This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
File: boMQZuqP4gsGehNgBrevkGYzhDs.mft (raw, json)
Hash identifier: bpxzPFsgKQXCakxjcpDikAXEJUHXopitHakLfvPfzoI=
Subject key identifier: B8:5A:11:D3:C1:C2:2C:34:C3:89:45:04:18:10:25:C5:C8:1C:94:DD
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 019C43906DBDD83F1AD3C1A68D4C63325053
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
Manifest number: 1813
Signing time: Mon 09 Feb 2026 18:01:04 +0000
Manifest this update: Mon 09 Feb 2026 18:01:04 +0000
Manifest next update: Tue 10 Feb 2026 18:01:04 +0000
Files and hashes: 1: KmFH08iC5J-95oBTnRmMORdBhYQ.roa (hash: jxzbdMpWjw66b8Fw1Ba2LpATegGadHxvfHdlKL67I8A=)
2: boMQZuqP4gsGehNgBrevkGYzhDs.crl (hash: 07Cfs71RGq46ti5y2q1ZRhGW1RAOfbYolwdiW6nC8Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:90:6d:bd:d8:3f:1a:d3:c1:a6:8d:4c:63:32:50:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Feb 9 18:01:04 2026 GMT
Not After : Feb 10 18:01:04 2026 GMT
Subject: CN=b85a11d3c1c22c34c3894504181025c5c81c94dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:c3:20:e1:88:c1:89:e1:4c:e1:93:3a:02:
ec:06:13:3e:68:f6:73:dc:7a:d5:f0:f0:1e:a0:7f:
26:46:68:cd:6a:89:c6:d0:8e:31:d3:fb:b5:74:f1:
af:fc:2f:2e:2d:1b:a7:71:da:98:b1:56:20:42:e3:
d6:b1:7f:97:17:f3:e4:a0:3c:dd:e4:87:78:ca:1b:
a3:0a:63:2b:8d:dc:75:9d:06:24:06:29:2f:53:b4:
22:4b:f3:4f:cf:ce:d8:14:fb:84:3f:e6:6f:00:c5:
a1:7e:a2:c8:19:f6:c6:14:cf:eb:aa:85:7a:65:ad:
13:c0:bb:b7:7e:86:4c:4d:6d:a4:33:1b:29:73:39:
de:b9:25:06:db:23:d2:bf:bf:ec:85:16:82:f4:e1:
ac:0d:20:2a:d3:5d:55:cc:48:41:0c:43:23:b1:94:
39:69:1c:3d:2c:c1:0e:9e:86:c1:5e:6e:6c:4c:b2:
c0:40:bc:b2:1c:b0:cd:be:34:6f:15:19:70:b1:db:
5c:3c:9a:ac:7a:9f:e7:a6:ce:b5:c4:b1:16:40:18:
03:dc:bb:f3:f7:d8:7a:00:a2:2d:c2:84:25:2d:71:
78:ef:e8:c9:22:44:35:2f:df:32:f7:91:41:c1:53:
86:7e:d8:6b:b5:35:88:98:b3:7d:a9:f1:5a:32:19:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5A:11:D3:C1:C2:2C:34:C3:89:45:04:18:10:25:C5:C8:1C:94:DD
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:ce:36:4d:5b:9e:61:84:31:43:4b:31:8a:40:6b:4c:9b:a1:
cf:72:cb:4e:a9:ea:6c:5c:ef:fd:90:18:d6:89:fc:e1:ef:bb:
0c:26:32:14:43:3a:bd:9e:0e:03:ee:3a:fb:a1:8d:8d:3c:49:
c0:dd:5d:1e:08:34:c5:3f:22:d2:a9:3d:8e:31:cb:27:74:bf:
9f:87:8c:31:f3:7e:af:91:8f:18:11:89:31:82:3c:d4:e9:87:
8f:dd:a7:15:1d:21:af:e6:ac:1f:7e:dc:f6:17:ac:84:04:e0:
9b:04:6b:7d:19:68:cd:dd:05:35:de:d6:a4:ae:08:67:8b:64:
ce:6c:a9:97:7c:0a:14:67:9f:84:4b:4e:53:bc:f0:e4:81:26:
a3:01:12:0e:79:62:12:f1:d7:0d:35:ac:bd:56:d5:62:49:6a:
22:b4:63:5b:00:77:c2:69:9e:c8:0b:9a:a5:10:5e:67:82:71:
87:76:54:29:6c:47:37:e4:1a:0f:7f:bd:d9:d2:74:0d:e7:a7:
47:2c:96:06:80:ce:34:16:bc:fe:00:12:a9:85:d2:c5:a2:00:
ec:ef:af:3c:84:fd:46:2b:00:7f:c8:72:88:9a:0f:bc:09:a0:
79:8f:b7:b9:c7:a1:41:96:f6:7a:9e:74:05:28:bd:15:39:bd:
fa:b7:45:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:10:31 2026 by rpki-client