This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
File: v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft (raw, json)
Hash identifier: J3RcssbWYd/BcWsoWvjsRHgE3ReKQdR/KaMSYrSnDjw=
Subject key identifier: 3D:0D:90:E6:56:FF:71:D9:B9:52:0D:F1:A3:98:12:49:76:9A:9B:CE
Authority key identifier: BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
Certificate issuer: /CN=bfac12dab75d9c09f3120179373e995ae3917911
Certificate serial: 019C42EB1F46D4CDEA0DD3239C5F0C07F183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
Manifest number: 03F8
Signing time: Mon 09 Feb 2026 15:00:31 +0000
Manifest this update: Mon 09 Feb 2026 15:00:31 +0000
Manifest next update: Tue 10 Feb 2026 15:00:31 +0000
Files and hashes: 1: oedGpnSFOdSVNyorOdd1uy704_0.roa (hash: 1yu0XFObLRYgYa2uFCs4hzb2YmkMGgpRVokB0kOSiOQ=)
2: v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl (hash: cjteiM9R3cc0R6J4qVv6cBiwi4wLDoRpa8wVdYuQnH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:1f:46:d4:cd:ea:0d:d3:23:9c:5f:0c:07:f1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac12dab75d9c09f3120179373e995ae3917911
Validity
Not Before: Feb 9 15:00:31 2026 GMT
Not After : Feb 10 15:00:31 2026 GMT
Subject: CN=3d0d90e656ff71d9b9520df1a3981249769a9bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:18:cb:39:8b:22:5c:5c:15:59:47:06:c4:9a:
07:33:78:f1:96:59:cb:77:7a:11:af:0c:66:7f:69:
59:5f:d6:2c:17:ed:f6:97:eb:80:01:8d:90:5e:ea:
74:bc:5f:78:a5:bf:af:d0:81:a1:29:4e:25:a2:f0:
d9:e2:1f:43:d9:8a:87:82:19:07:24:e6:f9:34:42:
d1:0b:dc:d9:14:24:57:cf:8a:4b:3f:22:38:96:b4:
1e:a4:58:64:1b:8c:23:6b:ad:3c:34:68:e2:94:e9:
34:80:14:94:a8:99:4b:b0:ee:a9:0b:f2:58:32:a0:
b3:f3:6b:0e:80:ab:dc:35:0a:8f:b5:11:a6:cb:98:
bc:52:31:80:7e:7a:92:d4:4a:ff:46:7b:b3:40:5e:
03:a8:88:52:25:ac:07:9b:a9:f3:b0:e2:1a:7b:2a:
c9:a2:0e:29:05:c6:6d:fb:5c:0a:bf:49:f1:fd:a0:
17:9a:10:35:49:c7:6a:22:e1:bb:c0:30:00:f5:f7:
29:7a:cc:13:9f:75:1d:db:88:b0:d8:6b:d3:0f:1f:
63:29:8c:ae:36:b5:0f:d6:0e:20:68:99:f0:d8:49:
4a:55:44:6d:8b:76:fb:ac:7f:38:37:cd:93:e4:b9:
4a:6d:e9:76:ec:57:06:2f:20:95:12:a5:6b:b9:9d:
65:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0D:90:E6:56:FF:71:D9:B9:52:0D:F1:A3:98:12:49:76:9A:9B:CE
X509v3 Authority Key Identifier:
keyid:BF:AC:12:DA:B7:5D:9C:09:F3:12:01:79:37:3E:99:5A:E3:91:79:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6wS2rddnAnzEgF5Nz6ZWuOReRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d9074d-77dc-49fc-acb3-03d9ba503dc1/1/v6wS2rddnAnzEgF5Nz6ZWuOReRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:33:0a:50:da:90:e3:36:ee:fc:1d:49:da:68:ec:67:b4:42:
b5:e0:2b:59:75:f6:59:e1:cf:11:ae:61:35:58:4c:6e:b2:dd:
6e:53:91:6c:c7:88:95:eb:1d:17:d1:73:6d:96:14:25:28:73:
30:b4:e0:b9:88:36:fc:13:39:de:e4:ea:62:6f:f9:65:52:22:
57:17:fe:a9:b9:95:3d:4d:97:f0:b8:6e:ea:c7:47:d4:39:4c:
02:9c:19:19:13:01:83:17:3b:9d:f9:d8:78:e1:c8:aa:40:ac:
70:ae:1a:76:9b:de:25:79:8f:60:1b:cc:8a:af:4f:e9:01:d3:
65:4b:27:ac:d6:c3:bf:e5:c9:99:6f:ee:86:87:8f:f7:77:d9:
9d:26:57:73:89:c7:5e:93:67:ee:ea:2f:b0:ad:dd:15:23:ad:
da:ba:62:c1:9d:70:39:e9:6c:c8:e1:18:c9:34:85:38:74:05:
a7:fd:70:79:43:56:08:af:7d:f1:d8:9f:5e:4b:b4:82:8b:b9:
13:b1:ac:ce:65:a6:1d:82:74:9e:e0:59:f6:a8:f0:f1:ae:0d:
a6:63:41:5a:11:48:30:41:1c:8e:fb:7f:df:eb:f3:2c:83:87:
a4:9f:11:b9:ca:b0:d7:65:ad:70:68:e3:45:5f:e5:f7:bf:94:
cd:55:63:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:41:49 2026 by rpki-client