This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json) Hash identifier: aj+iykbeMPsOfozLWrHbceqXzlIGKw39tWj8XRo9EE8= Subject key identifier: 7F:95:E4:02:36:43:79:D1:DD:80:9F:36:59:5D:C2:70:10:8A:D0:E2 Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc Certificate serial: 019C43226E628643522DE1733A357BCAD290 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft Manifest number: 10AB Signing time: Mon 09 Feb 2026 16:00:55 +0000 Manifest this update: Mon 09 Feb 2026 16:00:55 +0000 Manifest next update: Tue 10 Feb 2026 16:00:55 +0000 Files and hashes: 1: KTh_wFZKz8V5Fp_N5BMzfuwBa2E.roa (hash: Y4+66kr490+tAfYv+Li1KCX6wSQ4d0GvtrjYF/+CHtM=) 2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: Sp/5epbTVt8oVb50nN5XCclt+fy8bwbXefDykPyfV+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:6e:62:86:43:52:2d:e1:73:3a:35:7b:ca:d2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc Validity Not Before: Feb 9 16:00:55 2026 GMT Not After : Feb 10 16:00:55 2026 GMT Subject: CN=7f95e402364379d1dd809f36595dc270108ad0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c1:0b:1b:56:1b:24:1b:bb:ab:7d:63:df:32: 9a:ea:6a:a1:60:df:9d:35:8f:9f:a3:f8:3a:48:ea: 9c:20:dc:62:0a:f4:fe:68:f8:34:62:a4:59:bf:81: 7d:4c:b2:ff:ec:5a:83:0d:d6:86:2d:01:2f:c5:a3: a5:5c:16:bd:9c:e1:c9:ae:cd:70:05:59:f1:02:dd: 00:c0:0c:5a:a8:7b:3a:0c:ea:4c:51:5f:f5:d3:11: d1:f3:9b:20:20:5e:0c:e2:06:bd:43:5d:75:5b:7c: 3e:6d:ad:9c:69:20:06:7f:38:1e:01:24:6a:ce:c2: 41:37:cc:2d:3b:ae:ae:e9:da:d3:fb:25:16:92:87: 7a:04:29:74:74:7c:c5:26:6c:9d:5c:ff:1b:11:cc: f2:1e:b8:b2:57:f1:97:74:15:0e:31:6a:d7:cf:12: a2:ef:70:ba:7f:85:db:73:52:40:57:69:0a:26:ee: 93:30:af:64:5d:70:29:ad:dc:b9:1c:7b:3e:c7:02: 3f:62:5f:f3:30:5e:f3:32:53:e6:1e:5a:45:2b:93: f5:52:17:c8:4a:ff:84:04:07:73:a8:01:d5:f3:86: e1:7a:ed:8d:c2:d4:c8:cb:53:e4:1b:77:db:05:6d: 7b:bb:df:d6:6c:1f:91:d1:a0:5b:57:85:ae:e4:e8: c0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:95:E4:02:36:43:79:D1:DD:80:9F:36:59:5D:C2:70:10:8A:D0:E2 X509v3 Authority Key Identifier: keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a2:7d:0c:ef:14:5a:ba:9c:bf:77:a9:94:6d:5d:3b:6f:f5: 9e:11:78:81:0e:4a:48:9d:af:67:12:eb:48:08:9b:f1:66:65: 0a:15:b1:d2:3c:1b:4a:ba:28:6a:74:da:f3:de:41:de:8e:da: 70:68:02:72:49:56:5a:76:a4:2b:6b:ed:1c:0c:9f:f1:21:40: e1:e6:29:34:0f:67:ca:e8:97:a3:b4:dd:f3:bb:51:db:69:e9: 28:18:6a:4a:7e:e7:e7:38:2b:a9:ff:12:43:f7:d0:09:21:28: 85:a7:b8:fc:c4:77:b1:9f:cb:dd:de:a0:d2:eb:72:a1:3a:93: 0f:40:42:85:6f:0c:b4:f1:ff:bb:47:2d:8a:e1:64:bf:96:36: b8:5a:f9:64:32:74:33:a0:d5:2a:6c:a8:0d:8b:9b:42:7c:d5: 72:78:59:41:0c:de:72:f7:ac:72:46:09:e5:df:05:92:2e:8b: a8:c8:db:f2:c1:b7:f7:f3:c3:1f:56:70:46:a1:33:db:52:3f: 08:db:40:41:b9:31:38:a7:9f:ef:a3:b5:62:06:de:ac:ad:64: 04:43:b7:42:7c:66:27:14:bc:82:c6:50:33:18:54:a9:05:94: 0f:10:a2:45:06:53:94:52:b3:7f:c8:d9:e2:4f:10:be:60:b1: cd:7a:6a:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIm5ihkNSLeFzOjV7ytKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkYzVlM2NlZjVkYTVlN2ZkZmMzNjRjNWQ1YTA0MDJkM2E2 Nzg2ZGMwHhcNMjYwMjA5MTYwMDU1WhcNMjYwMjEwMTYwMDU1WjAzMTEwLwYDVQQD Eyg3Zjk1ZTQwMjM2NDM3OWQxZGQ4MDlmMzY1OTVkYzI3MDEwOGFkMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MELG1YbJBu7q31j3zKa6mqhYN+d NY+fo/g6SOqcINxiCvT+aPg0YqRZv4F9TLL/7FqDDdaGLQEvxaOlXBa9nOHJrs1w BVnxAt0AwAxaqHs6DOpMUV/10xHR85sgIF4M4ga9Q111W3w+ba2caSAGfzgeASRq zsJBN8wtO66u6drT+yUWkod6BCl0dHzFJmydXP8bEczyHriyV/GXdBUOMWrXzxKi 73C6f4Xbc1JAV2kKJu6TMK9kXXAprdy5HHs+xwI/Yl/zMF7zMlPmHlpFK5P1UhfI Sv+EBAdzqAHV84bheu2NwtTIy1PkG3fbBW17u9/WbB+R0aBbV4Wu5OjAgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+V5AI2Q3nR3YCfNlldwnAQitDiMB8GA1UdIwQY MBaAFG3F48712l5/38NkxdWgQC06Z4bcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYt Y2RjYzk2NjA3YjlhLzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9jYzc3YTYtMmIwZS00Y2RkLTg4MjYtY2RjYzk2NjA3Yjlh LzEvYmNYanp2WGFYbl9mdzJURjFhQkFMVHBuaHR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6J9DO8U Wrqcv3eplG1dO2/1nhF4gQ5KSJ2vZxLrSAib8WZlChWx0jwbSrooanTa895B3o7a cGgCcklWWnakK2vtHAyf8SFA4eYpNA9nyuiXo7Td87tR22npKBhqSn7n5zgrqf8S Q/fQCSEohae4/MR3sZ/L3d6g0utyoTqTD0BChW8MtPH/u0ctiuFkv5Y2uFr5ZDJ0 M6DVKmyoDYubQnzVcnhZQQzecvesckYJ5d8Fki6LqMjb8sG39/PDH1ZwRqEz21I/ CNtAQbkxOKef76O1YgberK1kBEO3QnxmJxS8gsZQMxhUqQWUDxCiRQZTlFKzf8jZ 4k8QvmCxzXpqZg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:45 2026 by rpki-client