This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
File: BySLUtI-vSN7iotuY-3QLf7vmEw.mft (raw, json)
Hash identifier: /rLlSTAPdMoXIaluMFYg2IbnDL15I2rvxw2gHmXe82A=
Subject key identifier: 01:24:80:FD:50:59:65:9D:86:30:14:D8:41:26:5F:AA:FF:25:E3:DD
Authority key identifier: 07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
Certificate issuer: /CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Certificate serial: 019C42465FA5E56846FF3D71F443B54E08A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
Manifest number: 04F8
Signing time: Mon 09 Feb 2026 12:00:33 +0000
Manifest this update: Mon 09 Feb 2026 12:00:33 +0000
Manifest next update: Tue 10 Feb 2026 12:00:33 +0000
Files and hashes: 1: BySLUtI-vSN7iotuY-3QLf7vmEw.crl (hash: lsNGLAK+ZCHP3PiE52TBr74pESQufjre6rqOIleAUeE=)
2: WjdZRnfpfiK7EPcTHN6T_Hbhi2g.roa (hash: c2NkdQLg1UmIOJ9gE664QKmmEytOaSIm+ZEQFc0pnYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:5f:a5:e5:68:46:ff:3d:71:f4:43:b5:4e:08:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07248b52d23ebd237b8a8b6e63edd02dfeef984c
Validity
Not Before: Feb 9 12:00:33 2026 GMT
Not After : Feb 10 12:00:33 2026 GMT
Subject: CN=012480fd5059659d863014d841265faaff25e3dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:bd:b6:92:55:a7:79:78:21:26:7a:23:2a:
5c:a1:e8:9d:24:d8:93:cd:ef:79:1f:81:8c:3f:c8:
45:53:94:2a:b9:75:5f:5b:c0:b9:1c:57:2d:bd:d1:
48:d9:6c:7b:50:72:0e:14:b7:89:9d:24:ff:a4:4b:
4c:04:6a:ee:d6:de:ad:95:04:e9:85:81:98:73:cc:
de:28:ad:a2:7a:8b:73:ba:e4:11:fd:7e:36:3a:ec:
df:ba:01:94:d4:bb:e3:59:a0:05:54:4e:1f:f6:c5:
3b:0d:fc:1e:4f:11:ab:45:74:12:43:ed:2f:30:f0:
10:03:30:0a:20:dd:38:64:28:9e:7d:90:71:2a:80:
d7:e9:91:5a:b2:e3:ea:94:cb:56:18:63:f7:61:32:
5c:f9:d7:48:13:e9:da:b8:d4:2d:d6:ff:8b:bb:b0:
d3:be:3e:a5:74:a2:27:02:04:60:6b:fb:9d:36:1c:
f1:86:42:fe:06:65:4a:31:72:7d:f0:e1:ec:0b:b0:
20:e5:57:b3:a1:67:47:39:58:ee:2b:a0:57:87:37:
05:5a:2a:34:50:69:02:44:30:cb:17:08:b8:dc:32:
65:54:b7:0c:27:02:5e:43:19:e0:8a:f4:24:bd:94:
53:3f:cd:e5:39:32:14:ee:d0:db:d0:0f:d9:80:71:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:24:80:FD:50:59:65:9D:86:30:14:D8:41:26:5F:AA:FF:25:E3:DD
X509v3 Authority Key Identifier:
keyid:07:24:8B:52:D2:3E:BD:23:7B:8A:8B:6E:63:ED:D0:2D:FE:EF:98:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BySLUtI-vSN7iotuY-3QLf7vmEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ced9b5-9440-4d0b-be1f-1b2e4105eb7e/1/BySLUtI-vSN7iotuY-3QLf7vmEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:1c:51:b2:3f:de:71:af:d2:4d:13:51:d0:2a:71:98:82:5f:
3f:87:4a:f1:b5:a4:db:a8:3b:18:74:19:ba:db:b1:6a:7f:ed:
d8:5d:a1:5f:52:3a:a0:b9:1b:55:00:f1:39:57:21:00:94:38:
07:49:34:61:fa:52:ce:6c:5b:08:eb:6b:c4:5d:c4:d2:67:95:
15:6f:59:e0:18:67:74:5d:31:ca:62:39:3f:b4:92:7d:0b:63:
28:d8:14:4d:e5:41:49:08:e7:5a:93:87:cd:39:7d:c4:01:a0:
2e:5e:d3:a1:c5:fe:c9:7d:3b:20:11:71:ab:aa:4b:9b:f3:eb:
91:d5:42:d6:b7:8c:f0:ab:0f:a2:87:2e:26:ba:ff:0c:0d:60:
63:79:ca:34:72:85:ab:86:4a:49:1a:4f:5d:a6:5a:f2:69:b9:
a8:16:0a:2a:8e:15:b5:d5:ba:a8:b6:91:83:af:ea:05:eb:d3:
f9:a8:1f:9b:ae:21:ac:12:ae:37:92:2d:d0:36:22:e8:0f:d9:
d6:b2:62:a4:d3:12:6f:3b:85:9c:cc:60:9f:da:a1:38:5d:3b:
ee:dd:23:ce:79:86:aa:c6:ff:7d:3c:ba:f4:1c:69:78:18:df:
aa:7e:f4:29:93:63:e1:5b:0f:62:58:75:94:09:fb:e1:bb:ca:
c8:4e:81:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 19:51:49 2026 by rpki-client