This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
File: B-4HmfCK-P5SD5SCzdBejqZeYag.mft (raw, json)
Hash identifier: /9PgEs3UuwnL75iqGpcCM4llWu1Uxjjv3sFBjMSGGQ8=
Subject key identifier: 2F:3C:F9:1B:DC:85:BC:BD:C7:40:BE:C9:6E:E1:B1:AC:D9:F5:C6:A6
Authority key identifier: 07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
Certificate issuer: /CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Certificate serial: 019C421003A88BDB22BD6ACCF4468DD62B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
Manifest number: 179E
Signing time: Mon 09 Feb 2026 11:01:11 +0000
Manifest this update: Mon 09 Feb 2026 11:01:11 +0000
Manifest next update: Tue 10 Feb 2026 11:01:11 +0000
Files and hashes: 1: B-4HmfCK-P5SD5SCzdBejqZeYag.crl (hash: 0enha10oOJpwypvfkm995VfUGZaG5yXv9KEyolGqbfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:10:03:a8:8b:db:22:bd:6a:cc:f4:46:8d:d6:2b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ee0799f08af8fe520f9482cdd05e8ea65e61a8
Validity
Not Before: Feb 9 11:01:11 2026 GMT
Not After : Feb 10 11:01:11 2026 GMT
Subject: CN=2f3cf91bdc85bcbdc740bec96ee1b1acd9f5c6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:81:ed:3b:5b:e9:3d:bb:29:4b:2a:51:71:59:
89:97:05:2e:a6:ee:33:13:ef:9f:f9:e2:a7:7f:e3:
77:c7:b3:7b:be:2b:e2:a1:4c:15:1e:27:fe:de:b1:
54:de:56:0d:8f:b9:ea:76:0f:25:3c:00:f0:71:ce:
48:97:c2:33:bb:fa:7f:c6:44:29:be:86:2d:5f:fc:
19:70:90:84:3d:f7:b7:54:13:77:6d:1b:4e:c2:49:
10:4a:3e:27:d1:47:ad:a9:57:1b:97:aa:fc:a7:5a:
83:3f:98:ef:40:cc:06:43:37:f1:ce:f8:84:37:90:
20:36:51:4c:e4:d8:6f:8f:58:0b:01:c0:49:a2:de:
e3:07:50:75:60:3e:55:98:0c:f6:72:76:ca:0e:20:
11:6c:60:11:e3:df:86:ff:03:81:62:20:f6:af:e6:
8c:16:11:f0:11:db:b6:2a:da:a2:09:b2:c4:b0:80:
8e:69:28:f6:45:4a:fe:46:9e:35:ed:cb:0c:3d:78:
13:25:2b:12:23:f8:64:43:44:a3:4c:62:02:bc:89:
b6:f3:88:f6:ee:f7:2d:36:de:3d:a2:3a:09:c9:98:
59:82:ea:b0:1d:a9:10:d5:67:bd:a9:c3:2e:3e:e5:
eb:c3:6e:d5:3c:4e:28:f9:62:25:e8:50:84:32:f4:
1e:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3C:F9:1B:DC:85:BC:BD:C7:40:BE:C9:6E:E1:B1:AC:D9:F5:C6:A6
X509v3 Authority Key Identifier:
keyid:07:EE:07:99:F0:8A:F8:FE:52:0F:94:82:CD:D0:5E:8E:A6:5E:61:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-4HmfCK-P5SD5SCzdBejqZeYag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7e6dce-c8ef-47e3-a6d2-a72344b3ff10/1/B-4HmfCK-P5SD5SCzdBejqZeYag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:c5:5c:de:9c:31:f4:1d:e9:ca:2b:87:cd:ed:6c:15:39:d3:
86:b7:05:06:cf:34:f7:4e:6a:13:7b:3d:fa:54:1c:4c:5b:24:
a9:b8:a2:8c:29:95:e6:36:d7:94:e5:fc:57:3f:b5:b7:43:e2:
86:00:de:fd:62:d1:7e:48:d8:17:75:6a:24:59:56:c7:9f:29:
39:fd:89:56:6a:51:67:48:1e:48:17:4c:0b:53:57:6d:3b:de:
0a:27:fc:1d:0f:45:30:85:d9:34:99:a2:ac:42:cb:f0:ea:dc:
4a:50:b6:67:42:b4:2a:a5:ba:68:e5:fc:3f:98:d9:6e:23:ba:
2e:82:76:91:d0:e3:67:bf:b1:9c:09:41:54:01:aa:62:e6:08:
c2:02:56:73:2c:f4:d1:ba:89:d6:47:fd:0f:f8:42:ce:f5:e9:
d6:c1:21:ed:89:6e:c9:a2:82:e1:0b:d0:61:6d:60:94:81:dc:
2c:af:50:6d:a5:43:bb:c3:ed:ef:4e:fa:e3:31:e4:1b:32:c1:
71:af:da:81:ba:43:64:4d:bf:b7:f2:33:05:ef:e6:63:db:20:
01:64:07:9e:1f:87:0a:91:7c:c6:49:a3:0c:d9:ba:ff:15:90:
6d:60:3b:9a:b3:e2:57:e7:a1:6e:ea:fb:6e:67:43:77:c4:00:
ce:cc:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:48:25 2026 by rpki-client