This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
File: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft (raw, json)
Hash identifier: Vu+WRVWiisGJNrdqr3t7t/OyXaWEsr3/zFQSj82Icac=
Subject key identifier: 34:B0:43:B3:D5:C1:E2:F0:95:B0:06:F1:60:F4:AF:9B:CD:70:35:DA
Authority key identifier: 6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
Certificate issuer: /CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Certificate serial: 019C41D8D4F78D1B034268F4B1842D1CA9AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
Manifest number: 0B54
Signing time: Mon 09 Feb 2026 10:00:55 +0000
Manifest this update: Mon 09 Feb 2026 10:00:55 +0000
Manifest next update: Tue 10 Feb 2026 10:00:55 +0000
Files and hashes: 1: bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl (hash: oHZAbwRLrfWNarc0z1rkVO2Uece8Su7i+FWmvjGoOtU=)
2: u2DoRyUakqrjwSyZA3BmkWIxCdY.roa (hash: ysQW56gBC1VncDg2ReMXXp9OOHCKYs21ZfB3qLDw5IY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:d8:d4:f7:8d:1b:03:42:68:f4:b1:84:2d:1c:a9:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f060474088606ec4ee8eed7c41b6943f89a09bd
Validity
Not Before: Feb 9 10:00:55 2026 GMT
Not After : Feb 10 10:00:55 2026 GMT
Subject: CN=34b043b3d5c1e2f095b006f160f4af9bcd7035da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:79:a8:0c:cf:0e:83:e0:82:ed:8e:5a:cb:10:
14:e3:38:0c:d2:17:2d:2d:5d:ec:45:29:f5:e5:58:
ed:56:db:3d:5c:f6:91:ae:ac:fd:4c:0f:16:38:9f:
f0:d4:01:f7:82:6e:3b:d0:a0:15:e1:dc:72:47:61:
5d:4c:60:50:f8:dc:61:d1:60:48:e6:a6:2f:8a:0e:
4d:ff:6b:de:64:cd:36:d6:c6:af:d9:90:7b:0d:51:
a7:49:e4:1d:bd:de:1f:a1:e9:76:f9:d8:e9:e6:04:
3a:87:9d:ff:de:f5:a5:79:e3:b5:da:14:82:77:04:
fd:65:9c:c5:50:2b:bb:99:40:7e:4b:d9:fe:47:5c:
ea:02:c4:b8:34:56:f1:d5:13:47:38:ff:34:18:93:
97:68:18:4e:8e:93:aa:af:e9:c5:b8:2c:61:21:c0:
d1:f7:57:1b:97:e8:db:82:c1:ae:9b:9d:14:2d:a1:
e5:e8:18:78:62:7e:7d:96:44:26:f4:55:66:a8:8a:
f0:3a:de:c3:58:da:58:76:25:cd:ee:41:31:8e:12:
1c:8a:57:8b:7f:5d:a8:72:76:88:75:ca:e7:4b:8d:
6f:79:03:f7:32:98:1e:48:2c:13:64:3a:59:1a:26:
cc:56:ce:b0:8b:34:bc:45:6d:06:a4:de:f2:2a:4b:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B0:43:B3:D5:C1:E2:F0:95:B0:06:F1:60:F4:AF:9B:CD:70:35:DA
X509v3 Authority Key Identifier:
keyid:6F:06:04:74:08:86:06:EC:4E:E8:EE:D7:C4:1B:69:43:F8:9A:09:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2bfa6b-baa8-4c8c-9bc6-7aa6eb012190/1/bwYEdAiGBuxO6O7XxBtpQ_iaCb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:4c:f9:4e:8f:1d:d4:d9:4b:b0:4d:fe:79:4d:59:dc:37:3d:
15:aa:6b:1a:57:c8:93:7c:e5:7c:0b:e0:bc:c2:bd:4d:53:15:
e2:26:1d:5b:aa:3d:2a:03:68:74:50:d2:04:28:3c:8e:fb:b6:
b6:f7:b9:d4:0a:9b:1c:04:0e:63:9c:7b:fc:69:1d:7e:e0:48:
82:18:b2:ce:36:8e:41:81:c5:a8:55:b2:b1:4d:09:db:15:a8:
67:25:f4:0e:f1:a1:4c:53:ed:98:3d:f6:e3:c8:a2:cf:89:ce:
79:d7:79:34:5c:ea:ac:08:2a:4c:bf:2b:32:03:31:6d:d7:5f:
78:08:93:5d:f7:27:7a:14:f4:bf:c8:b1:a5:c4:c2:00:c0:1a:
e8:ac:dd:04:8c:95:4d:ef:63:54:fa:41:df:f7:28:dd:84:73:
af:11:99:18:df:0c:35:40:dc:43:5b:fe:d4:37:f7:a3:d4:33:
2a:dd:69:96:93:ad:1e:e9:e8:51:fc:3b:a8:3a:c3:35:99:98:
80:b8:ea:48:65:01:26:d6:a2:6b:2c:9a:e6:c1:09:ce:ae:64:
9c:75:8c:e9:4c:7d:95:12:86:d3:2f:96:84:d4:58:9c:c4:75:
e4:97:2c:bd:3a:5b:ef:68:59:84:1c:ad:83:b2:5f:9f:73:ba:
15:1c:eb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:31 2026 by rpki-client