This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
File: bmgcJW1nKYHLOc4lynjPIVz06qY.mft (raw, json)
Hash identifier: wqmot9jN5eprmFBtjqhZwialWtnKibzhJkRi2a05S+I=
Subject key identifier: AF:25:73:9B:83:8B:10:74:3D:98:18:CE:94:50:9A:51:AA:BF:BC:D0
Authority key identifier: 6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
Certificate issuer: /CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Certificate serial: 019C420F4693B91BB8F6F0600516203F0475
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 11:00:23 +0000
Manifest this update: Mon 09 Feb 2026 11:00:23 +0000
Manifest next update: Tue 10 Feb 2026 11:00:23 +0000
Files and hashes: 1: YZsSqZ83PZHqITH4YFpFHp-CbNM.roa (hash: QbeDQPWAdsSWd1GvVVV8Ck8/JfIxsYeUNlUaYQgvu98=)
2: bmgcJW1nKYHLOc4lynjPIVz06qY.crl (hash: sEpI6WjZWi5XoUGpNQKawfV8OlVWQSynXJXMZ2GS6Ks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:46:93:b9:1b:b8:f6:f0:60:05:16:20:3f:04:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e681c256d672981cb39ce25ca78cf215cf4eaa6
Validity
Not Before: Feb 9 11:00:23 2026 GMT
Not After : Feb 10 11:00:23 2026 GMT
Subject: CN=af25739b838b10743d9818ce94509a51aabfbcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:64:dd:8b:da:09:f6:c5:a7:a6:e0:83:77:f2:
60:5a:1e:02:20:7a:48:9a:dd:5d:f7:ea:bb:27:dc:
58:d1:32:50:6d:cc:4a:ed:f5:9f:ca:11:86:9e:3c:
5a:ba:e1:65:65:7b:1d:7c:e4:38:3b:66:ca:1a:ab:
76:90:5e:65:2c:24:43:ab:f4:3c:59:5d:d9:d2:1f:
83:f7:db:e5:c2:19:2c:76:7b:0b:0e:29:95:d4:4e:
07:a3:bf:9d:99:e1:a2:82:81:64:03:9c:8f:3d:12:
ae:68:45:d0:e9:e2:2e:db:86:40:a8:b6:ee:d6:1d:
1b:4c:0c:d0:b1:80:ce:cd:d3:b8:3c:44:ed:8a:ed:
ae:f5:9d:fd:dc:98:23:19:72:d2:ac:57:1c:60:a4:
78:88:51:f7:54:83:cb:75:93:53:b3:f5:ff:ec:d4:
7b:09:c4:b7:7f:f7:29:43:fd:e8:e8:7c:8e:5d:35:
3e:5e:74:75:49:c9:d3:db:40:35:12:9b:52:be:a8:
0f:a6:21:5d:55:1e:5a:20:e5:4d:ca:5f:41:8f:b5:
4b:31:66:95:50:58:9e:a0:2d:fc:f8:c7:f6:c5:22:
ac:17:a4:f5:76:90:e6:50:45:22:e9:28:21:b7:c1:
e8:40:69:cc:e1:a2:be:c7:69:49:f4:86:78:85:47:
77:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:25:73:9B:83:8B:10:74:3D:98:18:CE:94:50:9A:51:AA:BF:BC:D0
X509v3 Authority Key Identifier:
keyid:6E:68:1C:25:6D:67:29:81:CB:39:CE:25:CA:78:CF:21:5C:F4:EA:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmgcJW1nKYHLOc4lynjPIVz06qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/49e49a-987e-4741-aba9-37a50cdfae07/1/bmgcJW1nKYHLOc4lynjPIVz06qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d9:e4:5a:63:aa:0a:3b:62:0d:44:e3:2b:97:3c:8d:63:3d:
86:b2:5e:6c:5b:39:93:35:99:7e:89:f4:21:71:54:60:31:f0:
58:5c:a6:80:e0:63:80:4c:8a:e0:7e:18:86:db:85:43:12:c8:
ad:87:f0:bf:eb:1a:37:19:4c:6b:b6:c4:54:6f:74:0f:28:b2:
9c:7b:04:07:85:ee:08:84:9c:39:cb:e8:8d:29:63:92:4b:0a:
eb:d9:8c:e6:d5:26:58:80:67:58:a5:17:8d:85:b2:cf:43:71:
14:76:3b:5e:86:14:0b:c0:fc:d8:a2:e0:88:8d:91:38:6e:75:
d1:b5:ca:80:ea:91:c0:9b:e7:51:1e:30:15:93:54:c4:4d:76:
93:8a:b3:4f:ed:b7:f7:67:d0:22:32:18:11:37:49:89:68:57:
7b:89:03:34:2a:34:58:63:03:02:a9:69:48:96:e5:dd:f4:91:
e5:b6:59:fd:d1:1a:45:91:90:4a:db:7b:62:55:9a:76:e9:0f:
cd:7c:f7:d6:a5:fc:d9:d0:62:1d:e9:2a:ee:85:19:d7:d8:a5:
e1:bc:69:ac:b9:13:7d:b9:e2:3b:21:0d:be:6a:7e:bf:52:9c:
a0:34:5b:26:58:28:ff:1c:ba:f6:94:83:5f:29:a3:28:66:d3:
44:b0:dc:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCD0aTuRu49vBgBRYgPwR1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlNjgxYzI1NmQ2NzI5ODFjYjM5Y2UyNWNhNzhjZjIxNWNm
NGVhYTYwHhcNMjYwMjA5MTEwMDIzWhcNMjYwMjEwMTEwMDIzWjAzMTEwLwYDVQQD
EyhhZjI1NzM5YjgzOGIxMDc0M2Q5ODE4Y2U5NDUwOWE1MWFhYmZiY2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmTdi9oJ9sWnpuCDd/JgWh4CIHpI
mt1d9+q7J9xY0TJQbcxK7fWfyhGGnjxauuFlZXsdfOQ4O2bKGqt2kF5lLCRDq/Q8
WV3Z0h+D99vlwhksdnsLDimV1E4Ho7+dmeGigoFkA5yPPRKuaEXQ6eIu24ZAqLbu
1h0bTAzQsYDOzdO4PETtiu2u9Z393JgjGXLSrFccYKR4iFH3VIPLdZNTs/X/7NR7
CcS3f/cpQ/3o6HyOXTU+XnR1ScnT20A1EptSvqgPpiFdVR5aIOVNyl9Bj7VLMWaV
UFieoC38+Mf2xSKsF6T1dpDmUEUi6Sght8HoQGnM4aK+x2lJ9IZ4hUd3dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK8lc5uDixB0PZgYzpRQmlGqv7zQMB8GA1UdIwQY
MBaAFG5oHCVtZymByznOJcp4zyFc9OqmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC80OWU0OWEtOTg3ZS00NzQxLWFiYTkt
MzdhNTBjZGZhZTA3LzEvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC80OWU0OWEtOTg3ZS00NzQxLWFiYTktMzdhNTBjZGZhZTA3
LzEvYm1nY0pXMW5LWUhMT2M0bHlualBJVnowNnFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgdnkWmOq
CjtiDUTjK5c8jWM9hrJebFs5kzWZfon0IXFUYDHwWFymgOBjgEyK4H4YhtuFQxLI
rYfwv+saNxlMa7bEVG90DyiynHsEB4XuCIScOcvojSljkksK69mM5tUmWIBnWKUX
jYWyz0NxFHY7XoYUC8D82KLgiI2ROG510bXKgOqRwJvnUR4wFZNUxE12k4qzT+23
92fQIjIYETdJiWhXe4kDNCo0WGMDAqlpSJbl3fSR5bZZ/dEaRZGQStt7YlWadukP
zXz31qX82dBiHekq7oUZ19il4bxprLkTfbniOyENvmp+v1KcoDRbJlgo/xy69pSD
XymjKGbTRLDcrQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:57:50 2026 by rpki-client