This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft File: BjJUIiHK72RIzFRSFOAABxvVa4Y.mft (raw, json) Hash identifier: OI3B7ULBAEeBtbYMNvTr4Moy284ToBWTCzD+3qEYqy8= Subject key identifier: 50:D4:79:6E:9A:D5:25:DE:19:1C:2E:24:1A:86:04:75:4A:B9:C6:BD Authority key identifier: 06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86 Certificate issuer: /CN=0632542221caef6448cc545214e000071bd56b86 Certificate serial: 019C41D88F9DE44DD23725CA1A6C32B9BA1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft Manifest number: 1246 Signing time: Mon 09 Feb 2026 10:00:37 +0000 Manifest this update: Mon 09 Feb 2026 10:00:37 +0000 Manifest next update: Tue 10 Feb 2026 10:00:37 +0000 Files and hashes: 1: BjJUIiHK72RIzFRSFOAABxvVa4Y.crl (hash: iFOoMHjvTuycActKWV20ShO8do96ucmuR9VC4uj51Uw=) 2: K7kf19E8RqOIuQDE1HXceZnfBS4.roa (hash: qUFiFBy2dkZP8rGX/6QQZpm3Sx7bmtP7VKzuR3jDVwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:8f:9d:e4:4d:d2:37:25:ca:1a:6c:32:b9:ba:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0632542221caef6448cc545214e000071bd56b86 Validity Not Before: Feb 9 10:00:37 2026 GMT Not After : Feb 10 10:00:37 2026 GMT Subject: CN=50d4796e9ad525de191c2e241a8604754ab9c6bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c9:66:8d:a8:8d:18:d2:72:de:5c:47:41:27: a1:64:4e:b6:07:9c:c5:bb:d9:bc:e3:58:21:93:3d: 43:06:6d:51:ce:95:b4:5f:36:c7:4f:f9:0f:1e:41: 3d:bb:b4:3f:82:21:76:3b:59:58:ff:bb:b8:5d:f7: 4c:11:3b:85:64:02:8d:e2:5d:12:a9:97:af:03:0d: d8:23:b4:98:d5:21:44:e3:72:6c:24:b8:83:96:cc: bb:f2:2d:5d:ae:2b:59:ef:64:7f:5a:ed:dd:cf:90: 8a:aa:5c:e5:29:77:65:e5:79:d9:a4:ee:7b:12:d5: b9:82:35:42:16:28:ff:ac:9d:76:27:00:10:6d:49: 6d:bb:c3:eb:bb:ef:e1:59:57:23:79:33:89:1f:78: 08:66:32:3b:3c:2a:d1:9f:ee:11:b9:ff:57:ab:f9: 12:e4:cd:00:fa:71:93:b4:01:e9:8a:0e:77:8b:e5: f5:6f:25:55:83:1e:4b:83:8e:2c:2f:ad:87:a4:64: 5a:2b:42:05:03:0a:71:a6:d4:84:7a:c0:03:2c:9f: 34:58:84:25:af:e7:e4:0e:e2:ae:d0:23:66:a0:b2: 5c:17:bd:3a:f2:e0:85:66:f1:99:fe:b9:bc:33:8e: ca:a5:23:32:9c:19:8d:10:df:90:20:e9:84:20:e7: b4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D4:79:6E:9A:D5:25:DE:19:1C:2E:24:1A:86:04:75:4A:B9:C6:BD X509v3 Authority Key Identifier: keyid:06:32:54:22:21:CA:EF:64:48:CC:54:52:14:E0:00:07:1B:D5:6B:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjJUIiHK72RIzFRSFOAABxvVa4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/6c5aa1-5880-4651-85a4-afd3bf6bc58c/1/BjJUIiHK72RIzFRSFOAABxvVa4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3d:7c:a5:e9:8b:38:13:69:0a:b2:9f:88:c8:43:0e:85:32: c7:2c:c1:6c:1a:a9:a0:a4:12:fb:a5:c1:41:ca:34:56:25:a6: 6d:8a:df:35:6c:7e:ee:82:09:80:26:e3:ea:56:29:b8:30:2b: 12:cc:26:0d:72:6b:93:97:d7:ae:bb:d7:f1:a7:10:76:a8:bd: 82:e3:34:f5:cf:44:b8:52:91:4d:8a:a1:33:37:f0:28:1d:69: 60:9a:7e:f1:f3:4c:14:2e:40:ea:23:d1:b8:66:b2:20:28:5f: 99:b0:63:5b:45:f4:ee:1a:65:a7:9a:83:e6:f4:c4:c3:0f:88: d2:d6:bd:b3:60:c4:0a:66:9b:2c:ef:86:fa:6b:20:9b:de:2d: 18:0f:8b:79:1c:b5:29:29:f0:72:9f:f2:87:10:17:e4:d8:9e: b7:94:3a:cc:8a:1c:54:22:8d:c3:71:16:d1:3c:2f:15:b9:81: 69:63:8f:ba:28:96:cf:0e:52:34:d0:b3:6b:80:0c:02:0b:dc: 03:09:ad:bf:f5:32:39:19:1c:b9:fb:7a:84:cf:4d:9a:28:b9: 00:a2:26:3c:92:95:4f:cd:82:06:b4:d9:55:f7:65:73:d5:8b: c2:2f:e1:00:0d:5a:34:1d:6e:61:dc:0b:ff:a3:b0:f7:cf:db: 91:40:e0:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2I+d5E3SNyXKGmwyubodMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzI1NDIyMjFjYWVmNjQ0OGNjNTQ1MjE0ZTAwMDA3MWJk NTZiODYwHhcNMjYwMjA5MTAwMDM3WhcNMjYwMjEwMTAwMDM3WjAzMTEwLwYDVQQD Eyg1MGQ0Nzk2ZTlhZDUyNWRlMTkxYzJlMjQxYTg2MDQ3NTRhYjljNmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8lmjaiNGNJy3lxHQSehZE62B5zF u9m841ghkz1DBm1RzpW0XzbHT/kPHkE9u7Q/giF2O1lY/7u4XfdMETuFZAKN4l0S qZevAw3YI7SY1SFE43JsJLiDlsy78i1dritZ72R/Wu3dz5CKqlzlKXdl5XnZpO57 EtW5gjVCFij/rJ12JwAQbUltu8Pru+/hWVcjeTOJH3gIZjI7PCrRn+4Ruf9Xq/kS 5M0A+nGTtAHpig53i+X1byVVgx5Lg44sL62HpGRaK0IFAwpxptSEesADLJ80WIQl r+fkDuKu0CNmoLJcF7068uCFZvGZ/rm8M47KpSMynBmNEN+QIOmEIOe05wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFDUeW6a1SXeGRwuJBqGBHVKuca9MB8GA1UdIwQY MBaAFAYyVCIhyu9kSMxUUhTgAAcb1WuGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQt YWZkM2JmNmJjNThjLzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy82YzVhYTEtNTg4MC00NjUxLTg1YTQtYWZkM2JmNmJjNThj LzEvQmpKVUlpSEs3MlJJekZSU0ZPQUFCeHZWYTRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdD18pemL OBNpCrKfiMhDDoUyxyzBbBqpoKQS+6XBQco0ViWmbYrfNWx+7oIJgCbj6lYpuDAr EswmDXJrk5fXrrvX8acQdqi9guM09c9EuFKRTYqhMzfwKB1pYJp+8fNMFC5A6iPR uGayIChfmbBjW0X07hplp5qD5vTEww+I0ta9s2DECmabLO+G+msgm94tGA+LeRy1 KSnwcp/yhxAX5Niet5Q6zIocVCKNw3EW0TwvFbmBaWOPuiiWzw5SNNCza4AMAgvc Awmtv/UyORkcuft6hM9Nmii5AKImPJKVT82CBrTZVfdlc9WLwi/hAA1aNB1uYdwL /6Ow98/bkUDgbA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:46 2026 by rpki-client