This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: hXVi/1pcAUQeNvx/lOXDIzB5kOmxGLv73b4hYOPOxu8=
Subject key identifier: 76:9E:5B:04:DC:50:84:7A:AC:AE:E4:99:1E:0A:95:74:A7:CC:A1:3E
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 019C427DF2956F03C78089A31593C5C0FBE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 1815
Signing time: Mon 09 Feb 2026 13:01:16 +0000
Manifest this update: Mon 09 Feb 2026 13:01:16 +0000
Manifest next update: Tue 10 Feb 2026 13:01:16 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: HN/igCTfKFpMiLkttweyKbF2KDhfhewEUhsv0+WB2/w=)
2: dUgHWvpijFkm-akrw3sQ7y1cNbs.roa (hash: VxdxXUFgModksbeo9KT6w1E0Db503HU1KT/Tj4UeJQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:7d:f2:95:6f:03:c7:80:89:a3:15:93:c5:c0:fb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Feb 9 13:01:16 2026 GMT
Not After : Feb 10 13:01:16 2026 GMT
Subject: CN=769e5b04dc50847aacaee4991e0a9574a7cca13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:b7:48:78:22:9b:7a:83:6b:ce:1b:9d:88:
dc:f3:3b:a0:f3:c4:70:1b:3b:44:ac:c9:af:44:21:
ba:c4:bc:49:de:1d:a3:c3:2d:2c:08:bc:07:85:a2:
13:57:49:64:b8:3f:3f:b7:e7:92:71:ab:19:4e:48:
fd:32:fb:a7:20:c6:9b:2e:a7:e2:c9:88:c7:f5:04:
15:2e:44:51:ff:6a:e8:25:a0:6d:86:c9:e9:30:4f:
87:b2:63:e7:06:8c:c8:d8:40:a6:bc:9c:db:e7:22:
a5:92:2e:b1:70:77:4a:b0:f1:5d:c6:da:51:8a:d4:
46:c8:37:96:43:b2:48:03:21:cf:72:88:89:c3:45:
94:0e:1e:75:f4:8e:e2:34:2c:70:65:d2:05:12:00:
25:3c:6e:9c:a6:e7:f2:83:e3:46:4a:be:d5:ab:e1:
5d:02:c1:15:6a:1b:18:da:30:4e:d5:6a:e5:a2:0e:
0e:98:93:a8:9d:4b:eb:d3:f7:91:94:c5:a8:66:40:
80:8a:3e:d5:2a:b0:97:cf:97:2e:2d:b5:b1:20:72:
f3:4e:74:fc:c0:48:56:4e:70:b3:b2:b5:87:23:a8:
29:79:75:cd:32:76:21:d4:42:65:79:10:a6:0f:2f:
e0:5f:bf:b1:38:77:f6:7b:ea:1b:8f:d8:38:b5:8a:
9b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9E:5B:04:DC:50:84:7A:AC:AE:E4:99:1E:0A:95:74:A7:CC:A1:3E
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2b:7e:b1:30:ee:2c:24:cc:b2:dc:fb:31:28:20:96:ff:72:
fe:76:b0:09:53:49:41:56:7c:47:47:25:95:06:aa:92:96:23:
af:54:5b:02:74:17:b9:6d:aa:3e:44:a4:56:62:93:e0:66:2f:
08:74:68:5f:d1:58:61:8a:34:b9:48:c6:7a:64:be:d8:51:d6:
15:d0:90:53:7b:da:4c:e0:93:5d:18:0a:3e:43:47:b1:bb:4e:
64:a8:84:96:be:1d:cc:a9:0b:09:55:6b:a9:7f:60:1e:f8:08:
90:9b:e8:24:b5:92:25:00:a5:30:d6:d9:19:8e:d9:5d:99:de:
22:2e:78:be:44:50:59:6e:0c:5e:0e:d9:9e:9e:44:40:29:c8:
5f:fd:4d:6d:e5:e5:09:ac:5b:9b:4d:6a:d6:e8:ec:65:5d:07:
17:d1:6b:b5:4c:e7:4f:d3:8c:39:d3:11:65:1c:82:31:fe:2f:
f8:97:78:f2:d6:51:49:d1:8f:20:c8:91:7c:3e:c0:84:45:47:
a0:9a:1b:88:2b:b8:7e:9f:30:96:39:36:e8:fe:68:c1:e9:ac:
8b:1f:f2:bc:90:e2:03:33:95:f9:4b:1c:c6:7a:cf:1e:3c:0b:
04:1a:8d:ce:89:52:c4:db:78:71:38:25:78:c9:81:2c:c2:69:
ac:fc:e5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:19 2026 by rpki-client