This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File: bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier: 2hCqiBZxuj/tk0aarA6kriLGYYCy5cNV7FYZmtNMEDE=
Subject key identifier: BA:38:01:04:C0:08:D7:D1:C2:5B:A5:FF:05:CC:68:86:E4:6F:28:DC
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer: /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial: 019C41A148D78211C036774C328443ADAEA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number: 0C1C
Signing time: Mon 09 Feb 2026 09:00:14 +0000
Manifest this update: Mon 09 Feb 2026 09:00:14 +0000
Manifest next update: Tue 10 Feb 2026 09:00:14 +0000
Files and hashes: 1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: J3HqR0oUakvYZ+Ew5xL6yuEzD1DvRUtcuKfKhfudcY0=)
2: xedQc8k1ZNFjpdsXA6TYOm-QwAo.roa (hash: 4/kRGVQh8aCzWxXk3+Kdjd95nYFMZaC5eRjEmyP9N4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:48:d7:82:11:c0:36:77:4c:32:84:43:ad:ae:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Validity
Not Before: Feb 9 09:00:14 2026 GMT
Not After : Feb 10 09:00:14 2026 GMT
Subject: CN=ba380104c008d7d1c25ba5ff05cc6886e46f28dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:62:bd:ce:15:99:fc:2a:43:d8:f0:a1:60:
d7:6d:fc:78:59:a9:6e:b9:c4:2f:6e:7c:db:70:a0:
ce:b8:af:1e:7c:e6:2f:ed:17:f2:f8:ed:4c:04:f3:
37:f5:b1:88:62:34:5d:d2:44:f7:13:87:f2:a2:5f:
12:e7:7c:6f:75:5c:88:51:ad:9b:fd:26:70:a0:d3:
a5:13:43:28:71:99:5e:1e:8f:e7:4b:84:45:d0:fd:
81:0c:49:fd:f7:1b:0a:cf:b1:f6:b1:c7:4f:62:b3:
01:bc:11:5a:83:b7:86:b5:44:ab:d4:d0:db:9f:5a:
8b:eb:31:72:69:7b:c9:61:b9:7b:49:f5:f3:1d:aa:
bb:2f:f3:aa:7a:02:8a:73:e2:2e:6f:2d:53:88:22:
f3:99:a4:d7:99:b0:e3:98:39:27:7c:37:8e:58:29:
89:3b:fb:c9:bd:a5:ff:a5:de:7a:d9:f1:ee:97:44:
d6:f6:db:08:c9:ad:fc:83:6c:76:3e:cd:c2:40:42:
9f:17:5f:f3:3e:e9:15:45:d0:2b:eb:48:a3:4a:6a:
e5:07:f2:d8:4f:52:33:39:77:81:60:26:ea:08:f8:
7e:f1:26:e7:09:65:00:a4:28:af:b6:04:bf:1b:25:
db:00:f7:69:86:51:88:d1:77:5f:3c:5e:c2:5e:df:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:38:01:04:C0:08:D7:D1:C2:5B:A5:FF:05:CC:68:86:E4:6F:28:DC
X509v3 Authority Key Identifier:
keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f1:ff:85:da:f6:98:f0:0f:ee:c6:7a:20:fd:34:6c:72:e8:
5d:5d:26:f8:8f:07:a8:dd:a8:34:51:f2:35:07:1f:6a:45:6a:
0b:7c:fd:14:8c:52:de:ad:db:c4:12:21:50:20:51:c9:41:c3:
f2:d6:3c:7d:1a:47:a0:9f:e1:9f:b4:0b:ae:37:bb:03:51:53:
43:80:23:e3:21:12:89:33:a5:d8:79:0e:3c:62:4f:b4:de:ee:
51:ef:7a:c1:4a:98:4b:b1:75:9e:5d:1d:a2:59:13:84:49:b1:
4f:4d:9b:3d:fb:5c:14:65:0d:99:27:b0:08:b8:e8:f7:66:2f:
88:d7:50:14:f3:1f:6f:33:dd:b2:df:c5:7f:c9:66:3d:9b:46:
30:3f:9e:08:cc:cb:4c:6c:c5:ad:97:83:88:fa:93:3a:4f:67:
4b:42:20:38:bc:98:28:c9:fe:89:7a:f5:e0:bb:e0:fe:a7:d3:
56:2e:e8:38:01:78:1e:68:5b:d2:3e:c7:b1:c5:77:58:bc:a4:
0e:44:a1:fa:e8:02:1c:c7:ce:ae:74:58:a1:c0:b7:bb:23:34:
cc:b3:12:9e:be:fb:d8:74:af:73:a7:2e:61:1a:85:76:5b:80:
0d:df:72:0e:b3:38:67:f6:ab:62:be:87:48:21:54:f8:40:a5:
bf:75:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:50 2026 by rpki-client