This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
File: bEme6h8J0BEiUo1BdU03xcqjS6c.mft (raw, json)
Hash identifier: IlmGobG5HfLyyrQ55h4RG5PBrWFQQftdjtcDcU2Wiog=
Subject key identifier: 0D:22:07:5D:BC:46:13:D8:23:EC:F7:CC:34:3C:7E:40:15:A6:67:C0
Authority key identifier: 6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
Certificate issuer: /CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Certificate serial: 019C4246BB248568EB5E8E946E56C809B13F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
Manifest number: 0DE2
Signing time: Mon 09 Feb 2026 12:00:57 +0000
Manifest this update: Mon 09 Feb 2026 12:00:57 +0000
Manifest next update: Tue 10 Feb 2026 12:00:57 +0000
Files and hashes: 1: HsWvQkqyqgqDj3X8qhIGW0Flnwc.roa (hash: jMcB1wDEamsFEqTFzPF8IyJgQTNPejP9vTcaIBOsBpk=)
2: bEme6h8J0BEiUo1BdU03xcqjS6c.crl (hash: ct/wEzxfCrKXorcVhSzw5YsswCoHXM6g1FhrBA1p6Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:bb:24:85:68:eb:5e:8e:94:6e:56:c8:09:b1:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c499eea1f09d01122528d41754d37c5caa34ba7
Validity
Not Before: Feb 9 12:00:57 2026 GMT
Not After : Feb 10 12:00:57 2026 GMT
Subject: CN=0d22075dbc4613d823ecf7cc343c7e4015a667c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:7c:63:52:67:ea:11:a3:c5:6c:62:b3:f4:
fe:f1:5e:17:67:54:35:cf:8b:b0:3c:24:f6:0a:e6:
ab:c1:fe:5a:d1:54:a5:13:53:01:7d:ad:43:dc:98:
1d:da:38:5c:ae:ee:91:c6:51:51:74:c8:95:cc:06:
83:4a:7d:a0:3e:69:65:c9:30:b7:ea:f9:74:87:af:
81:7d:30:55:60:94:29:45:03:be:97:02:e3:5d:67:
0a:3b:c9:30:15:2a:1d:ce:e2:1c:1e:00:68:cc:1f:
fb:c0:a5:c7:c6:d2:c0:e6:7d:f0:04:19:db:a5:b1:
15:ad:51:a4:c4:f7:c9:d5:03:3d:b6:94:de:a7:6f:
12:5e:6c:fa:9d:23:46:8d:67:e4:23:63:43:60:b4:
86:12:a6:a4:33:05:96:13:a7:40:b6:ec:a2:35:0d:
f3:3c:96:a2:b8:d8:78:1c:b6:10:98:74:43:23:a4:
ee:65:0b:92:e6:c6:93:ee:90:3c:23:44:18:f8:de:
82:63:64:bd:02:5e:a5:19:b2:4f:e2:11:15:6f:48:
e8:00:fa:cf:e6:d2:7a:16:79:43:53:c3:c7:f7:18:
38:b1:24:2a:e8:2b:4c:cb:18:32:63:61:04:5f:b8:
d7:f4:8b:6c:d4:bf:b7:6c:05:c2:f5:06:b1:ff:85:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:22:07:5D:BC:46:13:D8:23:EC:F7:CC:34:3C:7E:40:15:A6:67:C0
X509v3 Authority Key Identifier:
keyid:6C:49:9E:EA:1F:09:D0:11:22:52:8D:41:75:4D:37:C5:CA:A3:4B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEme6h8J0BEiUo1BdU03xcqjS6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/bdeb27-3434-4254-8241-7fddd22202bf/1/bEme6h8J0BEiUo1BdU03xcqjS6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c8:c9:ed:9d:08:e3:ae:ab:e7:c4:ce:09:c8:a2:7e:97:9c:
4a:b2:d2:0d:d2:b6:d0:90:b4:19:d6:72:0b:3d:84:d5:fe:a1:
b7:d7:ea:eb:36:22:15:4b:c0:93:c3:27:3c:23:ef:c2:89:50:
63:1b:fb:d6:41:4a:c0:38:33:cf:7b:e5:17:0e:60:9f:3a:0f:
17:12:4b:a4:ae:e7:47:1e:6c:5d:42:88:59:5d:bf:0d:84:dd:
d1:eb:c4:9b:c4:cb:4d:b3:02:16:bf:50:bf:c7:3d:da:9d:d7:
d9:20:45:3f:57:03:b1:51:9f:bd:3f:ee:5d:70:00:cb:92:cc:
19:c0:a0:37:2a:94:a7:2a:71:b9:b0:73:d6:b6:a5:e7:ec:64:
59:9b:14:25:15:d2:dc:ce:e2:14:f6:ae:a0:6b:7b:0a:60:d7:
19:65:64:d0:52:98:f0:78:25:a2:f3:b9:b4:19:5e:1c:e2:48:
c7:90:22:9e:60:1d:b8:39:9b:5f:da:78:7d:df:26:48:03:4f:
63:12:9e:ea:a6:44:94:b2:32:1c:a2:ec:ab:94:10:ea:88:31:
f2:bb:ad:5d:6f:1d:54:5e:e3:0d:da:f7:02:07:1b:bd:97:d8:
9c:13:b4:57:16:ad:1c:5f:0b:92:18:26:6d:2c:c2:b3:42:2a:
9c:9c:58:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:00:53 2026 by rpki-client