This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File: bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier: ec7I1j3kxrRLaEWRjdxJBvKOyuTuQ/WWBESryiiyHCo=
Subject key identifier: 1B:E8:3F:20:88:B2:64:A0:FB:CE:2D:DC:29:1F:37:69:67:22:5C:60
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 019BF3BD7AE8D286C0BC78BE479529FCB951
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number: 1018
Signing time: Sun 25 Jan 2026 06:00:39 +0000
Manifest this update: Sun 25 Jan 2026 06:00:39 +0000
Manifest next update: Mon 26 Jan 2026 06:00:39 +0000
Files and hashes: 1: Dzfij-56Js_7H-jbcQxH-p0cmAs.roa (hash: Z+CaW8ckDIWY/oKH9+ByV5fYpxK+zdPr9T/cG0kLCqw=)
2: I1YJFxw21cTu-Qd8EAxDnplO6Zs.roa (hash: cAwDZZhWlnexH7GwqbKuslWZIOJhOccecpBC86Dnr2Y=)
3: Mt-Opg160kBARBTU28meoXARLd8.roa (hash: TB7+3UZC0vW7vpoGODBSbw4rk6M41GF33QLmygPvyP4=)
4: WgdXGCq5750IZB5Te3z2Ts4JuHo.roa (hash: BuQ1Y5enK/3DpIsodzPPjyugSuHNto6XMIOPzcMe6cQ=)
5: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: mt+RQMgizcbn/T8bIE56ePdg9l0q4LFOysCBZZruTg4=)
6: iwnR0_v7DrZOMyhOwK5w8tNyMio.roa (hash: m9wlWVaLcH73FDQVsUWe6KN6JmhaiRLX69jEcq4ITXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:bd:7a:e8:d2:86:c0:bc:78:be:47:95:29:fc:b9:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Jan 25 06:00:39 2026 GMT
Not After : Jan 26 06:00:39 2026 GMT
Subject: CN=1be83f2088b264a0fbce2ddc291f376967225c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:83:31:8b:82:a2:67:37:cc:ab:1a:35:38:53:
38:19:5b:7b:c0:1f:0d:8b:3c:55:3d:35:7b:58:ec:
b3:e7:a0:68:3f:86:4e:da:79:07:58:f7:4e:a7:bf:
91:36:92:74:31:8b:35:a0:2c:60:f9:55:b5:c7:73:
5f:46:8f:16:7c:a7:45:09:bd:b0:50:49:e1:59:8e:
f8:85:08:10:14:a7:0a:9f:ed:9a:b5:fc:8e:12:5b:
e3:9c:f5:f4:c2:23:60:33:86:c7:82:1a:89:72:b1:
95:95:65:47:b6:1c:08:05:18:21:68:33:ad:ec:6f:
08:69:25:1b:87:78:34:00:40:6a:79:a1:91:e7:ce:
bf:90:75:d1:6f:b4:e3:c8:e6:75:5e:01:38:d6:8d:
b7:b2:8b:f9:12:fa:03:3d:8a:a8:c4:71:d1:49:e1:
bc:a5:d9:be:7a:c0:ab:d6:39:87:72:cc:ac:dc:cc:
9a:33:c8:14:bd:a7:61:d6:1f:e3:1f:dc:dc:39:06:
0e:41:6f:df:bb:9b:31:c2:0d:64:4c:7b:53:c4:fe:
ec:66:95:dd:b2:ae:d1:45:4e:87:cc:8d:95:24:2c:
f6:d5:e3:d4:ed:7d:ec:ab:42:91:d2:39:19:48:4f:
fc:83:aa:dc:8a:81:44:d5:91:81:e2:e5:d9:9f:97:
7e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E8:3F:20:88:B2:64:A0:FB:CE:2D:DC:29:1F:37:69:67:22:5C:60
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:8f:35:0b:2d:aa:b5:7a:9e:fb:0f:7e:96:df:e8:34:95:fe:
41:f7:83:41:6b:6a:b5:eb:02:c9:1b:4a:50:44:98:aa:33:ec:
02:2d:12:87:96:15:52:fc:25:23:0d:d2:89:1d:f2:2f:b2:8c:
a4:9b:e3:70:79:fa:b3:7e:11:40:5d:d9:82:f6:df:ed:2c:6d:
31:5e:83:32:71:ba:24:d4:a2:f2:d0:a8:7b:38:ce:1e:7f:95:
44:89:ec:aa:ad:8d:8e:1b:0a:bf:94:23:36:fd:2c:f3:73:8d:
d2:a6:7f:e7:f2:3d:0e:75:36:76:d2:22:9a:fb:70:d3:d8:e4:
20:ff:67:61:9c:26:91:8d:2d:cf:84:7a:6c:d6:6e:0b:d9:8f:
10:15:11:3d:50:79:47:6c:07:f0:c0:1d:41:27:f4:12:2c:47:
d0:7f:21:02:71:1c:1a:8d:00:ce:d8:cd:2a:6b:5a:6f:c3:de:
ba:70:75:2e:2f:55:d1:d0:df:58:fe:57:53:b5:93:9e:73:98:
80:d8:b0:0b:10:07:59:16:aa:71:c6:37:e0:be:4b:b6:f9:9c:
34:41:79:5c:f5:a2:db:31:d4:02:e0:fc:ba:bc:07:b8:92:a3:
b3:f7:2c:84:52:0a:0d:36:54:50:3e:a0:eb:ac:43:14:79:a5:
3b:2c:c3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:54:32 2026 by rpki-client