This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier: jLFz8Dx90OWPEvbcWt0Y9NmSqQTY7fjhRVi1paMjpkg=
Subject key identifier: 9E:E7:68:32:3E:D2:E5:34:29:97:D3:3C:F2:BB:75:83:E5:35:2D:20
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial: 019C41A1ECDF93380574D4DCFEBB27AD4E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 09:00:56 +0000
Manifest this update: Mon 09 Feb 2026 09:00:56 +0000
Manifest next update: Tue 10 Feb 2026 09:00:56 +0000
Files and hashes: 1: 91k_fzpu7lp58TCmwUevrrQ5DoY.roa (hash: yHiArpJVE3/8ANiCK9PBsJFPh8JxnEYzY6bUgQPEitY=)
2: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: GIWcKqWM1w0CIwCx5ziYKdzIfJ4AY8FW40YanUvakAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:ec:df:93:38:05:74:d4:dc:fe:bb:27:ad:4e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Validity
Not Before: Feb 9 09:00:56 2026 GMT
Not After : Feb 10 09:00:56 2026 GMT
Subject: CN=9ee768323ed2e5342997d33cf2bb7583e5352d20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d3:36:74:25:8e:9b:a1:b5:b2:df:a6:f9:ce:
1f:64:63:72:1b:5e:ed:76:6d:04:36:4b:e0:be:36:
7c:50:45:17:35:4e:ba:e3:09:19:8e:43:dc:3e:68:
15:ee:da:24:44:68:74:5f:8c:11:7a:02:77:38:bb:
20:1e:9a:df:49:fc:8c:07:6f:21:c2:d3:7e:98:5e:
e8:7d:fe:4a:59:32:d4:9e:a8:37:ca:b5:16:96:eb:
b5:4c:57:a3:d6:97:66:f7:d4:9b:ac:45:6d:37:4e:
e9:3b:60:c2:c8:92:aa:45:b2:59:a8:13:84:75:ae:
bd:20:67:8a:2a:96:5a:6c:22:db:df:1f:7a:82:be:
fa:24:f2:50:ac:da:98:1f:57:0c:b1:a6:9f:fc:1b:
6f:fe:5d:0a:43:b5:da:43:cb:a1:65:51:47:c6:f7:
af:8f:9c:00:58:2d:a6:58:fc:7a:5f:e6:8a:47:25:
b7:1e:19:bb:18:d5:04:3d:c3:b5:7a:11:e8:e2:79:
ff:a7:12:7d:7c:15:1c:51:44:70:f5:85:a4:3d:a6:
9c:99:7c:7a:d7:66:c7:9e:81:78:f5:f9:dd:8d:d2:
1e:64:46:2e:af:45:db:b9:25:9c:dc:71:f8:80:6b:
b6:d6:5f:ab:df:95:27:cf:4d:cc:0a:4b:05:60:3c:
b7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:E7:68:32:3E:D2:E5:34:29:97:D3:3C:F2:BB:75:83:E5:35:2D:20
X509v3 Authority Key Identifier:
keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fe:66:a2:58:e1:f9:7e:92:1b:34:5d:32:7d:04:0b:d6:44:
e3:2f:73:8e:b9:2f:24:2e:9d:25:f7:a7:14:b8:0b:24:bf:5b:
92:71:9c:1b:21:5a:a0:48:58:e2:8c:f4:08:5c:b8:34:c1:53:
57:c0:05:d3:1b:bc:57:8b:b9:fb:33:cd:75:a1:aa:58:34:82:
81:7b:e5:d2:31:6a:f5:a2:c0:64:96:13:09:e0:1e:57:cb:4d:
48:df:25:5a:2c:7d:5a:8b:43:33:6b:b1:03:12:8b:bf:be:4a:
33:9e:f3:a1:59:93:9a:be:9f:f8:ad:55:92:a3:2f:dd:a7:b4:
b9:26:d1:fc:2c:8b:ad:94:97:6c:81:82:98:56:83:65:99:58:
d9:8b:1b:db:ca:22:11:ba:36:1b:9b:e4:f4:85:ed:31:d4:b7:
39:86:98:ec:f6:09:10:d8:1c:e9:6e:8c:2a:77:f5:61:65:34:
8d:5f:39:37:22:d4:c4:14:59:ad:ab:90:19:f2:d3:ed:4c:65:
07:25:a5:9c:4e:fe:24:e7:bf:03:e3:57:96:2b:69:d8:5c:41:
43:cb:c2:ad:79:b6:c9:ec:b3:ac:fb:19:2e:44:eb:36:f7:fd:
3a:42:49:b6:ef:9c:78:8b:0e:0b:d3:4c:c4:be:8e:ef:32:08:
61:57:11:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:38 2026 by rpki-client