This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
File: bu85c9bgdoFBm66Ge9UUVF599do.mft (raw, json)
Hash identifier: ZfM8X4o895wqZhcT8pc/cT4oDC2zdfq+j2YlOZ0QjSw=
Subject key identifier: 30:10:D6:B9:9B:98:91:40:95:0B:E3:71:CD:EA:6E:77:20:58:22:77
Authority key identifier: 6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
Certificate issuer: /CN=6eef3973d6e07681419bae867bd514545e7df5da
Certificate serial: 019BF61A3E705ED731BCED7B444ECC663429
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
Manifest number: 17ED
Signing time: Sun 25 Jan 2026 17:01:13 +0000
Manifest this update: Sun 25 Jan 2026 17:01:13 +0000
Manifest next update: Mon 26 Jan 2026 17:01:13 +0000
Files and hashes: 1: 9DO8d9woQowqNiDzxlMl1Ect3bo.roa (hash: fzBgjDacb2JVb/qyd2WOo94sgyv6vVFqac/sTPnx2ow=)
2: ZxrKMu5ZPIKEQ_SnJ5aRqb0zdYE.roa (hash: DiIJsSuhcAdz+1FlA1JBD5Ze6UThcXCbBy3MPnBKwvk=)
3: bu85c9bgdoFBm66Ge9UUVF599do.crl (hash: RUxS0KitKMMsz408em/KWpMObALQ9/5ezkNj3xJyWpA=)
4: vMRw_AiQzf5NqoSV0yfYQ6L48AI.roa (hash: 5YqohlbQK8Oupp95llwrVM2ByoSdreXVXtijBcRMnrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:1a:3e:70:5e:d7:31:bc:ed:7b:44:4e:cc:66:34:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef3973d6e07681419bae867bd514545e7df5da
Validity
Not Before: Jan 25 17:01:13 2026 GMT
Not After : Jan 26 17:01:13 2026 GMT
Subject: CN=3010d6b99b989140950be371cdea6e7720582277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a8:e9:dc:42:b3:2f:99:01:ab:91:8b:b9:84:
42:32:dd:51:ab:70:f7:f7:84:1a:51:8d:62:04:38:
58:55:d2:d7:6e:ca:62:8f:f4:ec:22:6e:49:fc:41:
bb:8f:cd:d2:6e:da:3f:ad:aa:32:35:da:17:f6:1c:
e2:f3:0b:67:2a:14:c5:7a:73:f3:42:ad:32:d7:88:
71:bb:1c:e9:da:76:6e:21:cf:17:8e:2e:dc:48:cc:
34:a4:8b:f8:55:b2:e1:fe:89:9b:eb:45:27:c6:e5:
1b:69:7a:79:6c:1e:f6:63:28:ca:29:d5:ae:f3:88:
09:bf:0a:80:70:55:23:da:46:f3:04:3e:1f:40:36:
f4:e9:eb:bb:39:f9:4d:1e:39:c6:1d:69:18:0b:20:
11:af:10:d7:97:2d:64:07:c3:8c:a0:cd:a0:23:28:
16:18:06:6c:1c:52:2b:e4:a2:f5:ef:b5:70:90:94:
f8:92:d7:85:43:5e:ff:f5:8b:38:58:bb:9f:4e:0a:
b1:13:dd:5c:33:a3:c6:2b:74:cd:81:91:9d:e5:74:
7a:72:6d:ab:1c:1f:20:83:34:64:b8:46:b7:e2:f1:
38:f1:da:bd:e0:7d:50:fb:82:62:26:a5:58:fe:ce:
16:4c:f1:15:5f:f7:25:34:77:c6:37:5f:1e:f1:b4:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:10:D6:B9:9B:98:91:40:95:0B:E3:71:CD:EA:6E:77:20:58:22:77
X509v3 Authority Key Identifier:
keyid:6E:EF:39:73:D6:E0:76:81:41:9B:AE:86:7B:D5:14:54:5E:7D:F5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu85c9bgdoFBm66Ge9UUVF599do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/087513-d2d6-43c6-9b79-22f0aaa81327/1/bu85c9bgdoFBm66Ge9UUVF599do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c7:bf:e7:7f:84:e7:50:d4:51:1a:97:17:b5:04:75:19:db:
75:bb:0f:a3:01:9e:a8:1d:79:63:c8:1c:88:60:0e:d3:39:47:
6a:c8:22:e1:46:06:11:d4:97:28:1d:f1:07:df:b6:60:40:b5:
df:c4:3c:28:7f:d4:3b:34:64:ef:7a:50:4c:da:17:9a:7f:65:
bc:02:8a:14:b2:5d:86:3a:55:df:ba:e2:fc:be:cf:8b:31:92:
e0:e8:79:47:ce:6a:31:53:bb:fb:4e:1e:03:74:a3:5a:40:a5:
70:fa:92:ad:1d:a9:e0:5e:b5:70:34:f0:28:97:f8:b0:a5:ac:
f7:7f:d1:e5:bf:74:9f:2a:1c:63:a3:00:0b:de:51:6e:16:46:
af:60:0a:ff:3e:b0:22:37:29:f3:7f:e4:96:7c:12:3d:d5:e6:
bf:4c:b8:ef:ed:76:83:21:4e:4d:20:ff:64:ee:73:05:12:1c:
36:1a:d8:2e:ea:be:3b:a6:25:35:a4:17:b4:ad:a8:2e:8e:50:
49:93:2f:01:6b:fa:d6:a7:12:7f:b0:66:a5:d9:25:54:39:d5:
96:33:80:4d:f3:74:0f:90:cf:c7:2f:7e:0b:26:2d:10:4a:11:
7b:9a:55:83:fa:ac:2b:2a:cf:10:f2:5b:c7:42:71:31:93:47:
35:9b:92:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:10:09 2026 by rpki-client