This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft
File: bW-CVvrIKqy2grohaoMDO1FFalI.mft (raw, json)
Hash identifier: BlG7P2/z+bADwYLHCUntImxQ4Rj+Vt1nT3Gzm3Cta5Q=
Subject key identifier: 04:81:C5:51:F9:D0:6A:04:62:AC:EB:E5:C7:D9:A9:D5:99:E3:B9:4D
Authority key identifier: 6D:6F:82:56:FA:C8:2A:AC:B6:82:BA:21:6A:83:03:3B:51:45:6A:52
Certificate issuer: /CN=6d6f8256fac82aacb682ba216a83033b51456a52
Certificate serial: 019C42EBA15221C1D3D72186856002CDF91A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft
Manifest number: 5D
Signing time: Mon 09 Feb 2026 15:01:04 +0000
Manifest this update: Mon 09 Feb 2026 15:01:04 +0000
Manifest next update: Tue 10 Feb 2026 15:01:04 +0000
Files and hashes: 1: YLdG9gSP6tOA5nRVAr6Czesuu7c.roa (hash: Esw0AP/etP1/+NNzQ2J+2kPKUVRATKNpi71gEgTw88k=)
2: bW-CVvrIKqy2grohaoMDO1FFalI.crl (hash: DGQhNeVCrhrGd2fXPwGW7Ev4Bz55t5MwwCHcRsR+P8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:a1:52:21:c1:d3:d7:21:86:85:60:02:cd:f9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d6f8256fac82aacb682ba216a83033b51456a52
Validity
Not Before: Feb 9 15:01:04 2026 GMT
Not After : Feb 10 15:01:04 2026 GMT
Subject: CN=0481c551f9d06a0462acebe5c7d9a9d599e3b94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:c9:b1:02:04:35:0a:d8:ae:49:10:79:cd:
0b:e1:55:1c:17:97:6f:da:58:17:0e:d6:db:5a:e1:
6f:47:88:e6:5e:cf:60:ce:ab:48:9c:15:2a:c5:e3:
6c:fa:02:c2:45:0e:48:5e:f3:a1:fe:e0:d6:a1:a5:
46:e8:2a:3d:ec:0d:f7:85:14:58:e0:f4:c2:16:68:
9f:7d:3b:1f:dc:bc:33:77:e0:5c:99:84:0f:a3:2c:
77:67:df:60:57:40:7e:be:4b:70:e8:5c:f5:9b:69:
2d:d9:3f:e2:b9:42:9c:96:ec:fb:14:6d:04:40:85:
84:a0:ee:c6:d4:98:2e:c6:45:91:6a:eb:ea:b1:e4:
c0:9c:45:3c:d4:10:6f:ca:c5:7b:88:00:49:46:14:
e6:fd:3c:98:93:56:7b:f3:c0:84:55:10:77:e8:99:
5b:47:8b:50:20:45:a1:7b:85:5b:9e:ea:8f:f6:79:
a7:7f:eb:b6:1c:22:8f:cf:9a:5f:cf:19:51:ec:98:
e2:d0:c8:d0:fd:16:a7:68:fa:df:17:ef:e4:30:ca:
71:56:8d:a9:ca:63:7d:cf:3d:cb:7f:ce:0a:b4:a4:
c0:7a:a8:91:78:a0:93:c1:a3:e8:5a:f2:5e:01:31:
3b:91:62:b0:e7:d9:2f:c5:f3:74:d9:89:d7:fb:36:
4a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:81:C5:51:F9:D0:6A:04:62:AC:EB:E5:C7:D9:A9:D5:99:E3:B9:4D
X509v3 Authority Key Identifier:
keyid:6D:6F:82:56:FA:C8:2A:AC:B6:82:BA:21:6A:83:03:3B:51:45:6A:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bW-CVvrIKqy2grohaoMDO1FFalI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9c0fb9-89d9-44b2-a730-3efa5edf3752/1/bW-CVvrIKqy2grohaoMDO1FFalI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f4:2c:92:96:00:0e:b8:de:28:29:99:76:d3:4d:a6:23:97:
e3:cd:68:a8:3b:8a:01:76:42:77:65:91:54:74:27:57:a8:d0:
68:fb:3f:ee:9d:3c:d8:50:8d:45:de:ee:b6:9f:0e:39:7a:29:
2f:89:72:34:0a:b6:df:ad:ea:a8:37:39:98:c3:50:57:a1:f7:
89:03:fb:4f:07:10:35:e3:79:4f:6d:93:3b:0a:c0:18:c3:b3:
d6:40:71:b3:84:82:af:7f:98:95:26:f4:59:6f:94:12:b5:8b:
19:0f:af:9c:9c:ed:5e:08:d8:69:be:1f:bc:bc:17:97:5f:33:
d8:c4:d6:2c:7d:df:54:8f:66:a0:ca:a9:48:c6:5c:3e:72:9e:
8f:83:e0:76:d7:23:9e:b1:28:3c:72:04:08:97:83:f5:58:10:
4c:e4:ef:39:66:b9:92:46:e1:b6:ad:4f:90:46:c9:b9:27:f2:
3f:fa:f2:bd:31:58:5b:f9:22:c0:ed:be:17:be:e8:e7:2d:c1:
3c:4b:0a:e2:36:55:1e:84:43:3e:d4:11:9f:3c:87:0c:aa:79:
25:a7:2e:f7:5d:84:bf:f7:b8:1c:19:26:9b:8f:e3:d0:d4:5d:
d5:b3:cf:e8:9a:fb:8d:f8:b1:ad:7a:8f:e5:5d:51:94:b4:96:
14:ad:b0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:22:26 2026 by rpki-client