This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
File: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft (raw, json)
Hash identifier: ynlb4gyKVUaN6l3H9uTAsHe/m1PhsE5P/6mHKMXO/cM=
Subject key identifier: F4:D1:AB:A8:4B:0F:E5:BD:90:5D:93:D2:C0:2E:B1:0D:F7:4F:39:4E
Authority key identifier: 04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
Certificate issuer: /CN=049d4f66598668079353721c21935a00319f6759
Certificate serial: 019C42EB9E889094C647DD1E095F11FF5C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
Manifest number: 1756
Signing time: Mon 09 Feb 2026 15:01:03 +0000
Manifest this update: Mon 09 Feb 2026 15:01:03 +0000
Manifest next update: Tue 10 Feb 2026 15:01:03 +0000
Files and hashes: 1: BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl (hash: ARqB0ECXBNdPb4UmgF1B2LuqnEFVRF7r73IEmq98t14=)
2: MzCZNjdBmMG-S9j61yIRLE51zQU.roa (hash: /f1l2aBevU/UCCB1M8fW5aBOaUCeB8ylNLs+oJQ9huU=)
3: uAumN_d_Q_yun5QzcR-UbXWPBU8.roa (hash: YEbqonGNno7TcnGdoHF66lGtgeHYIPwdSCSN8qlpAMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:9e:88:90:94:c6:47:dd:1e:09:5f:11:ff:5c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=049d4f66598668079353721c21935a00319f6759
Validity
Not Before: Feb 9 15:01:03 2026 GMT
Not After : Feb 10 15:01:03 2026 GMT
Subject: CN=f4d1aba84b0fe5bd905d93d2c02eb10df74f394e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:83:df:53:30:a2:64:a0:94:0e:9b:bd:fe:e4:
34:19:cf:2b:09:5b:70:d0:fd:51:19:9b:57:11:f5:
e4:d4:8d:b9:6b:ba:43:8b:df:85:9d:d8:b6:e1:77:
ca:39:10:ad:a2:b5:d7:9e:a6:1a:38:a4:58:3f:ad:
d9:6d:d2:81:a1:2a:2f:c2:6b:2d:0c:54:b2:a2:f4:
9a:f4:5f:a4:42:5d:5b:79:70:f7:f7:08:aa:da:b1:
26:eb:58:12:99:f2:1a:5c:89:31:4c:c1:7d:5f:55:
a6:56:0e:5d:63:d0:66:72:aa:f2:32:03:f2:83:ee:
95:ca:8a:de:d5:8e:b6:50:92:c8:e6:97:7d:74:6b:
4d:cf:0c:d5:e0:43:04:b8:63:0a:0d:d4:be:5a:76:
54:95:d8:cb:ad:de:2e:d7:35:06:6d:98:8e:a8:96:
a0:8f:9d:16:50:ab:84:ca:5c:65:34:f6:6d:df:41:
f2:88:cf:05:8c:0d:5a:cf:24:e5:c4:66:0e:32:3b:
e1:e3:bf:4a:94:96:07:d5:06:62:ca:f4:b2:37:53:
67:a1:2a:b0:9f:85:7b:35:af:6f:68:57:c4:27:af:
ad:b3:20:25:db:d9:e7:9e:b8:79:fc:f1:0b:de:1c:
5f:1f:13:ef:74:5a:17:16:dc:f8:36:e0:58:ab:58:
74:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D1:AB:A8:4B:0F:E5:BD:90:5D:93:D2:C0:2E:B1:0D:F7:4F:39:4E
X509v3 Authority Key Identifier:
keyid:04:9D:4F:66:59:86:68:07:93:53:72:1C:21:93:5A:00:31:9F:67:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/f23fb6-3229-4e8b-936a-9279547eca55/1/BJ1PZlmGaAeTU3IcIZNaADGfZ1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:58:37:d8:82:60:37:a4:8a:94:31:9c:dd:70:60:41:ff:8b:
02:ac:0a:61:45:3b:1f:59:17:4a:f2:eb:09:01:12:b2:24:a5:
0e:e4:2d:53:f0:01:60:1b:c9:5e:66:ba:31:c5:8e:83:b9:0d:
5a:dd:70:a2:ba:8a:f5:07:2d:14:c1:a4:f3:b7:52:41:87:8b:
28:82:e2:65:9d:18:82:8a:6e:c9:01:1e:a3:b2:c4:5d:ae:c9:
0f:7c:d3:5c:1d:30:f3:11:13:4e:6d:92:5b:b6:58:bc:2c:9e:
35:67:2f:67:72:f6:67:ba:5b:b3:f0:de:57:8b:bf:db:a5:f9:
c4:b8:cc:00:89:e4:ef:6d:ad:78:81:e7:eb:7b:4e:1f:1c:36:
db:5a:d0:bd:6b:9d:83:86:94:46:68:f6:29:b0:24:7a:e8:11:
05:40:43:d8:5e:3b:e0:07:31:ef:12:fc:a7:90:02:36:2f:e1:
27:9d:66:0a:f1:3a:68:16:72:e7:fd:1e:5e:a3:19:28:15:f8:
d7:72:2c:85:4c:11:0a:7a:6b:54:0f:1e:f7:51:3a:54:19:91:
29:8b:12:8c:7a:1c:bc:48:86:a5:a9:9b:88:8d:19:b4:04:f1:
a4:2a:ce:c7:3b:eb:e6:c7:5f:c6:8b:06:58:4b:39:e2:88:8a:
3a:21:ae:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:01 2026 by rpki-client