This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
File: BfWa7cKCluKRck95N954jichZAg.mft (raw, json)
Hash identifier: /38JrVogi7Qh9HcGtZ7Gm2MIi00S10OHuN9mV7A1kLM=
Subject key identifier: 9A:88:84:6A:5D:0D:87:78:9C:80:37:1B:5A:27:A8:E0:94:5F:1C:4D
Authority key identifier: 05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
Certificate issuer: /CN=05f59aedc28296e291724f7937de788e27216408
Certificate serial: 019C43FE60069E78F0EFDEC2A172776D5553
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
Manifest number: 172E
Signing time: Mon 09 Feb 2026 20:01:10 +0000
Manifest this update: Mon 09 Feb 2026 20:01:10 +0000
Manifest next update: Tue 10 Feb 2026 20:01:10 +0000
Files and hashes: 1: 6NLwB5WjlcBTVRx7lvLg-PZn5HQ.roa (hash: dWeJDKFFNOPJVpAu+kJb2B3xAofZRJV/6yg2uCUW2mY=)
2: BfWa7cKCluKRck95N954jichZAg.crl (hash: peMl3orY4rTv/oOENDFGod+XThPoToIXfHM0ucZkpB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:60:06:9e:78:f0:ef:de:c2:a1:72:77:6d:55:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f59aedc28296e291724f7937de788e27216408
Validity
Not Before: Feb 9 20:01:10 2026 GMT
Not After : Feb 10 20:01:10 2026 GMT
Subject: CN=9a88846a5d0d87789c80371b5a27a8e0945f1c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:22:03:61:6f:04:d8:6d:cf:57:e5:63:04:
63:85:3f:c8:c1:ad:ae:1a:03:af:7d:e2:f7:1c:72:
f1:aa:ea:fc:f7:84:53:f0:a1:70:7d:27:ac:f7:4c:
b8:d1:6a:38:28:29:0c:e8:e8:21:db:40:67:73:0c:
4f:86:9b:b9:8a:85:6e:2b:d8:95:e1:54:dd:8a:06:
44:e5:c3:fb:a5:79:00:6e:16:22:29:f4:b0:7a:19:
de:5f:08:55:aa:b2:da:63:f0:19:50:1e:e4:80:04:
dc:ef:69:0a:7d:7f:53:f3:a4:29:08:22:0c:c8:f8:
64:2a:4d:96:d5:44:f7:27:a3:7e:ea:a9:13:e9:c2:
89:09:ee:70:ac:a8:83:d8:be:84:da:1f:0d:dc:58:
77:30:3c:54:14:cc:61:d8:f8:60:0d:f7:26:3e:ef:
47:98:28:1d:9a:21:e7:26:40:dc:bd:a1:b2:82:6d:
97:90:a4:0d:7f:6c:9e:d4:51:b7:54:9b:03:fb:33:
16:bf:5a:45:38:48:33:2d:40:0a:14:e1:90:c5:2e:
0a:39:3e:6d:23:c7:14:72:51:1c:3e:62:0d:97:b2:
86:9a:5e:c4:86:a2:83:1d:f8:e7:a5:a1:bf:c7:43:
25:bf:51:9b:dc:15:15:ab:23:c9:9b:7c:9c:f8:21:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:88:84:6A:5D:0D:87:78:9C:80:37:1B:5A:27:A8:E0:94:5F:1C:4D
X509v3 Authority Key Identifier:
keyid:05:F5:9A:ED:C2:82:96:E2:91:72:4F:79:37:DE:78:8E:27:21:64:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfWa7cKCluKRck95N954jichZAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e1d42-3575-4ec1-bc7c-d64368208131/1/BfWa7cKCluKRck95N954jichZAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:11:c1:22:c6:33:bb:74:63:0c:24:4d:ad:4b:55:4c:ff:d0:
20:c3:b8:e8:79:d2:45:64:56:36:ff:eb:37:c0:ed:e7:41:9b:
8f:5b:b2:31:10:21:ea:72:f0:a1:74:2d:71:3b:6d:80:58:33:
78:d5:d0:5d:18:8d:fd:e7:05:87:66:88:e7:36:d7:92:b1:3f:
ca:2d:c4:20:85:ff:d4:ea:bb:82:cd:f8:bf:0e:55:62:e4:9b:
3e:b2:f1:8e:fd:c3:6d:53:c0:a3:78:77:3d:3f:30:20:37:63:
47:b2:be:f2:33:f1:17:d1:7d:ce:5d:4b:90:77:51:1a:4c:31:
23:f3:3e:2f:84:00:50:8d:49:14:3d:26:cf:09:a5:86:f1:ec:
56:a7:d0:89:89:38:8b:69:22:3d:cd:5f:94:7d:29:a2:25:8e:
d1:36:69:b6:77:5f:0c:fa:5b:eb:c1:9b:aa:03:e5:b3:24:27:
85:6c:9e:ca:63:15:c7:7d:73:cc:ac:00:c8:54:95:d8:3f:fc:
85:fb:dd:a3:f9:22:9f:02:23:28:88:b9:98:bc:72:c3:a1:0e:
b2:b6:e3:24:bd:55:14:61:4b:2c:32:63:ff:6b:7b:c4:d1:78:
aa:4d:78:00:dc:d2:8b:9f:20:c0:73:cb:cc:b4:9d:62:22:62:
48:9c:98:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:22 2026 by rpki-client