This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft File: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json) Hash identifier: vpEHgDmV8JU8j7asAsjLGDBJtdJ4pp9S/grhJGo6Gww= Subject key identifier: 67:09:E2:B1:3E:5F:8A:69:2C:C9:33:31:70:6E:E0:71:8D:DF:94:07 Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46 Certificate issuer: /CN=055d6e82349472ccafd0a069f578f647c30a9846 Certificate serial: 019C43229C154AD66383643611A7817E77FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft Manifest number: 0B42 Signing time: Mon 09 Feb 2026 16:01:07 +0000 Manifest this update: Mon 09 Feb 2026 16:01:07 +0000 Manifest next update: Tue 10 Feb 2026 16:01:07 +0000 Files and hashes: 1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: Cgwr6ZBTw8RbB3NrmNHTN2WKya+86+hUfx3DBwRAbnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:9c:15:4a:d6:63:83:64:36:11:a7:81:7e:77:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846 Validity Not Before: Feb 9 16:01:07 2026 GMT Not After : Feb 10 16:01:07 2026 GMT Subject: CN=6709e2b13e5f8a692cc93331706ee0718ddf9407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:cc:15:6f:59:a1:75:02:73:54:73:5d:13: 9d:01:54:90:1e:e9:05:d6:87:a6:f4:3d:36:d4:43: 9b:7f:50:ed:ec:ad:5c:a0:b6:1c:44:16:3d:c9:3d: fe:f8:87:9a:86:e0:7a:22:66:cd:4a:a0:d4:89:f5: 37:8a:57:94:31:ee:c0:9e:7a:6e:6a:c0:f6:48:95: ba:ed:d4:05:b5:1c:60:fb:c3:30:52:88:91:c7:97: 0a:3a:69:4d:b9:94:5a:ce:97:c3:35:d9:a4:08:fb: d3:09:57:f1:3b:9f:9e:f1:15:39:93:b6:55:a9:f5: b8:7a:93:b9:51:c5:89:1c:2f:de:c1:8e:38:04:ec: d3:66:c2:c5:a6:24:97:d3:a0:88:27:5e:50:6e:41: c8:d4:42:09:1d:b7:02:f8:ab:39:e7:98:c2:bf:10: 94:ae:c7:84:21:64:89:cf:ff:bb:07:4f:b0:2e:01: 79:54:7d:b7:9f:77:b5:0f:6e:c9:9e:f4:78:52:1a: fc:0f:f6:6c:54:c6:8a:df:fb:ed:4c:a7:f8:7c:93: f0:7d:c4:79:71:b1:a0:72:b9:96:ea:78:f3:8a:d1: a5:a2:c4:4d:95:6c:61:9b:b1:a5:98:19:86:7d:5a: 15:4e:5b:a5:ab:57:cc:d2:06:e6:a0:a1:ed:59:bd: f9:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:09:E2:B1:3E:5F:8A:69:2C:C9:33:31:70:6E:E0:71:8D:DF:94:07 X509v3 Authority Key Identifier: keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:6b:d2:35:fb:9f:1e:07:ff:bb:3a:00:a7:53:0f:3a:b8:67: b1:38:78:e9:b4:31:53:ee:ef:ec:ad:ce:50:fb:ca:e9:33:9d: d5:6a:5d:44:82:c0:74:73:f6:9b:d3:4f:bd:31:c8:21:aa:ad: 30:ee:9c:2e:d7:76:dc:8d:61:26:02:f8:d5:6c:79:cc:96:d6: 2e:ea:40:8b:35:02:8f:4d:93:b1:92:e2:02:92:63:5e:d7:fd: 09:cf:ac:fc:47:35:18:88:f8:0c:45:62:cc:5b:79:a0:53:9f: 5d:80:de:ac:05:f6:fc:ff:e0:b3:93:99:08:db:38:cb:1b:69: c2:08:2b:e0:ec:2c:ed:63:47:14:ac:fb:35:ed:49:1b:3d:3b: f5:47:34:15:70:5a:41:5b:38:d2:cc:c1:e1:b6:da:73:bd:f7: 9b:28:70:a7:fa:f6:6d:e3:10:18:7e:c0:47:04:fa:3d:a3:93: cd:e4:f4:87:ad:8e:c7:0b:6d:b4:0c:47:2e:57:cf:9a:49:c5: 50:35:02:1e:c6:5e:1f:da:2c:06:1f:6b:79:4d:c8:1c:df:e2: 7e:26:cd:67:7a:6f:8a:8d:bb:44:32:96:ac:7a:de:f1:78:8c: 02:99:cc:52:9e:73:da:15:69:e1:16:1e:a5:09:50:6f:7a:6c: 76:e7:70:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpwVStZjg2Q2EaeBfnf7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NWQ2ZTgyMzQ5NDcyY2NhZmQwYTA2OWY1NzhmNjQ3YzMw YTk4NDYwHhcNMjYwMjA5MTYwMTA3WhcNMjYwMjEwMTYwMTA3WjAzMTEwLwYDVQQD Eyg2NzA5ZTJiMTNlNWY4YTY5MmNjOTMzMzE3MDZlZTA3MThkZGY5NDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroXMFW9ZoXUCc1RzXROdAVSQHukF 1oem9D021EObf1Dt7K1coLYcRBY9yT3++IeahuB6ImbNSqDUifU3ileUMe7Annpu asD2SJW67dQFtRxg+8MwUoiRx5cKOmlNuZRazpfDNdmkCPvTCVfxO5+e8RU5k7ZV qfW4epO5UcWJHC/ewY44BOzTZsLFpiSX06CIJ15QbkHI1EIJHbcC+Ks555jCvxCU rseEIWSJz/+7B0+wLgF5VH23n3e1D27JnvR4Uhr8D/ZsVMaK3/vtTKf4fJPwfcR5 cbGgcrmW6njzitGlosRNlWxhm7GlmBmGfVoVTlulq1fM0gbmoKHtWb35ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGcJ4rE+X4ppLMkzMXBu4HGN35QHMB8GA1UdIwQY MBaAFAVdboI0lHLMr9CgafV49kfDCphGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlYxdWdqU1Vjc3l2MEtCcDlYajJSOE1LbUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ODBhNTQtZDMwMS00OTJkLWFjYmEt NWFhZTNhYjc4OTk1LzEvQlYxdWdqU1Vjc3l2MEtCcDlYajJSOE1LbUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84ODBhNTQtZDMwMS00OTJkLWFjYmEtNWFhZTNhYjc4OTk1 LzEvQlYxdWdqU1Vjc3l2MEtCcDlYajJSOE1LbUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh2vSNfuf Hgf/uzoAp1MPOrhnsTh46bQxU+7v7K3OUPvK6TOd1WpdRILAdHP2m9NPvTHIIaqt MO6cLtd23I1hJgL41Wx5zJbWLupAizUCj02TsZLiApJjXtf9Cc+s/Ec1GIj4DEVi zFt5oFOfXYDerAX2/P/gs5OZCNs4yxtpwggr4Ows7WNHFKz7Ne1JGz079Uc0FXBa QVs40szB4bbac733myhwp/r2beMQGH7ARwT6PaOTzeT0h62OxwtttAxHLlfPmknF UDUCHsZeH9osBh9reU3IHN/ifibNZ3pvio27RDKWrHre8XiMApnMUp5z2hVp4RYe pQlQb3psdudwqw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:24 2026 by rpki-client