This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File: BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier: rTfB4e0i3agz3gpN3ZMJO+YhwgrQB54rpUd0xXBmOn0=
Subject key identifier: 9B:54:96:46:3B:12:4D:35:B3:4A:39:FA:21:5D:57:5A:0C:78:96:D4
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer: /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial: 019C43C72CF8A9FA8A90707BFD2A9E669E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 19:00:52 +0000
Manifest this update: Mon 09 Feb 2026 19:00:52 +0000
Manifest next update: Tue 10 Feb 2026 19:00:52 +0000
Files and hashes: 1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: BEmjrunr1KYSmdJnSBSE+7v36NpplvgGyQGStdrVyu8=)
2: hhSORRB_cbi8J7UPYVa8deItbjI.roa (hash: tbnenU0D5ezQqQe74bKynFZLzheD+pCDrBBIC6BR1ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c7:2c:f8:a9:fa:8a:90:70:7b:fd:2a:9e:66:9e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Validity
Not Before: Feb 9 19:00:52 2026 GMT
Not After : Feb 10 19:00:52 2026 GMT
Subject: CN=9b5496463b124d35b34a39fa215d575a0c7896d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f7:5a:8d:35:9e:bc:31:58:b1:00:94:68:a1:
ec:35:e5:b4:de:b9:ba:d9:55:59:1d:35:ef:5d:0c:
6e:fe:75:f0:25:29:ec:b0:ff:e6:81:33:06:1f:f1:
1c:82:13:0f:69:20:ac:3b:c5:43:76:49:bd:b5:b9:
fe:b3:9f:71:1b:05:37:be:5d:d5:95:f5:26:d5:3e:
f2:5a:10:3f:12:87:59:31:39:a5:5d:58:70:0b:ca:
e2:9d:47:df:89:0c:46:40:c0:75:88:d5:7f:c7:33:
c0:09:e9:71:9b:1a:5b:0f:18:8f:50:33:41:18:08:
04:5d:cf:53:21:a9:ae:a5:2b:e2:c3:04:58:cb:e6:
26:22:46:6e:b0:2f:0f:3a:62:dc:57:90:8d:2e:44:
38:d7:78:fd:07:0e:c9:0f:95:00:b9:02:68:c7:96:
fe:a6:e9:d9:5c:1a:00:2c:c3:94:e4:a7:30:d7:60:
ad:ef:7c:ca:e3:62:2b:f7:35:c6:66:59:e2:f7:61:
08:35:0e:2c:5e:cc:be:fc:5a:63:23:68:16:d3:6a:
76:8a:b9:03:5a:02:0e:58:19:e8:bb:2a:8d:b8:4e:
cc:d7:67:48:32:82:12:ba:6e:44:f2:cf:61:16:59:
72:ea:97:9e:45:b7:1b:32:2d:e1:e9:8a:32:70:2b:
89:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:54:96:46:3B:12:4D:35:B3:4A:39:FA:21:5D:57:5A:0C:78:96:D4
X509v3 Authority Key Identifier:
keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:de:4b:89:48:58:40:c3:70:d2:35:72:9c:9f:c8:41:7a:5d:
ae:20:04:d1:9d:a1:ac:1c:14:39:60:ff:d6:17:36:1f:de:ab:
0b:11:9f:54:d6:1b:be:75:e4:24:75:27:d5:69:da:c0:09:26:
59:6b:ad:d8:98:6b:70:4f:85:cf:53:c2:5f:d0:67:bf:c8:cf:
f1:69:eb:d4:d9:aa:ed:f2:ac:0e:fb:dd:82:55:43:5a:43:e6:
62:8a:77:9e:5d:9f:f5:f4:72:f3:86:8f:0a:c5:fa:18:55:ce:
f0:f1:00:52:74:da:2f:b6:f8:11:a3:ca:18:3e:83:c4:16:35:
6f:1a:38:fb:c1:3f:fc:e2:46:63:70:15:2a:9d:e2:f8:51:34:
5d:a8:24:37:a5:f4:58:d7:ad:22:56:17:2a:cd:37:16:59:ff:
b8:b6:86:a1:6b:b8:93:a8:da:de:e5:5a:bb:11:b2:d2:f6:ba:
15:2c:ac:be:4d:13:29:5c:49:ba:f2:b4:c7:8a:17:24:59:28:
ce:55:a3:1f:e6:bb:b2:4f:d4:90:bd:d9:31:21:ce:3f:49:e4:
30:93:27:3e:1f:40:7c:2c:90:73:a4:bc:96:79:39:5d:4c:63:
c9:dd:82:99:29:04:2e:81:31:ff:91:72:42:e9:62:e5:32:62:
69:a7:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:21:12 2026 by rpki-client