This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
File: BQNlyK9IgTpbq5ft41VTnxFHTcc.mft (raw, json)
Hash identifier: SloKrbuCjBuKRpjJVknEKCRUnRX7Ir1fI5E8+a9N6pU=
Subject key identifier: B9:17:30:5A:CE:63:53:B3:D6:59:18:2B:B4:C1:D7:E1:73:48:09:78
Authority key identifier: 05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
Certificate issuer: /CN=050365c8af48813a5bab97ede355539f11474dc7
Certificate serial: 019C427DB15B0DD444155AC43FB3731ADE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 13:00:59 +0000
Manifest this update: Mon 09 Feb 2026 13:00:59 +0000
Manifest next update: Tue 10 Feb 2026 13:00:59 +0000
Files and hashes: 1: BQNlyK9IgTpbq5ft41VTnxFHTcc.crl (hash: GxqDlBEswmaCa3Is7xsI8S+ceGfDHxeCE2CAzroDrl0=)
2: cnybTQdw-1JzZEmKBwChzF9nwdA.roa (hash: mUaYCEj2VPDWjtCv1k3iVXZhYm/cAKjBAxkBrbEbBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:b1:5b:0d:d4:44:15:5a:c4:3f:b3:73:1a:de:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=050365c8af48813a5bab97ede355539f11474dc7
Validity
Not Before: Feb 9 13:00:59 2026 GMT
Not After : Feb 10 13:00:59 2026 GMT
Subject: CN=b917305ace6353b3d659182bb4c1d7e173480978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f2:e6:41:55:ce:fb:03:50:ee:18:4e:d5:11:
2f:87:28:2c:90:50:f4:14:67:5a:bd:cd:86:fd:5c:
63:03:43:df:c5:2b:82:69:5a:b8:ba:c2:6f:e8:2e:
05:4f:88:75:cf:b5:93:61:57:55:8a:3a:f4:60:64:
db:3b:5d:ef:ff:f8:a9:84:9c:47:ba:de:b2:a3:93:
7d:4d:c0:45:f8:d7:ca:2f:f2:ac:03:a8:9b:9e:7a:
88:7d:00:70:61:3b:e3:03:1d:e5:af:ed:4d:b1:5b:
52:2f:87:8d:e4:54:1e:19:6b:b4:22:6c:43:1f:42:
56:34:7c:7e:77:53:87:cb:fd:5e:73:f7:2b:e6:95:
af:c9:2b:48:4f:5f:91:87:fc:a8:f0:8d:83:f6:50:
32:60:fd:a0:9f:d4:dd:64:c2:39:41:25:d0:e9:36:
91:c7:2a:27:c9:4d:ac:a9:0e:e1:2f:3c:9e:3a:ba:
00:25:2b:24:af:ae:2b:c6:68:9f:56:b2:48:8d:57:
9a:84:1a:73:93:7f:50:63:a7:8e:ba:fa:ab:a8:93:
ff:d3:e5:9e:f1:12:bf:76:db:17:3b:3d:d7:21:0e:
82:6a:0b:52:b7:fa:03:3e:15:00:68:65:4d:c0:64:
ee:71:57:90:e9:73:5d:45:c0:a7:85:c8:90:b7:50:
70:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:17:30:5A:CE:63:53:B3:D6:59:18:2B:B4:C1:D7:E1:73:48:09:78
X509v3 Authority Key Identifier:
keyid:05:03:65:C8:AF:48:81:3A:5B:AB:97:ED:E3:55:53:9F:11:47:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BQNlyK9IgTpbq5ft41VTnxFHTcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ae1f3a-65a8-4794-91c8-a5879b69f126/1/BQNlyK9IgTpbq5ft41VTnxFHTcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e8:43:8a:76:19:f8:7a:3c:24:a8:e4:48:ce:bd:ab:d7:96:
76:99:95:5a:23:89:20:45:26:48:ef:47:e2:4d:e7:16:1e:72:
4c:1f:3b:07:d7:bf:a9:f2:7e:a7:8a:dd:49:d9:55:7b:8c:4e:
0a:7e:3c:42:0d:2a:00:92:8a:a2:1b:b2:c3:7e:5e:97:45:44:
b3:d4:dd:20:36:58:57:1c:ae:45:cf:80:4d:ff:4a:97:1b:e3:
4e:88:27:72:2c:1e:7b:bb:6c:f8:6a:91:f1:6d:cc:85:bd:21:
d7:0e:16:5d:06:f6:54:09:99:5c:33:0b:16:a4:fd:a4:b8:78:
1e:cc:a5:86:59:6e:c7:ea:ee:b7:57:51:e6:84:bb:2d:6e:f7:
42:fa:ca:73:09:3f:43:4e:ca:6c:67:26:1e:ab:83:10:86:cd:
cd:8a:11:40:ec:32:1d:d2:a2:7f:f0:46:f8:f8:14:18:1c:40:
26:26:a3:27:4d:93:06:47:5e:a4:5e:14:c0:76:53:89:6e:6e:
2b:13:95:ed:f3:fc:19:8b:4f:a7:f3:b4:6c:cd:c4:b8:81:35:
9b:18:68:31:dc:3f:25:1c:79:a8:c7:62:bf:07:ad:cc:74:e6:
77:ba:65:42:42:ac:96:32:6a:32:08:3b:a6:4d:69:9c:37:bd:
03:7c:fb:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCfbFbDdREFVrEP7NzGt5RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MDM2NWM4YWY0ODgxM2E1YmFiOTdlZGUzNTU1MzlmMTE0
NzRkYzcwHhcNMjYwMjA5MTMwMDU5WhcNMjYwMjEwMTMwMDU5WjAzMTEwLwYDVQQD
EyhiOTE3MzA1YWNlNjM1M2IzZDY1OTE4MmJiNGMxZDdlMTczNDgwOTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfLmQVXO+wNQ7hhO1REvhygskFD0
FGdavc2G/VxjA0PfxSuCaVq4usJv6C4FT4h1z7WTYVdVijr0YGTbO13v//iphJxH
ut6yo5N9TcBF+NfKL/KsA6ibnnqIfQBwYTvjAx3lr+1NsVtSL4eN5FQeGWu0ImxD
H0JWNHx+d1OHy/1ec/cr5pWvyStIT1+Rh/yo8I2D9lAyYP2gn9TdZMI5QSXQ6TaR
xyonyU2sqQ7hLzyeOroAJSskr64rxmifVrJIjVeahBpzk39QY6eOuvqrqJP/0+We
8RK/dtsXOz3XIQ6CagtSt/oDPhUAaGVNwGTucVeQ6XNdRcCnhciQt1BwaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLkXMFrOY1Oz1lkYK7TB1+FzSAl4MB8GA1UdIwQY
MBaAFAUDZcivSIE6W6uX7eNVU58RR03HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9hZTFmM2EtNjVhOC00Nzk0LTkxYzgt
YTU4NzliNjlmMTI2LzEvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9hZTFmM2EtNjVhOC00Nzk0LTkxYzgtYTU4NzliNjlmMTI2
LzEvQlFObHlLOUlnVHBicTVmdDQxVlRueEZIVGNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGOhDinYZ
+Ho8JKjkSM69q9eWdpmVWiOJIEUmSO9H4k3nFh5yTB87B9e/qfJ+p4rdSdlVe4xO
Cn48Qg0qAJKKohuyw35el0VEs9TdIDZYVxyuRc+ATf9KlxvjTognciwee7ts+GqR
8W3Mhb0h1w4WXQb2VAmZXDMLFqT9pLh4Hsylhllux+rut1dR5oS7LW73QvrKcwk/
Q07KbGcmHquDEIbNzYoRQOwyHdKif/BG+PgUGBxAJiajJ02TBkdepF4UwHZTiW5u
KxOV7fP8GYtPp/O0bM3EuIE1mxhoMdw/JRx5qMdivwetzHTmd7plQkKsljJqMgg7
pk1pnDe9A3z7Tw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:21 2026 by rpki-client