This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/163b28-4821-469d-8367-2185fa3d27b2/1/bAr-tvJK0SdKwiVdH5xaL0E1t3A.mft File: bAr-tvJK0SdKwiVdH5xaL0E1t3A.mft (raw, json) Hash identifier: sc9LLnpCvPUcBt+sPXHbAUJ+Riup8yc2lXQ6BWoN0TE= Subject key identifier: 09:87:72:41:BA:B6:24:7E:37:31:67:D3:8D:B7:D3:66:33:D7:B2:8D Authority key identifier: 6C:0A:FE:B6:F2:4A:D1:27:4A:C2:25:5D:1F:9C:5A:2F:41:35:B7:70 Certificate issuer: /CN=6c0afeb6f24ad1274ac2255d1f9c5a2f4135b770 Certificate serial: 019C4322E1BCE8ACE55F3D5DFDDCB76737B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAr-tvJK0SdKwiVdH5xaL0E1t3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/163b28-4821-469d-8367-2185fa3d27b2/1/bAr-tvJK0SdKwiVdH5xaL0E1t3A.mft Manifest number: 76 Signing time: Mon 09 Feb 2026 16:01:25 +0000 Manifest this update: Mon 09 Feb 2026 16:01:25 +0000 Manifest next update: Tue 10 Feb 2026 16:01:25 +0000 Files and hashes: 1: P0WHBH0gpRTm6vJYqBGWGauKjFs.roa (hash: /o5NA6BgivGFlv+dRNyYsszJeWtK7hLgc9YXTsQygw0=) 2: bAr-tvJK0SdKwiVdH5xaL0E1t3A.crl (hash: pEWJaYbgR9eDKBeqKurTYC2Cz+yAOj570vysbqQNrNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/163b28-4821-469d-8367-2185fa3d27b2/1/bAr-tvJK0SdKwiVdH5xaL0E1t3A.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/163b28-4821-469d-8367-2185fa3d27b2/1/bAr-tvJK0SdKwiVdH5xaL0E1t3A.mft rsync://rpki.ripe.net/repository/DEFAULT/bAr-tvJK0SdKwiVdH5xaL0E1t3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:e1:bc:e8:ac:e5:5f:3d:5d:fd:dc:b7:67:37:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c0afeb6f24ad1274ac2255d1f9c5a2f4135b770 Validity Not Before: Feb 9 16:01:25 2026 GMT Not After : Feb 10 16:01:25 2026 GMT Subject: CN=09877241bab6247e373167d38db7d36633d7b28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:71:fb:61:b2:8f:49:4e:3d:59:b4:66:88:e2: 4a:c2:09:74:c9:ad:6a:13:0a:8e:90:2d:0b:ea:27: 3b:f5:2d:51:4b:35:e5:69:0d:09:24:61:a5:da:3d: 19:cd:e1:21:30:43:1a:e0:ab:c6:f2:03:b4:a0:ce: e7:26:f1:75:85:f3:58:4e:12:e6:fc:24:3b:4a:b0: a7:b8:28:66:96:28:a4:e0:28:0a:a1:f6:60:01:91: 0b:bb:da:26:dd:b0:1e:62:63:5e:83:99:8f:97:df: 31:62:48:71:a1:32:74:04:2a:ec:c6:6f:9b:4c:e9: 5e:76:74:b4:08:e4:b0:16:55:74:be:74:99:c6:4f: 89:72:09:1b:91:36:64:c7:15:db:48:6d:8d:bb:27: 92:00:4d:a7:9d:97:3e:e5:c7:3d:05:f8:a0:34:35: 36:d5:f5:48:29:38:29:3c:9e:f0:31:0e:6a:88:78: de:54:d0:7d:3b:1d:28:33:6f:a5:3c:bf:c6:57:70: d3:65:9c:17:89:98:93:6b:ec:b3:c0:44:4e:b2:98: 0b:7f:b6:f0:ff:3c:22:34:69:29:99:07:b1:f4:46: 14:f0:a1:42:4a:0d:b3:39:c4:cd:ea:0e:ab:ee:d5: 63:fa:b5:da:a0:e5:0d:c4:a0:23:8b:20:2b:39:65: 2d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:87:72:41:BA:B6:24:7E:37:31:67:D3:8D:B7:D3:66:33:D7:B2:8D X509v3 Authority Key Identifier: keyid:6C:0A:FE:B6:F2:4A:D1:27:4A:C2:25:5D:1F:9C:5A:2F:41:35:B7:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAr-tvJK0SdKwiVdH5xaL0E1t3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/163b28-4821-469d-8367-2185fa3d27b2/1/bAr-tvJK0SdKwiVdH5xaL0E1t3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/163b28-4821-469d-8367-2185fa3d27b2/1/bAr-tvJK0SdKwiVdH5xaL0E1t3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ed:4c:c4:f3:e8:b2:83:2d:5f:d5:1e:02:75:b1:db:c7:59: b1:12:4e:0a:d4:87:dc:32:8a:ad:7e:d7:06:77:86:cf:2d:c7: 9f:29:2e:4b:8a:8a:c7:df:94:9a:2f:79:1a:d8:67:99:d4:4d: 98:54:b0:71:a7:b6:67:58:18:3b:dd:90:49:86:54:42:ef:dc: d0:0d:11:84:5e:9b:02:ab:44:7b:a2:2b:c6:0b:77:de:d8:11: ae:c7:1f:4b:03:29:bf:96:2d:f5:3f:2b:e1:bf:b2:e3:bc:8f: 0c:1f:df:c4:1f:2b:3c:41:e5:ea:65:75:7b:2d:9e:2f:0e:98: 90:27:aa:b2:4e:3b:39:c5:3b:02:99:c3:c8:bd:5f:a6:d7:44: db:29:a2:17:b7:86:56:06:e7:ec:e0:fe:03:93:6d:64:ff:d7: f8:bf:f9:b0:39:8f:f3:1c:67:32:dc:14:a7:b9:ad:13:1a:2c: 39:36:1a:26:66:27:02:f3:77:37:65:ab:cd:e7:87:6d:47:93: 1c:93:52:a3:8a:b3:6e:f9:a7:28:3a:f2:ef:6c:60:cf:7a:1a: 5c:30:2b:cf:0f:a4:fb:e4:42:26:42:15:35:93:22:75:18:53: 3b:8b:09:cc:35:62:4a:89:a9:03:87:ac:17:6e:d2:c6:6b:cf: 6e:82:d4:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIuG86KzlXz1d/dy3Zze4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMGFmZWI2ZjI0YWQxMjc0YWMyMjU1ZDFmOWM1YTJmNDEz NWI3NzAwHhcNMjYwMjA5MTYwMTI1WhcNMjYwMjEwMTYwMTI1WjAzMTEwLwYDVQQD EygwOTg3NzI0MWJhYjYyNDdlMzczMTY3ZDM4ZGI3ZDM2NjMzZDdiMjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnH7YbKPSU49WbRmiOJKwgl0ya1q EwqOkC0L6ic79S1RSzXlaQ0JJGGl2j0ZzeEhMEMa4KvG8gO0oM7nJvF1hfNYThLm /CQ7SrCnuChmliik4CgKofZgAZELu9om3bAeYmNeg5mPl98xYkhxoTJ0BCrsxm+b TOlednS0COSwFlV0vnSZxk+JcgkbkTZkxxXbSG2NuyeSAE2nnZc+5cc9BfigNDU2 1fVIKTgpPJ7wMQ5qiHjeVNB9Ox0oM2+lPL/GV3DTZZwXiZiTa+yzwEROspgLf7bw /zwiNGkpmQex9EYU8KFCSg2zOcTN6g6r7tVj+rXaoOUNxKAjiyArOWUtIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmHckG6tiR+NzFn042302Yz17KNMB8GA1UdIwQY MBaAFGwK/rbyStEnSsIlXR+cWi9BNbdwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFyLXR2SkswU2RLd2lWZEg1eGFMMEUxdDNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNjNiMjgtNDgyMS00NjlkLTgzNjct MjE4NWZhM2QyN2IyLzEvYkFyLXR2SkswU2RLd2lWZEg1eGFMMEUxdDNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xNjNiMjgtNDgyMS00NjlkLTgzNjctMjE4NWZhM2QyN2Iy LzEvYkFyLXR2SkswU2RLd2lWZEg1eGFMMEUxdDNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEO1MxPPo soMtX9UeAnWx28dZsRJOCtSH3DKKrX7XBneGzy3HnykuS4qKx9+Umi95GthnmdRN mFSwcae2Z1gYO92QSYZUQu/c0A0RhF6bAqtEe6Irxgt33tgRrscfSwMpv5Yt9T8r 4b+y47yPDB/fxB8rPEHl6mV1ey2eLw6YkCeqsk47OcU7ApnDyL1fptdE2ymiF7eG Vgbn7OD+A5NtZP/X+L/5sDmP8xxnMtwUp7mtExosOTYaJmYnAvN3N2WrzeeHbUeT HJNSo4qzbvmnKDry72xgz3oaXDArzw+k++RCJkIVNZMidRhTO4sJzDViSompA4es F27SxmvPboLU8g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:27 2026 by rpki-client