This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
File: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft (raw, json)
Hash identifier: Bpsfa49A/YN1XJJxH9+P03htqWJU0RUKkKZlMFbsKdo=
Subject key identifier: 72:91:73:FF:95:8D:B3:3C:CF:C1:C2:39:B3:3D:3B:0F:A1:19:E1:59
Authority key identifier: 04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
Certificate issuer: /CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Certificate serial: 019C4322BFFC0903D9EE03C7D4EE3A3C62A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
Manifest number: 150B
Signing time: Mon 09 Feb 2026 16:01:16 +0000
Manifest this update: Mon 09 Feb 2026 16:01:16 +0000
Manifest next update: Tue 10 Feb 2026 16:01:16 +0000
Files and hashes: 1: BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl (hash: +6Cz0E4Zifrnr0c/j1bATJTT/rbE/lPXvaEEBrO1/Fk=)
2: WooYK0ZFDaGgHVC8DJ-VYW0Dmbw.roa (hash: lZyCoxT1QmpmA3Qk/5sG1h73ylWFJ3LJg+hw5CFIWuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:bf:fc:09:03:d9:ee:03:c7:d4:ee:3a:3c:62:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e1831c9eef1b795437fcbd43e295705a1a0547
Validity
Not Before: Feb 9 16:01:16 2026 GMT
Not After : Feb 10 16:01:16 2026 GMT
Subject: CN=729173ff958db33ccfc1c239b33d3b0fa119e159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:e0:d3:4b:eb:ff:0c:11:27:25:50:5f:81:
34:c0:f1:9c:2d:a4:2b:8b:10:cb:22:9b:ee:23:97:
96:a8:21:e9:03:2a:b0:17:53:e6:27:9b:49:f5:0b:
67:b2:8f:9c:fd:a7:55:fa:9c:d4:ae:ad:c6:b2:b2:
62:e1:46:af:5e:5c:bb:fc:41:5a:9c:4e:f8:8d:3a:
46:3e:1f:97:ba:66:de:91:54:ec:c3:11:f4:83:17:
57:a2:f3:06:de:cc:ed:cb:08:73:0d:e0:a4:02:6e:
c3:a2:1f:49:38:90:d4:5c:ca:a5:ad:c3:a5:a6:e4:
47:bf:1b:4a:f8:5c:d0:21:27:c0:77:ce:c9:05:4a:
1b:68:3c:85:ae:b3:8c:f0:95:c4:f3:7f:62:de:49:
7c:20:60:23:c0:32:63:ea:0f:84:30:05:41:a7:d2:
4e:2f:73:83:dc:23:58:2e:3c:a7:4c:c3:2d:dd:78:
d3:ee:f1:73:3c:84:39:b1:3b:17:7e:ae:ec:85:a1:
7b:b9:e9:d3:c1:d4:4d:d3:e7:31:7f:3e:69:52:3b:
c1:08:11:93:96:e8:b8:3f:36:97:c3:56:88:ea:38:
43:b9:12:e6:4b:2c:fd:bd:a7:70:c3:1a:67:d6:ec:
1e:99:91:a0:4a:04:ba:bf:1f:75:cf:e9:43:c6:82:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:91:73:FF:95:8D:B3:3C:CF:C1:C2:39:B3:3D:3B:0F:A1:19:E1:59
X509v3 Authority Key Identifier:
keyid:04:E1:83:1C:9E:EF:1B:79:54:37:FC:BD:43:E2:95:70:5A:1A:05:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/6a4858-46ae-4fb0-bee5-76fb20f4943d/1/BOGDHJ7vG3lUN_y9Q-KVcFoaBUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:81:35:09:83:51:a0:4f:5e:9d:b9:be:a2:04:93:f3:8a:
4e:5f:de:54:64:ac:a5:01:f3:e0:21:b8:34:68:8f:68:08:78:
ed:40:d1:31:27:15:16:72:82:18:c2:56:d5:e8:ed:3d:60:24:
82:1b:15:6b:56:5a:f8:d7:10:3e:a4:e6:32:f0:5e:72:2b:e7:
28:6e:a0:cb:fa:b7:c1:73:62:03:c2:1b:7b:68:53:f3:67:fb:
d7:88:9f:2d:63:dd:63:b0:e6:52:d2:11:a7:ab:2b:94:20:fb:
56:84:bd:89:5c:61:a5:84:83:1f:ea:bb:38:f7:cc:f1:9e:7a:
62:f9:10:f7:47:c7:60:84:63:a2:e9:ae:5b:e6:66:70:3d:ac:
5d:3c:be:93:13:2f:48:e6:cf:32:be:b2:0c:52:ff:ca:b1:4b:
f3:b1:fd:aa:3e:12:ce:23:12:12:73:7e:1e:95:6c:37:4f:5c:
d4:dd:32:2e:f0:a0:b7:6d:2c:e0:e0:4f:f2:a3:ff:84:ad:1f:
40:55:3c:4f:ac:37:0b:58:44:d1:c9:4a:7c:9a:55:98:31:3a:
34:87:5d:a2:fb:17:2f:bd:76:05:4b:54:e8:0b:78:17:2c:61:
ad:d9:ba:f2:ef:19:7a:83:2a:01:9a:ae:ce:6e:72:45:f4:66:
fb:2f:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:49 2026 by rpki-client