This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File: bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier: udflp1sChtVJLeIgRTolxI6L1zwGUmdN4/sWd6TIrJg=
Subject key identifier: A0:4D:4B:74:C4:DB:06:2E:80:73:2A:62:B5:CE:2A:27:1D:59:D6:6D
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial: 019C42B40FE425397616F1CE40825A83A099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number: 180F
Signing time: Mon 09 Feb 2026 14:00:22 +0000
Manifest this update: Mon 09 Feb 2026 14:00:22 +0000
Manifest next update: Tue 10 Feb 2026 14:00:22 +0000
Files and hashes: 1: JfKoDtrhJ-i-G9aVy_3EyZTHhdQ.roa (hash: YvPO7VlYOdBTaEg9nBYo6BImKnaR242b+DsMusahNWM=)
2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: 1u5THTa1s+LY4W8z0U5DiuLS8JOBlRXuglfKbuwjb8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:0f:e4:25:39:76:16:f1:ce:40:82:5a:83:a0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Validity
Not Before: Feb 9 14:00:22 2026 GMT
Not After : Feb 10 14:00:22 2026 GMT
Subject: CN=a04d4b74c4db062e80732a62b5ce2a271d59d66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:4e:59:4e:9f:31:ad:de:43:15:50:e4:6f:
c8:67:70:4f:78:fe:d3:bd:07:e9:46:8d:b5:61:55:
0a:47:22:e3:02:3f:7a:bd:d9:30:75:4c:36:1a:a9:
50:b2:a0:5c:56:8e:da:29:9f:02:b6:c2:6e:dd:56:
14:2e:e6:3b:bb:81:18:11:3d:a2:4b:6d:11:97:49:
9e:8b:1c:04:06:54:61:65:28:d4:1c:1e:67:32:ad:
f9:09:6e:f4:a8:14:f6:97:96:17:89:a4:d7:8e:89:
0a:ca:7d:ee:6e:e3:4f:25:02:c4:01:c4:f9:dd:d0:
95:4d:7d:a1:bc:dc:2f:27:4a:0f:99:2d:10:8d:47:
b3:25:a4:1f:eb:b6:36:56:97:86:68:92:c0:f4:24:
7e:4e:ec:3d:97:3e:7c:df:ff:52:89:2a:f2:2c:4b:
b6:5a:e8:18:1c:b7:04:22:bc:2f:33:69:7c:31:1b:
be:74:10:24:59:54:af:16:70:10:2f:af:59:79:6f:
de:31:02:89:c8:4e:06:8c:e4:64:bc:ea:69:79:3e:
74:30:b0:b8:f1:dd:34:27:75:77:e9:a8:4d:fd:55:
d9:fa:4a:e9:b0:8c:68:ae:9f:5e:7c:f5:38:af:5d:
96:0e:ce:b3:ef:67:0b:4c:1c:c5:03:b1:1a:ee:e7:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:4D:4B:74:C4:DB:06:2E:80:73:2A:62:B5:CE:2A:27:1D:59:D6:6D
X509v3 Authority Key Identifier:
keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:fc:51:8e:cd:c1:5f:17:94:18:4b:39:49:47:b6:d4:2c:18:
8b:df:aa:3c:82:8c:91:e4:9c:32:e4:d8:d6:4f:78:e3:18:ea:
60:5e:92:11:dd:33:4f:4f:28:71:b7:f7:31:6d:2b:95:0b:9a:
e4:c2:77:ba:53:52:cb:04:cd:5a:76:0d:2d:8a:43:c4:a0:90:
56:7a:f0:96:45:ae:df:55:4d:16:be:37:91:81:0d:01:b3:f4:
00:3f:14:eb:a9:d0:c8:79:ba:c9:7c:95:da:9a:78:08:cc:66:
79:2c:18:f7:52:07:93:7e:a7:88:16:ea:ad:47:b7:e3:c6:4c:
a6:fe:ae:ce:c8:2a:7f:c2:ee:78:53:21:01:93:a4:88:e3:16:
87:01:2a:f9:65:96:a9:a0:ab:02:a9:f9:18:ce:a9:75:20:76:
41:79:25:81:23:00:bf:4d:cf:c8:8f:98:5f:27:20:ab:27:41:
96:b0:d3:49:1d:ea:e3:0a:1b:16:e1:b3:28:0e:d1:64:82:d0:
99:58:b4:e2:c9:6d:77:58:b3:d1:47:e2:bf:dd:32:b8:cc:d7:
46:2d:62:53:62:5a:eb:a6:de:35:f5:59:3e:42:be:61:87:c4:
76:ca:e5:39:1f:b8:59:1c:31:eb:5f:e8:92:a8:b2:b4:6b:b9:
3f:6d:c8:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxCtA/kJTl2FvHOQIJag6CZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMmNhN2M3ZjAwZGVjNDRmNDhjNDlmMjJhNTc3Mjk0ODY5
YWE5YmEwHhcNMjYwMjA5MTQwMDIyWhcNMjYwMjEwMTQwMDIyWjAzMTEwLwYDVQQD
EyhhMDRkNGI3NGM0ZGIwNjJlODA3MzJhNjJiNWNlMmEyNzFkNTlkNjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRROWU6fMa3eQxVQ5G/IZ3BPeP7T
vQfpRo21YVUKRyLjAj96vdkwdUw2GqlQsqBcVo7aKZ8CtsJu3VYULuY7u4EYET2i
S20Rl0meixwEBlRhZSjUHB5nMq35CW70qBT2l5YXiaTXjokKyn3ubuNPJQLEAcT5
3dCVTX2hvNwvJ0oPmS0QjUezJaQf67Y2VpeGaJLA9CR+Tuw9lz583/9SiSryLEu2
WugYHLcEIrwvM2l8MRu+dBAkWVSvFnAQL69ZeW/eMQKJyE4GjORkvOppeT50MLC4
8d00J3V36ahN/VXZ+krpsIxorp9efPU4r12WDs6z72cLTBzFA7Ea7ucDtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBNS3TE2wYugHMqYrXOKicdWdZtMB8GA1UdIwQY
MBaAFGwsp8fwDexE9IxJ8ipXcpSGmqm6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMt
NDNkYzJiNWVlYjViLzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC85YTU1OTktZDM4OS00ODM2LTgwMzMtNDNkYzJiNWVlYjVi
LzEvYkN5bnhfQU43RVQwakVueUtsZHlsSWFhcWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb/xRjs3B
XxeUGEs5SUe21CwYi9+qPIKMkeScMuTY1k944xjqYF6SEd0zT08ocbf3MW0rlQua
5MJ3ulNSywTNWnYNLYpDxKCQVnrwlkWu31VNFr43kYENAbP0AD8U66nQyHm6yXyV
2pp4CMxmeSwY91IHk36niBbqrUe348ZMpv6uzsgqf8LueFMhAZOkiOMWhwEq+WWW
qaCrAqn5GM6pdSB2QXklgSMAv03PyI+YXycgqydBlrDTSR3q4wobFuGzKA7RZILQ
mVi04sltd1iz0Ufiv90yuMzXRi1iU2Ja66beNfVZPkK+YYfEdsrlOR+4WRwx61/o
kqiytGu5P23IiQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 19:58:22 2026 by rpki-client