This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
File: BB71CB15135EC006B13635B36AA5A30446B52310.mft (raw, json)
Hash identifier: YrtsWog7YPDjbyrNoYjqb9wG5qhWDB4XsmgHIgJ8KDY=
Subject key identifier: 39:EC:C4:EC:5E:30:CE:71:0B:C1:2B:61:69:40:B2:95:6F:C3:63:D1
Authority key identifier: BB:71:CB:15:13:5E:C0:06:B1:36:35:B3:6A:A5:A3:04:46:B5:23:10
Certificate issuer: /CN=bb71cb15135ec006b13635b36aa5a30446b52310
Certificate serial: 3584A5FA843FB8EFADB14CA2E82F832F68240883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3HLFRNewAaxNjWzaqWjBEa1IxA.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
Manifest number: 57
Signing time: Mon 09 Feb 2026 03:32:25 +0000
Manifest this update: Mon 09 Feb 2026 03:27:25 +0000
Manifest next update: Tue 10 Feb 2026 05:49:25 +0000
Files and hashes: 1: BB71CB15135EC006B13635B36AA5A30446B52310.crl (hash: NjTj/i/2mhs7DD2lEA5LpcWFnVECDWeBcfAt96ZUvZc=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.crl
rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3HLFRNewAaxNjWzaqWjBEa1IxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 05:49:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:84:a5:fa:84:3f:b8:ef:ad:b1:4c:a2:e8:2f:83:2f:68:24:08:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb71cb15135ec006b13635b36aa5a30446b52310
Validity
Not Before: Feb 9 03:27:25 2026 GMT
Not After : Feb 10 05:49:25 2026 GMT
Subject: CN=39ECC4EC5E30CE710BC12B616940B2956FC363D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:02:37:d8:fa:6a:96:c6:e4:ef:06:00:b7:41:
92:5a:24:21:03:ab:3e:a8:9c:e2:34:22:fd:29:3f:
b4:2a:32:e6:c6:09:3c:cc:ab:76:5b:06:34:c0:3d:
c5:56:8e:f9:24:fc:78:f1:98:fb:c7:72:21:49:15:
45:64:ac:3e:98:d6:57:53:da:98:6b:55:75:af:00:
35:50:9d:23:f4:af:1d:91:8c:5b:11:bb:40:e2:84:
e4:23:61:f2:fe:5b:bd:6a:e4:49:01:81:e6:9f:e6:
39:26:eb:26:c6:1d:be:be:28:b4:2b:30:22:73:70:
9b:3a:e3:47:2f:50:fb:80:ba:9f:45:7d:cc:cc:16:
d2:a1:b5:6a:47:af:89:3d:d4:66:40:68:25:1b:ff:
27:14:6e:04:e7:a3:7c:5a:e1:a7:11:b6:27:d8:94:
97:e9:66:ea:fb:b0:7a:76:98:41:ed:d4:ec:70:4c:
73:b8:bf:e6:84:44:bc:30:07:a0:ee:50:bd:68:1a:
b8:18:96:40:41:43:8c:80:1b:34:5e:b2:ee:b6:66:
ff:c2:e1:9d:01:cd:02:da:89:0a:50:e0:f3:57:0f:
eb:4d:7b:56:fd:71:fe:73:b5:3e:22:b6:fb:1b:3b:
6d:12:d2:80:22:df:35:31:8a:9d:de:62:c4:56:ef:
cd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EC:C4:EC:5E:30:CE:71:0B:C1:2B:61:69:40:B2:95:6F:C3:63:D1
X509v3 Authority Key Identifier:
keyid:BB:71:CB:15:13:5E:C0:06:B1:36:35:B3:6A:A5:A3:04:46:B5:23:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3HLFRNewAaxNjWzaqWjBEa1IxA.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/779a7903-2edb-48ad-abeb-ee39a79f8507/0/BB71CB15135EC006B13635B36AA5A30446B52310.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:f8:de:f5:82:20:9e:9f:28:10:ab:6f:da:37:ab:13:f9:cf:
97:10:a0:0c:6c:1d:97:a9:cf:cc:75:c8:19:71:09:6f:60:80:
02:47:aa:f6:41:66:4d:ab:cd:ae:70:c8:fc:4b:84:db:7f:a4:
62:5d:3c:02:82:c9:e1:a3:79:bb:46:68:1e:f4:a3:c3:0c:f4:
75:7a:36:9a:0d:02:ff:88:05:ee:4d:51:05:56:5d:7b:c7:2f:
34:ae:90:6a:bd:bc:62:7a:44:fe:13:20:34:78:ee:68:3a:c7:
81:83:c5:5f:aa:e4:94:1d:a8:ab:8a:7d:57:dc:60:04:a6:9e:
f9:05:52:ff:eb:4a:24:89:e5:8a:e6:c1:ae:02:e1:56:a5:52:
d5:2c:14:50:cb:30:fb:03:29:5a:9a:53:50:f8:29:c0:39:16:
1d:d1:62:2c:7f:8b:ec:f4:98:bc:db:61:27:49:aa:4e:be:59:
fb:e1:86:11:d2:8a:fe:c2:d9:3d:f4:f0:e2:51:ff:6b:63:a7:
a7:dd:e3:0f:ee:ea:fd:2a:dd:e8:4d:53:98:e7:b2:c2:e0:c1:
26:bc:b6:f8:41:5d:4f:fb:bd:c1:7f:9f:ee:30:78:67:53:b1:
71:e9:16:3e:2f:10:2d:d4:61:3e:26:ab:c4:25:02:b4:0e:7a:
2f:0e:7c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:48:08 2026 by rpki-client