This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
File: brmgpz47pWk4Hd2m1kcNx8hzyVk.mft (raw, json)
Hash identifier: iwFRfQhDqrIHxpgdU0nSrCBPYDURWAW3f2SHMTywIZA=
Subject key identifier: 20:BC:42:1F:8C:09:EB:5D:8E:97:EC:29:99:43:87:23:BC:2C:D6:F4
Authority key identifier: 6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
Certificate issuer: /CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Certificate serial: 019C421021339C12D6EFBACFD34677BEA670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 11:01:19 +0000
Manifest this update: Mon 09 Feb 2026 11:01:19 +0000
Manifest next update: Tue 10 Feb 2026 11:01:19 +0000
Files and hashes: 1: Pwvl_Zcat1KTzpuXYTtavIgP748.roa (hash: iLZ+jEw20ZEVrfeL0bdjMhqCq56ZpvLuivOan0qgqsE=)
2: brmgpz47pWk4Hd2m1kcNx8hzyVk.crl (hash: hEJuXKGgsZKL4VCHtC3C7AAhVac2k8sEhGRmqE7zZ+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:21:33:9c:12:d6:ef:ba:cf:d3:46:77:be:a6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eb9a0a73e3ba569381ddda6d6470dc7c873c959
Validity
Not Before: Feb 9 11:01:19 2026 GMT
Not After : Feb 10 11:01:19 2026 GMT
Subject: CN=20bc421f8c09eb5d8e97ec2999438723bc2cd6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:43:8f:2b:58:5b:d3:9a:00:a4:be:ec:27:9f:
88:30:52:b1:a7:80:ee:b0:0c:5a:09:54:bb:80:62:
2a:e6:a2:b1:46:9a:9d:8b:6b:cc:f7:fe:6b:67:3e:
2f:b2:d7:b2:16:48:c1:1a:1c:50:70:29:af:4f:ad:
6e:8d:3c:31:1e:6b:00:71:c8:ed:8b:65:23:96:d1:
ac:a3:b0:29:33:2c:1a:eb:43:68:2a:03:e6:c8:a8:
c5:14:c1:6c:67:8c:ac:44:ae:3c:46:03:c5:bc:59:
16:f0:03:fd:0f:42:c7:14:e1:60:5c:61:c0:12:64:
92:60:a2:e2:03:ce:88:1f:95:4a:13:d5:f7:86:2b:
b7:07:81:d7:0e:1e:d9:42:7c:fc:b5:81:c8:ee:c0:
96:38:52:06:86:81:be:da:74:ad:4e:34:44:41:de:
78:46:26:43:89:14:10:93:67:12:d8:b5:63:e5:86:
fe:48:10:18:77:f9:be:a7:14:a6:95:52:25:cf:6b:
97:03:18:23:05:88:42:93:de:a9:4a:8f:bb:5d:66:
06:40:2d:a0:8a:0c:a2:32:fb:52:e7:a3:13:24:cc:
6b:36:4e:99:d3:36:8a:eb:4a:70:27:1c:4d:46:ea:
9f:a1:63:8a:a6:4b:75:50:52:1a:68:52:8a:9e:9f:
3c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BC:42:1F:8C:09:EB:5D:8E:97:EC:29:99:43:87:23:BC:2C:D6:F4
X509v3 Authority Key Identifier:
keyid:6E:B9:A0:A7:3E:3B:A5:69:38:1D:DD:A6:D6:47:0D:C7:C8:73:C9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brmgpz47pWk4Hd2m1kcNx8hzyVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/caa68e-7a9e-4cae-8d2a-e90219bc8ff1/1/brmgpz47pWk4Hd2m1kcNx8hzyVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b6:78:d3:4b:88:96:fa:35:61:c4:6a:74:66:31:4a:55:06:
40:88:35:f9:1c:9f:47:81:1b:ae:44:75:54:17:6d:e5:65:5e:
d8:a6:86:3b:b9:15:ae:af:1c:b4:25:4c:ef:13:21:d0:a7:c3:
07:55:be:af:21:04:3a:6f:d0:4a:e7:2a:a0:c2:3e:1e:c8:ef:
e1:98:47:a7:8b:1c:9b:29:fe:21:fe:40:40:d2:0f:7d:bc:3f:
f5:9d:a2:b0:02:5d:e3:2e:88:64:5a:27:9a:a1:c7:a1:26:2d:
e7:c7:0a:0e:ba:b9:17:1e:18:82:37:64:dc:23:49:c0:3f:02:
07:c1:5d:b7:36:fa:db:c5:31:7e:31:77:8e:5c:38:d8:f8:ca:
82:e1:bc:da:37:7d:5c:eb:01:24:ce:19:0e:2a:5f:c6:be:9a:
0e:0b:e8:a4:e2:21:32:30:87:0d:ee:e0:a2:49:05:46:ec:d3:
e3:d0:d5:6c:d6:a4:a3:3a:6c:db:5f:3a:39:c3:0b:e7:7f:b2:
ba:6b:89:8c:b7:60:ad:a7:c7:9e:20:72:75:04:7a:db:81:6b:
a3:d8:49:f9:82:99:53:af:bf:b7:25:c1:be:cd:dc:16:77:de:
54:ad:d4:f6:fe:b1:08:63:07:a5:f7:d8:74:b6:19:83:f4:59:
f6:c7:65:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:54:04 2026 by rpki-client