This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft File: By-BXnwWB9C9Ozmfupo1P-xUQxU.mft (raw, json) Hash identifier: GJ6Idxd+8dvjq7yBv6Yi+9aeeIQ2lje1eWLrrAEjNlY= Subject key identifier: 28:C0:8C:6F:5C:45:63:A4:1B:39:41:F1:CC:67:98:1F:54:50:49:9E Authority key identifier: 07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15 Certificate issuer: /CN=072f815e7c1607d0bd3b399fba9a353fec544315 Certificate serial: 019C42B47EEB8CF60E890317B15BC3664466 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft Manifest number: 0C Signing time: Mon 09 Feb 2026 14:00:51 +0000 Manifest this update: Mon 09 Feb 2026 14:00:51 +0000 Manifest next update: Tue 10 Feb 2026 14:00:51 +0000 Files and hashes: 1: 39UtiwRanfdVAezzQQpEd13UB08.roa (hash: YxE7Edc+a6NH5tSiYV8kT6sjjgpdiQ4CkWE/R+15ILI=) 2: By-BXnwWB9C9Ozmfupo1P-xUQxU.crl (hash: UAfWndJm7mS6RXTlvCcTC7nR6/zxMlAA6ag0zyoJemQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:7e:eb:8c:f6:0e:89:03:17:b1:5b:c3:66:44:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=072f815e7c1607d0bd3b399fba9a353fec544315 Validity Not Before: Feb 9 14:00:51 2026 GMT Not After : Feb 10 14:00:51 2026 GMT Subject: CN=28c08c6f5c4563a41b3941f1cc67981f5450499e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a2:40:69:3e:c1:c4:04:ad:44:31:5c:2b:08: b3:6e:0f:0d:5d:13:e3:1f:da:b6:f7:3d:66:e0:51: 0c:37:2e:63:1d:3e:d8:39:b8:d6:3a:5b:52:8f:39: fc:99:88:71:9c:64:89:e8:15:b9:cb:fd:1c:f1:f7: 0a:20:83:2b:9e:f6:f5:b3:af:63:80:85:3b:c6:f9: 70:f0:02:76:6c:0a:bc:6d:5d:44:e3:84:d8:09:3b: 35:2c:21:97:0e:05:b7:9e:45:11:3f:9d:26:d8:e1: 7d:31:cc:df:88:53:72:89:5c:6e:03:60:78:c3:b6: fc:82:59:e3:be:f4:2d:c6:77:41:de:24:27:f4:18: 04:2b:6e:56:92:35:37:b8:22:4a:d8:9d:60:dc:41: d0:5e:2f:2d:12:41:46:cc:88:86:70:c8:d9:ee:71: f6:6c:94:2c:78:16:3c:53:97:5a:b0:5f:5a:21:2c: 1a:5e:07:d8:47:4f:bd:0b:b3:91:a2:05:3a:88:45: dd:e9:13:df:e8:63:2d:af:03:44:ce:b1:80:00:e7: ba:aa:77:3d:e0:00:3e:84:65:6a:d3:0c:e6:e0:3a: 44:c8:5e:a4:62:23:8d:9b:d7:0f:aa:79:dc:37:2c: db:2d:52:06:c9:49:6c:07:ee:a5:1e:33:6e:37:67: 5e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:C0:8C:6F:5C:45:63:A4:1B:39:41:F1:CC:67:98:1F:54:50:49:9E X509v3 Authority Key Identifier: keyid:07:2F:81:5E:7C:16:07:D0:BD:3B:39:9F:BA:9A:35:3F:EC:54:43:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/By-BXnwWB9C9Ozmfupo1P-xUQxU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a07834-5fa3-4b40-bb9e-75e3cbb04b60/1/By-BXnwWB9C9Ozmfupo1P-xUQxU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:51:9a:75:4e:e9:24:17:73:ec:e4:c7:78:92:7c:57:32:62: 97:5f:02:7f:1e:bd:f4:b8:bb:dc:01:1f:53:be:0d:66:2e:f8: 5a:12:d5:cb:91:1d:79:ab:c1:67:55:70:d0:18:52:a0:a8:3b: c5:42:56:cf:ef:71:30:fc:99:2b:cd:35:bb:3d:5b:1d:5d:e1: 85:e7:9f:76:32:4d:a1:d9:07:84:96:76:6d:4c:a0:90:29:76: 62:fb:b4:af:52:06:c2:52:65:01:6a:15:90:61:5c:bf:3a:85: 20:b8:9b:5d:a9:5e:7b:28:c5:84:e8:55:cf:cf:b5:95:1b:61: ae:c3:af:69:77:d0:87:7c:d8:6b:fa:1b:fb:13:3b:32:9a:1d: 5e:19:22:9c:03:0e:88:3a:25:b8:d9:04:fd:93:46:73:01:7c: df:19:f2:be:b9:c9:5b:19:47:89:50:ae:c2:e8:46:ba:7f:c1: 56:62:07:15:1e:ae:b2:8e:e3:b5:2e:8b:40:32:95:d7:b3:ea: ce:d5:c7:95:d6:9d:48:cc:f6:e7:fc:d5:93:68:37:44:cd:0b: c3:ff:3b:e4:0d:0c:66:8a:09:05:70:f0:d3:cc:eb:d3:8c:9a: 15:4f:ba:a2:26:9f:5d:d2:63:eb:5b:42:fe:62:ac:50:cf:1a: fc:e7:85:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtH7rjPYOiQMXsVvDZkRmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MmY4MTVlN2MxNjA3ZDBiZDNiMzk5ZmJhOWEzNTNmZWM1 NDQzMTUwHhcNMjYwMjA5MTQwMDUxWhcNMjYwMjEwMTQwMDUxWjAzMTEwLwYDVQQD EygyOGMwOGM2ZjVjNDU2M2E0MWIzOTQxZjFjYzY3OTgxZjU0NTA0OTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxaJAaT7BxAStRDFcKwizbg8NXRPj H9q29z1m4FEMNy5jHT7YObjWOltSjzn8mYhxnGSJ6BW5y/0c8fcKIIMrnvb1s69j gIU7xvlw8AJ2bAq8bV1E44TYCTs1LCGXDgW3nkURP50m2OF9MczfiFNyiVxuA2B4 w7b8glnjvvQtxndB3iQn9BgEK25WkjU3uCJK2J1g3EHQXi8tEkFGzIiGcMjZ7nH2 bJQseBY8U5dasF9aISwaXgfYR0+9C7ORogU6iEXd6RPf6GMtrwNEzrGAAOe6qnc9 4AA+hGVq0wzm4DpEyF6kYiONm9cPqnncNyzbLVIGyUlsB+6lHjNuN2defQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjAjG9cRWOkGzlB8cxnmB9UUEmeMB8GA1UdIwQY MBaAFAcvgV58FgfQvTs5n7qaNT/sVEMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnktQlhud1dCOUM5T3ptZnVwbzFQLXhVUXhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hMDc4MzQtNWZhMy00YjQwLWJiOWUt NzVlM2NiYjA0YjYwLzEvQnktQlhud1dCOUM5T3ptZnVwbzFQLXhVUXhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hMDc4MzQtNWZhMy00YjQwLWJiOWUtNzVlM2NiYjA0YjYw LzEvQnktQlhud1dCOUM5T3ptZnVwbzFQLXhVUXhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlGadU7p JBdz7OTHeJJ8VzJil18Cfx699Li73AEfU74NZi74WhLVy5EdeavBZ1Vw0BhSoKg7 xUJWz+9xMPyZK801uz1bHV3hheefdjJNodkHhJZ2bUygkCl2Yvu0r1IGwlJlAWoV kGFcvzqFILibXaleeyjFhOhVz8+1lRthrsOvaXfQh3zYa/ob+xM7MpodXhkinAMO iDoluNkE/ZNGcwF83xnyvrnJWxlHiVCuwuhGun/BVmIHFR6uso7jtS6LQDKV17Pq ztXHldadSMz25/zVk2g3RM0Lw/875A0MZooJBXDw08zr04yaFU+6oiafXdJj61tC /mKsUM8a/OeFng== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:10 2026 by rpki-client