This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
File: BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft (raw, json)
Hash identifier: wXk951V6nBiBcMFkk8BciYe9jfNe40/GtYstTx9up1k=
Subject key identifier: BB:72:7C:0F:EC:82:BE:F8:3B:D1:E1:35:FF:29:75:EB:EB:28:3F:C3
Authority key identifier: 05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
Certificate issuer: /CN=0515c15583b9ccff942cfb3eee04e2de95642662
Certificate serial: 019C416AC1FA72365B004370EC947D4781F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
Manifest number: 138C
Signing time: Mon 09 Feb 2026 08:00:41 +0000
Manifest this update: Mon 09 Feb 2026 08:00:41 +0000
Manifest next update: Tue 10 Feb 2026 08:00:41 +0000
Files and hashes: 1: BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl (hash: RsihW9Rxif8UtQBA63B0earHCcZH2i13jSEZiG+xUBw=)
2: aOp5hrahbo0DudvEr6ppbcclIIw.roa (hash: ot52KZc899CUKbyUZFqNVx6u88DCcjOJWawepQpzrNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:6a:c1:fa:72:36:5b:00:43:70:ec:94:7d:47:81:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0515c15583b9ccff942cfb3eee04e2de95642662
Validity
Not Before: Feb 9 08:00:41 2026 GMT
Not After : Feb 10 08:00:41 2026 GMT
Subject: CN=bb727c0fec82bef83bd1e135ff2975ebeb283fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:0e:a5:11:c5:4b:df:e0:7a:91:7b:7a:d3:
48:fb:9c:d5:e7:be:04:71:22:91:fd:ae:4a:7a:65:
dd:45:ce:08:0a:b2:76:93:0a:b4:89:97:e5:0d:dd:
41:67:b4:b3:08:3c:35:46:d6:90:7f:a3:76:84:84:
95:d0:1e:72:61:48:83:f5:1e:e0:ae:aa:46:0a:39:
61:41:36:1e:9c:dc:6b:0d:fc:47:85:42:46:ab:e6:
74:f8:9a:3f:20:9f:02:30:62:12:c9:75:18:cf:0b:
40:53:46:b0:b6:c1:6d:86:77:1e:f1:a0:13:26:a9:
44:70:7b:d7:d6:3b:f0:c6:66:21:b7:80:78:9d:2e:
72:76:47:62:1d:ed:7c:94:ce:be:cb:44:f7:b7:8b:
d2:2e:a1:f7:ba:d2:ee:4f:1d:24:2b:a7:e2:44:80:
f9:fc:f9:39:05:13:7d:7a:2e:dc:7c:ad:b5:c5:9b:
40:0a:3c:74:db:9a:25:07:0b:cc:d5:35:83:19:b0:
eb:e2:72:f7:7f:61:47:aa:4b:76:1f:be:ff:d7:46:
c4:e0:70:dc:27:be:c4:58:20:5d:b9:c1:cd:c6:af:
3f:05:d8:de:bf:28:d1:b5:74:8b:1e:15:b5:10:f0:
a6:1a:9f:b5:12:aa:6b:cd:42:a0:a5:a3:19:c6:c3:
cb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:72:7C:0F:EC:82:BE:F8:3B:D1:E1:35:FF:29:75:EB:EB:28:3F:C3
X509v3 Authority Key Identifier:
keyid:05:15:C1:55:83:B9:CC:FF:94:2C:FB:3E:EE:04:E2:DE:95:64:26:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BRXBVYO5zP-ULPs-7gTi3pVkJmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3e5ba6-6f51-47ab-8540-be3e7a9ce15b/1/BRXBVYO5zP-ULPs-7gTi3pVkJmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e0:6b:5e:51:86:cd:31:ea:63:11:86:29:89:dd:a1:21:5f:
c2:b2:b6:5e:43:99:35:74:f8:d4:d8:d7:99:42:4a:6e:56:ef:
cf:28:6d:15:fe:03:78:df:89:c9:fd:ad:15:3a:d2:c2:19:df:
e8:03:48:a2:7b:38:de:be:a9:2c:1e:d7:ae:48:6e:5d:0b:3f:
fc:c1:41:73:4c:f2:2a:d8:b8:ae:a7:dc:e3:c3:0b:b6:3d:d2:
b1:70:d7:48:ce:7a:d5:64:f1:78:12:67:36:3f:f9:4a:93:ee:
5e:c8:62:66:2b:cf:62:90:9d:ed:b0:3e:33:75:ef:09:b4:25:
b1:95:21:e0:ce:20:9e:1e:d6:48:16:ee:8d:90:f2:c3:02:45:
ce:b7:a7:a8:98:57:66:c0:22:3a:ff:6f:61:78:3d:1d:59:aa:
72:da:4c:be:5b:16:77:f6:69:6d:dd:0a:45:65:17:ec:69:88:
e7:09:6c:1c:b0:07:8f:c3:84:58:4e:fe:be:5b:d2:8b:df:0d:
e1:fe:9b:1d:59:7a:98:fa:68:1a:38:b5:92:6e:5f:32:66:f8:
96:17:16:35:ac:9b:8c:f6:50:ee:e4:1a:3f:23:d7:6d:ea:de:
ba:85:d8:1a:b0:95:7e:c7:7e:3e:8a:95:af:4b:e9:ed:50:84:
f1:00:50:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBasH6cjZbAENw7JR9R4HyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MTVjMTU1ODNiOWNjZmY5NDJjZmIzZWVlMDRlMmRlOTU2
NDI2NjIwHhcNMjYwMjA5MDgwMDQxWhcNMjYwMjEwMDgwMDQxWjAzMTEwLwYDVQQD
EyhiYjcyN2MwZmVjODJiZWY4M2JkMWUxMzVmZjI5NzVlYmViMjgzZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OEOpRHFS9/gepF7etNI+5zV574E
cSKR/a5KemXdRc4ICrJ2kwq0iZflDd1BZ7SzCDw1RtaQf6N2hISV0B5yYUiD9R7g
rqpGCjlhQTYenNxrDfxHhUJGq+Z0+Jo/IJ8CMGISyXUYzwtAU0awtsFthnce8aAT
JqlEcHvX1jvwxmYht4B4nS5ydkdiHe18lM6+y0T3t4vSLqH3utLuTx0kK6fiRID5
/Pk5BRN9ei7cfK21xZtACjx025olBwvM1TWDGbDr4nL3f2FHqkt2H77/10bE4HDc
J77EWCBducHNxq8/BdjevyjRtXSLHhW1EPCmGp+1EqprzUKgpaMZxsPLPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtyfA/sgr74O9HhNf8pdevrKD/DMB8GA1UdIwQY
MBaAFAUVwVWDucz/lCz7Pu4E4t6VZCZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAt
YmUzZTdhOWNlMTViLzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZTViYTYtNmY1MS00N2FiLTg1NDAtYmUzZTdhOWNlMTVi
LzEvQlJYQlZZTzV6UC1VTFBzLTdnVGkzcFZrSm1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOBrXlGG
zTHqYxGGKYndoSFfwrK2XkOZNXT41NjXmUJKblbvzyhtFf4DeN+Jyf2tFTrSwhnf
6ANIons43r6pLB7XrkhuXQs//MFBc0zyKti4rqfc48MLtj3SsXDXSM561WTxeBJn
Nj/5SpPuXshiZivPYpCd7bA+M3XvCbQlsZUh4M4gnh7WSBbujZDywwJFzrenqJhX
ZsAiOv9vYXg9HVmqctpMvlsWd/Zpbd0KRWUX7GmI5wlsHLAHj8OEWE7+vlvSi98N
4f6bHVl6mPpoGji1km5fMmb4lhcWNaybjPZQ7uQaPyPXbereuoXYGrCVfsd+PoqV
r0vp7VCE8QBQ3w==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:50 2026 by rpki-client