This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json) Hash identifier: e9oCK1Rt/z5AvOQwjUZYP6cWsDcFHqW1DiDWmjFr1vE= Subject key identifier: FA:79:87:45:F5:E1:91:E7:CD:D7:DA:D2:BC:2B:33:2B:6F:1D:84:EC Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Certificate serial: 019C41D88007ACD78E3E741BE484C7845606 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 10:00:33 +0000 Manifest this update: Mon 09 Feb 2026 10:00:33 +0000 Manifest next update: Tue 10 Feb 2026 10:00:33 +0000 Files and hashes: 1: 4oCWrmHsjM5bz7-d7V-SHcPxxcw.roa (hash: clY/RRkMVsnez/gz9BfuG4ieAmNyYPmoC+UDIIwb+tA=) 2: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: DOtF1BKQOP2WyvBgsFQPSMb/M5zBSCJk5IC3Na98Jr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:80:07:ac:d7:8e:3e:74:1b:e4:84:c7:84:56:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe Validity Not Before: Feb 9 10:00:33 2026 GMT Not After : Feb 10 10:00:33 2026 GMT Subject: CN=fa798745f5e191e7cdd7dad2bc2b332b6f1d84ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f8:b2:70:dc:d9:16:83:5e:1c:e3:c2:73:69: ef:90:5d:4c:13:32:c0:9a:64:dd:ab:de:3e:c7:b6: 81:41:c7:0d:59:0b:60:4d:23:77:9a:16:3b:0d:40: d8:7e:5b:27:be:31:aa:da:dd:a5:47:09:24:48:82: c3:48:44:d7:17:1a:57:7c:84:e2:3b:73:4e:99:dc: 14:65:7a:c6:cd:fb:32:51:25:1b:e3:e0:3e:25:9b: 3c:b0:1b:c4:1f:d2:8f:01:b5:52:c1:97:25:8e:1c: a7:2e:98:60:5f:c8:e3:19:cd:84:97:d9:35:fd:09: 2e:a4:79:f3:4e:65:10:2d:b9:d8:0c:22:b4:5e:67: ff:96:41:d2:11:51:74:26:0c:66:fe:66:05:b3:62: 5f:c0:93:e7:5f:a7:f0:76:b0:8c:50:e9:94:bc:05: 49:68:3c:c1:47:7f:4d:e2:3d:0c:df:3a:60:50:ed: 75:39:f4:f7:c6:b8:4b:cc:e7:5c:94:28:54:21:9c: 04:a9:c8:95:03:fe:4e:63:0b:ef:16:4f:0b:e8:15: 74:2d:e7:0e:d7:4a:f7:9a:52:7d:a1:68:f4:63:21: 52:2a:3c:ce:f9:8b:19:6b:38:61:6a:5c:f8:2a:5b: a2:a9:9e:dc:3c:e2:ae:b7:96:21:cd:e3:a6:b1:e1: e1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:79:87:45:F5:E1:91:E7:CD:D7:DA:D2:BC:2B:33:2B:6F:1D:84:EC X509v3 Authority Key Identifier: keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:78:e0:a2:a3:d6:29:7e:12:03:c1:4a:15:a0:82:cf:75:54: b9:10:31:ae:93:79:cf:cd:6e:88:9e:26:e3:3f:bd:48:16:2e: 1a:ac:85:fb:98:84:22:be:11:bd:e3:23:6c:7b:ab:18:45:3c: 46:f3:97:c0:05:dc:b0:d6:34:c6:e3:4a:05:46:ef:a9:48:de: 22:c0:06:af:dd:8a:2c:c3:75:2c:fe:a5:34:66:6f:83:93:bd: 0d:0e:49:fc:26:0b:67:fd:6e:f5:c0:8e:94:6c:7a:d2:66:d3: ac:e4:5c:58:be:f4:ab:09:07:87:6b:ff:93:fb:fa:90:ce:40: 13:08:12:39:73:fc:72:23:fd:0c:d6:a8:b5:95:4e:c4:7c:65: f6:a2:ef:f9:27:68:69:8a:aa:1f:0a:b8:e9:74:8b:1e:a3:04: 07:46:28:08:60:3a:54:90:89:00:65:20:1b:24:e7:94:ed:7f: eb:fd:aa:82:d8:e4:af:fa:9d:ce:6a:1d:53:00:29:ae:82:d2: 11:56:04:7d:f3:12:4a:8f:8f:c7:96:ed:aa:70:63:31:95:30: 14:72:ec:e8:59:ea:f3:08:17:5c:a8:59:08:18:3d:0d:1d:77: 44:84:10:32:d3:94:8c:b6:26:87:ef:36:c9:b4:e9:8c:49:72: 5a:fe:3b:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2IAHrNeOPnQb5ITHhFYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NmY3ZTZjNGQxM2VlYTFlNWJkOWY5NzIxZGM4Y2ZiMzY5 Y2RiZmUwHhcNMjYwMjA5MTAwMDMzWhcNMjYwMjEwMTAwMDMzWjAzMTEwLwYDVQQD EyhmYTc5ODc0NWY1ZTE5MWU3Y2RkN2RhZDJiYzJiMzMyYjZmMWQ4NGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/iycNzZFoNeHOPCc2nvkF1MEzLA mmTdq94+x7aBQccNWQtgTSN3mhY7DUDYflsnvjGq2t2lRwkkSILDSETXFxpXfITi O3NOmdwUZXrGzfsyUSUb4+A+JZs8sBvEH9KPAbVSwZcljhynLphgX8jjGc2El9k1 /QkupHnzTmUQLbnYDCK0Xmf/lkHSEVF0Jgxm/mYFs2JfwJPnX6fwdrCMUOmUvAVJ aDzBR39N4j0M3zpgUO11OfT3xrhLzOdclChUIZwEqciVA/5OYwvvFk8L6BV0LecO 10r3mlJ9oWj0YyFSKjzO+YsZazhhalz4KluiqZ7cPOKut5YhzeOmseHhGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPp5h0X14ZHnzdfa0rwrMytvHYTsMB8GA1UdIwQY MBaAFAVvfmxNE+6h5b2flyHcjPs2nNv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYt ODczYzE4OWZjNDlmLzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8zY2RjM2UtZWVhZi00MTQ3LWJiMGYtODczYzE4OWZjNDlm LzEvQlc5LWJFMFQ3cUhsdlotWElkeU0temFjMl80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnjgoqPW KX4SA8FKFaCCz3VUuRAxrpN5z81uiJ4m4z+9SBYuGqyF+5iEIr4RveMjbHurGEU8 RvOXwAXcsNY0xuNKBUbvqUjeIsAGr92KLMN1LP6lNGZvg5O9DQ5J/CYLZ/1u9cCO lGx60mbTrORcWL70qwkHh2v/k/v6kM5AEwgSOXP8ciP9DNaotZVOxHxl9qLv+Sdo aYqqHwq46XSLHqMEB0YoCGA6VJCJAGUgGyTnlO1/6/2qgtjkr/qdzmodUwAproLS EVYEffMSSo+Px5btqnBjMZUwFHLs6Fnq8wgXXKhZCBg9DR13RIQQMtOUjLYmh+82 ybTpjElyWv47hQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:32 2026 by rpki-client