This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
File: BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft (raw, json)
Hash identifier: Fio5tU2jKncFIJkdV0l+ot4CR0+ilA44EHUKUwNwRIA=
Subject key identifier: 7B:E4:8A:BC:75:65:EF:E2:47:B0:5F:C2:57:34:2B:61:AB:E4:4B:DC
Authority key identifier: 04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
Certificate issuer: /CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Certificate serial: 019C42466EE27F19022E38FC568828258748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
Manifest number: 14EF
Signing time: Mon 09 Feb 2026 12:00:37 +0000
Manifest this update: Mon 09 Feb 2026 12:00:37 +0000
Manifest next update: Tue 10 Feb 2026 12:00:37 +0000
Files and hashes: 1: BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl (hash: ExxJo4HSvcYDU64XfoaSQUrTPUtiIt1Dwunlfwf4ikE=)
2: ue1Yig8TYgxiOV1FxPhvIsY035g.roa (hash: 3msZkfxcU6jcS509BBjupbbAc7uKaBkwJ1wFsWgzHXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:6e:e2:7f:19:02:2e:38:fc:56:88:28:25:87:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049926e1cc5e61c5c80eb46a9d7b6f5f63a1661c
Validity
Not Before: Feb 9 12:00:37 2026 GMT
Not After : Feb 10 12:00:37 2026 GMT
Subject: CN=7be48abc7565efe247b05fc257342b61abe44bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:3b:00:e9:a6:68:c9:0b:f5:3a:49:12:9e:e6:
1d:0e:d8:ae:7a:b4:3f:9e:69:32:7a:60:c5:0d:92:
9d:66:41:53:fe:ec:ef:70:1b:54:46:1d:83:d4:f2:
87:a3:a2:6e:51:67:2d:a2:be:30:52:90:9f:45:84:
c1:72:2c:c9:8a:29:82:43:f6:51:0e:84:15:f0:4c:
66:9e:74:d4:ba:cd:c8:d5:c5:fd:21:8c:a6:87:0e:
54:98:ab:bd:5c:7d:e1:d2:b1:04:06:27:e7:f1:1f:
29:c1:00:3e:fd:da:fe:09:36:b3:23:a4:ee:94:91:
20:05:75:1e:68:8e:7c:0f:ea:6a:1f:7f:32:81:4e:
7d:c3:44:a0:b3:73:36:8d:49:a9:66:1f:b2:ab:7d:
57:74:45:4f:f8:b0:00:a2:2f:54:7e:6f:24:63:c4:
d7:50:34:64:18:d5:8d:f0:7b:07:73:4b:fc:2f:c6:
63:dc:05:fa:c1:66:f3:73:e1:5c:bb:38:f5:13:0d:
f2:fe:5e:73:d6:f7:2a:12:c9:4d:bb:44:17:a3:28:
62:32:c7:f1:11:24:59:1a:b6:c8:9a:4b:c6:2b:81:
56:06:54:82:6c:21:98:e4:48:98:94:1b:8c:e9:c3:
33:5d:ed:bf:58:ad:3f:51:1b:3b:70:72:d5:f1:a3:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E4:8A:BC:75:65:EF:E2:47:B0:5F:C2:57:34:2B:61:AB:E4:4B:DC
X509v3 Authority Key Identifier:
keyid:04:99:26:E1:CC:5E:61:C5:C8:0E:B4:6A:9D:7B:6F:5F:63:A1:66:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJkm4cxeYcXIDrRqnXtvX2OhZhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c39caf-b777-494d-b682-8e9df96dce45/1/BJkm4cxeYcXIDrRqnXtvX2OhZhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:4c:31:00:8c:bb:30:00:a2:33:03:29:1a:4a:3f:61:59:b8:
6e:84:00:49:ee:34:7f:c5:c9:58:dd:7e:2b:a1:d1:d1:48:2d:
33:89:c9:61:17:57:9c:99:48:79:73:c9:9f:80:97:dd:33:e8:
6b:77:2c:9c:9b:54:26:60:57:25:7f:ac:dd:d7:8f:e5:2d:17:
14:6b:ea:51:2b:2a:a8:ac:be:43:66:ca:ea:e9:f8:76:13:be:
c5:2b:9d:c0:85:af:b8:95:35:05:9b:10:41:06:5c:2c:75:0f:
b8:70:5f:91:1b:b3:dd:a0:2d:3f:c0:7e:90:85:0e:43:96:a9:
9b:cb:14:cd:46:54:80:92:a7:4d:db:6f:3b:c1:c9:62:b7:b5:
90:de:44:78:01:5e:85:95:b9:51:32:50:f0:e2:59:2c:00:1a:
ae:8c:df:0b:8d:07:7f:54:83:4b:cc:0a:f8:cd:42:f1:60:ac:
3e:ec:2a:52:b5:48:34:7d:45:44:bf:a3:29:09:21:ff:fe:00:
00:d8:9a:4b:a1:dd:57:dd:d5:f3:44:3c:97:73:b8:d0:0b:06:
1f:88:df:17:12:9d:bc:de:ef:a0:f3:f8:f0:83:8a:cf:78:b8:
b5:6d:0f:d0:8a:9b:74:d8:79:18:99:54:cc:aa:c7:f7:5d:cd:
33:b5:c1:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCRm7ifxkCLjj8VogoJYdIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0OTkyNmUxY2M1ZTYxYzVjODBlYjQ2YTlkN2I2ZjVmNjNh
MTY2MWMwHhcNMjYwMjA5MTIwMDM3WhcNMjYwMjEwMTIwMDM3WjAzMTEwLwYDVQQD
Eyg3YmU0OGFiYzc1NjVlZmUyNDdiMDVmYzI1NzM0MmI2MWFiZTQ0YmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+DsA6aZoyQv1OkkSnuYdDtiuerQ/
nmkyemDFDZKdZkFT/uzvcBtURh2D1PKHo6JuUWctor4wUpCfRYTBcizJiimCQ/ZR
DoQV8ExmnnTUus3I1cX9IYymhw5UmKu9XH3h0rEEBifn8R8pwQA+/dr+CTazI6Tu
lJEgBXUeaI58D+pqH38ygU59w0Sgs3M2jUmpZh+yq31XdEVP+LAAoi9Ufm8kY8TX
UDRkGNWN8HsHc0v8L8Zj3AX6wWbzc+Fcuzj1Ew3y/l5z1vcqEslNu0QXoyhiMsfx
ESRZGrbImkvGK4FWBlSCbCGY5EiYlBuM6cMzXe2/WK0/URs7cHLV8aOspQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvkirx1Ze/iR7Bfwlc0K2Gr5EvcMB8GA1UdIwQY
MBaAFASZJuHMXmHFyA60ap17b19joWYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODIt
OGU5ZGY5NmRjZTQ1LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jMzljYWYtYjc3Ny00OTRkLWI2ODItOGU5ZGY5NmRjZTQ1
LzEvQkprbTRjeGVZY1hJRHJScW5YdHZYMk9oWmh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUwxAIy7
MACiMwMpGko/YVm4boQASe40f8XJWN1+K6HR0UgtM4nJYRdXnJlIeXPJn4CX3TPo
a3csnJtUJmBXJX+s3deP5S0XFGvqUSsqqKy+Q2bK6un4dhO+xSudwIWvuJU1BZsQ
QQZcLHUPuHBfkRuz3aAtP8B+kIUOQ5apm8sUzUZUgJKnTdtvO8HJYre1kN5EeAFe
hZW5UTJQ8OJZLAAarozfC40Hf1SDS8wK+M1C8WCsPuwqUrVINH1FRL+jKQkh//4A
ANiaS6HdV93V80Q8l3O40AsGH4jfFxKdvN7voPP48IOKz3i4tW0P0IqbdNh5GJlU
zKrH913NM7XBig==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:22 2026 by rpki-client