This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
File: bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft (raw, json)
Hash identifier: 8dhqWBvvgHlKlsgc3V3IGh66x2RPfIL84qa8BGwpIc4=
Subject key identifier: 31:AB:76:D8:95:65:ED:3F:4D:49:C0:2E:83:82:78:CA:DC:72:BC:36
Authority key identifier: 6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
Certificate issuer: /CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Certificate serial: 019C43FDEECF69C57E0040172EEE8CEB672B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
Manifest number: 05C2
Signing time: Mon 09 Feb 2026 20:00:40 +0000
Manifest this update: Mon 09 Feb 2026 20:00:40 +0000
Manifest next update: Tue 10 Feb 2026 20:00:40 +0000
Files and hashes: 1: N6W-eQiPRjqw3-6I_QmctyffMuY.roa (hash: Zu+HeLoruNEi/OX9srfF84zysLGJyEcbFNJHAud3tiU=)
2: bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl (hash: MzbAVW2J7b+eFNhcbZhtMHqnvXl3hgRYPqPP8Y/fGBI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fd:ee:cf:69:c5:7e:00:40:17:2e:ee:8c:eb:67:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4428f7f17b19c15068cab939d377940e8d4c70
Validity
Not Before: Feb 9 20:00:40 2026 GMT
Not After : Feb 10 20:00:40 2026 GMT
Subject: CN=31ab76d89565ed3f4d49c02e838278cadc72bc36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:d0:a7:31:75:d9:f0:2a:8f:da:83:0c:aa:
3b:a1:2c:b5:6e:88:36:ae:32:4d:60:98:09:70:c2:
8f:d4:a4:c3:37:1b:26:bd:83:d6:20:b1:5a:b3:d9:
9d:f8:36:d0:9b:94:38:e4:1f:8c:39:98:95:5c:68:
e8:c7:d3:66:76:b7:80:47:99:7d:74:ce:5e:f9:c4:
3f:49:18:1f:b8:d7:6a:f5:7b:77:e7:6d:96:0f:2b:
44:6b:66:3c:93:6e:12:48:6b:ac:86:98:79:98:f6:
f3:4f:28:66:6e:98:f8:23:12:9c:fd:34:29:c2:3e:
6e:12:72:dc:60:8a:79:41:e8:4c:d5:13:3d:ba:b9:
ab:d8:3c:47:5c:1b:3d:bd:6b:8e:33:63:b8:0b:ba:
ac:ec:f4:a4:0c:a7:6f:45:71:9b:cc:91:72:d7:73:
2a:b6:61:6f:50:c4:95:01:e7:78:00:6c:94:85:89:
34:4a:2b:59:6d:4f:a5:b5:a8:5b:a7:df:2e:4a:8b:
83:fd:9b:91:59:41:73:29:98:09:4c:82:27:fc:1e:
2a:8e:fe:5d:db:92:0e:96:e0:b3:97:6e:88:0d:33:
dc:ee:db:19:1b:ef:2b:7b:ad:da:47:d4:64:15:04:
4a:81:6d:18:d5:5f:a0:78:b9:97:0e:b3:96:ca:74:
22:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AB:76:D8:95:65:ED:3F:4D:49:C0:2E:83:82:78:CA:DC:72:BC:36
X509v3 Authority Key Identifier:
keyid:6E:44:28:F7:F1:7B:19:C1:50:68:CA:B9:39:D3:77:94:0E:8D:4C:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkQo9_F7GcFQaMq5OdN3lA6NTHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6cf5f4-3d60-41d7-ae1a-cbc331bfcdb2/1/bkQo9_F7GcFQaMq5OdN3lA6NTHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:b3:9e:ef:4f:7f:a6:d7:97:e2:6e:91:a8:ee:95:b7:ec:48:
af:91:3c:47:63:83:3c:54:f0:8f:30:11:eb:9a:f4:0a:2d:43:
ca:90:c0:d2:78:19:c2:ef:57:ef:36:de:cd:92:9b:9a:09:9e:
ff:71:b6:f0:5d:21:4d:91:ae:34:60:b0:b6:ac:63:f1:a5:76:
20:37:76:89:f1:fa:a6:21:8a:d3:a4:e5:37:47:f7:90:d5:63:
d6:7d:93:db:1e:c1:d4:a8:d0:7e:da:3d:54:88:fb:68:ae:4f:
da:cf:c7:db:72:a7:a1:b4:73:2e:a5:27:36:54:ec:2c:ba:31:
58:d0:a5:98:93:19:12:37:8b:39:de:ed:72:83:ad:90:8c:64:
78:7d:ea:05:c4:ad:1e:ad:de:93:ec:03:a8:5d:55:3f:68:c5:
11:08:55:a1:e7:28:93:38:5d:08:ce:21:b7:8d:23:7d:df:b2:
7e:60:b8:99:f3:72:30:f2:ae:a4:f8:1b:7f:b7:a7:88:1c:b3:
1d:24:12:33:16:82:63:7b:76:ba:0f:24:08:ab:8d:23:f6:ea:
f4:6d:c6:4a:eb:35:3a:1f:b7:f3:29:b0:1d:81:78:9b:23:88:
50:d6:52:13:6e:a6:08:60:a6:91:8e:6f:2e:16:86:5e:5d:98:
d0:64:e0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:35 2026 by rpki-client