This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
File: BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft (raw, json)
Hash identifier: RWPjj0yIsfF5mbtrProoYtFnFLR885AbCCiGZ58JJhY=
Subject key identifier: C3:76:FE:A9:74:00:9E:E6:3B:79:47:23:8B:F2:54:5F:1C:32:53:DC
Authority key identifier: 04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
Certificate issuer: /CN=04747b565844e3e2fc712fab5be85924aac58643
Certificate serial: 019C42B45D46D2C29DC0002593AFAF35DA6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 14:00:42 +0000
Manifest this update: Mon 09 Feb 2026 14:00:42 +0000
Manifest next update: Tue 10 Feb 2026 14:00:42 +0000
Files and hashes: 1: BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl (hash: rP13o/CJvOnOb3uvyROohZ4E0JAwZtjypnrnBXf9Rsk=)
2: YStyBarfvl-bcJLdrA02NobfHyQ.roa (hash: CVtf3WwPhWXPq/nXkjkrvZjWtkuDwBalJiPxkcsAH24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:5d:46:d2:c2:9d:c0:00:25:93:af:af:35:da:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04747b565844e3e2fc712fab5be85924aac58643
Validity
Not Before: Feb 9 14:00:42 2026 GMT
Not After : Feb 10 14:00:42 2026 GMT
Subject: CN=c376fea974009ee63b7947238bf2545f1c3253dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:78:7b:10:19:b9:8f:4e:ed:cf:0d:79:fe:
2b:af:4f:2d:bb:af:e8:37:bf:3f:16:2e:79:81:f0:
f3:ee:74:2f:c0:04:4d:75:2c:d9:0f:98:de:e9:80:
1b:4b:c9:51:6c:7f:63:29:0b:7a:7c:78:9e:33:63:
02:7a:53:30:b6:29:6b:3b:89:39:04:24:84:13:23:
8a:f5:68:d8:f3:7f:f4:a3:d5:d5:2c:88:fa:77:43:
49:8e:8b:bf:b2:1f:ab:83:d9:55:ba:a9:e4:0e:eb:
01:b6:b2:e3:71:65:3e:25:d8:30:7f:3c:45:62:63:
c9:b1:1e:49:f0:bb:e2:2d:7c:16:f0:de:02:b9:23:
e7:9c:5b:12:17:0a:f2:74:c2:5d:f8:36:29:c8:fc:
cc:cc:94:3f:bf:8d:1b:3e:a2:3d:ec:fa:93:e0:ed:
ee:61:bb:98:02:05:bd:1d:00:71:f2:2e:1d:7b:63:
4a:81:7d:1a:5b:42:6f:b9:31:f8:f4:74:5d:99:88:
e8:cf:ae:d5:ec:f1:df:bb:e9:27:31:29:92:40:d3:
af:4b:17:85:32:a7:e3:b8:ff:27:78:f3:20:0b:1a:
43:32:e6:78:8a:90:8d:17:37:c0:de:58:05:33:a8:
5b:52:28:5f:de:13:88:d6:89:24:33:a7:46:1b:59:
37:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:76:FE:A9:74:00:9E:E6:3B:79:47:23:8B:F2:54:5F:1C:32:53:DC
X509v3 Authority Key Identifier:
keyid:04:74:7B:56:58:44:E3:E2:FC:71:2F:AB:5B:E8:59:24:AA:C5:86:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BHR7VlhE4-L8cS-rW-hZJKrFhkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/64800b-54cc-40f2-a7ed-97b2157cbad1/1/BHR7VlhE4-L8cS-rW-hZJKrFhkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7c:04:0d:b3:b0:a6:a1:39:7b:b1:9c:6a:20:51:40:5b:52:
71:69:ed:5a:a1:db:54:aa:c7:51:f9:12:c4:4b:ad:a2:b0:95:
bf:bd:08:6a:4c:fb:d3:6d:37:a8:da:a6:d2:e3:36:26:d8:04:
78:fd:7a:2d:2b:e4:7f:62:58:16:f7:bc:06:14:6b:1e:04:a1:
de:43:88:32:23:f6:c8:a3:70:4f:ea:1c:63:76:07:71:04:f2:
10:29:48:c7:04:d1:32:ba:9a:43:d9:35:25:43:83:f1:60:65:
bc:14:ba:40:86:b2:a3:32:74:a1:b5:3d:3b:23:4d:43:21:51:
0a:5d:23:fb:3c:5d:74:40:44:c7:e0:6d:01:b5:c8:df:53:3a:
50:d4:b3:1d:4a:85:20:01:7d:e3:68:43:40:21:b1:c7:0a:b4:
3a:74:09:f9:44:ff:ba:ca:0d:53:7f:0b:4f:af:47:2e:0c:b7:
36:99:98:dd:f6:60:6b:cf:3f:a1:aa:07:f2:c3:99:15:d2:ff:
69:c5:7e:df:18:3e:dc:02:3a:1a:3c:24:9c:21:47:c2:ba:7d:
13:78:76:8f:e1:97:94:2d:90:9e:46:8c:15:89:77:44:41:68:
12:97:3c:aa:da:b5:58:35:ff:60:5f:9d:e9:ba:78:1f:9e:7b:
8d:9d:8f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:26 2026 by rpki-client