This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
File: BKnP8kmB1yY9G31jd59dZz3ivbw.mft (raw, json)
Hash identifier: +l58NoDr5ayxHuMNEpTFPilu+ir5rJyRj/9UDgUXcMA=
Subject key identifier: 51:5C:0A:5A:15:00:38:B5:26:D7:28:0C:6D:29:8A:E4:27:FF:A4:44
Authority key identifier: 04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
Certificate issuer: /CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Certificate serial: 019C446C4A91CB186B0A5E951D895D61F8BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
Manifest number: 1814
Signing time: Mon 09 Feb 2026 22:01:13 +0000
Manifest this update: Mon 09 Feb 2026 22:01:13 +0000
Manifest next update: Tue 10 Feb 2026 22:01:13 +0000
Files and hashes: 1: BKnP8kmB1yY9G31jd59dZz3ivbw.crl (hash: 5nW18msQ5AOD83EtGnsDzjnsizKoIocV/C7dJOMmWyA=)
2: I1mm66oM2FV4eaJVlqE4cO8L7zY.roa (hash: ukmH8m+pY6kpoWVsiBBxCRnRwFuMJQWX3qtjANjdYes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6c:4a:91:cb:18:6b:0a:5e:95:1d:89:5d:61:f8:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04a9cff24981d7263d1b7d63779f5d673de2bdbc
Validity
Not Before: Feb 9 22:01:13 2026 GMT
Not After : Feb 10 22:01:13 2026 GMT
Subject: CN=515c0a5a150038b526d7280c6d298ae427ffa444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:d4:c1:b7:99:94:85:bd:5a:85:9e:0f:22:
48:7a:0b:15:33:89:fe:c0:18:7d:7b:48:86:a3:7a:
35:c9:1b:c8:98:5d:78:4b:e5:2c:cd:96:4c:63:e7:
88:74:b3:62:55:b2:e2:3f:a2:c6:98:22:bb:ab:b4:
94:cf:7c:bc:45:74:f3:76:4d:80:f3:11:46:32:77:
72:16:9d:a5:c2:8e:c3:4a:68:04:af:b6:14:bb:99:
9f:ca:95:cf:10:24:15:5e:90:77:2e:ad:39:18:d1:
fc:19:5c:bc:6e:ef:07:8f:18:19:9e:ed:43:25:12:
d8:7d:5a:68:d0:1d:67:d7:81:11:b0:08:5b:3e:5f:
e4:b2:2a:cf:06:b2:d4:11:08:3b:b4:fd:b2:e9:17:
8b:a2:8a:d7:f4:9b:f5:02:32:45:61:99:f0:5e:65:
52:ef:1c:e2:24:3a:a0:6b:7b:33:02:23:5e:27:e8:
fa:cb:2f:b8:0b:a8:f3:5b:5a:eb:4d:ff:15:54:5a:
bf:0f:d8:82:1a:36:9e:59:8e:6d:7b:39:25:19:23:
3c:30:4a:13:63:c0:e8:67:af:5f:12:80:46:d7:da:
a4:bb:a7:55:e5:a5:38:41:19:c1:32:7d:f9:65:a0:
b2:9c:30:ca:96:0b:e7:51:20:3f:25:75:d4:86:a8:
84:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5C:0A:5A:15:00:38:B5:26:D7:28:0C:6D:29:8A:E4:27:FF:A4:44
X509v3 Authority Key Identifier:
keyid:04:A9:CF:F2:49:81:D7:26:3D:1B:7D:63:77:9F:5D:67:3D:E2:BD:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKnP8kmB1yY9G31jd59dZz3ivbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/eecf8b-3d63-4c9c-bd84-cd0d9e5742cb/1/BKnP8kmB1yY9G31jd59dZz3ivbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:07:ee:0c:7a:5e:87:45:bd:02:2d:98:a5:d1:50:9f:18:e9:
83:a1:24:48:6f:de:ab:a1:7f:58:5b:7a:70:b3:10:76:c2:db:
85:2f:4c:11:bf:2f:22:97:4a:80:c0:c7:67:d1:72:1f:97:6e:
35:47:07:d9:72:22:c5:2b:2d:bc:fa:a7:d8:b6:46:d4:2f:54:
b7:20:70:25:ee:14:39:38:bc:48:09:ca:2f:db:dc:a8:e7:c9:
56:ae:c5:a7:3c:01:07:43:51:ee:d0:5b:6a:fc:d2:56:a6:ae:
e5:3e:09:dc:22:96:cf:b6:d2:9c:e5:13:a8:3f:ee:77:7c:a4:
cd:73:f8:12:8c:2c:bc:3a:33:bf:f2:e8:11:24:d5:80:f6:13:
ef:94:47:d0:57:82:b8:2d:ae:d6:87:e8:ce:3f:9d:fd:bd:10:
f5:48:db:5e:62:26:e8:dc:c6:f9:73:5e:98:5d:74:07:f9:e9:
08:d8:5f:a0:bb:da:f5:10:59:47:52:bb:32:43:0b:fb:e7:ac:
43:90:69:50:1b:b8:f2:2d:ff:81:51:01:01:89:11:f2:be:e5:
5d:f0:88:50:58:17:d2:d2:d6:c6:f0:82:bd:15:2d:d4:62:a7:
98:0d:b6:1d:1a:d5:32:98:31:ee:d1:33:34:07:42:fe:82:5a:
1f:44:0e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 03:13:24 2026 by rpki-client