This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
File: 1BsIHA35lAorAgpOvoqXScv-rVU.mft (raw, json)
Hash identifier: iOayyOKm4gsdBR7mm1t+U1E5s5rpIX2vAHw+3HHplfY=
Subject key identifier: 45:9F:87:00:29:E2:18:EF:96:DF:00:36:56:08:A1:C6:B2:E1:25:90
Authority key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Certificate issuer: /CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Certificate serial: 019C4358EA9FA3C2E449C38BAA564BB4DADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
Manifest number: 04AA
Signing time: Mon 09 Feb 2026 17:00:26 +0000
Manifest this update: Mon 09 Feb 2026 17:00:26 +0000
Manifest next update: Tue 10 Feb 2026 17:00:26 +0000
Files and hashes: 1: 1BsIHA35lAorAgpOvoqXScv-rVU.crl (hash: v0UTeuFjpe577uZrwE5Rl4qr8Z3Vm1ixgHAnCFEfc6Q=)
2: V9UTYDPHijogtjvHdsrVvOTXN9I.roa (hash: nwNrU9JSn6Zt8gU88wPSRfyZfnAa1IxKUuy1vSNoP6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:ea:9f:a3:c2:e4:49:c3:8b:aa:56:4b:b4:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Validity
Not Before: Feb 9 17:00:26 2026 GMT
Not After : Feb 10 17:00:26 2026 GMT
Subject: CN=459f870029e218ef96df00365608a1c6b2e12590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:da:bb:22:9d:d2:65:fd:37:68:df:a9:e8:5e:
43:54:06:25:99:a8:f6:7c:b1:52:09:28:fb:0f:fe:
ef:8f:94:a2:b1:3d:90:6d:2c:06:70:84:90:5b:e1:
ae:8d:7b:42:b7:87:36:16:cf:7c:3a:74:8e:11:00:
3a:2d:57:b9:d7:99:79:81:8e:c7:d6:6b:af:db:c7:
e4:89:b9:a0:7b:d5:d2:c0:df:cd:9b:bc:0d:1b:c5:
2b:2a:35:78:d3:8f:3b:e1:b2:fb:c7:6d:4e:5b:d4:
25:9b:45:42:4b:de:c7:39:e0:09:b1:67:73:37:38:
4a:ac:c1:d9:02:a7:26:5a:7e:45:0b:7e:e4:ac:35:
44:90:b1:db:93:77:51:26:59:1d:a8:2f:05:8a:e3:
a9:f8:83:3b:72:2e:c8:86:f9:f0:97:c1:02:3c:5f:
4f:09:df:26:03:83:20:b9:c1:ae:8d:d5:29:8b:12:
10:a8:fe:ce:35:12:1d:c3:a9:e1:1b:ac:7f:28:5d:
2e:f4:c2:a2:85:a1:1d:48:64:8f:3e:bb:d6:fa:a9:
2b:90:92:48:fb:4a:7e:47:16:eb:c0:c9:3f:6e:a2:
d6:64:94:55:a3:82:1c:30:9b:e5:88:ba:e9:40:09:
02:fb:f7:0b:1d:9b:b6:71:1b:bf:53:e0:86:3f:2c:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9F:87:00:29:E2:18:EF:96:DF:00:36:56:08:A1:C6:B2:E1:25:90
X509v3 Authority Key Identifier:
keyid:D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:87:ed:ae:4b:dc:e1:75:1d:80:87:bb:5e:c1:48:8d:0f:b5:
b8:f5:3d:91:84:4c:ab:dd:2f:3f:2d:a2:67:2c:ce:21:b2:cf:
fc:18:aa:89:e4:1d:d5:fd:d8:a0:16:11:e0:42:2b:ae:12:07:
27:ae:fe:82:e3:1b:63:3a:39:49:a5:25:9d:2a:bc:fd:c2:a8:
07:11:08:4e:cc:6b:53:d4:af:32:e6:6f:ac:9a:f2:bf:e4:55:
29:36:74:a6:72:ae:37:05:32:5e:c9:41:a6:c2:67:73:82:72:
66:79:11:81:0b:89:80:47:46:2c:22:11:4e:66:09:63:60:7a:
d4:70:8e:d7:b0:05:4c:4b:e4:a5:10:1a:11:17:cb:37:83:68:
ae:34:50:a7:ff:5e:48:8c:41:0d:78:f0:73:29:ea:3e:46:ad:
74:49:b9:e9:0f:2c:94:b7:3e:8e:f6:ab:ca:c8:14:da:21:52:
07:32:0f:ee:64:54:de:bc:84:58:62:29:fa:65:fb:b9:a5:25:
7a:d0:9a:3a:99:2f:78:b8:68:0b:75:f1:46:fd:55:4c:a6:91:
68:95:52:09:57:9e:e7:73:8b:af:46:e1:04:d7:08:8a:21:70:
ea:70:a4:d3:c5:d4:fd:de:9b:2c:ba:5f:71:6e:0a:45:7a:4b:
6f:8b:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:15:14 2026 by rpki-client