This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: cWg4tSmmN7o0BGNHWN7FxeR5VG4MVworZnjdZmIDjhQ=
Subject key identifier: E9:AF:7A:00:18:1E:0A:AA:2A:E8:47:7A:24:FE:F2:99:84:20:63:42
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 019C1C4B90517F842ECCD6551FB833B95626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 17FD
Signing time: Mon 02 Feb 2026 03:00:39 +0000
Manifest this update: Mon 02 Feb 2026 03:00:39 +0000
Manifest next update: Tue 03 Feb 2026 03:00:39 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: FuwppJY05CpeDtBMCXS07an9YTJTSz/jAnfcRXw3Ba4=)
2: NnEIJrnmhkwELld_U_QBTUbqU90.asa (hash: 5/Cpmz3yamVpUjVaZZVnuNujoVdFO+RPvIdZmRu6am4=)
3: aToK1H8Eu9LQyX9O96VpmV4-xH4.roa (hash: NOHh63b/9WqU00dOh312eJJg1BRneOILOEiJiVt9VO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1c:4b:90:51:7f:84:2e:cc:d6:55:1f:b8:33:b9:56:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Feb 2 03:00:39 2026 GMT
Not After : Feb 3 03:00:39 2026 GMT
Subject: CN=e9af7a00181e0aaa2ae8477a24fef29984206342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5e:9d:84:05:f2:24:f2:f6:8e:5b:2b:e4:ec:
c9:e9:4d:6a:dc:61:a8:71:c8:00:2c:6b:76:c5:2b:
e1:70:8b:3d:3e:a9:b6:ac:fd:9d:11:b5:89:75:d3:
61:fd:e7:12:5a:b1:75:c1:27:37:b0:bd:35:a1:a7:
33:0a:0f:37:e8:8b:9f:d4:d1:51:95:15:79:7c:73:
2d:3b:ba:8f:bc:f3:e4:d8:93:96:bd:20:1f:d9:a2:
e5:03:4a:88:0b:ed:e8:54:a8:1e:c2:e8:79:a4:7f:
4b:49:f0:ab:7e:b5:47:04:b4:4b:3a:4d:0a:38:3e:
62:15:ca:f4:6f:ee:9e:6e:f3:89:b0:a8:2f:76:61:
f5:de:83:6c:e5:ae:8c:1a:57:9b:9d:d2:26:2a:ed:
bb:d1:c9:3e:3e:49:55:56:84:50:9b:65:4a:7e:cb:
b0:cb:61:19:ac:75:f8:66:0d:a5:47:92:52:f2:e2:
c5:2f:78:72:48:b1:ad:51:7b:b4:a2:18:4f:12:57:
79:db:a7:44:67:30:4b:4c:0c:3b:fc:13:4e:f4:a9:
36:26:2c:08:7a:79:87:61:da:9a:a1:89:68:40:11:
69:2b:9a:c0:50:0e:94:f8:d9:11:c4:b4:d6:fa:e3:
fc:ed:65:05:96:7e:6c:6c:02:2e:d5:d1:cc:8f:d6:
99:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AF:7A:00:18:1E:0A:AA:2A:E8:47:7A:24:FE:F2:99:84:20:63:42
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5c:b1:e6:2a:bf:22:0c:66:f7:c4:18:ab:80:87:2a:c9:c8:
91:09:f3:f0:7b:3a:ac:20:68:a5:d9:4e:cb:93:97:d0:94:47:
b2:17:d1:54:ec:6c:43:3e:96:1d:56:14:40:c7:35:0a:c7:bc:
aa:58:76:a0:13:d1:a8:5a:39:b6:ad:33:19:09:68:42:2d:21:
fc:d1:53:7f:1c:49:53:be:c9:36:37:5e:de:64:4d:2c:29:c7:
8b:65:f7:88:a6:78:a0:58:a7:b1:aa:8c:2f:aa:b0:4a:be:1c:
38:85:b2:57:c8:31:58:ed:2b:11:81:87:07:6a:fa:1e:5d:32:
03:99:69:60:a9:51:08:1c:38:11:2b:a5:cf:44:26:5f:05:5d:
83:64:79:da:51:e6:9b:a4:82:fa:49:66:a1:c4:40:3b:1d:90:
06:5f:3a:9f:34:df:65:67:63:6c:2f:24:62:a6:06:35:13:56:
f9:59:4a:7c:2d:fe:de:89:21:68:be:4f:e0:67:53:9a:ce:3e:
53:74:fc:13:6d:f3:92:d1:8d:49:df:5e:d6:16:6e:9c:07:1a:
84:1c:05:2e:d5:59:80:31:2e:58:d4:d5:8a:81:86:a3:be:d6:
a0:12:8c:16:e7:93:54:82:de:ab:86:88:ad:8d:c8:40:14:c7:
b4:3f:e4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:48:48 2026 by rpki-client