This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft File: Bzby35Rr9SWzw8qC9RutVdAuNu8.mft (raw, json) Hash identifier: +4vSqqLAEiN4dHA2III38Rd9Y3ErJ4qHZyaeiwmv54Y= Subject key identifier: AA:BB:FC:FA:D3:46:F1:73:01:C2:19:83:DE:DE:1D:A7:5F:FF:93:14 Authority key identifier: 07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF Certificate issuer: /CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef Certificate serial: 019C438FFAA716212B5A3EF089D21B060AF2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft Manifest number: 02E3 Signing time: Mon 09 Feb 2026 18:00:35 +0000 Manifest this update: Mon 09 Feb 2026 18:00:35 +0000 Manifest next update: Tue 10 Feb 2026 18:00:35 +0000 Files and hashes: 1: 9dGvdWlNpFyFHCXA6RbwTGwzlgw.roa (hash: EKwo4lR/lHxGWjUPRhdL7zbwa8l0PAt3OjON/sSOuEs=) 2: Bzby35Rr9SWzw8qC9RutVdAuNu8.crl (hash: d07yUaQSpt1uat+4DyqihR7fDc8XocFRURICX2Y/S5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:fa:a7:16:21:2b:5a:3e:f0:89:d2:1b:06:0a:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0736f2df946bf525b3c3ca82f51bad55d02e36ef Validity Not Before: Feb 9 18:00:35 2026 GMT Not After : Feb 10 18:00:35 2026 GMT Subject: CN=aabbfcfad346f17301c21983dede1da75fff9314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f0:a0:09:b1:22:9d:00:09:92:dd:b5:d6:b5: b8:3f:b9:96:14:7c:e9:9e:13:7b:04:75:32:ac:33: 64:6f:b9:12:a6:28:2d:b9:26:6a:19:88:53:c6:af: 1c:a6:12:a0:9f:97:3b:cb:46:c1:45:a0:a9:67:4d: 3e:3b:5d:9c:c1:dc:ba:71:91:e3:42:92:fd:b2:0c: 6e:f7:da:3b:0d:98:e4:6b:31:62:3c:2a:b0:61:c6: 0c:bc:6d:ac:ce:38:16:e6:bd:e4:b7:f6:b3:e0:fa: 1b:d5:72:a6:d1:71:db:62:b5:3f:19:6c:be:b9:d9: 01:43:07:97:1b:2e:6c:f1:c3:05:1c:a2:72:ed:22: f3:48:0e:0f:87:d3:49:e0:23:a3:35:e4:e1:13:99: 56:84:a2:aa:48:f2:3e:8c:0a:c0:3d:53:20:8e:8b: c1:b3:18:62:04:cb:41:ba:65:73:2b:cf:67:2a:ea: 9f:e3:16:f2:20:ab:9a:ff:02:04:e8:41:9f:1c:c6: f1:ef:de:09:f3:a4:4f:38:9f:72:47:22:ad:f2:1b: 7a:3b:38:04:15:8e:4b:78:96:ca:8c:d9:2d:5e:ce: c1:dd:8a:b8:60:0e:20:c6:e5:8b:20:90:6c:57:76: 87:5b:6d:7d:f2:ae:b0:9a:3c:94:91:fd:2d:77:6b: 3c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BB:FC:FA:D3:46:F1:73:01:C2:19:83:DE:DE:1D:A7:5F:FF:93:14 X509v3 Authority Key Identifier: keyid:07:36:F2:DF:94:6B:F5:25:B3:C3:CA:82:F5:1B:AD:55:D0:2E:36:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bzby35Rr9SWzw8qC9RutVdAuNu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8b3ccd-13fc-4456-b464-d841b382d6d8/1/Bzby35Rr9SWzw8qC9RutVdAuNu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:a4:0b:ed:50:31:78:f2:41:70:3c:31:4b:86:6b:91:f1:03: 77:45:08:25:8f:d2:27:cd:6b:3f:53:28:44:4e:02:c2:ec:36: cb:83:79:fe:0c:b9:d9:bd:11:96:88:c0:70:a2:3b:13:be:58: d5:9b:57:b2:34:90:ea:93:aa:b5:44:bf:e0:c2:d8:60:2d:02: 0f:1d:39:d5:0c:13:f4:91:5a:6e:28:20:bd:5c:9d:3a:d5:46: c4:95:e5:2b:d7:70:cd:41:61:e0:c6:4d:77:ca:04:50:c5:21: 21:76:f6:89:5f:32:b0:03:bc:53:1a:1c:ee:da:c3:e4:60:8a: 02:82:59:e5:81:b3:22:2f:68:16:f9:c1:e5:6c:91:21:b3:52: 0a:94:d1:bc:53:55:38:2c:f2:c9:49:dd:0e:fb:85:1d:0e:09: 51:d3:f3:d9:c0:54:b2:a5:ff:2b:d0:0d:79:8a:34:20:42:72: ce:99:ca:05:5a:24:39:8e:94:04:06:41:3c:22:c2:e2:b0:12: ca:ac:f8:90:ea:ef:34:19:b0:f1:8d:9c:5b:c8:de:34:66:67: 91:3d:41:23:2d:f4:04:aa:97:5e:31:33:7d:5b:85:db:e1:34: c5:0e:88:02:ce:4b:54:e0:c3:89:86:43:a4:77:89:31:41:e1: 06:10:2e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/qnFiErWj7widIbBgryMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MzZmMmRmOTQ2YmY1MjViM2MzY2E4MmY1MWJhZDU1ZDAy ZTM2ZWYwHhcNMjYwMjA5MTgwMDM1WhcNMjYwMjEwMTgwMDM1WjAzMTEwLwYDVQQD EyhhYWJiZmNmYWQzNDZmMTczMDFjMjE5ODNkZWRlMWRhNzVmZmY5MzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPCgCbEinQAJkt211rW4P7mWFHzp nhN7BHUyrDNkb7kSpigtuSZqGYhTxq8cphKgn5c7y0bBRaCpZ00+O12cwdy6cZHj QpL9sgxu99o7DZjkazFiPCqwYcYMvG2szjgW5r3kt/az4Pob1XKm0XHbYrU/GWy+ udkBQweXGy5s8cMFHKJy7SLzSA4Ph9NJ4COjNeThE5lWhKKqSPI+jArAPVMgjovB sxhiBMtBumVzK89nKuqf4xbyIKua/wIE6EGfHMbx794J86RPOJ9yRyKt8ht6OzgE FY5LeJbKjNktXs7B3Yq4YA4gxuWLIJBsV3aHW2198q6wmjyUkf0td2s87QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKq7/PrTRvFzAcIZg97eHadf/5MUMB8GA1UdIwQY MBaAFAc28t+Ua/Uls8PKgvUbrVXQLjbvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQt ZDg0MWIzODJkNmQ4LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84YjNjY2QtMTNmYy00NDU2LWI0NjQtZDg0MWIzODJkNmQ4 LzEvQnpieTM1UnI5U1d6dzhxQzlSdXRWZEF1TnU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc6QL7VAx ePJBcDwxS4ZrkfEDd0UIJY/SJ81rP1MoRE4Cwuw2y4N5/gy52b0RlojAcKI7E75Y 1ZtXsjSQ6pOqtUS/4MLYYC0CDx051QwT9JFabiggvVydOtVGxJXlK9dwzUFh4MZN d8oEUMUhIXb2iV8ysAO8Uxoc7trD5GCKAoJZ5YGzIi9oFvnB5WyRIbNSCpTRvFNV OCzyyUndDvuFHQ4JUdPz2cBUsqX/K9ANeYo0IEJyzpnKBVokOY6UBAZBPCLC4rAS yqz4kOrvNBmw8Y2cW8jeNGZnkT1BIy30BKqXXjEzfVuF2+E0xQ6IAs5LVODDiYZD pHeJMUHhBhAuNg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:29 2026 by rpki-client