This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
File: BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft (raw, json)
Hash identifier: HMBNTiL7Vez7OIBTNN7C3g52scZRtiYS3Ua8rH+0P1o=
Subject key identifier: 3E:29:5F:AC:57:0E:D0:66:04:62:C4:A5:AA:0E:E6:3D:B8:8B:0F:80
Authority key identifier: 04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
Certificate issuer: /CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Certificate serial: 019C438FF123437EECED59489876B71E4C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 18:00:32 +0000
Manifest this update: Mon 09 Feb 2026 18:00:32 +0000
Manifest next update: Tue 10 Feb 2026 18:00:32 +0000
Files and hashes: 1: 0k6yeX0L5XdNUvHFP70s6xMMn5M.roa (hash: WcJmVDT/EJf9CPgLP7/H/uUbqnwpeSXGEJKY3KaRY/o=)
2: BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl (hash: eozKXhIpj0hWVsQP4BAS6WF4pHnhMUyNSKbbjLaPjb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:f1:23:43:7e:ec:ed:59:48:98:76:b7:1e:4c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04eee3f09abeb6a434e9905cbc0b000044e79de7
Validity
Not Before: Feb 9 18:00:32 2026 GMT
Not After : Feb 10 18:00:32 2026 GMT
Subject: CN=3e295fac570ed0660462c4a5aa0ee63db88b0f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:36:d6:b2:c0:cc:5f:ab:3c:64:6b:97:b6:0a:
73:e3:38:21:46:0d:0c:0b:41:9b:9e:63:ab:30:ea:
7d:76:89:12:de:9b:34:db:a9:62:79:f3:35:91:e9:
a8:1c:7d:35:9a:06:31:1e:f4:44:f0:11:90:30:3a:
de:1b:96:94:66:3b:e8:e8:92:70:cf:f9:36:11:e7:
68:12:25:ff:2b:70:3b:4f:3c:8c:37:c3:af:9b:dc:
95:87:c7:17:11:c8:c4:92:0a:84:89:92:f1:2d:98:
62:0d:37:b5:e8:d1:57:cc:95:db:73:9d:cb:0b:a9:
b6:f3:90:b9:38:7e:a8:be:ad:01:6a:ff:3a:d0:ce:
71:5b:46:88:7c:e1:02:f7:4d:a2:00:f2:06:04:6d:
6f:34:d6:04:6d:84:2f:92:b3:38:27:69:62:89:a3:
18:8b:33:98:6e:e4:f4:0d:9b:4e:11:4d:b8:6e:9f:
a7:4c:bc:4f:bb:e0:a1:0f:af:8a:11:2f:fb:ae:2b:
7d:2b:12:0f:bd:e9:76:c3:02:3b:d2:67:3b:83:6f:
0c:7b:66:c6:38:82:b1:2f:a8:78:6f:22:d6:72:7d:
7c:4f:22:9b:50:ef:02:e5:40:0f:ad:df:46:7d:d7:
d7:76:02:70:fa:67:08:42:b5:44:5f:f4:2e:d1:2e:
66:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:29:5F:AC:57:0E:D0:66:04:62:C4:A5:AA:0E:E6:3D:B8:8B:0F:80
X509v3 Authority Key Identifier:
keyid:04:EE:E3:F0:9A:BE:B6:A4:34:E9:90:5C:BC:0B:00:00:44:E7:9D:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BO7j8Jq-tqQ06ZBcvAsAAETnnec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4c2835-ba72-41ea-bbd5-4813d85502d7/1/BO7j8Jq-tqQ06ZBcvAsAAETnnec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:88:cc:b8:ad:48:a0:cf:ca:12:1f:0e:ca:c0:dd:6c:29:a8:
82:b2:b4:01:10:83:4b:78:83:b4:f7:25:b6:0c:75:06:62:47:
af:73:b3:80:cb:94:1f:66:3b:2e:eb:f1:fe:6c:95:8a:bd:f0:
cf:c7:7e:54:45:62:64:c5:5d:5e:89:7a:f4:51:ad:c2:e9:8c:
6e:9b:4f:67:5a:a1:9a:c4:f8:f3:85:12:b1:6f:6c:a2:b9:21:
4e:c9:b1:32:6c:a3:d4:92:73:2c:5e:fa:2b:6b:66:1a:6a:4b:
9b:9d:2e:1c:1f:4a:d9:1e:05:ea:d3:af:31:fa:b0:53:f1:50:
3a:95:13:55:5f:6d:9f:db:0d:c1:0f:9c:8e:bf:7f:1e:78:21:
5c:29:67:5b:f2:da:67:09:21:2d:9a:a5:16:b9:f8:cb:ed:db:
8f:e4:11:00:cd:7b:2f:73:82:5d:c3:69:48:3a:c0:db:e4:83:
7e:68:79:eb:a4:20:0e:83:67:55:fc:6d:c9:f9:c1:51:b2:39:
ad:a3:ba:0e:ba:09:a2:c7:90:22:90:b4:2e:26:46:b2:f1:ee:
3c:33:39:82:0f:63:dc:f2:75:00:af:d1:35:84:94:f2:f1:6a:
02:2c:74:ae:f7:eb:95:04:a5:3d:8e:47:db:72:42:e6:54:45:
27:c2:21:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:29 2026 by rpki-client