This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File: BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier: r7vnuJltix2q9V9YctM673HM4xrd6ky91vnmd+XuN8o=
Subject key identifier: 9D:E6:8E:DB:87:28:9D:E4:B0:F7:AB:7F:47:D1:11:38:20:E3:61:B3
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial: 019BF53DFC53B1804F04391E6F3BB435CCF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number: 06CB
Signing time: Sun 25 Jan 2026 13:00:38 +0000
Manifest this update: Sun 25 Jan 2026 13:00:38 +0000
Manifest next update: Mon 26 Jan 2026 13:00:38 +0000
Files and hashes: 1: 00o4xaDHpiFteTUPLMlUN7rQVoI.roa (hash: ZRGfAq/Hq7q+igfCUvDc/UpA7zCnyl+OWfUsaj7F95E=)
2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: uk+3i3iaY6u/zseorFUvWuMDzGlTBC94L5X1/MGWaq8=)
3: MvKa56Lh9HW9SL8NyMjhRYtv0qg.roa (hash: 3xT11vaLSNBdap8Lh9ldE026pM17b0YhoNdmRaGGcdM=)
4: WrMgI56WRjshSRrApL-slkKjgA4.roa (hash: 0BKk8cC15fl8RJL/MOhUkeA23XV4PJie7eRKpkT7taU=)
5: etH8r7e8XASDtw0AKt0yqnoZqpw.roa (hash: Ew9vIIGcLcL1KV1t2cyyHQVGMjP/TKGuie7BO0Z4Iyo=)
6: smKaRyBksPR8VVMeNllW4CrXk_U.roa (hash: dXCbu0CsSAQ16fQlnuw0mfD9ky7E36GElPP7CmVSu8Y=)
7: wh_A1Ywd9PlQ177YVaXtq3eGCuQ.roa (hash: 53+0yVnHLQ77916U1STNg9D9Toz5NayIfx2I9V3mCKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3d:fc:53:b1:80:4f:04:39:1e:6f:3b:b4:35:cc:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Validity
Not Before: Jan 25 13:00:38 2026 GMT
Not After : Jan 26 13:00:38 2026 GMT
Subject: CN=9de68edb87289de4b0f7ab7f47d1113820e361b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:d9:6a:08:7c:01:12:b9:aa:b0:ac:36:92:
a0:d4:79:ff:70:77:26:6d:b8:27:24:81:9c:ce:75:
01:c2:3d:e3:07:7d:d7:b6:b8:f9:7d:9d:64:7b:71:
15:f0:72:ff:b2:41:d1:6d:28:a5:fe:ee:21:5f:b3:
3d:5e:8c:74:48:55:7d:16:96:ee:82:50:8e:e0:33:
b9:21:e1:b1:5a:3e:8d:cd:7e:e8:0f:9c:98:26:47:
b4:19:d3:01:4f:20:af:49:d7:f2:57:8d:53:c3:47:
09:a5:a4:4f:9c:d2:63:66:61:51:35:43:7f:92:ac:
19:07:25:bc:e5:26:b3:a7:5f:4b:f1:de:64:6a:06:
97:ba:6e:b7:b1:b5:b4:ad:f9:31:06:8e:6c:a1:4c:
ec:78:36:4e:96:f6:2c:31:1c:08:89:ec:16:cc:79:
d4:b3:5c:db:65:2f:26:57:db:dc:e4:49:92:9e:dd:
3c:dc:49:51:f5:b1:c5:f7:26:c7:18:38:a8:ef:33:
69:45:a3:39:96:dd:9b:84:7d:76:4a:07:66:c4:0f:
ed:cb:ad:3e:54:ef:35:62:fe:33:62:25:b0:3f:9b:
e5:9c:d4:66:6f:ef:45:83:6d:10:9e:f3:8e:b6:19:
15:0f:c9:28:9a:91:df:12:fc:de:45:aa:a3:71:bd:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E6:8E:DB:87:28:9D:E4:B0:F7:AB:7F:47:D1:11:38:20:E3:61:B3
X509v3 Authority Key Identifier:
keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a0:24:e9:c3:a8:e4:97:65:58:5d:77:86:5c:77:e4:9a:a8:
76:7f:e1:91:07:51:66:e3:4a:6d:80:6a:d6:3f:75:4f:90:ca:
d4:77:ad:26:28:d5:c8:04:67:6b:56:2e:f7:36:87:2a:6c:e7:
bc:d1:d4:62:a8:9d:51:7f:22:75:69:68:c3:43:c7:2a:4d:65:
cd:10:34:a9:ba:d8:38:f4:96:74:da:f8:9e:52:46:ea:a7:a0:
11:c8:5c:03:e7:2c:3a:68:7b:08:9b:77:af:31:5d:90:ea:ec:
de:9e:d0:af:c7:49:60:03:bf:8a:8e:ff:20:84:b7:4b:45:19:
45:c3:11:cf:98:32:ef:04:f2:1d:0f:a6:1f:a6:67:51:bc:f8:
f9:cb:5c:0a:3d:ba:90:9a:35:c4:f9:a7:ed:32:ce:cf:7b:02:
01:9a:fe:ac:0d:cc:59:2f:49:8a:67:5a:d3:6e:76:a3:d3:12:
74:83:b3:dc:0e:d4:50:7d:7c:48:fc:ac:96:11:df:0f:b4:9d:
1b:e1:8b:19:96:ad:c2:89:ee:f7:be:25:df:cd:7c:06:a5:5b:
15:2a:fc:6c:7d:0f:46:39:30:c8:cc:41:e3:e3:fc:af:d2:46:
f5:38:eb:af:25:5c:e7:c5:eb:9c:8d:03:17:1c:45:09:5c:39:
47:e6:24:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:19 2026 by rpki-client