This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft File: BZZLbVGQL9wapoQbs9PGIqV5glo.mft (raw, json) Hash identifier: TnZb+i3G+GLANzPtnLTxr7y2GyF+r2PFCb5xHsrSxog= Subject key identifier: 6F:F6:64:31:E6:AF:C3:39:76:74:87:34:29:8C:05:14:BC:1D:F9:FA Authority key identifier: 05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A Certificate issuer: /CN=05964b6d51902fdc1aa6841bb3d3c622a579825a Certificate serial: 019C40FD73361D4A9A1A46DB08807159615A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft Manifest number: 0BFC Signing time: Mon 09 Feb 2026 06:01:17 +0000 Manifest this update: Mon 09 Feb 2026 06:01:17 +0000 Manifest next update: Tue 10 Feb 2026 06:01:17 +0000 Files and hashes: 1: 0d9hiHd7GjrC9ghx7ryAhchU-Rk.roa (hash: 3BaZfWWroVngFQ4kO6x8XzuuIOlK3lqNvFICnTUD0Yo=) 2: BZZLbVGQL9wapoQbs9PGIqV5glo.crl (hash: w5a5o4wwJKig9T8Br1UEDHu9VG9IobG+HgSbJUvG2Qc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:73:36:1d:4a:9a:1a:46:db:08:80:71:59:61:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=05964b6d51902fdc1aa6841bb3d3c622a579825a Validity Not Before: Feb 9 06:01:17 2026 GMT Not After : Feb 10 06:01:17 2026 GMT Subject: CN=6ff66431e6afc33976748734298c0514bc1df9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:12:89:00:8c:4d:03:ea:9b:86:0f:d6:87:04: eb:ed:43:bd:49:21:7f:c4:4c:f9:b3:b8:f3:aa:76: 85:83:91:84:d0:5b:3a:f3:8c:98:9e:bc:35:e8:e1: 3c:08:ec:4e:c9:a4:b6:7b:cd:23:1a:48:d6:f1:32: bd:e8:2e:06:ac:e7:48:84:91:77:ab:9c:f7:06:3e: d0:a2:8e:61:71:29:ca:91:bb:07:a8:18:5a:31:be: ae:91:f8:97:6e:c8:07:fd:d3:4c:75:8a:df:60:93: 83:0c:56:40:b1:f1:16:61:59:b4:7d:8d:1a:b8:05: 78:1a:f8:12:2a:5d:e0:d1:d3:95:4a:4e:c7:15:12: 4b:54:81:01:b7:65:f5:a6:11:0d:f1:6a:a8:bd:e2: bd:0e:f3:58:07:55:92:18:a6:29:01:3e:49:e5:51: ef:09:95:85:3f:2f:5a:d1:da:35:ce:0c:84:b0:0f: f5:4a:10:d0:dd:81:14:83:05:f1:aa:5d:80:da:10: 28:62:11:8b:fc:29:7a:1d:94:52:ac:87:da:d1:47: 90:ba:b1:cc:dc:67:e7:49:ae:3b:9c:31:68:e4:a5: 85:39:01:3e:e7:aa:42:44:69:55:c2:a2:82:a0:02: cd:6a:09:2f:6f:e8:05:26:7c:b8:f9:02:68:f0:17: 03:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F6:64:31:E6:AF:C3:39:76:74:87:34:29:8C:05:14:BC:1D:F9:FA X509v3 Authority Key Identifier: keyid:05:96:4B:6D:51:90:2F:DC:1A:A6:84:1B:B3:D3:C6:22:A5:79:82:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZZLbVGQL9wapoQbs9PGIqV5glo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e589c2-1acb-4d82-9b9a-52362b6b3334/1/BZZLbVGQL9wapoQbs9PGIqV5glo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:84:19:d7:92:00:57:b2:b7:aa:50:0f:57:a1:30:16:f5:80: f7:45:59:56:58:07:89:46:bc:fb:d4:78:76:97:b3:55:86:92: 8f:3d:ed:64:1e:4f:11:80:e8:1d:cc:ba:1c:c5:3c:01:03:e9: 18:92:ed:fd:e8:2d:85:72:b1:a2:61:a7:dc:db:0d:da:0f:7f: f3:1e:b9:21:00:52:d2:34:34:ff:20:71:a1:21:41:44:1d:0c: dd:42:9c:a7:96:35:f0:4e:59:78:0f:72:45:d0:43:0c:4b:e5: e9:3e:85:f8:5d:ed:91:1a:19:98:b7:b7:cb:95:e0:d7:11:f5: 8e:c1:8e:a3:f5:43:b2:75:0a:3d:e5:27:37:d1:d7:2e:4b:ab: d1:29:da:b7:50:75:ab:b2:42:e4:17:09:52:6b:b8:33:db:b1: 0b:99:a7:e9:44:a2:9b:a5:ac:a8:cd:c3:a0:7d:6f:ca:2d:f4: c0:f8:af:83:71:57:27:17:90:49:48:29:43:d0:ab:7a:96:dd: 27:65:71:75:0a:36:b3:42:b1:c3:c4:f1:fe:7b:85:7d:71:a8: 7f:57:42:e4:09:aa:49:8e:23:4e:11:1f:78:e9:a0:a6:98:34: 11:76:4c:4f:f9:39:62:e6:e4:e9:30:19:ca:62:3c:12:b0:7d: 25:b7:91:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/XM2HUqaGkbbCIBxWWFaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1OTY0YjZkNTE5MDJmZGMxYWE2ODQxYmIzZDNjNjIyYTU3 OTgyNWEwHhcNMjYwMjA5MDYwMTE3WhcNMjYwMjEwMDYwMTE3WjAzMTEwLwYDVQQD Eyg2ZmY2NjQzMWU2YWZjMzM5NzY3NDg3MzQyOThjMDUxNGJjMWRmOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhKJAIxNA+qbhg/WhwTr7UO9SSF/ xEz5s7jzqnaFg5GE0Fs684yYnrw16OE8COxOyaS2e80jGkjW8TK96C4GrOdIhJF3 q5z3Bj7Qoo5hcSnKkbsHqBhaMb6ukfiXbsgH/dNMdYrfYJODDFZAsfEWYVm0fY0a uAV4GvgSKl3g0dOVSk7HFRJLVIEBt2X1phEN8WqoveK9DvNYB1WSGKYpAT5J5VHv CZWFPy9a0do1zgyEsA/1ShDQ3YEUgwXxql2A2hAoYhGL/Cl6HZRSrIfa0UeQurHM 3GfnSa47nDFo5KWFOQE+56pCRGlVwqKCoALNagkvb+gFJny4+QJo8BcDnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/2ZDHmr8M5dnSHNCmMBRS8Hfn6MB8GA1UdIwQY MBaAFAWWS21RkC/cGqaEG7PTxiKleYJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNTg5YzItMWFjYi00ZDgyLTliOWEt NTIzNjJiNmIzMzM0LzEvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9lNTg5YzItMWFjYi00ZDgyLTliOWEtNTIzNjJiNmIzMzM0 LzEvQlpaTGJWR1FMOXdhcG9RYnM5UEdJcVY1Z2xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYQZ15IA V7K3qlAPV6EwFvWA90VZVlgHiUa8+9R4dpezVYaSjz3tZB5PEYDoHcy6HMU8AQPp GJLt/egthXKxomGn3NsN2g9/8x65IQBS0jQ0/yBxoSFBRB0M3UKcp5Y18E5ZeA9y RdBDDEvl6T6F+F3tkRoZmLe3y5Xg1xH1jsGOo/VDsnUKPeUnN9HXLkur0Snat1B1 q7JC5BcJUmu4M9uxC5mn6USim6WsqM3DoH1vyi30wPivg3FXJxeQSUgpQ9Crepbd J2VxdQo2s0Kxw8Tx/nuFfXGof1dC5AmqSY4jThEfeOmgppg0EXZMT/k5Yubk6TAZ ymI8ErB9JbeRAQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:31 2026 by rpki-client