This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft File: baDun_CcfPx-6XYfGjyPMO-sWEg.mft (raw, json) Hash identifier: honCalCha09xhTdJDJwU/MuJF2YhnsTvaCCk06shhac= Subject key identifier: D1:83:EC:40:27:7E:55:63:93:B7:4E:61:1A:F2:ED:13:DA:95:66:B3 Authority key identifier: 6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48 Certificate issuer: /CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848 Certificate serial: 019C42468F10E7F9CBA7342AE044249B0824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft Manifest number: 0C4C Signing time: Mon 09 Feb 2026 12:00:46 +0000 Manifest this update: Mon 09 Feb 2026 12:00:46 +0000 Manifest next update: Tue 10 Feb 2026 12:00:46 +0000 Files and hashes: 1: baDun_CcfPx-6XYfGjyPMO-sWEg.crl (hash: lZC5XXjjfGcl4/JqIp7mkoBe1whUkSEZMhxoYT3yL3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:8f:10:e7:f9:cb:a7:34:2a:e0:44:24:9b:08:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6da0ee9ff09c7cfc7ee9761f1a3c8f30efac5848 Validity Not Before: Feb 9 12:00:46 2026 GMT Not After : Feb 10 12:00:46 2026 GMT Subject: CN=d183ec40277e556393b74e611af2ed13da9566b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:22:1f:4c:65:02:ce:ce:cc:81:32:0f:b7:11: 1e:ea:f2:5a:e1:2c:95:2d:1d:9e:90:88:e9:dd:04: d0:25:8e:1a:61:f1:6c:c4:33:17:c2:57:e1:7c:a5: e9:10:64:07:34:cb:14:3c:0e:54:86:2c:d9:42:ba: 19:19:e2:dd:2b:11:6b:1a:dd:f9:1e:25:c4:b1:31: 84:9e:84:b7:ed:a9:83:93:be:58:dd:0e:87:47:37: 0d:66:6f:06:03:a9:00:67:fc:7a:67:d4:cf:76:db: f2:6d:7c:46:b9:b0:4f:60:1b:a8:c3:42:ab:68:5e: 93:68:aa:c0:79:51:80:15:41:bc:a5:6a:92:12:da: 13:ad:1f:bb:46:42:91:b5:fc:ac:73:d6:90:4c:cd: ff:50:77:a8:fc:4f:2a:fd:3a:a2:e0:41:90:3c:e1: cb:3d:68:d5:49:61:d8:37:0f:8f:55:2f:6a:a3:07: 4f:46:21:2b:63:69:bd:05:32:07:1e:40:39:01:0c: 9c:c8:5a:ae:34:e4:a4:ea:f9:aa:e8:ea:74:af:6a: 70:78:75:92:72:6a:a1:15:31:0e:1c:c3:1b:c9:9a: 55:04:72:32:ee:c4:34:40:38:b9:ee:f9:8b:7c:ce: bf:98:78:be:6c:0b:c0:c4:61:d3:de:2e:1f:ac:f5: a8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:83:EC:40:27:7E:55:63:93:B7:4E:61:1A:F2:ED:13:DA:95:66:B3 X509v3 Authority Key Identifier: keyid:6D:A0:EE:9F:F0:9C:7C:FC:7E:E9:76:1F:1A:3C:8F:30:EF:AC:58:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/baDun_CcfPx-6XYfGjyPMO-sWEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/4f7bb9-4d69-49de-9a49-a4d9dc76c2b8/1/baDun_CcfPx-6XYfGjyPMO-sWEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d7:ac:c9:5e:c4:e6:ea:4d:d5:98:01:33:70:1c:ea:45:fb: d4:d6:e7:0b:4c:18:67:71:1d:8d:9c:49:c5:21:0c:66:b8:61: 66:50:7f:28:70:24:b7:70:1d:d0:9f:1b:b7:f9:4f:13:0b:9b: ce:e6:91:8e:45:b8:11:fe:4f:4e:5a:09:ca:e4:47:4b:c4:77: e9:71:4e:73:2e:79:e1:13:f0:31:56:43:16:ea:ca:62:5f:7d: 4a:df:45:32:9b:bd:d3:0d:13:bd:1d:cb:91:c7:86:8c:d6:2c: 02:04:d9:2c:9e:f8:d9:eb:df:08:f3:19:82:9e:00:5c:e5:10: 39:9c:29:fb:3a:4a:db:4e:84:c1:78:4d:18:b4:9f:ef:90:2c: 4e:9e:60:3b:d1:b2:36:d6:9d:d6:7d:ed:b1:8a:5e:3b:ef:10: c4:b1:36:09:b4:99:74:db:1d:07:d2:7a:29:63:49:b3:9e:35: 96:4b:f0:45:00:a8:32:4a:4b:b7:e4:40:70:bb:e7:a1:1c:38: 72:74:e4:5d:e3:80:05:df:83:4a:21:8e:74:66:0f:c3:f5:45: 42:83:62:fc:c5:b4:98:7e:25:dd:70:59:1c:cc:a5:d8:af:2d: a3:bc:2c:36:0c:20:57:1c:81:3d:1e:ae:1d:e2:73:9a:ac:ab: 65:6e:4b:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRo8Q5/nLpzQq4EQkmwgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYTBlZTlmZjA5YzdjZmM3ZWU5NzYxZjFhM2M4ZjMwZWZh YzU4NDgwHhcNMjYwMjA5MTIwMDQ2WhcNMjYwMjEwMTIwMDQ2WjAzMTEwLwYDVQQD EyhkMTgzZWM0MDI3N2U1NTYzOTNiNzRlNjExYWYyZWQxM2RhOTU2NmIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiIfTGUCzs7MgTIPtxEe6vJa4SyV LR2ekIjp3QTQJY4aYfFsxDMXwlfhfKXpEGQHNMsUPA5UhizZQroZGeLdKxFrGt35 HiXEsTGEnoS37amDk75Y3Q6HRzcNZm8GA6kAZ/x6Z9TPdtvybXxGubBPYBuow0Kr aF6TaKrAeVGAFUG8pWqSEtoTrR+7RkKRtfysc9aQTM3/UHeo/E8q/Tqi4EGQPOHL PWjVSWHYNw+PVS9qowdPRiErY2m9BTIHHkA5AQycyFquNOSk6vmq6Op0r2pweHWS cmqhFTEOHMMbyZpVBHIy7sQ0QDi57vmLfM6/mHi+bAvAxGHT3i4frPWoowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGD7EAnflVjk7dOYRry7RPalWazMB8GA1UdIwQY MBaAFG2g7p/wnHz8ful2Hxo8jzDvrFhIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy80ZjdiYjktNGQ2OS00OWRlLTlhNDkt YTRkOWRjNzZjMmI4LzEvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy80ZjdiYjktNGQ2OS00OWRlLTlhNDktYTRkOWRjNzZjMmI4 LzEvYmFEdW5fQ2NmUHgtNlhZZkdqeVBNTy1zV0VnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdesyV7E 5upN1ZgBM3Ac6kX71NbnC0wYZ3EdjZxJxSEMZrhhZlB/KHAkt3Ad0J8bt/lPEwub zuaRjkW4Ef5PTloJyuRHS8R36XFOcy554RPwMVZDFurKYl99St9FMpu90w0TvR3L kceGjNYsAgTZLJ742evfCPMZgp4AXOUQOZwp+zpK206EwXhNGLSf75AsTp5gO9Gy Ntad1n3tsYpeO+8QxLE2CbSZdNsdB9J6KWNJs541lkvwRQCoMkpLt+RAcLvnoRw4 cnTkXeOABd+DSiGOdGYPw/VFQoNi/MW0mH4l3XBZHMyl2K8to7wsNgwgVxyBPR6u HeJzmqyrZW5L7A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:24 2026 by rpki-client