This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier: M0uelCfB7YoP1VniDmw4eKyZwTWY2pQ/xsJzcvGI7HU=
Subject key identifier: 60:11:F8:69:30:0D:6F:8B:F0:B5:38:50:97:C1:83:0F:59:A9:CC:29
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial: 019C4322EB1676B169901060C3491C7C282A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number: 0DEB
Signing time: Mon 09 Feb 2026 16:01:27 +0000
Manifest this update: Mon 09 Feb 2026 16:01:27 +0000
Manifest next update: Tue 10 Feb 2026 16:01:27 +0000
Files and hashes: 1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: piscKLYEGgEpUKceaNGSpvz02IzitF6YFhYPI9AAVZg=)
2: qLRwkd2YTe3ugw9mUTb_30rZm1U.roa (hash: RlmstRhxEpTkCl9P39u47GrFJRHW47YR8wbbC8CphMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:eb:16:76:b1:69:90:10:60:c3:49:1c:7c:28:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Validity
Not Before: Feb 9 16:01:27 2026 GMT
Not After : Feb 10 16:01:27 2026 GMT
Subject: CN=6011f869300d6f8bf0b5385097c1830f59a9cc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:af:0a:6a:5f:04:b5:e3:e6:3d:70:f1:8e:d3:
a3:34:39:cf:4e:70:cb:b9:87:20:d4:4d:7e:42:9f:
50:72:a2:c9:fd:24:48:12:9b:a8:b6:3e:28:35:fb:
1f:73:22:98:7f:d7:e2:b1:eb:46:ee:76:19:49:3c:
05:ef:02:a3:d6:c1:4c:1f:c1:f8:3c:8e:a6:0d:3a:
42:3b:12:51:1c:25:4b:46:49:4e:5d:ea:95:cd:65:
45:a3:0e:cb:4c:80:57:8b:c5:62:42:91:1c:82:32:
2b:6d:40:9c:be:3a:5e:4f:e0:9a:57:82:66:a5:b7:
99:06:62:41:c3:00:72:d7:1a:f4:7e:32:a9:85:46:
81:78:6a:09:ca:3b:a6:ac:be:49:4f:b1:fc:07:d6:
66:ac:2d:8a:a5:ba:ce:6c:67:ad:7f:32:14:9c:aa:
4d:15:e3:40:e2:54:97:96:4f:e1:b4:d8:ad:f7:c6:
fa:89:0e:97:6a:29:3c:46:9f:c9:9a:00:5b:0d:ba:
f0:b0:ad:a3:21:26:64:cb:99:b6:49:47:7b:31:a9:
20:21:8f:fd:06:10:53:5e:c3:a5:f9:69:31:a4:eb:
2d:3e:ca:7d:d0:fa:43:dd:a9:31:a7:18:0f:19:b1:
18:e2:af:44:ac:60:2e:41:da:c9:47:09:7d:e9:4b:
fd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:11:F8:69:30:0D:6F:8B:F0:B5:38:50:97:C1:83:0F:59:A9:CC:29
X509v3 Authority Key Identifier:
keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:75:c1:a1:82:15:d3:47:5f:a0:11:bc:b5:f3:43:50:a5:d2:
c5:af:dc:3f:df:97:43:31:fe:cd:f2:00:9e:47:80:54:30:fa:
f3:1c:96:35:de:bc:88:43:08:04:50:c7:86:cb:04:51:56:98:
49:4a:09:65:0f:d4:d1:b9:69:89:c4:0d:fb:e5:19:43:02:74:
61:f4:55:99:04:fb:2a:ac:2a:e9:de:18:56:93:d8:9c:0a:c0:
9f:2d:06:9b:66:af:2e:e1:fd:4c:95:cb:03:cb:33:6b:cb:70:
2d:29:03:af:0d:ad:48:79:e7:28:f9:4e:78:2b:72:a2:10:2f:
87:10:c4:d0:df:ce:a3:99:e3:59:39:03:23:f7:a4:75:5b:9b:
0b:7f:a6:a5:d1:9c:46:fe:87:36:b0:1a:75:af:1d:0d:52:a5:
55:76:5c:8a:c6:19:50:f5:f5:67:db:d8:36:14:97:51:e8:b9:
98:2e:77:42:78:6e:c1:79:a8:5c:22:25:2e:07:29:87:3b:be:
70:a7:e5:3c:d9:0c:08:9a:03:81:1a:62:38:bd:b8:69:71:e2:
92:5b:61:7d:ac:4f:2a:82:9a:85:43:92:0f:39:3d:4d:8f:5a:
ae:c7:9b:72:9a:91:8e:60:01:2c:da:22:f2:ca:bd:e8:3c:75:
b6:e3:19:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIusWdrFpkBBgw0kcfCgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjgwMTgwYjQwZDU4NWI3MzY2NTg3ZGZiNWRlN2JmMzA3
Nzg0M2UwHhcNMjYwMjA5MTYwMTI3WhcNMjYwMjEwMTYwMTI3WjAzMTEwLwYDVQQD
Eyg2MDExZjg2OTMwMGQ2ZjhiZjBiNTM4NTA5N2MxODMwZjU5YTljYzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq8Kal8EtePmPXDxjtOjNDnPTnDL
uYcg1E1+Qp9QcqLJ/SRIEpuotj4oNfsfcyKYf9fisetG7nYZSTwF7wKj1sFMH8H4
PI6mDTpCOxJRHCVLRklOXeqVzWVFow7LTIBXi8ViQpEcgjIrbUCcvjpeT+CaV4Jm
pbeZBmJBwwBy1xr0fjKphUaBeGoJyjumrL5JT7H8B9ZmrC2KpbrObGetfzIUnKpN
FeNA4lSXlk/htNit98b6iQ6Xaik8Rp/JmgBbDbrwsK2jISZky5m2SUd7MakgIY/9
BhBTXsOl+WkxpOstPsp90PpD3akxpxgPGbEY4q9ErGAuQdrJRwl96Uv9SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAR+GkwDW+L8LU4UJfBgw9ZqcwpMB8GA1UdIwQY
MBaAFNW4AYC0DVhbc2ZYfftd578wd4Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYt
MzE0MTFkOTE1NzZhLzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYtMzE0MTFkOTE1NzZh
LzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVHXBoYIV
00dfoBG8tfNDUKXSxa/cP9+XQzH+zfIAnkeAVDD68xyWNd68iEMIBFDHhssEUVaY
SUoJZQ/U0blpicQN++UZQwJ0YfRVmQT7Kqwq6d4YVpPYnArAny0Gm2avLuH9TJXL
A8sza8twLSkDrw2tSHnnKPlOeCtyohAvhxDE0N/Oo5njWTkDI/ekdVubC3+mpdGc
Rv6HNrAada8dDVKlVXZcisYZUPX1Z9vYNhSXUei5mC53QnhuwXmoXCIlLgcphzu+
cKflPNkMCJoDgRpiOL24aXHiklthfaxPKoKahUOSDzk9TY9arsebcpqRjmABLNoi
8sq96Dx1tuMZNw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 22:46:15 2026 by rpki-client