This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
File: bWLDbYdChp-XVVt8mDlPn2XI6CY.mft (raw, json)
Hash identifier: 6EloNYy3oHWHOyYykE2aUUeJiFLvw1NZrDym6UhqP5w=
Subject key identifier: 0E:1E:6C:5E:6B:DC:1B:70:86:98:13:78:C4:1C:CF:5D:D5:F7:27:F2
Authority key identifier: 6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26
Certificate issuer: /CN=6d62c36d8742869f97555b7c98394f9f65c8e826
Certificate serial: 019C4322925ED3725BF533F41BBF0A670567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
Manifest number: 17A1
Signing time: Mon 09 Feb 2026 16:01:05 +0000
Manifest this update: Mon 09 Feb 2026 16:01:05 +0000
Manifest next update: Tue 10 Feb 2026 16:01:05 +0000
Files and hashes: 1: bWLDbYdChp-XVVt8mDlPn2XI6CY.crl (hash: W70SRNZVVPLX5UM3yan+WPihtU37jYbMbR2rnY4z3sg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:92:5e:d3:72:5b:f5:33:f4:1b:bf:0a:67:05:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d62c36d8742869f97555b7c98394f9f65c8e826
Validity
Not Before: Feb 9 16:01:05 2026 GMT
Not After : Feb 10 16:01:05 2026 GMT
Subject: CN=0e1e6c5e6bdc1b7086981378c41ccf5dd5f727f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:1a:28:8e:67:b1:26:a0:3f:65:16:90:3d:5e:
3b:b4:83:7d:aa:6c:77:57:9a:a3:65:92:06:4a:7c:
b3:3b:ef:e3:77:7a:5a:96:07:82:8a:f5:67:c4:5e:
e6:6d:87:33:a6:e5:e0:1a:86:fa:12:0c:54:56:b4:
ca:72:0c:9f:c5:31:22:2f:99:f9:71:05:f6:0c:10:
88:8a:c5:c9:c5:a2:2a:27:0f:00:2e:b4:5f:f5:72:
3d:7b:e8:f5:2e:0e:67:cd:b2:f3:84:36:7c:e6:80:
da:e1:eb:70:dc:c0:b8:32:9e:5c:8a:22:4f:62:5a:
d6:fa:9a:e5:00:6f:d2:45:f2:19:b1:1b:0f:a6:d6:
25:f4:0d:e5:64:e3:f8:6c:c9:ff:eb:72:c1:5e:ed:
ba:7a:b5:fd:7a:d7:30:c4:95:7c:9d:bc:75:cc:18:
86:ee:02:9b:f8:73:6e:17:c0:8c:c2:96:bd:42:f3:
ec:f6:8d:ca:90:ba:ae:4d:af:4f:81:45:2b:59:a7:
55:88:3b:2b:7b:de:27:fa:8b:d2:79:67:c0:cd:0a:
dc:7d:28:55:22:d7:5b:92:9b:4b:ff:51:e9:ef:e3:
e2:9c:62:1e:5c:e5:b4:3f:c4:52:0d:5e:48:64:fa:
fa:94:af:ec:f5:c5:4a:1e:4f:ba:76:a0:b8:ab:70:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1E:6C:5E:6B:DC:1B:70:86:98:13:78:C4:1C:CF:5D:D5:F7:27:F2
X509v3 Authority Key Identifier:
keyid:6D:62:C3:6D:87:42:86:9F:97:55:5B:7C:98:39:4F:9F:65:C8:E8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWLDbYdChp-XVVt8mDlPn2XI6CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/960963-f23d-4983-ba3f-3a585886ae4c/1/bWLDbYdChp-XVVt8mDlPn2XI6CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:24:61:1b:bd:7e:93:ea:29:04:99:dc:dd:3e:3a:ca:e5:45:
20:29:50:32:0b:c8:10:7e:09:08:1f:93:c5:19:87:54:fa:45:
f6:1e:16:b8:44:ad:fc:1e:96:ee:af:9c:5f:6d:f7:51:db:14:
7d:3e:ec:f2:9b:af:e4:1b:d0:63:df:4c:74:ce:cf:15:fc:77:
fd:eb:99:cb:f1:6e:19:b9:ab:58:a0:bb:5a:62:99:5c:67:90:
de:a4:30:79:93:e3:a5:c9:da:00:fa:0f:f0:85:1c:29:50:48:
41:71:7e:cd:33:ce:ac:25:30:c6:c2:9b:74:2b:80:32:10:7b:
ee:e2:50:f7:59:2c:48:d3:39:9e:49:6c:bf:3a:c7:71:97:43:
61:13:0b:09:35:41:2f:28:ce:ec:f2:5e:34:12:c9:59:12:4c:
90:19:26:ef:01:46:99:88:4b:12:ef:22:c6:2c:fe:48:b3:d3:
47:db:09:a1:92:c2:e4:74:5c:94:f7:1f:ab:5a:8d:96:b4:43:
0c:61:0b:dd:5c:f8:21:78:6d:38:7b:37:a1:28:1c:10:1d:4e:
55:34:93:ed:7c:11:93:56:cf:ac:e2:16:9e:cb:5e:34:e7:f1:
2e:92:49:b7:54:56:61:de:85:13:fa:a1:df:ba:5e:8f:a9:cb:
35:57:08:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:59:46 2026 by rpki-client