This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
File: bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft (raw, json)
Hash identifier: pm+FgVk8pi5HQEJpeEfmAm0r7mAuSaddPjdffcJVdug=
Subject key identifier: 0E:77:3A:14:7E:DF:86:08:D9:A4:40:07:CC:8E:86:C8:91:FF:F7:52
Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Certificate serial: 019C432232B022641BBA28A66733F911CE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
Manifest number: 1821
Signing time: Mon 09 Feb 2026 16:00:40 +0000
Manifest this update: Mon 09 Feb 2026 16:00:40 +0000
Manifest next update: Tue 10 Feb 2026 16:00:40 +0000
Files and hashes: 1: bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl (hash: 995nmJ3cdvaN5Pyl/nBnft3crbvULdyVudjM5opKAmo=)
2: dAtJXk54QeNvdrIj2y9sPVigo4Y.roa (hash: VR9GSCDMRB0j9JdvpO5E9iyI6YnfCrylbELLiWuyElY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:32:b0:22:64:1b:ba:28:a6:67:33:f9:11:ce:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6
Validity
Not Before: Feb 9 16:00:40 2026 GMT
Not After : Feb 10 16:00:40 2026 GMT
Subject: CN=0e773a147edf8608d9a44007cc8e86c891fff752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:aa:46:dd:9b:e8:5f:86:80:b0:0b:99:1d:
ad:b5:5a:0d:5d:7d:5f:fb:ef:6e:07:75:83:98:e4:
e8:56:a5:0d:f7:c8:50:a0:91:b4:4e:1a:f1:7f:a2:
d4:ac:db:d5:cf:70:14:78:d5:11:c9:b1:d8:32:5a:
6c:b7:56:d1:a5:ef:72:03:01:aa:e5:b1:70:59:80:
7f:56:1f:0f:97:a8:67:d6:b6:1b:5a:cb:81:88:a4:
f6:83:65:b4:7a:6d:2f:33:29:ae:f8:45:77:c9:fc:
37:53:a5:50:c9:5f:54:fe:7b:0a:89:bf:1d:35:a3:
a0:91:5c:10:4b:cc:d1:b5:65:7d:5b:18:a1:0d:8e:
04:eb:b0:19:98:57:61:63:4c:33:56:80:da:6c:14:
b2:64:82:11:9c:f6:6b:8c:39:16:b9:25:68:e9:f2:
d7:70:f8:32:bf:d1:ab:8d:0b:97:a7:2b:91:f6:d9:
78:8b:14:ca:2a:02:4b:30:a0:6b:be:27:5b:89:2d:
a9:cb:44:15:3e:55:9c:40:98:39:ff:bb:a7:05:f2:
72:25:ed:78:0a:8c:9e:c0:7e:3a:bf:cc:64:b4:61:
b6:b2:46:3a:c2:c7:83:37:44:d7:fd:6e:47:b7:ec:
c0:b1:f6:a5:7f:ee:34:82:ad:f7:27:9f:e8:5a:75:
3b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:77:3A:14:7E:DF:86:08:D9:A4:40:07:CC:8E:86:C8:91:FF:F7:52
X509v3 Authority Key Identifier:
keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:33:58:55:ea:6a:49:90:6a:06:09:e3:48:3f:6b:b1:dc:df:
75:a9:a6:56:03:6e:2e:9e:88:75:06:20:39:71:00:55:35:fa:
ad:5b:aa:3b:0c:59:d7:c5:b8:e7:60:99:e2:17:67:b6:93:f8:
e3:8e:c2:5c:c5:0a:fb:68:e5:d9:a2:2d:85:cb:0a:42:d7:aa:
f5:14:6c:42:22:46:5f:b7:47:76:ae:42:eb:e5:96:4a:21:4e:
aa:9c:79:a9:aa:78:c2:fe:fc:6a:8b:03:13:c5:2b:85:51:02:
c7:a4:66:64:06:19:c2:f1:22:d9:3c:68:34:6e:d5:f8:02:ed:
c1:e2:7e:80:18:c4:0d:b3:33:9d:1c:e1:05:0c:e5:98:ad:3e:
03:7a:15:ec:22:aa:5d:73:84:3c:1e:70:70:f7:76:29:76:d0:
4c:1a:02:cb:36:60:ed:2d:7e:fe:b1:9f:6e:8f:10:8e:fe:1c:
17:c8:a9:c0:c5:d3:7f:8a:5b:d4:3e:10:a0:15:96:55:a9:22:
ca:2d:6f:8f:35:97:63:cd:c9:08:19:3b:df:42:9d:76:a0:1c:
72:c1:09:2f:83:1f:e7:ef:80:18:fe:32:ba:19:61:8e:24:b6:
c7:1c:bc:0d:de:99:33:23:68:9a:e4:e1:05:90:83:b3:5d:74:
b7:b0:16:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIjKwImQbuiimZzP5Ec5yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMTBkOGUxNTY0ZTQwMzEyYzlkZGYyMWJhMmFhMDNiYTU1
OWVhZDYwHhcNMjYwMjA5MTYwMDQwWhcNMjYwMjEwMTYwMDQwWjAzMTEwLwYDVQQD
EygwZTc3M2ExNDdlZGY4NjA4ZDlhNDQwMDdjYzhlODZjODkxZmZmNzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmmqRt2b6F+GgLALmR2ttVoNXX1f
++9uB3WDmOToVqUN98hQoJG0Thrxf6LUrNvVz3AUeNURybHYMlpst1bRpe9yAwGq
5bFwWYB/Vh8Pl6hn1rYbWsuBiKT2g2W0em0vMymu+EV3yfw3U6VQyV9U/nsKib8d
NaOgkVwQS8zRtWV9WxihDY4E67AZmFdhY0wzVoDabBSyZIIRnPZrjDkWuSVo6fLX
cPgyv9GrjQuXpyuR9tl4ixTKKgJLMKBrvidbiS2py0QVPlWcQJg5/7unBfJyJe14
CoyewH46v8xktGG2skY6wseDN0TX/W5Ht+zAsfalf+40gq33J5/oWnU7LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA53OhR+34YI2aRAB8yOhsiR//dSMB8GA1UdIwQY
MBaAFG8Q2OFWTkAxLJ3fIboqoDulWerWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmRhMDUtMTkwZC00MTQyLWJkNGYt
YjZhOGY4ZTgwZjdiLzEvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9jZmRhMDUtMTkwZC00MTQyLWJkNGYtYjZhOGY4ZTgwZjdi
LzEvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTNYVepq
SZBqBgnjSD9rsdzfdammVgNuLp6IdQYgOXEAVTX6rVuqOwxZ18W452CZ4hdntpP4
447CXMUK+2jl2aIthcsKQteq9RRsQiJGX7dHdq5C6+WWSiFOqpx5qap4wv78aosD
E8UrhVECx6RmZAYZwvEi2TxoNG7V+ALtweJ+gBjEDbMznRzhBQzlmK0+A3oV7CKq
XXOEPB5wcPd2KXbQTBoCyzZg7S1+/rGfbo8Qjv4cF8ipwMXTf4pb1D4QoBWWVaki
yi1vjzWXY83JCBk730KddqAccsEJL4Mf5++AGP4yuhlhjiS2xxy8Dd6ZMyNomuTh
BZCDs110t7AWUQ==
-----END CERTIFICATE-----
Generated at Tue Feb 10 01:45:42 2026 by rpki-client