This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: 1SmlxTrmQYFwAfFmCB9rQ5WAbOkLPISVmOKiPnIUiEw=
Subject key identifier: 75:01:9D:70:C8:95:AF:B2:51:2F:42:93:A1:F9:DC:6B:0A:A9:A3:14
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 019C4322549BE7924C7229FDD685C4E11E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 180B
Signing time: Mon 09 Feb 2026 16:00:49 +0000
Manifest this update: Mon 09 Feb 2026 16:00:49 +0000
Manifest next update: Tue 10 Feb 2026 16:00:49 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: DaT/c6Cq4NwbmwukEbkRWc3NcW1J06Nh+fldiggMjOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:54:9b:e7:92:4c:72:29:fd:d6:85:c4:e1:1e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Feb 9 16:00:49 2026 GMT
Not After : Feb 10 16:00:49 2026 GMT
Subject: CN=75019d70c895afb2512f4293a1f9dc6b0aa9a314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fa:77:0e:f5:1f:58:f0:b9:49:87:29:d7:ec:
c3:90:16:fb:6c:99:55:d6:63:72:91:fd:84:9f:60:
73:73:04:4e:2e:2c:b2:08:49:15:f6:c8:90:69:c3:
db:a5:f4:54:56:ee:4c:ef:32:a9:46:1b:e8:5c:2f:
7e:2d:ed:d1:4a:6d:78:4e:37:ba:4f:91:d8:65:e1:
b0:ff:08:60:66:e1:01:9b:ac:19:a2:cb:2a:aa:a1:
35:27:74:75:6d:ab:db:08:79:a3:03:90:13:a0:7f:
05:b0:9b:08:ee:e7:de:6c:de:28:58:9c:eb:be:fa:
d6:c5:ad:d7:d7:3e:2e:51:1f:6b:6f:22:f6:b1:e3:
42:a0:25:56:fe:d9:26:b5:1d:6b:1e:cd:bb:81:75:
7f:ed:f9:25:d5:08:39:4c:ea:5e:b0:1c:7b:c6:2a:
fc:34:45:26:3c:03:b2:ee:8f:dc:9c:9c:af:e9:23:
6a:c4:b0:3f:b9:15:20:65:5f:88:0c:a1:1e:ce:b3:
5d:cf:92:eb:44:9b:1d:48:ba:1c:50:a0:9c:4c:2e:
2b:b7:20:37:aa:4f:6e:08:ec:0e:b0:ad:c0:ed:7b:
03:e6:e1:e3:58:29:d1:d9:74:ce:a7:cb:ee:0e:d9:
b2:e5:93:be:38:45:e6:f6:b4:35:bb:d3:21:de:8c:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:01:9D:70:C8:95:AF:B2:51:2F:42:93:A1:F9:DC:6B:0A:A9:A3:14
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:08:99:df:7e:3c:55:12:ab:b3:a6:c8:f8:2c:84:f1:6c:6a:
91:e1:a1:7f:c4:6c:c3:96:c7:33:2f:76:ec:10:b2:77:5f:25:
c4:4a:28:39:dd:ba:6f:e2:88:d5:47:6f:1d:c4:ad:d3:d0:da:
c7:91:ee:ce:c3:5f:cf:67:0b:b4:3b:fd:0d:be:18:3d:49:a5:
d1:f9:be:27:44:84:3e:f4:82:fb:20:b8:3f:04:f0:e6:46:f2:
8f:5a:36:da:d5:a0:8e:3c:87:13:a6:ad:24:2b:0c:e2:49:e3:
35:1d:6f:62:b1:7b:24:ff:d8:d0:94:db:c8:83:8b:61:66:20:
68:17:c0:c8:05:cc:48:a2:1a:f5:ed:14:b7:81:0a:2b:f5:d8:
a7:a1:b8:f3:69:5e:c0:a5:18:5a:be:ea:37:1d:32:e3:28:2d:
d4:21:41:51:0d:ae:9a:0f:9f:1b:37:26:e3:b4:e1:68:ed:69:
1f:27:98:b9:52:18:3d:e5:95:85:f2:d1:be:1f:12:cc:d0:0e:
cf:dc:2d:6c:b6:0b:8b:69:75:d4:2d:b3:74:e6:40:07:f3:16:
92:1e:38:43:84:3e:cd:3e:d8:d9:45:dd:e7:03:a1:45:fa:7f:
6f:7a:02:f5:25:c0:b8:fa:0f:56:47:43:cf:f6:2e:de:73:30:
44:94:29:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:39:18 2026 by rpki-client