This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft File: bQ1uHM2JDfL16cFF7LpGiZzOs70.mft (raw, json) Hash identifier: mNJvaNlhc9YXPakSHFvgtdFf0+iZVsUHm6keewT51nQ= Subject key identifier: 0E:FC:1F:FC:11:20:F3:48:4B:34:DF:84:AC:02:3C:47:F9:73:17:75 Authority key identifier: 6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD Certificate issuer: /CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd Certificate serial: 019C4390869CBCB263348F9A024B0CD08721 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft Manifest number: 14A0 Signing time: Mon 09 Feb 2026 18:01:10 +0000 Manifest this update: Mon 09 Feb 2026 18:01:10 +0000 Manifest next update: Tue 10 Feb 2026 18:01:10 +0000 Files and hashes: 1: bQ1uHM2JDfL16cFF7LpGiZzOs70.crl (hash: AhLnRG5TDuo5YdxgrMjg4WUy7GVRdB3ZwwZU+Qtxt2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:86:9c:bc:b2:63:34:8f:9a:02:4b:0c:d0:87:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd Validity Not Before: Feb 9 18:01:10 2026 GMT Not After : Feb 10 18:01:10 2026 GMT Subject: CN=0efc1ffc1120f3484b34df84ac023c47f9731775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b9:e8:49:69:ac:32:2e:fc:60:b3:6b:44:d7: 4f:7e:c7:55:d6:14:cb:6b:18:cf:ad:35:06:4f:85: 5a:1e:9d:76:f2:28:91:ca:b1:7f:e0:19:d7:4e:65: 8e:d1:30:3f:96:ad:88:5d:be:0a:59:f1:e2:39:19: 61:f4:49:ba:3f:4c:70:33:ac:c4:a9:5a:27:4b:e6: 14:e1:97:c8:e1:4e:46:e3:58:a9:2d:bb:46:e4:5c: 3b:5c:52:59:7e:5a:48:5f:5d:0e:3d:6d:52:f6:ef: d8:d4:4f:15:f2:3f:0a:d0:95:e1:b7:ab:2f:7e:e3: e5:ae:c0:bb:fb:e7:71:e1:65:d7:9a:29:ae:e8:60: fd:c2:e7:d4:30:17:0f:69:d1:ee:2d:28:76:39:31: c6:26:fd:5e:23:bd:e9:8e:5f:a1:99:65:5a:d2:ae: b4:7f:65:4d:71:49:b4:e4:1c:6b:a1:74:ec:9e:19: 47:41:f8:b4:7d:87:61:4e:63:a5:9c:64:68:d0:eb: 71:7b:ac:b6:87:81:d7:7c:c9:07:a5:c9:18:aa:7a: f9:80:77:17:dc:b6:35:01:41:be:fc:b5:e3:15:f1: 4f:0e:46:f9:bf:49:52:ac:e0:f8:e7:c7:88:f5:36: 5c:f5:ca:79:65:29:c9:04:3a:86:93:0e:6c:d0:94: 32:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:FC:1F:FC:11:20:F3:48:4B:34:DF:84:AC:02:3C:47:F9:73:17:75 X509v3 Authority Key Identifier: keyid:6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:ce:ef:e4:b6:e4:a7:4b:5a:f2:5a:98:fa:a7:99:a7:3c:3f: 47:b2:b6:b7:04:7e:c3:c9:06:01:4b:33:d8:76:30:9a:64:63: 34:e4:24:5c:77:2c:22:50:63:40:b5:23:bb:08:58:82:f3:a3: 80:0a:c8:e1:66:b1:56:d9:c7:74:72:96:13:a2:56:4f:c7:6c: 34:cb:ab:1e:5f:69:c8:34:1b:b1:aa:7f:c8:23:92:6c:f0:17: 98:cf:a0:0c:fb:8e:ef:04:ca:da:98:27:48:0c:f7:17:46:25: 1d:0d:d1:9d:13:c1:ca:74:02:c7:0a:2a:d0:13:c7:f7:36:3f: 57:56:51:a3:5a:51:15:5f:40:68:8c:94:cc:f9:9b:4e:d2:31: a5:e3:ed:2d:c3:4c:56:b1:74:25:aa:f1:07:97:5a:aa:44:8d: 39:a2:31:71:46:00:1a:5c:75:4a:e9:64:9e:aa:59:1a:6a:7b: 45:db:c2:12:a1:3b:2a:59:38:8b:9b:d1:41:04:91:1f:55:8a: e1:c5:fa:cc:9a:09:4f:18:b5:5e:91:27:bc:a5:4f:c9:10:46: 3f:18:3d:fa:db:13:c3:49:84:2b:06:91:58:e0:63:16:da:a1: e5:a3:a2:3a:7b:91:c6:06:59:ed:25:23:f7:c3:81:4d:94:08: b8:70:5a:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkIacvLJjNI+aAksM0IchMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMGQ2ZTFjY2Q4OTBkZjJmNWU5YzE0NWVjYmE0Njg5OWNj ZWIzYmQwHhcNMjYwMjA5MTgwMTEwWhcNMjYwMjEwMTgwMTEwWjAzMTEwLwYDVQQD EygwZWZjMWZmYzExMjBmMzQ4NGIzNGRmODRhYzAyM2M0N2Y5NzMxNzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37noSWmsMi78YLNrRNdPfsdV1hTL axjPrTUGT4VaHp128iiRyrF/4BnXTmWO0TA/lq2IXb4KWfHiORlh9Em6P0xwM6zE qVonS+YU4ZfI4U5G41ipLbtG5Fw7XFJZflpIX10OPW1S9u/Y1E8V8j8K0JXht6sv fuPlrsC7++dx4WXXmimu6GD9wufUMBcPadHuLSh2OTHGJv1eI73pjl+hmWVa0q60 f2VNcUm05BxroXTsnhlHQfi0fYdhTmOlnGRo0Otxe6y2h4HXfMkHpckYqnr5gHcX 3LY1AUG+/LXjFfFPDkb5v0lSrOD458eI9TZc9cp5ZSnJBDqGkw5s0JQyPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA78H/wRIPNISzTfhKwCPEf5cxd1MB8GA1UdIwQY MBaAFG0NbhzNiQ3y9enBRey6RomczrO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlExdUhNMkpEZkwxNmNGRjdMcEdpWnpPczcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yNzcxNTQtZWZiYS00OGVkLWJiMGMt NjUwYjcwYmFkN2E5LzEvYlExdUhNMkpEZkwxNmNGRjdMcEdpWnpPczcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yNzcxNTQtZWZiYS00OGVkLWJiMGMtNjUwYjcwYmFkN2E5 LzEvYlExdUhNMkpEZkwxNmNGRjdMcEdpWnpPczcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR87v5Lbk p0ta8lqY+qeZpzw/R7K2twR+w8kGAUsz2HYwmmRjNOQkXHcsIlBjQLUjuwhYgvOj gArI4WaxVtnHdHKWE6JWT8dsNMurHl9pyDQbsap/yCOSbPAXmM+gDPuO7wTK2pgn SAz3F0YlHQ3RnRPBynQCxwoq0BPH9zY/V1ZRo1pRFV9AaIyUzPmbTtIxpePtLcNM VrF0JarxB5daqkSNOaIxcUYAGlx1SulknqpZGmp7RdvCEqE7Klk4i5vRQQSRH1WK 4cX6zJoJTxi1XpEnvKVPyRBGPxg9+tsTw0mEKwaRWOBjFtqh5aOiOnuRxgZZ7SUj 98OBTZQIuHBaEQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:59 2026 by rpki-client