This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json) Hash identifier: icEq4jny9kA4w6nku6GUVcjTGX9Fl1NecwZsbWSEn2A= Subject key identifier: CF:16:A9:AC:04:C2:DC:E7:A4:C8:FF:B9:0D:C3:48:DA:61:B4:C2:CD Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2 Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2 Certificate serial: 019C42465A0AA6A567DFF4601C8299F31DCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft Manifest number: 17AE Signing time: Mon 09 Feb 2026 12:00:32 +0000 Manifest this update: Mon 09 Feb 2026 12:00:32 +0000 Manifest next update: Tue 10 Feb 2026 12:00:32 +0000 Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: +hkOj05V5fp8L7SR72sYYSGsPrH4rivPllezaDA1lSI=) 2: inWJjPlJFW21pp4od2z3iY_uZEk.roa (hash: Xd/E3RLJuGMfSPzPkg4w1pBvrrWPKd6B6O8itEqhX1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:5a:0a:a6:a5:67:df:f4:60:1c:82:99:f3:1d:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2 Validity Not Before: Feb 9 12:00:32 2026 GMT Not After : Feb 10 12:00:32 2026 GMT Subject: CN=cf16a9ac04c2dce7a4c8ffb90dc348da61b4c2cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:a1:e9:4b:bf:24:71:66:b1:2a:01:a5:2a: fb:d1:74:95:46:f2:8e:bd:d8:34:f5:f1:8c:36:88: 7d:c8:37:57:9e:dc:d0:00:0b:33:b3:20:db:a6:4d: ba:93:53:c6:c7:78:44:8e:1c:27:af:73:0e:59:ba: a0:eb:a2:0f:28:ec:22:93:22:4d:ab:fb:d1:46:62: e5:91:6f:4c:4f:50:d3:ff:0f:bd:62:71:ae:41:59: e7:fb:90:42:75:0d:6a:41:3e:dc:e3:81:31:65:b8: 31:62:f4:78:81:fa:58:04:d9:e6:69:ec:d6:9d:52: 3b:b1:1e:16:2d:cb:ad:21:a9:7c:b8:8b:28:4f:16: 81:0e:23:6f:9a:3d:a5:77:2e:cb:18:52:72:eb:ef: 68:3f:f0:8b:ad:00:98:b6:e1:f0:2e:aa:03:fa:fa: 0c:0a:39:6f:17:04:f2:cb:0d:fc:fb:d7:80:ad:b6: ad:5a:9e:85:94:74:d4:bb:d4:69:9f:ed:65:7f:da: ba:94:b6:7e:39:1c:45:b6:41:7e:61:dc:83:1d:a9: ac:d4:47:2a:cb:9b:b7:62:ce:e9:40:3c:91:5d:b7: 88:79:51:0e:98:ef:0f:e0:d6:11:42:71:be:43:15: 3e:da:ff:c7:b7:b9:62:9f:6a:81:fc:33:55:c5:29: ef:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:16:A9:AC:04:C2:DC:E7:A4:C8:FF:B9:0D:C3:48:DA:61:B4:C2:CD X509v3 Authority Key Identifier: keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:b4:41:b5:d3:ee:bb:f9:27:1c:cc:2b:b4:a4:71:97:a8:40: 9e:ba:e1:5b:a4:04:c6:5d:9d:0f:4a:ad:a8:06:ca:69:1a:79: 1f:fb:e3:3b:6d:b7:5c:31:9f:29:66:1a:18:c4:8f:1f:d2:31: b0:db:60:67:d0:cd:ca:dd:2a:31:bf:c9:fa:71:1e:4d:43:a8: 96:f1:dd:6e:de:cf:d7:55:2c:44:a7:7b:5e:a0:7f:1e:6c:9e: ad:99:f6:17:31:aa:d3:11:dc:1f:d8:fe:c9:9f:14:f2:9d:6b: 5b:fa:d3:bb:fe:03:12:fb:8e:cf:2b:5a:b0:14:8e:47:78:22: be:f9:2b:64:9e:88:a4:36:1e:03:be:f4:06:e5:5d:fa:b5:83: 65:2e:6a:0e:9c:c4:0b:b7:20:03:8b:c7:f2:08:dc:f6:22:75: 63:83:52:b7:94:10:16:10:ae:23:8f:2c:cc:8c:80:4a:63:af: b9:57:b3:fc:64:39:48:e5:ea:a6:fa:26:12:ce:c4:70:b0:1f: 93:2e:76:1a:ed:7d:dd:a1:0e:7c:67:84:c4:33:4c:2d:83:3e: e8:6d:6e:cd:f9:9f:29:2b:11:27:da:70:b2:fb:67:5d:b1:1c: cc:5f:46:73:59:38:02:ef:12:1c:40:9e:a3:7d:9e:1a:fb:97: ef:49:cb:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRloKpqVn3/RgHIKZ8x3OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2MTQ3NGNlY2RmNWY1MDNhZGFiNjBmYzU1ZWU3Zjc4YTBk YmE5ZjIwHhcNMjYwMjA5MTIwMDMyWhcNMjYwMjEwMTIwMDMyWjAzMTEwLwYDVQQD EyhjZjE2YTlhYzA0YzJkY2U3YTRjOGZmYjkwZGMzNDhkYTYxYjRjMmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNih6Uu/JHFmsSoBpSr70XSVRvKO vdg09fGMNoh9yDdXntzQAAszsyDbpk26k1PGx3hEjhwnr3MOWbqg66IPKOwikyJN q/vRRmLlkW9MT1DT/w+9YnGuQVnn+5BCdQ1qQT7c44ExZbgxYvR4gfpYBNnmaezW nVI7sR4WLcutIal8uIsoTxaBDiNvmj2ldy7LGFJy6+9oP/CLrQCYtuHwLqoD+voM CjlvFwTyyw38+9eArbatWp6FlHTUu9Rpn+1lf9q6lLZ+ORxFtkF+YdyDHams1Ecq y5u3Ys7pQDyRXbeIeVEOmO8P4NYRQnG+QxU+2v/Ht7lin2qB/DNVxSnvZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM8WqawEwtznpMj/uQ3DSNphtMLNMB8GA1UdIwQY MBaAFAYUdM7N9fUDratg/FXuf3ig26nyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85NmRmZjMtYWJlNS00OGZiLWFhMjUt NTI2ZTdmNmQ3ZjViLzEvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85NmRmZjMtYWJlNS00OGZiLWFhMjUtNTI2ZTdmNmQ3ZjVi LzEvQmhSMHpzMzE5UU90cTJEOFZlNV9lS0RicWZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7RBtdPu u/knHMwrtKRxl6hAnrrhW6QExl2dD0qtqAbKaRp5H/vjO223XDGfKWYaGMSPH9Ix sNtgZ9DNyt0qMb/J+nEeTUOolvHdbt7P11UsRKd7XqB/HmyerZn2FzGq0xHcH9j+ yZ8U8p1rW/rTu/4DEvuOzytasBSOR3givvkrZJ6IpDYeA770BuVd+rWDZS5qDpzE C7cgA4vH8gjc9iJ1Y4NSt5QQFhCuI48szIyASmOvuVez/GQ5SOXqpvomEs7EcLAf ky52Gu193aEOfGeExDNMLYM+6G1uzfmfKSsRJ9pwsvtnXbEczF9Gc1k4Au8SHECe o32eGvuX70nLmA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:24 2026 by rpki-client