This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
File: BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft (raw, json)
Hash identifier: wbS4rYXDZdLhywzH2C2ATADzZC4KPv2XFQRL1iVFIks=
Subject key identifier: C0:8A:71:44:79:7E:B5:CA:10:16:DA:D7:AF:0D:DF:7E:91:D4:7C:2D
Authority key identifier: 05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
Certificate issuer: /CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Certificate serial: 019C42B483F3E9D43F033B00EBF9D27A3868
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
Manifest number: 1810
Signing time: Mon 09 Feb 2026 14:00:52 +0000
Manifest this update: Mon 09 Feb 2026 14:00:52 +0000
Manifest next update: Tue 10 Feb 2026 14:00:52 +0000
Files and hashes: 1: BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl (hash: XB+hflX0flxYz06e7Wes+PtDQ11yXMJKnYmAZ1NQqbc=)
2: p22i5NlXphpjpdeMcOJN9-jvrCA.roa (hash: QDB1Dxkmg+JHCcUldIxoeyJYQCEAZzbZFwoEItJyux4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:83:f3:e9:d4:3f:03:3b:00:eb:f9:d2:7a:38:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057407d2e7b2ff4bcee6ea10d40852ecdcbc69b8
Validity
Not Before: Feb 9 14:00:52 2026 GMT
Not After : Feb 10 14:00:52 2026 GMT
Subject: CN=c08a7144797eb5ca1016dad7af0ddf7e91d47c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:74:77:53:0d:e0:3c:fd:13:a8:1d:58:c0:
ea:70:a0:36:e1:a7:17:96:c4:97:78:fb:1d:9a:ae:
2c:d5:b0:90:09:f5:e5:52:ed:c5:12:58:06:33:98:
a3:6f:fa:c4:17:e6:9a:06:93:d6:10:9f:4a:c3:ec:
7f:34:b8:45:6b:6a:df:73:fa:73:34:5e:c4:cc:f0:
6c:7c:a2:60:c0:cc:96:91:7f:1d:6b:fb:14:97:62:
f2:c3:ee:45:a7:98:a5:f0:8a:b1:aa:f0:ff:61:d4:
72:4f:42:f3:2b:8b:ae:b1:9b:e4:ef:12:7c:23:1b:
85:98:be:0a:05:0f:51:f0:5b:da:75:e3:b2:a8:23:
3c:56:7b:da:50:a6:a0:29:c8:b3:7d:e0:04:51:c4:
d5:6d:41:da:b4:e1:ef:46:90:16:cc:dd:58:58:69:
09:ae:6b:3f:47:e3:19:67:f4:f7:22:b1:e3:51:53:
3a:8c:90:39:df:ed:13:48:0a:64:89:ef:7c:a8:45:
b1:80:59:a9:ae:f5:87:eb:c9:fd:a8:ca:7d:33:10:
d7:b4:4d:5e:41:0c:7e:16:07:c7:6e:a9:00:f6:91:
1a:2e:17:15:d2:45:0a:b5:0a:e7:d5:c7:0e:1a:d5:
39:be:5d:48:a3:cf:ea:55:2d:3d:fa:33:ea:4f:4a:
f9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8A:71:44:79:7E:B5:CA:10:16:DA:D7:AF:0D:DF:7E:91:D4:7C:2D
X509v3 Authority Key Identifier:
keyid:05:74:07:D2:E7:B2:FF:4B:CE:E6:EA:10:D4:08:52:EC:DC:BC:69:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXQH0uey_0vO5uoQ1AhS7Ny8abg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/929f1b-b047-48bf-a8f1-1bed2ee065f0/1/BXQH0uey_0vO5uoQ1AhS7Ny8abg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:3c:4c:a4:db:fd:ca:25:6e:6a:0c:6d:f1:4f:b8:17:11:fc:
aa:57:2d:7b:d3:8e:f2:24:0e:37:34:fc:13:dc:de:86:0b:1d:
e3:33:9f:4d:78:35:3d:33:9b:e3:df:5d:2b:ab:ab:46:0a:5a:
55:cd:74:e5:b4:50:61:8c:a2:aa:92:cc:69:83:f6:a9:74:eb:
16:54:b4:fc:66:ad:97:06:bc:4b:28:41:56:c4:d4:60:67:92:
f7:03:96:57:d0:aa:fd:db:8d:76:5b:7e:ab:f8:ca:04:37:90:
c5:f5:1a:ac:2b:66:5a:ca:39:c2:5d:1b:cd:61:14:06:3f:c5:
87:f9:d3:91:89:ff:e3:ba:56:45:d1:ab:d0:85:e6:3a:41:3a:
72:27:8a:58:3e:60:bc:de:1f:93:1a:36:ac:7e:2f:ca:e9:6e:
e2:3d:4f:59:82:20:4a:ae:e4:16:e3:97:ab:f0:05:65:3a:c4:
8a:df:c2:a8:96:e0:58:18:b2:20:e3:d2:a3:33:0b:fe:84:99:
01:62:25:3e:a8:9c:16:c7:29:a7:7c:9c:4b:19:a8:df:72:b2:
0e:86:a0:0f:c2:88:cd:08:84:49:36:cc:52:d2:5c:9e:ec:05:
c9:d0:68:27:64:11:93:34:5a:80:5d:1f:e9:4d:fb:f8:05:98:
65:1d:a0:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:07:10 2026 by rpki-client