This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft File: BG82Rli2TivxUNIPyDjDZCB5deI.mft (raw, json) Hash identifier: Hg34XPbc6iUk7vj5FYDxWgBiGnCB+uuLRMCOyTdaI6k= Subject key identifier: B9:F7:73:B8:0B:7D:A9:EF:85:FB:D6:49:E6:85:15:D2:CB:56:14:CC Authority key identifier: 04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2 Certificate issuer: /CN=046f364658b64e2bf150d20fc838c364207975e2 Certificate serial: 019C43FDA5099386CDDD5B4268320499F436 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 20:00:22 +0000 Manifest this update: Mon 09 Feb 2026 20:00:22 +0000 Manifest next update: Tue 10 Feb 2026 20:00:22 +0000 Files and hashes: 1: BG82Rli2TivxUNIPyDjDZCB5deI.crl (hash: k49MiMrHkBkPUtwcZH8cdtdwy6R3PczWHznG4WClER4=) 2: MrmdJdrahes4YHrf8GzXfXRAQTo.roa (hash: KDHItLe9nk7zEElA0XEEmNLAdVnKqz0qSQ47JBnQBmk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:a5:09:93:86:cd:dd:5b:42:68:32:04:99:f4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=046f364658b64e2bf150d20fc838c364207975e2 Validity Not Before: Feb 9 20:00:22 2026 GMT Not After : Feb 10 20:00:22 2026 GMT Subject: CN=b9f773b80b7da9ef85fbd649e68515d2cb5614cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:18:8e:08:46:23:5e:42:ab:d1:6d:d2:21:99: b2:91:fb:3e:2e:48:29:93:30:c5:14:db:b3:cb:84: e7:e6:dc:ed:8d:d8:ec:12:2a:3f:af:37:9f:08:d2: fa:0c:16:c5:ae:38:31:2b:2e:fb:c1:30:71:b1:89: 7c:55:d1:42:93:ca:63:bf:f7:2f:98:29:9c:25:07: e7:c7:33:46:c4:92:e5:8a:4d:4e:4c:3c:9d:a4:72: 0f:4f:c4:c0:75:0d:e5:d8:aa:92:0c:3d:73:21:80: d6:6b:0e:ed:23:51:b5:66:69:83:c6:3d:ea:a5:12: 0d:21:37:6a:f5:63:50:6f:15:24:21:13:fa:d1:05: 74:1a:15:a5:7e:15:19:5f:e9:68:b6:18:19:4c:56: ad:f4:42:b0:13:fc:a1:76:a0:98:4e:de:a1:17:21: f8:e0:d1:e5:27:b8:69:ee:74:9f:c1:71:30:0e:fb: 28:b5:e9:e4:b7:c9:cf:40:b6:45:82:af:62:e6:5a: 7a:a8:16:63:47:38:0e:6a:ba:4c:bc:dd:ab:54:f5: bd:aa:a0:9c:d1:3a:c0:7d:3a:71:19:08:19:57:77: 0f:e3:5d:04:59:5a:83:64:3b:52:be:4d:69:66:4d: 23:9f:f9:f5:d3:cf:de:3e:a4:b2:28:36:63:e8:d8: d7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:F7:73:B8:0B:7D:A9:EF:85:FB:D6:49:E6:85:15:D2:CB:56:14:CC X509v3 Authority Key Identifier: keyid:04:6F:36:46:58:B6:4E:2B:F1:50:D2:0F:C8:38:C3:64:20:79:75:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BG82Rli2TivxUNIPyDjDZCB5deI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4b5f9-af44-41d0-b5f1-a25e07cea2c0/1/BG82Rli2TivxUNIPyDjDZCB5deI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:72:ee:b2:c1:93:c5:a1:97:10:05:38:e3:ee:ce:75:90:61: 98:f9:79:1d:c9:34:e4:ee:cd:8c:fa:07:80:21:4f:4d:79:53: 5d:cc:96:48:43:15:86:2c:b0:26:87:3f:f5:e9:d4:bd:06:cb: 8a:69:1e:3f:30:dd:e5:2c:d3:29:6a:9e:a3:78:94:6f:0e:2e: 90:b2:90:56:0e:84:bd:cb:6b:7d:52:45:83:e6:33:88:7c:0e: 40:97:9c:fc:77:95:06:44:a1:0a:43:8f:16:32:50:9d:60:91: 29:b3:89:50:64:f0:e2:cd:d0:de:ed:9b:2c:43:e1:82:27:ac: d0:d7:ac:c3:b4:48:9b:32:eb:7e:ae:c8:07:f4:bb:65:d1:fe: 67:4e:a5:ac:b5:2d:c4:d8:41:6e:31:d1:5b:67:8a:a6:ad:ca: 6b:82:ed:30:11:b4:7b:40:ad:50:87:bd:24:3b:44:d7:3a:66: c8:44:a7:fa:fb:1a:ad:cf:9c:83:23:c1:78:cd:82:2b:17:47: 4f:40:35:59:02:f1:86:69:15:15:56:34:d0:4b:8a:6d:ff:b1: 60:a7:f8:59:b0:fa:8a:c3:3a:ca:b7:03:f3:f0:b3:69:35:5e: 7b:f5:52:9c:12:b5:99:7c:72:52:24:3e:c2:46:96:a2:1b:07: fe:ae:48:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/aUJk4bN3VtCaDIEmfQ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NmYzNjQ2NThiNjRlMmJmMTUwZDIwZmM4MzhjMzY0MjA3 OTc1ZTIwHhcNMjYwMjA5MjAwMDIyWhcNMjYwMjEwMjAwMDIyWjAzMTEwLwYDVQQD EyhiOWY3NzNiODBiN2RhOWVmODVmYmQ2NDllNjg1MTVkMmNiNTYxNGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBiOCEYjXkKr0W3SIZmykfs+Lkgp kzDFFNuzy4Tn5tztjdjsEio/rzefCNL6DBbFrjgxKy77wTBxsYl8VdFCk8pjv/cv mCmcJQfnxzNGxJLlik1OTDydpHIPT8TAdQ3l2KqSDD1zIYDWaw7tI1G1ZmmDxj3q pRINITdq9WNQbxUkIRP60QV0GhWlfhUZX+lothgZTFat9EKwE/yhdqCYTt6hFyH4 4NHlJ7hp7nSfwXEwDvsotenkt8nPQLZFgq9i5lp6qBZjRzgOarpMvN2rVPW9qqCc 0TrAfTpxGQgZV3cP410EWVqDZDtSvk1pZk0jn/n108/ePqSyKDZj6NjXqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLn3c7gLfanvhfvWSeaFFdLLVhTMMB8GA1UdIwQY MBaAFARvNkZYtk4r8VDSD8g4w2QgeXXiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEt YTI1ZTA3Y2VhMmMwLzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9kNGI1ZjktYWY0NC00MWQwLWI1ZjEtYTI1ZTA3Y2VhMmMw LzEvQkc4MlJsaTJUaXZ4VU5JUHlEakRaQ0I1ZGVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzHLussGT xaGXEAU44+7OdZBhmPl5Hck05O7NjPoHgCFPTXlTXcyWSEMVhiywJoc/9enUvQbL imkePzDd5SzTKWqeo3iUbw4ukLKQVg6EvctrfVJFg+YziHwOQJec/HeVBkShCkOP FjJQnWCRKbOJUGTw4s3Q3u2bLEPhgies0Nesw7RImzLrfq7IB/S7ZdH+Z06lrLUt xNhBbjHRW2eKpq3Ka4LtMBG0e0CtUIe9JDtE1zpmyESn+vsarc+cgyPBeM2CKxdH T0A1WQLxhmkVFVY00EuKbf+xYKf4WbD6isM6yrcD8/CzaTVee/VSnBK1mXxyUiQ+ wkaWohsH/q5I8g== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:23 2026 by rpki-client