This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
File: v5r7gj8fivhy55Pye2St74zU3Bs.mft (raw, json)
Hash identifier: k8VtyUweGjfkPxalC1W6kUsDan8VWyBLrSGZfNmgBWk=
Subject key identifier: 4D:07:D4:03:4B:63:30:D1:13:9F:E3:90:2F:35:C4:80:EC:79:C6:55
Authority key identifier: BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
Certificate issuer: /CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Certificate serial: 019C424650E6FE7A50178B4628B9AE4F066E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
Manifest number: 05CC
Signing time: Mon 09 Feb 2026 12:00:30 +0000
Manifest this update: Mon 09 Feb 2026 12:00:30 +0000
Manifest next update: Tue 10 Feb 2026 12:00:30 +0000
Files and hashes: 1: v5r7gj8fivhy55Pye2St74zU3Bs.crl (hash: lN/YHt4by0fJRdtNilBECfB8h1Fk6aYdCT3ukJHE2Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:50:e6:fe:7a:50:17:8b:46:28:b9:ae:4f:06:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf9afb823f1f8af872e793f27b64adef8cd4dc1b
Validity
Not Before: Feb 9 12:00:30 2026 GMT
Not After : Feb 10 12:00:30 2026 GMT
Subject: CN=4d07d4034b6330d1139fe3902f35c480ec79c655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:0b:10:bf:57:f3:bf:0a:48:ca:64:3d:1f:
df:a2:db:e8:d8:c5:6a:78:92:8d:8e:bd:d7:db:0c:
2f:b4:2c:d6:df:d3:be:ed:e2:1f:0a:c5:3b:4e:2d:
78:85:cd:fa:08:ea:2f:ae:fa:95:5d:fc:29:39:c8:
dd:b6:57:94:eb:ab:ad:c2:aa:58:e1:f4:bb:a3:f5:
f3:8c:ad:e2:e6:42:62:d9:33:b0:19:e7:26:77:30:
83:79:d9:be:28:bd:e7:3a:95:bf:7e:54:b8:dd:94:
6f:87:ad:b9:3e:07:b5:b7:d7:71:4e:77:34:20:d6:
4f:db:6a:ab:54:3d:44:1d:ec:8f:ca:d7:c8:3b:ba:
68:36:2d:6f:73:ba:f6:15:5d:61:e2:98:c8:4f:53:
3a:99:76:0c:3b:29:ac:fd:20:c8:8a:a5:db:9b:36:
b2:3d:36:26:7b:a0:f4:46:bd:4f:e2:1d:51:72:e9:
a6:ce:4c:cb:46:73:3a:52:33:4c:db:04:5c:25:11:
8b:d9:9b:b3:f0:26:40:24:61:da:56:36:62:f6:bd:
f6:3d:b0:02:75:c1:26:20:ed:fb:cd:20:82:0d:e0:
6e:be:e4:e5:f5:97:96:7d:60:2f:16:f9:6d:ff:a3:
e1:1b:36:83:1a:ba:41:3b:93:29:2a:1b:29:54:11:
a1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:07:D4:03:4B:63:30:D1:13:9F:E3:90:2F:35:C4:80:EC:79:C6:55
X509v3 Authority Key Identifier:
keyid:BF:9A:FB:82:3F:1F:8A:F8:72:E7:93:F2:7B:64:AD:EF:8C:D4:DC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5r7gj8fivhy55Pye2St74zU3Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/dc3294-bd4f-4fef-b9f7-3662785baaad/1/v5r7gj8fivhy55Pye2St74zU3Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:52:80:24:88:92:bd:d5:e4:65:68:77:45:c4:0f:21:91:83:
5b:ed:0c:9c:51:95:c7:f9:18:fc:e7:ba:3f:ad:f3:79:8a:7d:
54:b3:d7:76:d9:e1:87:61:f0:55:b6:ee:19:24:d9:28:85:23:
ac:60:36:8f:8e:ae:ff:8f:d4:ab:59:9b:79:13:41:cb:b1:35:
48:9e:41:18:b1:ec:e7:4e:a1:e8:46:7f:ba:48:3a:26:30:eb:
31:93:d9:64:56:4e:4f:88:e5:4e:96:f1:55:7b:af:50:5c:af:
6b:c8:a8:f0:b4:29:d3:7b:8d:aa:31:ab:85:7c:5e:0c:1d:41:
44:3e:cf:88:0f:c3:77:9d:b8:a1:e3:3e:d7:f3:32:54:ff:60:
46:b2:53:67:b3:0e:ee:88:bf:b5:83:e6:f7:34:27:5c:2e:47:
12:57:76:0f:3f:a7:88:8d:69:ce:8b:95:32:aa:ec:78:86:32:
00:32:c3:b8:85:ae:c0:de:4b:93:78:3a:5d:7d:fa:98:f6:1a:
71:11:c4:e5:1f:e0:00:63:bc:92:22:a5:ca:16:4d:db:bb:0c:
b2:65:0f:de:e2:7d:99:ea:99:97:72:58:67:ec:05:4f:22:54:
88:8b:85:ac:03:eb:e6:fc:ea:92:3b:06:85:41:f8:b4:f1:44:
13:e8:30:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:57 2026 by rpki-client