This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
File: bO-kEfCTakZthB7CkM2AzFUKf24.mft (raw, json)
Hash identifier: Av0pxl0mWEdIwpCUEpTDKWQF/WKpf4mwTKimQ3iqiEg=
Subject key identifier: F3:5F:48:ED:00:D2:F5:06:A4:0B:5C:C6:35:10:9F:A2:5C:8D:3F:F7
Authority key identifier: 6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
Certificate issuer: /CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Certificate serial: 019C42B409B7555BF1FC653A68CBBFA37F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
Manifest number: 0F82
Signing time: Mon 09 Feb 2026 14:00:21 +0000
Manifest this update: Mon 09 Feb 2026 14:00:21 +0000
Manifest next update: Tue 10 Feb 2026 14:00:21 +0000
Files and hashes: 1: bO-kEfCTakZthB7CkM2AzFUKf24.crl (hash: BIXpht+DbCLh1nRXiE73PFr2VJQFqjEopWDPu8WQehM=)
2: iyS8S6KzK6hR8ZgujWQK2ZFvH3E.roa (hash: FB/BMBEamJIqVqVJfEJTOhtef+eT9KEQL0toFCPu1aM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:09:b7:55:5b:f1:fc:65:3a:68:cb:bf:a3:7f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cefa411f0936a466d841ec290cd80cc550a7f6e
Validity
Not Before: Feb 9 14:00:21 2026 GMT
Not After : Feb 10 14:00:21 2026 GMT
Subject: CN=f35f48ed00d2f506a40b5cc635109fa25c8d3ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:2f:68:3d:cb:9f:d4:f0:a4:e1:a0:3a:3a:
5a:11:cc:ca:0b:2b:18:b7:ab:80:c1:08:32:21:e9:
fe:a4:7d:6e:8d:20:dd:54:0e:57:ac:ed:0a:8d:62:
ec:e7:8a:0b:c1:7a:5c:d7:2a:91:22:a5:d6:28:2c:
3e:04:62:dd:1b:db:c8:c8:e3:bd:13:d0:9e:22:d4:
99:37:73:12:85:77:e8:da:8f:b0:43:70:15:6e:3c:
a3:c6:2f:a3:7f:26:05:33:3e:be:64:fc:1a:98:93:
f6:4f:e9:73:c1:36:4d:ed:5a:be:cb:63:e2:eb:03:
41:7f:87:18:af:10:c0:aa:b5:fb:90:d6:9f:b2:a8:
9a:4a:5f:3e:21:2a:b1:86:3a:33:85:05:4a:3c:bf:
3c:55:de:ad:6a:b9:8a:6a:be:8b:4e:0b:3d:61:42:
2a:91:0f:27:94:96:c2:e5:a3:73:d1:5f:2a:e8:3d:
b8:d4:e8:d0:2a:67:36:0f:7e:87:fa:21:50:24:6b:
5e:c2:9b:2f:65:57:5d:ec:e4:3b:ad:60:a4:b1:cb:
03:d7:f7:32:fa:41:be:9b:53:eb:52:1d:1a:41:cf:
b7:17:94:54:1a:0e:dd:81:45:9d:65:f7:1d:66:13:
c3:db:12:7b:51:b8:02:79:d4:b8:f9:04:81:c4:e8:
bd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5F:48:ED:00:D2:F5:06:A4:0B:5C:C6:35:10:9F:A2:5C:8D:3F:F7
X509v3 Authority Key Identifier:
keyid:6C:EF:A4:11:F0:93:6A:46:6D:84:1E:C2:90:CD:80:CC:55:0A:7F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bO-kEfCTakZthB7CkM2AzFUKf24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/53b13e-debb-456a-8dc1-e811d9407e7a/1/bO-kEfCTakZthB7CkM2AzFUKf24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:2e:a7:1c:89:6f:c5:f6:0a:1c:6c:2e:86:b3:b3:29:fc:67:
af:c4:ae:5b:87:9a:86:ec:6f:7e:4f:0c:89:b6:16:1a:d4:52:
32:a6:ef:b6:e4:ea:f9:45:af:50:5b:28:d6:b7:bc:b0:4d:01:
e4:d3:91:68:22:3f:b5:3e:8a:c1:6c:c1:82:53:cc:7e:f5:17:
02:3c:c8:c7:8a:a8:0a:c2:fb:ac:07:f9:ac:84:30:f6:0c:c3:
b0:e6:9e:be:ed:a9:a1:bd:59:25:e9:30:9d:c0:a6:69:fc:09:
48:ca:17:1c:14:2d:9f:a1:11:b2:75:3e:6c:87:05:e2:c1:73:
af:f6:c5:d6:fa:58:72:e2:3d:9d:9e:4f:39:57:b7:eb:10:36:
ba:7d:b3:e1:e6:23:cd:83:03:3c:dd:f7:3a:16:46:e8:f1:a6:
76:73:08:47:4b:7a:88:17:cb:ea:59:01:4f:cb:3d:b5:62:34:
f1:b8:4b:83:b1:96:8c:f2:6d:ac:08:fc:82:71:6f:8f:25:b6:
f5:ea:83:ad:ca:c5:b9:4c:ad:71:1e:73:1f:0a:aa:f0:db:70:
5b:17:d5:aa:1a:eb:5c:ff:4c:20:72:89:3b:b0:a0:79:14:32:
90:ad:53:3f:c7:94:8f:a4:b1:3e:4b:5a:20:e8:44:a8:28:65:
0b:84:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:56:53 2026 by rpki-client