This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft File: bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft (raw, json) Hash identifier: FOFifC0tLVepgIKTDc0cdDjfeb2bVfLAdFELrI+T4Zk= Subject key identifier: AF:2A:FA:30:46:81:AA:E6:80:64:1D:28:3E:ED:49:AE:E6:53:CE:24 Authority key identifier: 6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75 Certificate issuer: /CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675 Certificate serial: 019C41D8C3440624622A7C7A95B048B60DEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft Manifest number: 03A2 Signing time: Mon 09 Feb 2026 10:00:50 +0000 Manifest this update: Mon 09 Feb 2026 10:00:50 +0000 Manifest next update: Tue 10 Feb 2026 10:00:50 +0000 Files and hashes: 1: GCeDgCKOnbFY3U0olZ4r0yqAX7g.roa (hash: +SThIA5U78DHRFgrExpVjECZowaekUZ+Kqjt9wzZQWI=) 2: bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl (hash: mzIl9Lzd/Jni78jdhnOZIiz0O4+JZObe614cnsAShgQ=) 3: tglsOsq2MXVhhtPQ1fuHwjxCRDE.roa (hash: 8XEuad3zZxDli1a1G3vIehCptWc+Hmtp2zxnb2jVTdQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:c3:44:06:24:62:2a:7c:7a:95:b0:48:b6:0d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c195b9bd47001eab50fdba1de0d2d3f4527f675 Validity Not Before: Feb 9 10:00:50 2026 GMT Not After : Feb 10 10:00:50 2026 GMT Subject: CN=af2afa304681aae680641d283eed49aee653ce24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:52:a5:10:da:73:18:20:55:94:fc:61:36:7f: 5e:75:bb:b9:81:7e:a1:d5:1f:88:60:94:4b:00:94: 8c:bd:a6:2f:40:7a:e4:04:ea:03:ed:49:7d:1b:46: 74:73:1e:80:ab:20:de:d3:61:1b:4c:04:0c:f4:1b: 0f:17:c6:86:13:20:49:4d:88:aa:4a:ae:b7:e3:79: bf:f8:05:47:8d:4c:f4:fd:dd:47:72:f0:ae:da:a1: 3d:f5:ea:39:37:6c:33:67:9a:2c:cb:e9:ea:7b:27: 88:93:54:22:40:16:64:3e:38:1d:cc:4b:02:86:97: cf:26:b2:27:6c:aa:cc:55:e4:fa:71:ed:98:e4:6e: be:18:12:dd:6b:2a:cd:50:68:c4:fb:1e:71:3c:9c: 7c:9a:7e:1d:f1:a5:0d:d0:c3:79:69:5f:a6:9b:36: 11:47:37:95:2a:6c:d8:d9:03:21:fd:19:5f:0f:a2: 3f:f4:6e:af:40:a7:84:5e:e8:9b:7a:74:02:90:ca: fa:fa:e1:31:88:40:02:14:45:1e:c5:3a:ff:69:3b: a5:9c:69:e2:4e:a8:9c:ff:d1:11:ee:ee:41:38:2a: 33:1a:48:16:a2:30:4d:4a:0b:40:6a:e2:4d:98:ff: 2e:51:ff:f8:30:f8:ea:fb:72:a0:3b:5d:99:74:7d: c3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:2A:FA:30:46:81:AA:E6:80:64:1D:28:3E:ED:49:AE:E6:53:CE:24 X509v3 Authority Key Identifier: keyid:6C:19:5B:9B:D4:70:01:EA:B5:0F:DB:A1:DE:0D:2D:3F:45:27:F6:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBlbm9RwAeq1D9uh3g0tP0Un9nU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/010d3d-1ba8-4a96-8212-94ac8af1bfcf/1/bBlbm9RwAeq1D9uh3g0tP0Un9nU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:cd:30:28:35:df:0c:21:bd:a3:81:07:0d:ff:5e:7f:37:c2: 8a:16:8e:2f:02:6b:ce:48:1d:f9:5a:72:1f:d2:95:7a:42:96: 09:28:16:61:1f:ad:da:3a:39:da:ea:a9:55:16:7d:27:fd:9b: c7:a0:6f:36:80:d3:da:2c:5f:39:b8:16:35:8f:34:24:b4:da: 6c:55:94:00:64:ef:83:8e:c0:7e:33:53:a8:a6:ad:82:17:06: e1:59:0f:c9:65:bc:82:96:12:9c:eb:a0:e7:39:13:14:c1:68: 81:73:d1:6a:c1:c7:00:4c:66:8a:f1:33:ff:a0:1b:95:65:de: 54:79:38:e9:a1:de:e7:1d:e8:87:de:ba:f4:d1:a2:16:ff:00: 8c:5c:b8:05:0b:9a:2c:7c:a6:ee:34:25:f1:06:60:82:59:c4: 66:ee:a3:ac:9f:89:20:d5:fe:76:e4:05:08:a5:78:34:c7:d1: 8b:38:14:91:c7:34:ac:21:8a:69:ed:c4:66:1f:0f:93:cb:9c: 33:55:2c:54:10:7a:06:e3:21:b2:ae:65:62:a6:0c:0e:d7:75: 33:11:8e:51:5f:ef:c7:ba:01:d7:8f:a9:94:d4:7a:d5:8a:27: 3c:c8:38:49:28:e1:b9:3d:a6:c7:20:34:4f:7a:be:c1:1e:5d: b1:70:52:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2MNEBiRiKnx6lbBItg3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMTk1YjliZDQ3MDAxZWFiNTBmZGJhMWRlMGQyZDNmNDUy N2Y2NzUwHhcNMjYwMjA5MTAwMDUwWhcNMjYwMjEwMTAwMDUwWjAzMTEwLwYDVQQD EyhhZjJhZmEzMDQ2ODFhYWU2ODA2NDFkMjgzZWVkNDlhZWU2NTNjZTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFKlENpzGCBVlPxhNn9edbu5gX6h 1R+IYJRLAJSMvaYvQHrkBOoD7Ul9G0Z0cx6AqyDe02EbTAQM9BsPF8aGEyBJTYiq Sq6343m/+AVHjUz0/d1HcvCu2qE99eo5N2wzZ5osy+nqeyeIk1QiQBZkPjgdzEsC hpfPJrInbKrMVeT6ce2Y5G6+GBLdayrNUGjE+x5xPJx8mn4d8aUN0MN5aV+mmzYR RzeVKmzY2QMh/RlfD6I/9G6vQKeEXuibenQCkMr6+uExiEACFEUexTr/aTulnGni Tqic/9ER7u5BOCozGkgWojBNSgtAauJNmP8uUf/4MPjq+3KgO12ZdH3DwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8q+jBGgarmgGQdKD7tSa7mU84kMB8GA1UdIwQY MBaAFGwZW5vUcAHqtQ/bod4NLT9FJ/Z1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTIt OTRhYzhhZjFiZmNmLzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS8wMTBkM2QtMWJhOC00YTk2LTgyMTItOTRhYzhhZjFiZmNm LzEvYkJsYm05UndBZXExRDl1aDNnMHRQMFVuOW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM0wKDXf DCG9o4EHDf9efzfCihaOLwJrzkgd+VpyH9KVekKWCSgWYR+t2jo52uqpVRZ9J/2b x6BvNoDT2ixfObgWNY80JLTabFWUAGTvg47AfjNTqKatghcG4VkPyWW8gpYSnOug 5zkTFMFogXPRasHHAExmivEz/6AblWXeVHk46aHe5x3oh9669NGiFv8AjFy4BQua LHym7jQl8QZgglnEZu6jrJ+JINX+duQFCKV4NMfRizgUkcc0rCGKae3EZh8Pk8uc M1UsVBB6BuMhsq5lYqYMDtd1MxGOUV/vx7oB14+plNR61YonPMg4SSjhuT2mxyA0 T3q+wR5dsXBS5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:00 2026 by rpki-client