This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: cnug9Mit1Bv9beeqrwW3P069dw9Sd+XIEFhGB33QcqE=
Subject key identifier: 33:AB:F6:D2:CD:FA:DD:53:DF:55:24:7A:D7:41:2F:D0:82:35:C0:82
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 019C42465A5B35FB1D1ADF6E8AE04B90B16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 0883
Signing time: Mon 09 Feb 2026 12:00:32 +0000
Manifest this update: Mon 09 Feb 2026 12:00:32 +0000
Manifest next update: Tue 10 Feb 2026 12:00:32 +0000
Files and hashes: 1: KYwLTeDRPbWZ7QruokVrRABez8U.roa (hash: K9pjcDveVnPL9nHRQKLenhV/fjpAku11BgS2kkrYnJc=)
2: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: Ur3Ob9WawvdLKIBM90LW8C/R6QjuvUJl8pD3BAN7VmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:5a:5b:35:fb:1d:1a:df:6e:8a:e0:4b:90:b1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Feb 9 12:00:32 2026 GMT
Not After : Feb 10 12:00:32 2026 GMT
Subject: CN=33abf6d2cdfadd53df55247ad7412fd08235c082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:55:7f:29:fd:50:a0:12:a1:3c:a0:e6:3f:af:
79:1c:d2:83:59:f1:73:83:60:e4:19:8f:67:58:9b:
33:7c:39:07:3a:f9:b3:b2:f5:b7:0a:e7:30:d6:c8:
d9:c8:2d:91:3a:d3:82:a1:6a:13:64:2f:a5:27:32:
52:98:56:38:24:33:e5:7e:25:79:48:af:29:6f:d1:
62:3f:2e:2d:fc:9d:90:04:c6:fc:a8:43:c3:70:88:
f3:3f:1f:5c:f7:36:9c:cf:ed:f5:60:d8:c5:24:52:
2e:2a:38:6e:5d:a1:0a:f9:1c:97:a6:50:af:8a:76:
bf:5e:29:7c:15:e7:7d:c9:df:47:a2:22:95:64:db:
fa:8b:39:9d:d0:29:9c:4e:63:8b:a9:7d:f3:74:95:
cd:0a:e8:2c:61:6d:40:4b:ec:88:92:9a:74:1a:3a:
14:16:d8:61:ae:e2:9b:9b:e4:5a:b0:8b:d0:1e:14:
c1:2f:e2:7f:8f:ac:0d:ac:8a:91:14:e1:cd:c7:02:
f7:90:c5:76:17:42:c8:11:ce:cc:f2:d4:21:c1:99:
b4:61:47:f6:0b:92:d5:12:3b:82:55:eb:48:e4:72:
ae:e9:72:ea:83:d1:9e:ed:fc:5b:b4:79:0a:ce:f9:
bf:5f:4f:34:6c:d8:6a:13:4d:83:78:e2:01:92:b7:
7b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:AB:F6:D2:CD:FA:DD:53:DF:55:24:7A:D7:41:2F:D0:82:35:C0:82
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:08:ec:a3:73:f2:48:87:96:5b:80:69:ef:54:4c:cb:bc:3e:
72:06:4c:cd:04:15:3a:12:67:a6:85:29:80:89:34:fa:d7:0c:
2b:30:1c:c0:28:76:4c:f2:cb:47:b3:e7:ba:dd:b9:63:ab:cb:
aa:ce:96:d0:a8:0b:2c:48:b8:6f:24:bd:8b:5d:cd:5a:e5:5a:
97:c9:75:7c:9f:c7:1c:9b:d9:8d:95:6f:de:5f:bf:37:7f:b0:
98:53:d1:78:f2:21:b8:c0:8a:5c:27:31:57:f7:1c:91:61:14:
a1:c2:5d:df:b9:aa:4f:eb:c4:ff:97:cf:c7:39:77:8c:3c:cf:
f9:8e:78:1d:0e:4b:be:89:3b:2a:36:74:9d:b5:ed:d3:44:00:
23:be:78:ee:d0:1f:87:0b:9f:2a:6c:f1:90:18:87:86:ad:c9:
71:cf:fb:02:2c:7c:d4:65:74:4f:d4:93:69:95:8d:be:6d:6e:
11:f2:c9:9e:0f:31:1b:31:d6:6a:ca:d5:0c:ad:89:65:f5:88:
44:f9:58:38:c4:e1:aa:8b:9d:94:14:c4:78:b1:08:fe:a6:c4:
2d:d8:64:92:93:e5:46:7e:d8:34:15:00:63:60:60:48:43:e2:
3c:03:70:2c:67:1d:70:8b:d6:1e:e4:85:52:b0:89:c0:09:c0:
34:56:00:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:08:43 2026 by rpki-client