8f:17:40:f4:72:57:a8:c1:dd:f9:47:69:3d:a3: b1:9c:71:ca:34:cd:d0:11:31:ee:17:49:47:15:a4:9b:58:16: 0b:68:ad:65:2c:1c:91:b2:00:14:ef:bc:9b:62:e8:7a:33:7f: e4:75:d8:b2:21:05:32:f0:cd:f4:75:32:1e:34:e0:be:0d:18: 97:0a:d4:6a:b0:e3:97:f1:aa:33:a3:10:ca:19:73:56:57:1c: 19:6f:9d:98:8a:a6:6c:5e:1b:bd:95:bb:74:a8:6a:4d:5c:67: b2:c0:3f:2b:30:5f:e6:15:9a:21:ba:0d:66:96:fa:d1:8a:38: 97:78:9c:6f:d4:8b:f7:00:c8:f8:f2:54:1c:3c:33:96:d8:52: 0f:bc:53:8f:ac:db:e1:37:6a:be:e3:01:56:56:07:6a:33:6e: 16:e5:82:98:da:30:54:c9:eb:c7:5c:dc:88:f3:45:27:04:f7: d1:c9:42:6f:3d:ab:19:3d:f9:c6:a1:b3:65:b9:72:ed:1c:58: ae:54:35:84:06:f2:1a:aa:42:41:b8:07:67:1b:e6:42:10:3a: ea:92:1f:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIs6jumkZKvajnvoHvYV/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTQ4NTdmNTIxYmUyMWUxMjY3MzlkYWQ3NzNiNGU2YTE4 YWM2OWIwHhcNMjYwMjA5MTYwMTIwWhcNMjYwMjEwMTYwMTIwWjAzMTEwLwYDVQQD Eyg2NDJmMzU4ZjIwNzY2ZDc0NzRhYTYxZDM3YWM3YmQ4M2M2YzkxYzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryzEA82CVATRSYFkNiYIon/urWHL 0ITrHcSIJrDrdUcHuoy5nzy4CX/hXU6JG5CA1EL3cW6sOOL/NVRQ4Lx/1dc7yyL9 DZvswRjSTV3XVZRRMNKxl5xcWyJN6cSkc61UYTzvBNKetw6BY0uMXiq9rqUkLNj3 19YNalL5Xb+hA2rydKtzP6PQCVF685yw7uDCWAUZ1kQ8diaaXZGiW3JhFpyK6Dao 7GJfMYBn4rnmcAb1wu5z2KQGMpz5h/fQ/tDKlkDa4vMqLeA0e1GtS/jfCTwk3ULt 8jz+jpIW1g8PkTL+VztTHKIdbGc3pClZzuULw67qHPuMsE7TgjuC/OE0VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQvNY8gdm10dKph03rHvYPGyRw/MB8GA1UdIwQY MBaAFAaUhX9SG+IeEmc52tdztOahisabMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy81ZWIxNGMtZjAzYi00OGU4LWFlM2Yt ODhhZmJkNGEzZGQyLzEvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy81ZWIxNGMtZjAzYi00OGU4LWFlM2YtODhhZmJkNGEzZGQy LzEvQnBTRmYxSWI0aDRTWnpuYTEzTzA1cUdLeHBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyoj7IQ2 KOadQBsBigTHIPdYX7q6lFo0hsTPFsAxpw0KQAVB+TaihY8XQPRyV6jB3flHaT2j sZxxyjTN0BEx7hdJRxWkm1gWC2itZSwckbIAFO+8m2LoejN/5HXYsiEFMvDN9HUy HjTgvg0YlwrUarDjl/GqM6MQyhlzVlccGW+dmIqmbF4bvZW7dKhqTVxnssA/KzBf 5hWaIboNZpb60Yo4l3icb9SL9wDI+PJUHDwzlthSD7xTj6zb4TdqvuMBVlYHajNu FuWCmNowVMnrx1zciPNFJwT30clCbz2rGT35xqGzZbly7RxYrlQ1hAbyGqpCQbgH ZxvmQhA66pIf0w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:25 2026 by rpki-client