This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
File: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft (raw, json)
Hash identifier: 692fSH0tkvbrEAd/zwp1H7qpfLr8MGcAfs0FJG7lnWQ=
Subject key identifier: 2C:73:AF:F4:4C:82:5A:94:48:DC:93:D6:AC:DA:E3:1F:AC:9D:42:C7
Authority key identifier: 04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
Certificate issuer: /CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Certificate serial: 019C427D520765101BED1C2842E8E3890779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
Manifest number: 06A0
Signing time: Mon 09 Feb 2026 13:00:35 +0000
Manifest this update: Mon 09 Feb 2026 13:00:35 +0000
Manifest next update: Tue 10 Feb 2026 13:00:35 +0000
Files and hashes: 1: BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl (hash: i8hu5dX8de751yHQpELhOpVl3TCWOirW0sfDT9ETw5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:52:07:65:10:1b:ed:1c:28:42:e8:e3:89:07:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04bedb6154a8795dc4ceefa67a18fedfc6521594
Validity
Not Before: Feb 9 13:00:35 2026 GMT
Not After : Feb 10 13:00:35 2026 GMT
Subject: CN=2c73aff44c825a9448dc93d6acdae31fac9d42c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:64:0f:b0:32:2b:3e:05:b5:7b:6a:9c:0a:ba:
65:40:1e:94:8d:67:e3:46:ef:09:17:cc:08:01:0a:
c7:9a:ab:de:73:11:a2:e9:ef:85:f4:0d:b9:55:26:
79:58:59:ac:3d:13:9b:c7:3c:b8:8c:05:60:f0:6b:
5f:cf:5f:80:4c:4d:73:35:ee:dc:ae:cc:43:12:21:
6b:af:4a:00:a7:97:3b:ef:67:0c:61:30:62:da:63:
e2:6a:78:b2:e6:44:28:2f:69:10:87:cf:af:64:3e:
f0:05:82:0d:c7:37:78:85:37:df:f6:c1:40:81:23:
f9:8b:59:ea:1b:30:19:0e:80:65:49:c7:f4:f1:03:
ce:56:14:ad:0a:97:b5:fb:a4:e9:77:57:9b:b3:97:
20:61:f5:d7:14:00:02:ac:26:92:5b:63:2e:43:02:
7e:b1:36:59:ea:6a:59:be:27:26:9a:d8:f4:c2:e9:
d3:17:55:17:d8:91:0d:38:71:48:16:86:dd:34:b8:
af:7f:23:10:2a:4a:81:77:13:77:52:db:dc:47:86:
7a:1f:dd:93:dd:24:17:2f:ec:8e:31:92:ed:38:77:
d3:34:4a:72:4f:bd:ea:f1:66:61:2c:1b:76:81:86:
13:0c:5a:c1:32:29:db:74:6c:00:9f:9b:24:32:fd:
18:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:73:AF:F4:4C:82:5A:94:48:DC:93:D6:AC:DA:E3:1F:AC:9D:42:C7
X509v3 Authority Key Identifier:
keyid:04:BE:DB:61:54:A8:79:5D:C4:CE:EF:A6:7A:18:FE:DF:C6:52:15:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/3173e2-6c6e-427f-9cad-3c87088734f6/1/BL7bYVSoeV3Ezu-mehj-38ZSFZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fe:ce:fe:a9:d8:43:fe:b7:de:7c:8f:21:79:40:50:8f:25:
11:60:b3:dd:0b:7b:8b:7a:cc:e7:84:68:19:b8:e5:29:8f:c0:
64:da:35:76:8f:e2:7b:eb:35:80:46:fd:80:2f:a6:cf:e1:f9:
e2:55:8d:d3:66:7d:4f:6c:df:31:a6:4f:86:44:47:a3:f8:01:
96:5d:7a:3b:45:3e:11:64:2f:5f:3c:be:e3:d2:1a:7f:b3:fd:
de:4a:57:f5:d3:08:cf:c7:41:41:07:5b:4b:83:20:4b:41:31:
dc:29:da:e2:b0:62:a6:ea:71:15:53:43:95:aa:40:c8:04:cf:
f0:0c:74:76:ff:7a:8c:cb:50:fa:18:96:1d:0c:5e:8a:32:e6:
6a:71:49:dc:c5:37:10:97:c9:f2:53:5a:f5:ee:1a:24:a1:4f:
c3:6b:3f:15:8f:36:76:5e:a1:05:c7:31:b0:6c:7e:10:6a:51:
39:04:84:cf:4a:84:5a:b5:60:d8:67:a3:a4:9a:31:8f:30:ca:
67:34:8e:05:a6:9d:99:d5:85:e9:86:57:ad:10:c8:aa:e5:c1:
b1:65:c5:6a:8f:b7:53:6e:3e:3e:6d:ab:ab:20:ad:42:c9:4c:
d3:74:0d:3b:db:13:30:a6:0b:1f:2d:62:54:86:0a:b3:cd:ee:
76:f3:c0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:43 2026 by rpki-client