This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft File: bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft (raw, json) Hash identifier: k4dKPgi7fs65xjPhgnAyHaIAgqMK4ZHkenFyAcCVIGM= Subject key identifier: 3B:BC:73:03:43:5A:C2:D0:50:75:03:BF:0D:5C:99:E4:02:7C:24:36 Authority key identifier: 6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70 Certificate issuer: /CN=6c09ab0751fea4b292a9afd14dbec3b83a077870 Certificate serial: 019C4390C04E166279350AF3126FFEE95774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft Manifest number: 0886 Signing time: Mon 09 Feb 2026 18:01:25 +0000 Manifest this update: Mon 09 Feb 2026 18:01:25 +0000 Manifest next update: Tue 10 Feb 2026 18:01:25 +0000 Files and hashes: 1: 4rvg74R2gZlKQSt9MtPUhs19Sxs.roa (hash: aa4t3U7R1vbR/QCIG7/Vzi9UpwOLBuhEx3X56aBs6+Y=) 2: bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl (hash: /9kUspuOQJefEzT2nF8BPWvd6QVuyCnt1wRuGwG7ZdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:c0:4e:16:62:79:35:0a:f3:12:6f:fe:e9:57:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c09ab0751fea4b292a9afd14dbec3b83a077870 Validity Not Before: Feb 9 18:01:25 2026 GMT Not After : Feb 10 18:01:25 2026 GMT Subject: CN=3bbc7303435ac2d0507503bf0d5c99e4027c2436 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:f9:a0:e0:3a:43:9a:10:a5:26:9a:86:2e: cb:2a:2d:b6:56:7d:0e:3c:3b:c8:dc:e1:5d:34:9e: f3:46:3b:eb:99:b4:c6:ca:58:51:14:48:4b:f9:dc: 6c:3a:9d:0f:36:f5:da:0a:f2:aa:95:41:21:e5:68: 1e:38:19:46:92:1c:22:9c:13:7b:e4:e5:5a:a2:3d: e4:55:da:66:89:d1:73:44:75:fa:9a:55:f4:20:8d: 41:d9:49:5c:b7:36:1b:7d:5b:d1:2f:06:ba:6d:51: aa:e7:3a:6e:33:ce:78:3a:76:17:cf:99:28:0d:56: 39:5f:dc:e4:52:48:77:15:4e:9d:01:8c:4b:51:f3: bd:04:1a:66:96:7a:b2:c3:ad:f5:a5:7a:8c:85:67: 38:de:4b:7b:be:e3:5b:0a:d6:74:a6:18:fe:f2:f8: ca:27:4b:39:e4:c2:b8:2e:1a:a6:68:a8:e7:a6:dc: bd:c0:06:ea:5b:aa:92:ce:f0:b2:b2:8e:5f:a7:cb: 37:76:66:9e:f2:e2:80:73:7e:78:07:7d:a6:bf:da: 76:6e:12:71:da:af:a3:ba:08:48:c0:2b:39:bb:43: c0:8a:35:25:d8:51:e9:47:29:4b:5e:b1:ca:f4:1d: 0b:02:a1:19:4b:96:45:ad:da:82:71:5a:d0:e1:8f: e0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BC:73:03:43:5A:C2:D0:50:75:03:BF:0D:5C:99:E4:02:7C:24:36 X509v3 Authority Key Identifier: keyid:6C:09:AB:07:51:FE:A4:B2:92:A9:AF:D1:4D:BE:C3:B8:3A:07:78:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAmrB1H-pLKSqa_RTb7DuDoHeHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/076272-296d-46af-85d1-44973a602d9f/1/bAmrB1H-pLKSqa_RTb7DuDoHeHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:2a:38:8b:f1:e4:64:50:05:41:ee:85:f7:02:de:bf:9a:f3: e0:99:39:74:80:c9:4f:29:4d:19:22:a0:a7:e4:54:38:74:35: a1:d8:27:18:ca:5e:2c:61:ea:bd:19:0d:95:8b:f0:9e:bb:af: 88:50:35:7a:52:3e:4a:57:fe:58:3f:61:41:58:3b:2f:a5:7f: 93:61:8a:4a:55:d2:90:ec:e6:2e:ee:c9:2e:93:33:eb:26:04: fd:0f:15:98:15:6f:e3:38:42:a6:6d:f0:3f:00:95:c3:c6:e1: 90:8f:14:14:16:91:73:24:1d:43:0e:4c:73:25:18:b6:38:91: 5f:b0:fd:c0:62:32:03:01:62:17:77:6a:23:71:ec:f7:59:d4: 59:b2:d9:c8:dd:b0:7c:6d:74:54:86:b0:db:05:75:3c:c4:2c: a5:3e:c9:fc:05:cb:fe:cf:11:e5:02:d0:47:92:de:4c:76:a3: 9b:46:3b:2b:2d:eb:8e:c6:ce:3b:81:a5:cc:4c:3a:d3:ad:d5: 81:d4:c8:e7:87:fc:f3:b6:12:5d:b1:95:a3:8f:3e:06:a2:f2: 50:12:21:75:1a:15:63:8e:6f:02:7f:02:3f:01:6e:8d:fa:32: bf:1f:61:39:c3:5d:97:c2:8e:d1:7d:bc:47:4f:6a:69:b6:54: 14:30:b0:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMBOFmJ5NQrzEm/+6Vd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDlhYjA3NTFmZWE0YjI5MmE5YWZkMTRkYmVjM2I4M2Ew Nzc4NzAwHhcNMjYwMjA5MTgwMTI1WhcNMjYwMjEwMTgwMTI1WjAzMTEwLwYDVQQD EygzYmJjNzMwMzQzNWFjMmQwNTA3NTAzYmYwZDVjOTllNDAyN2MyNDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3j5oOA6Q5oQpSaahi7LKi22Vn0O PDvI3OFdNJ7zRjvrmbTGylhRFEhL+dxsOp0PNvXaCvKqlUEh5WgeOBlGkhwinBN7 5OVaoj3kVdpmidFzRHX6mlX0II1B2UlctzYbfVvRLwa6bVGq5zpuM854OnYXz5ko DVY5X9zkUkh3FU6dAYxLUfO9BBpmlnqyw631pXqMhWc43kt7vuNbCtZ0phj+8vjK J0s55MK4LhqmaKjnpty9wAbqW6qSzvCyso5fp8s3dmae8uKAc354B32mv9p2bhJx 2q+jughIwCs5u0PAijUl2FHpRylLXrHK9B0LAqEZS5ZFrdqCcVrQ4Y/gFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDu8cwNDWsLQUHUDvw1cmeQCfCQ2MB8GA1UdIwQY MBaAFGwJqwdR/qSykqmv0U2+w7g6B3hwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEt NDQ5NzNhNjAyZDlmLzEvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wNzYyNzItMjk2ZC00NmFmLTg1ZDEtNDQ5NzNhNjAyZDlm LzEvYkFtckIxSC1wTEtTcWFfUlRiN0R1RG9IZUhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyo4i/Hk ZFAFQe6F9wLev5rz4Jk5dIDJTylNGSKgp+RUOHQ1odgnGMpeLGHqvRkNlYvwnruv iFA1elI+Slf+WD9hQVg7L6V/k2GKSlXSkOzmLu7JLpMz6yYE/Q8VmBVv4zhCpm3w PwCVw8bhkI8UFBaRcyQdQw5McyUYtjiRX7D9wGIyAwFiF3dqI3Hs91nUWbLZyN2w fG10VIaw2wV1PMQspT7J/AXL/s8R5QLQR5LeTHajm0Y7Ky3rjsbOO4GlzEw6063V gdTI54f887YSXbGVo48+BqLyUBIhdRoVY45vAn8CPwFujfoyvx9hOcNdl8KO0X28 R09qabZUFDCwCg== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:11 2026 by rpki-client