This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
File: BOYEpFZ3vncxOWmtF67GnOl8Q84.mft (raw, json)
Hash identifier: lARrhhkkypdps2tgMXFjEDOx+zPXr2BLz4XRz5ClcpA=
Subject key identifier: 5E:A4:CF:CF:30:9E:79:E5:26:E8:78:B2:72:AA:8F:7A:AE:AE:5C:F1
Authority key identifier: 04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
Certificate issuer: /CN=04e604a45677be77313969ad17aec69ce97c43ce
Certificate serial: 019C41D8B52986124D847E7E4FA85BAC91FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
Manifest number: 172E
Signing time: Mon 09 Feb 2026 10:00:47 +0000
Manifest this update: Mon 09 Feb 2026 10:00:47 +0000
Manifest next update: Tue 10 Feb 2026 10:00:47 +0000
Files and hashes: 1: BOYEpFZ3vncxOWmtF67GnOl8Q84.crl (hash: y9zQeF74lkLPjBpveBO9sxBfv7ixnkgCEznVr7LOeks=)
2: qh-sD6kOkExAEQOZYjnoqxx9DpY.roa (hash: 5t8eLCXvC3atBWqULd/nurDvBUxx1v91TFam4vLNrJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:b5:29:86:12:4d:84:7e:7e:4f:a8:5b:ac:91:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e604a45677be77313969ad17aec69ce97c43ce
Validity
Not Before: Feb 9 10:00:47 2026 GMT
Not After : Feb 10 10:00:47 2026 GMT
Subject: CN=5ea4cfcf309e79e526e878b272aa8f7aaeae5cf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:22:ca:21:15:c1:8d:95:e8:ad:d0:17:5b:
dd:67:9b:e5:3b:3e:a5:76:65:db:ed:79:c4:69:d6:
37:6e:c0:0b:b7:8d:92:2e:19:4d:f1:29:e6:13:72:
5b:06:ed:ca:a1:81:91:9d:cd:a6:2d:e1:0b:1a:b7:
fa:68:2a:93:45:1c:a1:16:82:5c:ac:17:6a:5a:6b:
a2:8a:ac:f8:fc:6e:48:0c:27:54:5c:68:d7:e8:8e:
22:c0:bf:f5:b2:2e:bd:08:8b:9b:26:38:7c:99:55:
ba:65:4f:bd:c7:fa:11:31:70:25:f0:1f:ba:67:02:
ee:c2:52:42:b3:d9:d3:30:18:32:c8:0e:63:03:0d:
21:3e:53:ef:7d:d1:5e:d1:3b:b9:8b:5d:7b:eb:63:
57:03:2e:59:69:a7:a3:48:62:38:2d:43:77:41:f9:
ee:c6:cc:49:0d:e6:07:e4:e0:2f:0e:ef:35:cd:38:
0f:c3:d1:2d:9e:e0:b3:2a:08:05:b4:f8:47:29:fa:
a6:ea:c0:ae:a1:0a:de:84:bd:75:17:f2:3f:9c:47:
4a:e3:82:3a:1f:88:b7:3e:fb:72:12:6d:5c:c1:71:
eb:1c:1b:c4:f8:df:b3:08:62:80:08:52:34:88:5f:
09:af:c6:2a:f2:fd:0f:84:bf:2c:e8:7e:79:18:66:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A4:CF:CF:30:9E:79:E5:26:E8:78:B2:72:AA:8F:7A:AE:AE:5C:F1
X509v3 Authority Key Identifier:
keyid:04:E6:04:A4:56:77:BE:77:31:39:69:AD:17:AE:C6:9C:E9:7C:43:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOYEpFZ3vncxOWmtF67GnOl8Q84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b429aa-0461-4136-90cd-52a7b925b224/1/BOYEpFZ3vncxOWmtF67GnOl8Q84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ec:2a:ef:ec:59:f8:71:80:5a:cf:28:8a:ba:9e:6b:5f:6c:
0b:1a:d6:7b:9b:c3:c7:e8:91:ae:16:96:a6:0d:02:94:bf:28:
c9:34:82:68:75:d1:5c:bd:e9:9c:0b:8a:f9:82:c2:f5:49:ea:
a5:03:87:2e:ad:c0:92:e2:a5:4f:e9:5d:04:26:cd:72:5a:7d:
37:ec:c3:09:4c:91:73:4d:19:9d:f8:23:89:9f:b2:14:52:fb:
01:a0:a0:81:15:f4:51:72:84:bd:f3:b0:ab:f5:94:d7:aa:ac:
9b:ed:34:dd:c5:36:c7:d1:32:f5:ac:16:12:30:04:3a:f3:29:
6c:0a:85:37:7d:b5:ba:c0:fd:c4:f9:0e:3d:25:7b:dd:e7:d8:
f5:70:42:4e:41:f4:2c:53:1c:92:b6:62:f7:58:fc:07:52:71:
7a:dc:34:80:0c:12:b3:0c:a1:5f:c4:19:c2:62:7b:66:71:ca:
99:af:a3:d9:35:0b:5d:e0:6b:95:b2:f3:4f:f1:c9:19:89:1c:
a5:60:e1:bc:31:67:8b:74:34:fd:72:63:56:09:87:59:39:03:
c5:b4:43:5d:b3:e0:c7:3d:41:60:51:68:c7:33:f6:d2:b3:f1:
f2:3b:c4:ba:b6:ee:f6:19:eb:8c:59:b2:4c:25:24:6f:a8:ef:
66:a3:55:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:13 2026 by rpki-client