This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
File: bJA8Gi6QbtjNLjYszGffAK3huCU.mft (raw, json)
Hash identifier: aA141XefOMoL7frw17fPzoj9pWiZSW2XBA5d6N9cGkM=
Subject key identifier: 54:AA:67:EC:50:B6:8E:24:EA:25:74:40:2B:8D:2F:88:0B:E2:84:10
Authority key identifier: 6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
Certificate issuer: /CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Certificate serial: 019C427D342183B73A3E85345B57868728AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
Manifest number: 0A07
Signing time: Mon 09 Feb 2026 13:00:27 +0000
Manifest this update: Mon 09 Feb 2026 13:00:27 +0000
Manifest next update: Tue 10 Feb 2026 13:00:27 +0000
Files and hashes: 1: bJA8Gi6QbtjNLjYszGffAK3huCU.crl (hash: a1q3G+Gzl7z6DUEl/bdtqAWM5+qUjizttl8C4zrjO4Y=)
2: niUV0djy4P_JQW5PwXS4h9UDq3c.roa (hash: dUR1gqSul+jZS5ya9pRLXgQp3A3g2Y76zvsEH9Fq7CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:34:21:83:b7:3a:3e:85:34:5b:57:86:87:28:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c903c1a2e906ed8cd2e362ccc67df00ade1b825
Validity
Not Before: Feb 9 13:00:27 2026 GMT
Not After : Feb 10 13:00:27 2026 GMT
Subject: CN=54aa67ec50b68e24ea2574402b8d2f880be28410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:b6:32:33:d7:f2:a0:e7:da:0b:c7:87:e4:
fc:5f:7c:4c:d5:a0:82:84:4b:ab:06:14:9f:a7:2c:
23:a1:07:7e:41:f4:ca:6c:74:50:91:e5:21:8c:ec:
94:f3:ef:1d:a3:22:21:2a:4c:15:76:87:5a:24:84:
9f:72:57:c7:cb:99:92:82:91:1e:5f:95:1a:a5:2f:
98:ce:02:0d:35:18:df:1e:69:18:c8:e3:f9:88:c4:
84:82:4c:30:d6:2f:eb:ed:c8:16:5b:69:dd:81:14:
ea:77:43:0d:84:25:25:2c:78:d2:20:ee:05:c9:d0:
46:f0:cd:3b:05:fd:2e:e1:c2:92:61:f2:a2:b9:c2:
8b:1f:9c:26:ba:57:50:c4:c6:8e:80:34:40:8f:4e:
53:79:4f:82:e6:c0:e6:ee:aa:d3:98:5d:89:53:d3:
8b:79:fa:32:41:2e:1c:ee:7d:7b:83:66:eb:20:e6:
b4:d5:cb:30:ff:f5:58:20:8a:58:39:df:7b:9a:c4:
6d:69:1d:34:06:9d:62:e8:32:a5:7b:c5:97:c9:68:
80:b9:d0:a8:74:0d:09:9b:51:b9:01:32:a5:03:e4:
ae:ed:2f:dd:cf:b3:9c:9f:19:e1:43:f4:dc:de:f0:
b1:34:96:98:e7:fe:d7:2c:11:29:fa:83:70:9b:f5:
df:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AA:67:EC:50:B6:8E:24:EA:25:74:40:2B:8D:2F:88:0B:E2:84:10
X509v3 Authority Key Identifier:
keyid:6C:90:3C:1A:2E:90:6E:D8:CD:2E:36:2C:CC:67:DF:00:AD:E1:B8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJA8Gi6QbtjNLjYszGffAK3huCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/375c02-d77b-4c2b-baea-0e59f2ecb175/1/bJA8Gi6QbtjNLjYszGffAK3huCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:69:b9:b1:34:29:62:46:c4:5b:8a:0c:f0:09:b7:9a:c7:71:
a6:b9:46:54:b7:7a:af:e8:40:fb:eb:22:a2:10:92:72:26:20:
aa:95:6a:57:97:08:07:e2:be:29:84:58:a2:b6:4f:f0:c1:89:
97:f2:11:1b:54:69:03:67:07:f8:65:f6:30:88:d0:5a:71:af:
a0:12:12:b5:a3:01:ab:b5:58:96:38:23:b9:6d:8a:c5:c3:c7:
81:33:28:76:d2:e1:c1:57:ac:8c:7c:2d:e0:2b:6f:c3:d2:65:
0c:07:34:0a:a9:92:14:13:e1:43:5c:6f:51:89:84:a2:42:46:
97:c2:20:16:5d:57:5f:3a:21:9c:98:f3:63:1f:aa:7f:3a:a2:
d5:0e:63:df:2b:cf:b1:7c:0a:89:2a:73:d2:1d:a0:24:7c:24:
43:27:01:ac:74:9e:ae:17:c4:25:9e:ce:6b:87:cb:e3:4a:1e:
43:8d:23:b5:34:e4:d7:5c:b5:4e:ff:40:e1:d4:36:d2:28:e6:
cc:39:ba:ca:e2:97:2d:08:e0:fc:71:11:4e:e6:ac:07:23:3f:
7c:f2:6c:f2:e4:de:86:c6:b5:af:e3:75:de:e8:2a:49:3a:da:
dc:13:f8:6a:cb:d9:e4:1c:b0:56:da:99:47:7a:0d:2c:a3:59:
57:aa:91:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:29 2026 by rpki-client