This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft File: BGaUC2ukf4zBCntHjkBWPLuKt_A.mft (raw, json) Hash identifier: OzSrT8Eid2dktqILQnA7IeYq3s/3bXHShwu6SUnLNLs= Subject key identifier: 57:1A:63:B2:47:55:A2:25:E7:10:32:B5:63:39:27:0C:26:BD:53:5B Authority key identifier: 04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0 Certificate issuer: /CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0 Certificate serial: 019C420F6E6E6E802E810357F2494AB32772 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft Manifest number: 0CC6 Signing time: Mon 09 Feb 2026 11:00:33 +0000 Manifest this update: Mon 09 Feb 2026 11:00:33 +0000 Manifest next update: Tue 10 Feb 2026 11:00:33 +0000 Files and hashes: 1: BGaUC2ukf4zBCntHjkBWPLuKt_A.crl (hash: ZY/2Gta6JsQyfA+a5Psz59RGPTsH4f35WUw+T5mG2NY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:6e:6e:6e:80:2e:81:03:57:f2:49:4a:b3:27:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0466940b6ba47f8cc10a7b478e40563cbb8ab7f0 Validity Not Before: Feb 9 11:00:33 2026 GMT Not After : Feb 10 11:00:33 2026 GMT Subject: CN=571a63b24755a225e71032b56339270c26bd535b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0a:9a:b3:4f:53:74:0c:1f:b1:fd:f2:10:d0: fd:c5:eb:4f:c7:a4:79:69:d5:86:e2:92:fd:e9:93: f7:0c:84:2b:ed:af:b7:88:78:6e:07:06:06:b2:0e: bf:eb:fc:53:cb:98:d3:42:58:83:22:7f:d2:78:fd: dc:a1:18:5e:bb:00:cc:36:8a:6f:09:fe:2e:7c:5e: cd:d0:98:99:6e:5d:49:8f:0d:b6:b7:12:97:5d:62: a2:36:5e:a7:37:8f:00:b4:a0:f1:bc:24:95:2e:f5: 0b:d9:1f:44:69:da:3d:8a:12:3d:3b:de:9b:80:b5: c1:09:21:69:88:25:d8:25:2e:70:1e:df:72:b3:6c: de:6b:a0:fd:6f:fd:a7:73:23:af:55:56:2d:e9:e4: f7:db:e9:c5:47:57:03:2a:8d:19:a3:32:be:88:7b: 57:6c:9f:a3:63:12:ae:37:c7:df:35:e8:7a:6c:67: 23:23:ed:87:c6:7a:8a:f8:1e:91:c1:ea:24:c3:c5: 30:ce:1b:08:07:88:f7:77:d3:c4:b7:f7:fc:af:9d: f0:0a:24:0a:c5:fa:54:d1:95:7a:fc:80:79:68:dc: 45:03:4f:3f:93:05:f9:7c:1b:23:f8:80:aa:60:c2: 8f:b8:23:77:6f:2b:10:57:7f:9b:71:dd:77:5d:7a: 0e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1A:63:B2:47:55:A2:25:E7:10:32:B5:63:39:27:0C:26:BD:53:5B X509v3 Authority Key Identifier: keyid:04:66:94:0B:6B:A4:7F:8C:C1:0A:7B:47:8E:40:56:3C:BB:8A:B7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGaUC2ukf4zBCntHjkBWPLuKt_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2481-ec14-4368-8380-55261026f523/1/BGaUC2ukf4zBCntHjkBWPLuKt_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ce:a2:db:0f:18:5b:39:cc:a1:b7:2b:81:fb:19:f5:2f:d8: 63:12:46:12:98:8b:0f:63:a1:28:81:dd:7e:d4:59:67:72:fe: 47:f2:5a:e5:e4:ed:38:0e:56:f0:e2:74:c5:1b:2b:6b:21:b7: 03:30:0a:da:a3:6c:c6:01:03:ca:f8:39:f2:e5:47:24:6d:2e: 76:cf:d2:63:49:db:2b:9e:54:9c:58:ce:a0:b1:ba:ff:dd:99: ec:32:07:33:0d:ff:33:f4:ac:1f:b4:dd:d8:b1:6e:b7:8a:39: 3f:51:1f:6a:bd:ba:05:67:92:83:e4:7f:4f:8d:65:6f:2c:99: ac:7e:4e:95:c4:0c:82:40:99:e9:d2:96:dd:ae:9e:bf:de:90: 92:08:ec:8e:55:3a:fb:04:ae:b0:08:6e:75:33:e7:77:ef:91: 37:3f:29:1e:de:31:be:d8:fb:d8:9c:5b:88:3d:be:95:e0:45: d4:eb:b3:b7:04:3f:d2:19:6b:09:cd:70:7b:6d:c9:b3:a9:ab: 9b:39:93:cf:0b:67:26:35:b3:fa:9a:82:ee:50:f9:00:6e:39: 00:7c:e7:ae:2b:eb:c3:c7:97:0e:b7:6c:62:7e:53:14:a0:6b: 97:94:5f:26:8e:a6:1c:1d:1a:68:03:08:8b:1f:2d:2f:46:2a: 4a:2c:fe:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD25uboAugQNX8klKsydyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0NjY5NDBiNmJhNDdmOGNjMTBhN2I0NzhlNDA1NjNjYmI4 YWI3ZjAwHhcNMjYwMjA5MTEwMDMzWhcNMjYwMjEwMTEwMDMzWjAzMTEwLwYDVQQD Eyg1NzFhNjNiMjQ3NTVhMjI1ZTcxMDMyYjU2MzM5MjcwYzI2YmQ1MzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAqas09TdAwfsf3yEND9xetPx6R5 adWG4pL96ZP3DIQr7a+3iHhuBwYGsg6/6/xTy5jTQliDIn/SeP3coRheuwDMNopv Cf4ufF7N0JiZbl1Jjw22txKXXWKiNl6nN48AtKDxvCSVLvUL2R9Eado9ihI9O96b gLXBCSFpiCXYJS5wHt9ys2zea6D9b/2ncyOvVVYt6eT32+nFR1cDKo0ZozK+iHtX bJ+jYxKuN8ffNeh6bGcjI+2HxnqK+B6Rweokw8UwzhsIB4j3d9PEt/f8r53wCiQK xfpU0ZV6/IB5aNxFA08/kwX5fBsj+ICqYMKPuCN3bysQV3+bcd13XXoOIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcaY7JHVaIl5xAytWM5JwwmvVNbMB8GA1UdIwQY MBaAFARmlAtrpH+MwQp7R45AVjy7irfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS83YjI0ODEtZWMxNC00MzY4LTgzODAt NTUyNjEwMjZmNTIzLzEvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS83YjI0ODEtZWMxNC00MzY4LTgzODAtNTUyNjEwMjZmNTIz LzEvQkdhVUMydWtmNHpCQ250SGprQldQTHVLdF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPM6i2w8Y WznMobcrgfsZ9S/YYxJGEpiLD2OhKIHdftRZZ3L+R/Ja5eTtOA5W8OJ0xRsrayG3 AzAK2qNsxgEDyvg58uVHJG0uds/SY0nbK55UnFjOoLG6/92Z7DIHMw3/M/SsH7Td 2LFut4o5P1Efar26BWeSg+R/T41lbyyZrH5OlcQMgkCZ6dKW3a6ev96QkgjsjlU6 +wSusAhudTPnd++RNz8pHt4xvtj72JxbiD2+leBF1OuztwQ/0hlrCc1we23Js6mr mzmTzwtnJjWz+pqC7lD5AG45AHznrivrw8eXDrdsYn5TFKBrl5RfJo6mHB0aaAMI ix8tL0YqSiz+LQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:19 2026 by rpki-client