This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json) Hash identifier: 6FWH8CsbDNojx9GKcgH7sJ1leNvRvMHzUo5kIRz1utA= Subject key identifier: 87:5C:FF:39:FA:14:94:8D:EB:CF:76:90:20:49:A8:39:C6:58:8B:2D Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88 Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88 Certificate serial: 019C43228591F22CFEDE949452CB835DDB90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 16:01:01 +0000 Manifest this update: Mon 09 Feb 2026 16:01:01 +0000 Manifest next update: Tue 10 Feb 2026 16:01:01 +0000 Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: GhNOQKVX/tpLAVhe1j3A5wUYod6DqLCyVufrng1Q5SE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:85:91:f2:2c:fe:de:94:94:52:cb:83:5d:db:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88 Validity Not Before: Feb 9 16:01:01 2026 GMT Not After : Feb 10 16:01:01 2026 GMT Subject: CN=875cff39fa14948debcf76902049a839c6588b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:45:d8:c3:4d:83:32:56:36:4a:2d:3a:d2:cd: c5:aa:b2:94:bf:28:b2:f3:87:6a:79:96:b0:57:ab: 2b:d6:57:e3:cd:d0:0e:f3:48:e0:d7:de:22:20:73: 26:84:51:b8:8e:de:73:19:59:a5:2c:3d:22:bd:ee: 0a:59:41:6a:a1:88:58:70:e8:fb:ca:2b:3c:54:3c: 9a:ae:34:aa:b1:8d:6b:e7:cd:28:48:bd:a7:7c:14: 34:f2:b9:0d:94:90:d8:65:73:60:11:1e:5d:0e:b6: c7:c9:20:81:86:70:01:04:f7:b5:50:1b:29:12:76: 9b:1f:14:e3:fb:8e:cb:46:ef:ea:01:65:d4:63:03: 94:d0:5a:d3:6e:a6:f2:41:78:6f:82:9f:5b:61:8e: 54:1a:a8:ad:f4:12:44:95:d2:e8:79:33:bf:93:d3: 4e:3b:a8:b5:5a:fb:92:3c:a2:2f:6a:41:a9:12:22: 8b:c7:43:db:71:3f:09:13:4b:7e:dd:71:7b:56:d1: d1:65:48:81:15:cb:25:05:f6:c1:83:22:e7:5d:c6: 0d:fc:d1:dd:e1:08:b0:cb:35:2c:73:be:1d:26:8a: ec:15:b0:66:1e:42:57:65:9f:1b:8f:06:f3:cd:8f: a3:8b:91:37:bb:59:62:01:3a:1a:96:05:87:2c:cb: 51:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5C:FF:39:FA:14:94:8D:EB:CF:76:90:20:49:A8:39:C6:58:8B:2D X509v3 Authority Key Identifier: keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:41:c0:2d:0b:ae:06:5e:81:db:a8:92:f1:cc:df:70:ad:9b: ed:24:1d:5e:17:85:63:36:5d:4c:91:92:ef:19:88:26:d1:3c: 8c:f3:44:8a:1a:35:7d:97:f4:4d:69:53:52:de:06:80:d0:44: dc:93:5e:4d:f7:84:ab:46:e3:ee:13:3a:dc:7a:fe:5b:0f:fd: 9a:bd:22:ff:78:28:e0:75:30:4e:8b:24:08:51:a4:16:80:9a: 05:9a:24:14:8d:c5:7b:32:19:e1:0f:80:04:d8:c7:19:e7:d6: 20:0d:52:27:7d:ff:43:e7:2c:14:e7:e5:1f:32:c0:4d:6e:3d: ed:1e:e5:71:56:68:89:b3:64:b0:42:bb:15:ad:2f:d0:c2:74: 03:23:18:a1:88:a1:1e:16:bc:08:4b:e4:7f:73:58:d5:79:9a: 71:4f:b4:f5:8d:67:2d:8c:01:9e:97:7c:c1:11:99:df:72:a6: d3:64:48:03:6c:1f:05:c4:c2:9f:7e:9e:a0:af:8e:21:82:7b: c9:6a:24:94:ca:b7:40:ef:6c:8c:ff:f8:48:f7:34:ff:cf:76: 38:0c:f0:10:d1:5e:89:85:9b:99:29:4f:e7:f2:10:55:f9:24: 3b:33:24:69:bf:49:e4:99:63:9b:81:2a:bf:fc:3e:7f:d4:8f: c2:6a:63:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIoWR8iz+3pSUUsuDXduQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZlYWQwYjVhOWU0NDYzODgwMmZjYjQ2ZTkwZmFhM2FkYjUx NmJmODgwHhcNMjYwMjA5MTYwMTAxWhcNMjYwMjEwMTYwMTAxWjAzMTEwLwYDVQQD Eyg4NzVjZmYzOWZhMTQ5NDhkZWJjZjc2OTAyMDQ5YTgzOWM2NTg4YjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkXYw02DMlY2Si060s3FqrKUvyiy 84dqeZawV6sr1lfjzdAO80jg194iIHMmhFG4jt5zGVmlLD0ive4KWUFqoYhYcOj7 yis8VDyarjSqsY1r580oSL2nfBQ08rkNlJDYZXNgER5dDrbHySCBhnABBPe1UBsp EnabHxTj+47LRu/qAWXUYwOU0FrTbqbyQXhvgp9bYY5UGqit9BJEldLoeTO/k9NO O6i1WvuSPKIvakGpEiKLx0PbcT8JE0t+3XF7VtHRZUiBFcslBfbBgyLnXcYN/NHd 4QiwyzUsc74dJorsFbBmHkJXZZ8bjwbzzY+ji5E3u1liAToalgWHLMtRFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIdc/zn6FJSN6892kCBJqDnGWIstMB8GA1UdIwQY MBaAFG6tC1qeRGOIAvy0bpD6o621Fr+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnEwTFdwNUVZNGdDX0xSdWtQcWpyYlVXdjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kYWZhMDAtZGYwOC00MDhkLWE4Y2Yt NzI4OWQwMWVkMDU0LzEvYnEwTFdwNUVZNGdDX0xSdWtQcWpyYlVXdjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9kYWZhMDAtZGYwOC00MDhkLWE4Y2YtNzI4OWQwMWVkMDU0 LzEvYnEwTFdwNUVZNGdDX0xSdWtQcWpyYlVXdjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG0HALQuu Bl6B26iS8czfcK2b7SQdXheFYzZdTJGS7xmIJtE8jPNEiho1fZf0TWlTUt4GgNBE 3JNeTfeEq0bj7hM63Hr+Ww/9mr0i/3go4HUwToskCFGkFoCaBZokFI3FezIZ4Q+A BNjHGefWIA1SJ33/Q+csFOflHzLATW497R7lcVZoibNksEK7Fa0v0MJ0AyMYoYih Hha8CEvkf3NY1XmacU+09Y1nLYwBnpd8wRGZ33Km02RIA2wfBcTCn36eoK+OIYJ7 yWoklMq3QO9sjP/4SPc0/892OAzwENFeiYWbmSlP5/IQVfkkOzMkab9J5Jljm4Eq v/w+f9SPwmpjnw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:12 2026 by rpki-client