This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft File: BDjuFv-LwYTI-qF62vWZ4_rwynE.mft (raw, json) Hash identifier: 0rflF5xybOC7CbXwv+8zfUjRq546A1hel8swQVyXDO4= Subject key identifier: FE:AB:7E:67:22:FE:B1:6E:10:60:D3:BC:C5:85:7E:39:E1:39:E9:82 Authority key identifier: 04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71 Certificate issuer: /CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71 Certificate serial: 019C41D8374DF41075C4A36252EBFE833056 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft Manifest number: 0DD2 Signing time: Mon 09 Feb 2026 10:00:14 +0000 Manifest this update: Mon 09 Feb 2026 10:00:14 +0000 Manifest next update: Tue 10 Feb 2026 10:00:14 +0000 Files and hashes: 1: BDjuFv-LwYTI-qF62vWZ4_rwynE.crl (hash: RFtnkEtoLMRp60LnEFcH5ZcmGHEOmHkkk3D5OIsyxjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:37:4d:f4:10:75:c4:a3:62:52:eb:fe:83:30:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0438ee16ff8bc184c8faa17adaf599e3faf0ca71 Validity Not Before: Feb 9 10:00:14 2026 GMT Not After : Feb 10 10:00:14 2026 GMT Subject: CN=feab7e6722feb16e1060d3bcc5857e39e139e982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:39:f0:a5:52:52:00:e0:5f:ab:00:72:b1:5a: 7a:8b:3d:77:21:a8:50:82:4f:8d:f5:21:c4:04:72: bd:a6:ad:00:6d:cb:90:9f:6e:6a:e7:77:39:88:7a: f3:17:42:7c:1c:25:3e:22:19:be:91:e2:04:cf:8b: b1:e3:14:68:24:26:a3:77:9c:44:46:60:5e:95:c9: f9:b4:19:2a:de:a4:e7:ee:e8:64:cb:97:4d:6b:85: 94:5c:db:b9:3b:03:f2:b0:96:25:d8:17:5e:5c:84: 3a:7f:3b:8f:71:88:76:de:6d:ac:5a:80:cf:f4:bf: f3:3d:96:db:e1:cc:e4:76:52:0c:bd:31:5e:b2:fb: a4:bb:05:49:ce:28:3e:2b:ae:4c:dd:32:2d:2c:5e: b7:90:1e:6a:78:88:ba:92:5d:a8:e7:30:c3:0a:29: 88:f1:60:40:d4:59:7f:6a:91:2a:a2:cf:07:da:80: f5:32:81:5c:98:f8:90:6f:f1:8e:71:fb:3f:32:23: 18:eb:b3:af:13:28:5c:d0:5d:06:b8:a9:85:42:93: 63:b4:50:ed:a3:b9:5f:11:cc:fe:58:10:7a:ca:41: e8:35:2f:16:de:54:cf:fa:3f:f8:24:ce:1d:27:6f: b2:22:a5:d7:9d:67:ee:f0:8a:5c:39:c0:38:16:8b: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:AB:7E:67:22:FE:B1:6E:10:60:D3:BC:C5:85:7E:39:E1:39:E9:82 X509v3 Authority Key Identifier: keyid:04:38:EE:16:FF:8B:C1:84:C8:FA:A1:7A:DA:F5:99:E3:FA:F0:CA:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDjuFv-LwYTI-qF62vWZ4_rwynE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/490a26-e1f5-4fd5-bbfc-fe44bb88bc20/1/BDjuFv-LwYTI-qF62vWZ4_rwynE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:97:02:38:5b:b6:d3:54:1a:7e:25:aa:a8:4b:f7:47:19:ac: ac:dc:cb:f6:d1:70:91:1b:22:58:41:e0:7e:e2:b9:c4:24:71: 37:ca:0b:19:fc:1b:85:a2:4d:56:e7:71:b2:f2:3c:cb:3e:4d: 38:39:21:60:0a:45:df:04:f4:21:21:45:46:61:c7:09:00:6f: de:e0:6e:ce:99:66:84:c8:b5:d3:74:fa:98:31:a2:1b:3d:3c: bb:83:3c:9b:cc:9a:d2:1d:7a:90:45:92:60:9c:ee:cb:17:eb: 99:93:9e:4b:0f:85:1e:ba:44:78:44:49:15:2a:e7:67:5c:3f: 89:cf:4b:2a:5b:68:43:4f:69:cd:30:80:8e:8d:3b:7a:96:c9: 23:4e:a8:43:ec:e9:71:0a:61:4c:4b:91:9a:55:9a:ff:a8:c8: 12:ae:17:c3:eb:f7:c1:1a:0c:ad:34:5e:00:71:7d:e6:f9:72: 4a:9b:23:0a:de:ce:32:e1:91:6b:37:90:3f:5c:1d:49:c5:5c: 35:cb:e4:f2:46:da:a6:86:f0:8d:ca:9f:b1:87:86:77:6a:a5: e4:3c:2f:8c:c8:09:dc:1d:e4:be:b7:24:76:a0:75:f5:7b:b9: 81:63:a0:a4:52:dc:b7:39:b3:fc:9a:96:56:e8:51:32:db:03: 4b:51:f0:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2DdN9BB1xKNiUuv+gzBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0MzhlZTE2ZmY4YmMxODRjOGZhYTE3YWRhZjU5OWUzZmFm MGNhNzEwHhcNMjYwMjA5MTAwMDE0WhcNMjYwMjEwMTAwMDE0WjAzMTEwLwYDVQQD EyhmZWFiN2U2NzIyZmViMTZlMTA2MGQzYmNjNTg1N2UzOWUxMzllOTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyznwpVJSAOBfqwBysVp6iz13IahQ gk+N9SHEBHK9pq0AbcuQn25q53c5iHrzF0J8HCU+Ihm+keIEz4ux4xRoJCajd5xE RmBelcn5tBkq3qTn7uhky5dNa4WUXNu5OwPysJYl2BdeXIQ6fzuPcYh23m2sWoDP 9L/zPZbb4czkdlIMvTFesvukuwVJzig+K65M3TItLF63kB5qeIi6kl2o5zDDCimI 8WBA1Fl/apEqos8H2oD1MoFcmPiQb/GOcfs/MiMY67OvEyhc0F0GuKmFQpNjtFDt o7lfEcz+WBB6ykHoNS8W3lTP+j/4JM4dJ2+yIqXXnWfu8IpcOcA4FotVRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6rfmci/rFuEGDTvMWFfjnhOemCMB8GA1UdIwQY MBaAFAQ47hb/i8GEyPqhetr1meP68MpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMt ZmU0NGJiODhiYzIwLzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy80OTBhMjYtZTFmNS00ZmQ1LWJiZmMtZmU0NGJiODhiYzIw LzEvQkRqdUZ2LUx3WVRJLXFGNjJ2V1o0X3J3eW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACJcCOFu2 01QafiWqqEv3RxmsrNzL9tFwkRsiWEHgfuK5xCRxN8oLGfwbhaJNVudxsvI8yz5N ODkhYApF3wT0ISFFRmHHCQBv3uBuzplmhMi103T6mDGiGz08u4M8m8ya0h16kEWS YJzuyxfrmZOeSw+FHrpEeERJFSrnZ1w/ic9LKltoQ09pzTCAjo07epbJI06oQ+zp cQphTEuRmlWa/6jIEq4Xw+v3wRoMrTReAHF95vlySpsjCt7OMuGRazeQP1wdScVc Ncvk8kbapobwjcqfsYeGd2ql5DwvjMgJ3B3kvrckdqB19Xu5gWOgpFLctzmz/JqW VuhRMtsDS1Hw+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:41 2026 by rpki-client