This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json)
Hash identifier: s4uAGs8Su1VEtXOO2hMn/xTPOC3R1D1vDDm7TATa/1Y=
Subject key identifier: E0:00:53:26:B6:BB:AC:E6:E2:F1:44:C4:70:6D:0E:2D:26:42:CE:92
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 019C4390379B7C1117AB587F4B71B25079BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
Manifest number: 1747
Signing time: Mon 09 Feb 2026 18:00:50 +0000
Manifest this update: Mon 09 Feb 2026 18:00:50 +0000
Manifest next update: Tue 10 Feb 2026 18:00:50 +0000
Files and hashes: 1: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: sdlR14+AYqg0sN5gyp4c+h3mK/TCnPCLYO8uBoieg5o=)
2: dfPlqF5Bgqr59PJATwAemysagHg.roa (hash: we4+dkipExQhf3pWjEb2Oj5eVIkZ4cWsxikVfB+DTTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:37:9b:7c:11:17:ab:58:7f:4b:71:b2:50:79:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Feb 9 18:00:50 2026 GMT
Not After : Feb 10 18:00:50 2026 GMT
Subject: CN=e0005326b6bbace6e2f144c4706d0e2d2642ce92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a0:fc:7d:d5:54:e8:6b:48:e4:42:ef:9d:81:
ef:62:19:70:70:9c:f5:18:61:20:ab:4b:29:69:65:
9e:39:33:30:11:3e:0f:ff:6c:2d:2c:6e:8d:ec:45:
0a:52:6b:84:af:31:fc:c0:b7:a3:33:a6:1d:b8:98:
31:8a:c5:3e:a7:0f:a7:c3:3a:85:1d:6e:2d:af:91:
0e:ab:6f:85:39:f9:32:68:47:0c:b7:5b:3b:04:37:
e7:2e:7b:82:be:90:46:55:15:47:35:8a:fc:b0:da:
83:e3:9b:03:e1:47:8e:46:f3:d2:8b:2b:64:6a:d0:
29:7e:5e:71:07:1b:9c:29:6d:64:79:c3:52:6c:f9:
5d:fa:a5:d7:b4:e7:aa:6b:b0:08:3e:74:49:b0:cf:
cf:96:f2:69:53:ae:82:93:fa:18:36:d0:99:a8:1e:
a2:86:eb:3d:8b:d3:a3:c9:d1:8f:a0:ec:dc:06:9e:
05:61:4d:6e:c5:20:de:66:8f:2b:1f:01:05:08:0f:
d7:96:0e:4a:dc:77:db:fc:96:ba:be:3b:ab:4d:b2:
8e:74:9e:d6:f1:28:97:fa:6b:c6:a9:8d:c0:8e:16:
d0:ca:ea:bd:e2:6e:b2:41:8c:cd:b7:15:1b:cb:6a:
dc:ad:32:9d:f1:b8:80:e3:f5:26:af:ad:d6:fd:73:
08:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:00:53:26:B6:BB:AC:E6:E2:F1:44:C4:70:6D:0E:2D:26:42:CE:92
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:96:e8:18:4d:a2:fd:a3:aa:f1:9f:95:dd:cc:b2:3a:03:c5:
d0:8d:6e:e9:42:a2:26:34:b4:95:fd:96:50:9d:c5:95:21:d2:
0a:45:31:8d:8e:10:b6:66:89:04:08:00:9c:4a:4c:d5:62:bb:
5d:a0:c8:27:70:4e:37:d1:97:fb:12:3f:72:6c:0f:71:2a:0b:
d1:87:20:34:6a:70:ac:ca:61:82:b2:16:ca:21:a5:cc:09:4a:
2d:ef:be:b3:64:89:6c:c4:32:ef:a3:f3:a8:b6:4b:db:5d:ec:
c5:b8:8f:bb:53:b8:1d:16:ec:8c:17:13:57:f1:3c:b5:89:0b:
fb:f8:c0:31:f9:b9:98:e4:6c:cb:ea:16:0b:cb:94:c3:be:cc:
e0:16:5c:29:27:a9:e0:70:01:0a:90:a6:21:d3:9b:63:d8:57:
5a:68:9b:66:0f:56:28:13:e9:11:6e:2f:c0:0a:93:dd:f0:7a:
b4:a7:c2:5b:e7:52:45:44:55:80:eb:a8:90:97:e3:3d:27:b6:
ee:71:81:e2:22:b1:f3:6e:e3:22:55:b8:35:f4:23:16:cf:4e:
e5:c9:ff:8e:9d:ca:17:30:20:4d:dd:3a:6a:2a:52:6a:f8:e1:
68:a4:da:13:3b:80:90:21:41:d8:f5:e9:fa:7a:c6:27:59:8c:
d4:07:6d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:16:35 2026 by rpki-client