This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: ffECNyufIhlTD6OSTtwTbwYU7PuRKDHwCdeUN0snnoQ=
Subject key identifier: 51:62:F7:74:90:5E:01:9F:F9:E2:BA:D3:B2:17:43:CA:18:F5:2B:A5
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 019C427E1302A640401D800B9CAF7BD74BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 1533
Signing time: Mon 09 Feb 2026 13:01:24 +0000
Manifest this update: Mon 09 Feb 2026 13:01:24 +0000
Manifest next update: Tue 10 Feb 2026 13:01:24 +0000
Files and hashes: 1: 2XpRI5kbe2GcxnCcvXnUxOpReg8.roa (hash: er8I9IPQk+o7pRxbPQb/bNgm7tOw9wB8trgzpv++Gow=)
2: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: 2Fv4ogA0OPoG/mDsxvjORYIYxwyww5XXJIyELj+YWaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:13:02:a6:40:40:1d:80:0b:9c:af:7b:d7:4b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Feb 9 13:01:24 2026 GMT
Not After : Feb 10 13:01:24 2026 GMT
Subject: CN=5162f774905e019ff9e2bad3b21743ca18f52ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:a7:8a:ec:70:18:c5:12:4b:71:33:86:7e:
87:4a:8e:4d:96:b3:c7:7e:3b:52:6e:77:6e:9b:85:
e1:c4:bd:44:24:19:a6:0b:b9:7b:86:15:5e:c5:e6:
65:5a:a8:d1:73:bf:4f:cf:be:0a:cd:eb:57:2a:85:
65:02:88:c2:c2:24:02:6b:88:b2:e8:2b:d1:86:b9:
3b:2e:69:9e:b4:a6:07:34:6d:31:82:4e:30:ad:5a:
f3:00:c2:6d:54:1a:0b:25:a4:ca:ba:16:6c:32:88:
17:07:1c:bf:58:51:d1:40:cb:4e:fa:6b:72:ef:23:
5b:b0:a2:8d:18:5b:5b:df:84:be:16:b8:4c:26:68:
81:bf:ec:5e:d0:b9:6c:08:ce:45:55:4f:a4:e4:31:
a8:79:e6:29:44:f7:76:b1:04:a9:d2:2f:8f:6e:8e:
1b:31:6e:92:4f:7c:9f:14:ff:b4:52:7f:39:7e:36:
dd:32:67:38:18:69:d3:a6:3f:f3:90:d6:20:ee:d1:
43:ba:85:1a:bd:d1:5f:0a:c3:9a:7b:a3:b2:ee:6b:
ee:60:8d:b1:34:5c:80:b0:79:7b:91:88:c9:89:14:
a2:ed:78:af:2b:a0:2f:fa:65:6e:9d:04:38:8f:f0:
4f:57:4c:4b:85:06:91:1c:c2:c2:6f:f4:1d:94:34:
ee:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:62:F7:74:90:5E:01:9F:F9:E2:BA:D3:B2:17:43:CA:18:F5:2B:A5
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:f4:99:fd:42:38:49:ad:0d:fd:14:71:94:2b:40:d1:b4:31:
5d:f6:10:89:da:9e:9d:74:69:e0:6a:65:42:5b:bc:ae:cc:68:
74:a5:e7:72:0e:38:33:4c:e1:9e:4a:22:07:a8:ec:9a:3d:ea:
e3:c3:ba:95:6b:65:53:e0:ad:47:6b:35:22:a6:35:1a:bf:ce:
3c:45:cf:6f:73:9f:2a:fc:f8:7b:6c:1d:ab:ea:dc:c2:54:85:
0d:56:97:af:77:7a:ba:e2:4c:6c:ef:da:47:c2:8a:ce:dc:a7:
10:c1:4e:59:64:df:da:1d:c9:e9:50:32:51:36:2a:6f:e2:60:
f6:c6:2c:4f:5c:41:8a:28:92:bf:78:41:5b:05:34:97:e5:55:
ae:03:73:c6:ce:5f:44:37:60:a8:d7:d0:04:6b:07:f5:60:4e:
b2:7e:fe:8a:32:56:25:0a:ca:ff:a8:9d:87:5d:8f:60:7b:df:
8a:d5:52:33:24:33:c7:22:2a:18:be:e3:5d:83:77:56:1f:13:
0d:da:c7:88:e8:55:3a:85:6a:f0:5a:11:83:1b:72:c1:c9:47:
1c:4b:c0:07:07:40:28:4a:38:50:3b:ab:c2:b7:23:d1:f0:48:
ec:24:23:27:f9:75:fc:c3:49:0f:8a:0e:5b:91:36:3f:82:40:
48:47:73:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:16 2026 by rpki-client