This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
File: buuvFSM9mOuO8GLCRfkXNi5jJlY.mft (raw, json)
Hash identifier: UtXqp37uR16P9nxiLtZYbD4gX2LNFalM0NnLOwnhJDU=
Subject key identifier: 72:CF:86:A0:1F:EC:D8:6E:F4:D7:F6:38:CD:AC:EF:BB:02:76:DE:7C
Authority key identifier: 6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
Certificate issuer: /CN=6eebaf15233d98eb8ef062c245f917362e632656
Certificate serial: 019C427E2A0ADDAD0CB2CB2EA964ABF48EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
Manifest number: 1812
Signing time: Mon 09 Feb 2026 13:01:30 +0000
Manifest this update: Mon 09 Feb 2026 13:01:30 +0000
Manifest next update: Tue 10 Feb 2026 13:01:30 +0000
Files and hashes: 1: 7JIJlTfBX4PS77oE0Mx0OejSM24.roa (hash: fNa36vATsrsor3PYEeM7hTNfoNAesQKtpUagqEla5bc=)
2: buuvFSM9mOuO8GLCRfkXNi5jJlY.crl (hash: X2WuhL8YcQ0F5703FY16JXuPnI2b7iUxzRlvkLRj0pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7e:2a:0a:dd:ad:0c:b2:cb:2e:a9:64:ab:f4:8e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eebaf15233d98eb8ef062c245f917362e632656
Validity
Not Before: Feb 9 13:01:30 2026 GMT
Not After : Feb 10 13:01:30 2026 GMT
Subject: CN=72cf86a01fecd86ef4d7f638cdacefbb0276de7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:cd:29:9e:21:70:ae:a6:ce:23:3a:43:e0:
b2:a0:a7:63:6d:ec:e3:92:8b:d3:c8:ad:3e:dc:72:
87:2a:f8:cc:6c:29:53:c1:f2:57:c7:1d:5a:ca:96:
7c:74:45:3b:8a:85:46:c0:b1:22:c9:19:8b:34:21:
00:e0:f5:18:8a:87:b4:12:80:2f:88:a1:f2:0a:b8:
0e:5f:ac:7c:45:d4:29:e8:1d:2a:0b:9b:e5:91:f6:
6d:8f:9e:fd:0c:21:da:44:9d:05:2b:9b:e2:97:26:
99:3d:24:90:24:05:db:8a:be:8a:ad:88:c7:9b:8a:
fa:55:85:79:b7:4c:29:7e:07:63:75:0d:a8:b3:bc:
75:54:e6:1a:c8:1f:73:ae:f5:88:08:ee:fa:c5:41:
19:50:71:f7:43:54:8e:fd:57:71:88:87:5e:ec:57:
52:3d:31:0a:b6:71:91:d4:3c:be:1b:cb:18:eb:e5:
bd:bf:65:80:73:7b:1d:c4:9c:da:89:02:18:6c:20:
33:dd:4f:f1:d4:25:b9:4d:cf:d6:37:11:d4:e7:b4:
54:ac:26:52:11:bc:91:99:21:d5:24:87:e6:61:24:
39:a8:11:cf:b5:be:37:97:06:f7:fb:f3:3c:c3:cd:
7c:f8:80:ed:e7:71:58:d3:d2:91:71:d9:c2:0e:c8:
7f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CF:86:A0:1F:EC:D8:6E:F4:D7:F6:38:CD:AC:EF:BB:02:76:DE:7C
X509v3 Authority Key Identifier:
keyid:6E:EB:AF:15:23:3D:98:EB:8E:F0:62:C2:45:F9:17:36:2E:63:26:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/buuvFSM9mOuO8GLCRfkXNi5jJlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2713ed-cb32-407e-8628-0e467e51ba06/1/buuvFSM9mOuO8GLCRfkXNi5jJlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5c:a0:5a:a9:c8:8c:76:de:b0:a5:64:4b:6c:98:ae:87:c3:
b1:c2:e7:04:30:76:a8:80:99:13:8c:a1:d3:36:e6:b3:29:e1:
45:0a:16:0c:92:b6:f3:b2:28:db:f2:11:eb:b2:0f:58:47:fd:
00:5e:35:04:9f:04:77:84:53:5c:dc:6f:fa:19:b8:52:1b:94:
fa:ab:fa:3c:8f:41:bd:00:ce:27:60:f9:90:6b:f2:30:55:ea:
49:bd:a8:b8:ba:53:39:06:78:eb:57:99:81:85:80:a2:15:2e:
6d:07:f0:fc:d7:9b:38:72:e6:8a:21:2f:9d:ce:01:7d:99:33:
57:ac:0d:f1:47:c0:92:1c:78:df:68:1b:66:5a:43:e4:7e:77:
46:63:1c:61:8c:29:0d:56:8f:f1:58:4a:34:b9:8c:a1:5e:81:
26:5d:9c:d2:9a:b6:d5:e1:35:b3:fe:3a:f0:66:e7:5e:1f:dd:
88:39:02:5c:1b:ad:fc:c4:ce:29:28:a5:d0:e9:af:de:2a:c2:
22:58:b2:a6:f4:06:81:2e:61:1f:00:1f:a1:31:4c:ed:5a:22:
4e:3a:ae:4c:92:be:f3:ea:b7:f5:ce:57:c3:5f:6d:95:67:bf:
05:46:b9:07:51:4b:50:f4:36:37:59:a2:df:5f:0b:4b:4a:98:
26:ee:96:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:36 2026 by rpki-client