This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: rX62Ad4lGygZMTXXLOtXMCONczPM7X92R4e+M/naF6Y=
Subject key identifier: 07:2E:A5:F0:AA:06:08:31:C0:AB:DF:C3:01:56:6E:74:90:2E:E3:0F
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 019C446BE60FB1B0E1C107886EDA1565A95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 1811
Signing time: Mon 09 Feb 2026 22:00:47 +0000
Manifest this update: Mon 09 Feb 2026 22:00:47 +0000
Manifest next update: Tue 10 Feb 2026 22:00:47 +0000
Files and hashes: 1: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: vNrOiaLiHUlnijmYqjOIwLSZLXWLKeW6OOA7kAZnV0k=)
2: kaRkyfV1MwxlwsCGhUi_W0UWIF8.roa (hash: 511gj5n0cWK7efZD4Z78jlHGsIg8Oq9OMyiECFsB3GU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:6b:e6:0f:b1:b0:e1:c1:07:88:6e:da:15:65:a9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Feb 9 22:00:47 2026 GMT
Not After : Feb 10 22:00:47 2026 GMT
Subject: CN=072ea5f0aa060831c0abdfc301566e74902ee30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:75:3d:f9:fe:c6:97:21:23:d5:e2:3a:25:27:
ab:f1:b1:f3:a0:e5:b3:b7:bb:fc:0d:a0:7f:67:41:
10:49:d7:0a:f0:6b:ce:d2:cb:c1:c7:bf:af:a9:7b:
d6:08:fd:8f:62:de:b3:65:e3:a6:6f:d8:31:c8:ce:
83:b2:b0:27:c9:04:80:c0:ae:28:d7:85:e1:31:0d:
4d:8a:fd:c3:51:51:81:3e:42:fa:75:7f:73:4a:2a:
60:fd:c4:48:63:41:b7:76:4d:91:fa:a6:69:25:90:
76:4a:e5:24:8c:bf:49:64:d1:8c:bc:73:df:03:28:
25:43:cf:65:1c:d3:e0:0e:73:68:68:0e:8d:2c:30:
b9:fb:6a:20:2e:87:e1:98:49:a8:b5:5e:57:86:4b:
f1:09:f7:c8:bb:79:f1:b2:77:c0:06:2d:ff:d2:a7:
ad:80:55:1e:37:75:de:07:cc:5c:f7:53:72:ab:96:
00:ea:e3:c7:0a:58:41:08:ec:ed:5b:0a:0f:22:23:
c0:1e:fa:1c:50:5b:68:3d:c6:f3:3d:9c:4c:b0:ea:
53:8b:ef:ca:3e:bb:7a:c3:ef:cb:bc:f1:22:76:08:
4b:db:b0:db:82:04:74:fa:5d:a0:f7:2b:ba:d3:48:
6e:9f:da:4a:26:97:42:74:41:b4:0b:70:ad:a9:dd:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2E:A5:F0:AA:06:08:31:C0:AB:DF:C3:01:56:6E:74:90:2E:E3:0F
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8c:91:96:c4:c3:50:b4:8c:04:c4:6b:c8:3d:d2:97:e7:4e:
58:4b:71:f3:7a:2b:31:62:a2:d1:5a:d2:7d:4c:5d:36:ce:6c:
eb:63:62:4e:bd:d5:f0:6d:7d:00:42:34:4c:a3:03:cf:a1:6e:
69:f3:07:68:72:5c:d1:06:68:ba:c4:35:b3:23:0e:e4:2a:02:
f0:98:64:87:10:b9:2c:ff:07:fe:b4:b9:bd:78:8f:82:0d:0f:
f9:69:ed:94:1f:74:9c:e7:a8:00:50:37:58:4a:be:34:cf:73:
91:77:34:40:ac:d7:89:79:de:29:5b:39:7d:7e:ba:c1:cb:aa:
4e:bb:1c:a5:a7:6d:10:17:e0:62:1f:a9:08:d0:47:70:08:8e:
ca:0b:ce:45:a5:82:81:ee:41:c9:11:6f:9e:2c:33:9c:60:30:
b3:ca:d9:0e:09:5b:62:69:e5:7e:50:80:64:ea:c5:27:d6:99:
5e:2c:27:35:78:1f:84:e7:08:8f:40:74:a1:85:bb:c7:27:11:
0c:65:17:92:a2:0d:2f:4a:bb:b3:63:66:43:e9:42:28:a9:11:
4a:51:1b:97:d0:5c:00:57:75:e2:a6:bb:8c:31:a8:30:a3:72:
ae:4a:1d:47:b4:20:8b:38:6b:53:6b:22:9b:dc:d5:f8:77:10:
af:76:21:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:00 2026 by rpki-client