This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft File: bchbZ4jkUMBUE0row2V0iyP3Qmc.mft (raw, json) Hash identifier: JnfX8dCYbPctViy8DP0dyiXDHfVF4/mIUOboCb4b+TQ= Subject key identifier: C2:17:99:28:88:9C:7B:78:D1:B6:13:FF:C2:CB:8D:8C:37:F1:CC:9A Authority key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67 Certificate issuer: /CN=6dc85b6788e450c054134ae8c365748b23f74267 Certificate serial: 019C438FFEFA75D9827E217432C25506242B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft Manifest number: 098B Signing time: Mon 09 Feb 2026 18:00:36 +0000 Manifest this update: Mon 09 Feb 2026 18:00:36 +0000 Manifest next update: Tue 10 Feb 2026 18:00:36 +0000 Files and hashes: 1: RNdr2XfKznxYQv64qQ8r-9v8mi8.roa (hash: 8EELTXHUCB2Nv32RBO7+0uGvBkgV+cDWxxUoIS6QShs=) 2: bchbZ4jkUMBUE0row2V0iyP3Qmc.crl (hash: SUEnCTdJChJrI8lCCm8tsEGuLk/a4UrCE6VeAdlXh+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:fe:fa:75:d9:82:7e:21:74:32:c2:55:06:24:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dc85b6788e450c054134ae8c365748b23f74267 Validity Not Before: Feb 9 18:00:36 2026 GMT Not After : Feb 10 18:00:36 2026 GMT Subject: CN=c2179928889c7b78d1b613ffc2cb8d8c37f1cc9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dc:0d:a9:38:b6:17:04:0c:01:5b:ea:3f:3d: 13:1e:cd:62:18:2b:6a:c4:cc:cf:89:e8:bc:c8:12: 9b:be:ca:c3:56:6c:40:c0:f9:31:1f:34:bc:88:88: f0:4b:b3:50:d4:32:8d:fb:e0:d8:cc:4f:8c:23:fc: b7:d9:11:ab:0c:5d:dd:be:bd:81:ff:0a:57:8a:34: bd:c1:34:b4:b3:c3:98:d6:e8:70:8d:35:d1:87:bf: 43:f4:c1:e8:ad:ba:8c:46:5a:e1:3c:6d:6e:54:0f: d1:e3:c8:95:e8:68:ab:fd:b1:97:c1:0f:31:cc:a5: f7:08:c8:4b:b0:58:6e:c2:19:90:29:76:1c:9b:77: a7:e3:18:3d:5b:00:a7:76:62:2b:f9:fc:44:af:de: 78:84:60:a7:37:8b:71:b2:ba:22:73:ed:b9:e9:86: 8f:ee:07:59:9f:49:73:f8:6c:1d:57:43:3c:bc:35: 6a:91:f1:26:b2:69:cb:8b:e5:e2:cb:6f:ad:c0:71: fa:19:ba:8d:32:0f:3b:e7:ad:a6:af:08:54:00:73: b7:0e:77:25:08:6c:fb:ca:4b:12:3e:e7:20:f7:45: 20:ff:3c:3e:03:36:b2:c1:7e:8a:3e:d8:37:20:ef: d8:bc:9d:e9:43:56:0b:da:96:e0:0f:29:73:af:74: ed:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:17:99:28:88:9C:7B:78:D1:B6:13:FF:C2:CB:8D:8C:37:F1:CC:9A X509v3 Authority Key Identifier: keyid:6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7d:26:f0:6c:63:72:5b:b8:cf:87:38:ee:34:b2:2f:58:da: a8:ac:e2:87:58:bb:26:29:b4:61:f1:6f:3e:71:31:0d:a1:04: a1:9f:63:89:93:d4:ba:8e:c4:53:66:6f:49:e3:b8:86:d3:f7: 91:d6:0d:31:47:2e:fe:c8:40:0b:72:09:82:44:fd:6b:29:72: 14:a1:7f:69:3a:12:73:c6:47:73:55:2c:29:eb:2a:09:32:5c: 96:7c:4f:f4:e2:f9:a1:54:bf:d9:4d:05:61:1c:ff:76:3e:d8: d9:d6:75:c4:a1:3f:ab:a4:12:4e:2a:0a:b0:40:20:34:9e:7e: 86:67:ae:2d:47:2c:bd:1b:45:37:e9:72:e6:80:4c:5b:9e:8b: b5:d4:80:b7:81:4b:67:66:5f:b7:b9:35:40:db:6a:bd:59:74: 7a:60:36:d8:a6:dc:00:38:65:8b:e4:bd:b5:18:0f:7b:e5:a6: ff:01:9d:9b:e0:8d:1f:87:ae:ca:b7:6e:f9:9c:47:cd:22:6a: b6:2e:65:47:b9:c4:78:22:01:58:5d:78:e3:f4:82:4f:10:30: 5b:45:56:f9:53:27:4e:a8:3e:dc:dd:e9:bf:65:29:91:c9:6e: 75:95:77:b9:fe:48:10:d6:68:f2:d7:30:1f:20:f3:22:93:c6: ab:6f:e2:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/76ddmCfiF0MsJVBiQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYzg1YjY3ODhlNDUwYzA1NDEzNGFlOGMzNjU3NDhiMjNm NzQyNjcwHhcNMjYwMjA5MTgwMDM2WhcNMjYwMjEwMTgwMDM2WjAzMTEwLwYDVQQD EyhjMjE3OTkyODg4OWM3Yjc4ZDFiNjEzZmZjMmNiOGQ4YzM3ZjFjYzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNwNqTi2FwQMAVvqPz0THs1iGCtq xMzPiei8yBKbvsrDVmxAwPkxHzS8iIjwS7NQ1DKN++DYzE+MI/y32RGrDF3dvr2B /wpXijS9wTS0s8OY1uhwjTXRh79D9MHorbqMRlrhPG1uVA/R48iV6Gir/bGXwQ8x zKX3CMhLsFhuwhmQKXYcm3en4xg9WwCndmIr+fxEr954hGCnN4txsroic+256YaP 7gdZn0lz+GwdV0M8vDVqkfEmsmnLi+Xiy2+twHH6GbqNMg87562mrwhUAHO3Dncl CGz7yksSPucg90Ug/zw+AzaywX6KPtg3IO/YvJ3pQ1YL2pbgDylzr3TtewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIXmSiInHt40bYT/8LLjYw38cyaMB8GA1UdIwQY MBaAFG3IW2eI5FDAVBNK6MNldIsj90JnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmNoYlo0amtVTUJVRTByb3cyVjBpeVAzUW1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lYmYxNjktYmUxNy00Y2U5LTkyNzUt MDgxNzg2YWIwNzQ4LzEvYmNoYlo0amtVTUJVRTByb3cyVjBpeVAzUW1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lYmYxNjktYmUxNy00Y2U5LTkyNzUtMDgxNzg2YWIwNzQ4 LzEvYmNoYlo0amtVTUJVRTByb3cyVjBpeVAzUW1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZH0m8Gxj clu4z4c47jSyL1jaqKzih1i7Jim0YfFvPnExDaEEoZ9jiZPUuo7EU2ZvSeO4htP3 kdYNMUcu/shAC3IJgkT9aylyFKF/aToSc8ZHc1UsKesqCTJclnxP9OL5oVS/2U0F YRz/dj7Y2dZ1xKE/q6QSTioKsEAgNJ5+hmeuLUcsvRtFN+ly5oBMW56LtdSAt4FL Z2Zft7k1QNtqvVl0emA22KbcADhli+S9tRgPe+Wm/wGdm+CNH4euyrdu+ZxHzSJq ti5lR7nEeCIBWF144/SCTxAwW0VW+VMnTqg+3N3pv2UpkcludZV3uf5IENZo8tcw HyDzIpPGq2/iXg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:18 2026 by rpki-client