This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft File: BjDTqdwDknrlWoHYbKkb3J7nTHM.mft (raw, json) Hash identifier: PepEKAxV3L8bPFejAhCrxPMJe8Y9bfjvJf/wZes7rzg= Subject key identifier: 85:DF:A0:91:FD:A1:48:39:81:D2:95:D1:1F:73:FF:C0:8A:50:EE:44 Authority key identifier: 06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73 Certificate issuer: /CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73 Certificate serial: 019C427DA6F63273DA0BAF76E5947A0BE037 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft Manifest number: 14EA Signing time: Mon 09 Feb 2026 13:00:56 +0000 Manifest this update: Mon 09 Feb 2026 13:00:56 +0000 Manifest next update: Tue 10 Feb 2026 13:00:56 +0000 Files and hashes: 1: BjDTqdwDknrlWoHYbKkb3J7nTHM.crl (hash: xoXSIADiwpLBpSzkC0DATIB5BQqXVyL7dHoRooKfa3g=) 2: WG28MJ6GfBcScCKqRDEvob91T1k.roa (hash: 6xxB8aNVMWtEKkp4uvdHGR25LDD6UpDdJnexnLea70w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a6:f6:32:73:da:0b:af:76:e5:94:7a:0b:e0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0630d3a9dc03927ae55a81d86ca91bdc9ee74c73 Validity Not Before: Feb 9 13:00:56 2026 GMT Not After : Feb 10 13:00:56 2026 GMT Subject: CN=85dfa091fda1483981d295d11f73ffc08a50ee44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:af:85:7d:7a:c7:ef:98:11:a3:01:23:07:c7: 88:b1:37:e3:24:29:c7:a0:6d:38:ae:63:26:f8:ac: d9:9d:44:65:aa:2c:7e:5e:c5:f0:5d:3b:ea:84:e7: bd:ce:30:9e:80:06:d6:c7:37:4f:9a:45:bd:4a:59: 99:6d:4a:8c:6b:a8:bb:fd:31:86:db:cd:18:20:4d: bd:91:c4:32:3f:d4:cd:5f:e6:53:6b:98:1c:33:86: 35:04:95:6e:1b:bf:16:dd:7d:78:ff:04:2f:a3:48: 08:77:7e:44:f7:69:87:f7:6b:49:25:36:0d:fd:5a: 77:20:a9:ee:e8:27:7f:7b:03:13:a4:90:9c:4f:47: 0f:97:ee:2d:d9:8c:91:17:d1:c8:95:0c:8b:4e:8b: c6:cb:ad:e1:1f:91:de:7f:a1:fb:ce:e2:6e:b1:99: 80:85:ce:76:c8:c2:22:a4:5e:07:46:38:28:9b:d3: 7b:3d:1a:a0:e2:0c:52:9c:b9:60:d5:81:ab:af:a9: 79:93:ad:b1:49:dc:db:35:a9:35:8c:0f:9a:f3:d3: 16:9a:64:96:82:be:0c:f1:18:9b:63:5e:d9:a4:67: 44:33:ae:8d:09:9d:4e:84:06:52:7c:b7:51:0f:9a: 39:19:6e:32:8b:a1:d9:d4:a4:03:72:0e:6a:c7:26: 8e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DF:A0:91:FD:A1:48:39:81:D2:95:D1:1F:73:FF:C0:8A:50:EE:44 X509v3 Authority Key Identifier: keyid:06:30:D3:A9:DC:03:92:7A:E5:5A:81:D8:6C:A9:1B:DC:9E:E7:4C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjDTqdwDknrlWoHYbKkb3J7nTHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0e8d73-59da-434e-99fb-c3f4d11274d4/1/BjDTqdwDknrlWoHYbKkb3J7nTHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:b8:0f:15:03:d0:4c:3b:9c:34:b1:d8:89:46:ac:da:5a:ec: b7:c0:d8:8c:e8:4d:01:73:22:14:c0:12:6d:8e:6f:49:d0:ca: 4e:f8:39:a9:25:8e:1b:99:3e:f9:f4:ef:2e:78:98:bc:1a:13: 35:3f:20:53:e4:56:a1:53:62:63:52:14:79:36:b3:fc:47:69: 83:3c:0f:fd:bd:bc:99:7c:ee:49:17:3c:a1:62:b4:59:73:0d: 06:f7:dc:e6:49:95:d7:9a:99:50:05:1c:88:86:81:8a:dc:76: db:73:f3:c9:88:7d:cf:63:e1:cf:a8:81:23:d5:62:8e:23:c8: 7e:f0:50:76:6b:02:c5:d0:b8:85:45:0d:de:f0:68:3e:8b:26: 48:08:ec:04:c6:d9:99:3b:97:39:5b:93:f9:86:75:28:fa:c7: 0d:c1:13:94:dd:8f:e4:6a:f5:14:08:00:8a:6a:eb:6f:08:92: 65:cc:6f:94:10:f4:c5:50:fa:f8:46:95:ac:38:67:2c:cc:e4: ba:b4:d2:db:74:37:33:10:75:f4:90:f9:a0:a7:b9:42:fc:d4: 5b:6c:1b:9e:c0:f9:ef:68:d9:7a:c0:43:e2:bb:c9:fd:f8:f7: d4:39:22:ea:68:1b:7e:f7:a5:dc:37:dc:69:21:1c:bd:fb:b6: b4:1f:1f:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfab2MnPaC6925ZR6C+A3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MzBkM2E5ZGMwMzkyN2FlNTVhODFkODZjYTkxYmRjOWVl NzRjNzMwHhcNMjYwMjA5MTMwMDU2WhcNMjYwMjEwMTMwMDU2WjAzMTEwLwYDVQQD Eyg4NWRmYTA5MWZkYTE0ODM5ODFkMjk1ZDExZjczZmZjMDhhNTBlZTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna+FfXrH75gRowEjB8eIsTfjJCnH oG04rmMm+KzZnURlqix+XsXwXTvqhOe9zjCegAbWxzdPmkW9SlmZbUqMa6i7/TGG 280YIE29kcQyP9TNX+ZTa5gcM4Y1BJVuG78W3X14/wQvo0gId35E92mH92tJJTYN /Vp3IKnu6Cd/ewMTpJCcT0cPl+4t2YyRF9HIlQyLTovGy63hH5Hef6H7zuJusZmA hc52yMIipF4HRjgom9N7PRqg4gxSnLlg1YGrr6l5k62xSdzbNak1jA+a89MWmmSW gr4M8RibY17ZpGdEM66NCZ1OhAZSfLdRD5o5GW4yi6HZ1KQDcg5qxyaO2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXfoJH9oUg5gdKV0R9z/8CKUO5EMB8GA1UdIwQY MBaAFAYw06ncA5J65VqB2GypG9ye50xzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8wZThkNzMtNTlkYS00MzRlLTk5ZmIt YzNmNGQxMTI3NGQ0LzEvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8wZThkNzMtNTlkYS00MzRlLTk5ZmItYzNmNGQxMTI3NGQ0 LzEvQmpEVHFkd0RrbnJsV29IWWJLa2IzSjduVEhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWLgPFQPQ TDucNLHYiUas2lrst8DYjOhNAXMiFMASbY5vSdDKTvg5qSWOG5k++fTvLniYvBoT NT8gU+RWoVNiY1IUeTaz/EdpgzwP/b28mXzuSRc8oWK0WXMNBvfc5kmV15qZUAUc iIaBitx223PzyYh9z2Phz6iBI9VijiPIfvBQdmsCxdC4hUUN3vBoPosmSAjsBMbZ mTuXOVuT+YZ1KPrHDcETlN2P5Gr1FAgAimrrbwiSZcxvlBD0xVD6+EaVrDhnLMzk urTS23Q3MxB19JD5oKe5QvzUW2wbnsD572jZesBD4rvJ/fj31Dki6mgbfvel3Dfc aSEcvfu2tB8fDA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:11 2026 by rpki-client