This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier: 40Stke7kLFC3OKbmh9NF7xqM5lRY2jAW6Jo8PC+mOgg=
Subject key identifier: 7D:59:22:1B:73:42:63:7A:F4:2A:F5:17:6F:97:86:E9:C4:19:3C:90
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer: /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial: 019C432285664E1EECC2D47BA1CC73C3D9E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number: 040B
Signing time: Mon 09 Feb 2026 16:01:01 +0000
Manifest this update: Mon 09 Feb 2026 16:01:01 +0000
Manifest next update: Tue 10 Feb 2026 16:01:01 +0000
Files and hashes: 1: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: 1MiV8h4hAPaZGfim3kTNw8KbtyFXQWsrE0msQwH8F5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:85:66:4e:1e:ec:c2:d4:7b:a1:cc:73:c3:d9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Validity
Not Before: Feb 9 16:01:01 2026 GMT
Not After : Feb 10 16:01:01 2026 GMT
Subject: CN=7d59221b7342637af42af5176f9786e9c4193c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:6c:b3:3a:d9:ed:fd:04:55:6f:f7:6d:c5:
71:a5:47:dd:6e:af:63:f8:23:c3:6a:b7:6f:ee:44:
5b:7e:a5:9e:2a:6b:0a:c3:49:aa:e4:19:e7:eb:69:
c6:2f:ba:f0:b1:be:b1:63:ef:ed:8f:fd:82:46:a4:
1b:71:2a:ad:31:d8:ee:4b:68:07:b9:0a:df:9d:d1:
da:cb:b1:59:a2:42:98:63:03:ba:c3:ae:f1:06:59:
0e:47:91:07:46:0d:57:39:2d:9f:a2:e1:14:5c:22:
c8:c6:ed:0a:db:0a:cb:b2:8a:63:ef:b6:4d:16:11:
9e:83:57:ba:1d:a1:78:6a:19:c2:27:f8:54:27:4f:
38:57:94:be:a8:67:61:9d:56:ca:65:f9:7a:64:c5:
8c:e6:9a:2a:dd:ca:28:ff:d5:56:bc:1f:f4:7b:27:
b9:c7:24:3b:32:0c:27:6c:ab:4a:1c:29:3f:30:3e:
a2:d9:9f:79:de:ae:e5:47:e8:ce:5d:40:61:4b:14:
4a:01:dd:48:ec:4d:cb:65:4a:07:88:6e:7f:c8:7e:
01:53:21:41:c1:e5:51:ce:e6:dc:e4:86:93:6c:4e:
07:7f:45:25:f8:4c:f9:f1:e8:55:f3:92:73:88:ad:
db:cf:fe:31:5c:12:15:0f:76:81:6b:f3:80:c7:ae:
6e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:59:22:1B:73:42:63:7A:F4:2A:F5:17:6F:97:86:E9:C4:19:3C:90
X509v3 Authority Key Identifier:
keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a0:2b:82:79:3a:90:9c:73:0e:c2:8d:0d:e1:22:cc:eb:81:
70:ab:99:cd:92:f0:ba:df:48:d1:8e:4b:dd:4e:df:4b:53:dd:
9f:02:bf:79:b2:5d:00:82:b4:0e:79:09:c4:0e:20:3e:25:06:
ac:61:4c:58:d5:ac:da:a1:2a:24:29:06:1f:63:6e:2e:01:4a:
3b:cf:ba:cc:04:85:15:d2:ab:0b:fd:cd:09:91:d9:23:cc:6c:
19:8b:29:b2:05:41:bb:71:31:7e:fe:7e:d0:93:39:42:89:68:
2c:93:b7:b1:1a:c3:17:ba:15:56:f2:5d:bd:43:5d:87:99:24:
8a:01:f5:20:aa:06:9e:fa:d4:62:38:62:47:2c:9a:e3:14:37:
8c:a9:08:1a:90:74:1a:6e:7a:91:66:79:9f:a6:d5:2c:a2:74:
32:b2:b7:23:23:e8:87:33:21:40:c8:ec:c9:ec:86:8f:88:30:
18:af:29:81:db:78:99:fb:18:a8:07:be:3d:02:b1:da:ac:f0:
fb:97:dd:84:9e:b9:de:c7:e1:89:f5:cd:9c:c6:f8:01:17:2f:
39:79:06:af:de:5c:be:58:12:06:55:45:c6:76:84:e4:63:db:
de:b2:fc:0e:e9:70:6f:52:7e:26:ac:5b:9a:48:f1:f0:c3:80:
6f:d6:30:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:28:39 2026 by rpki-client