This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
File: VGWtK05zj1QvoOaBOPNiZkQeKaA.mft (raw, json)
Hash identifier: dlJ6vqTRC3AEEbpNouEtLyu2q5MTwCJYSEvdQ/difVU=
Subject key identifier: D4:8B:9D:1A:F5:97:0F:CD:E1:52:DA:29:26:C8:33:38:66:46:15:57
Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Certificate serial: 019C42EB14AFB28A2BF3BFA3E1CB58A59E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
Manifest number: 0EBE
Signing time: Mon 09 Feb 2026 15:00:28 +0000
Manifest this update: Mon 09 Feb 2026 15:00:28 +0000
Manifest next update: Tue 10 Feb 2026 15:00:28 +0000
Files and hashes: 1: VGWtK05zj1QvoOaBOPNiZkQeKaA.crl (hash: 6sQefkbVRqLNLKuy1VfSdjF0Pf/Ig/peTC7DrLkFRzg=)
2: n28cYCSgTnP520B781yYlApy_Gg.roa (hash: oPppogarovRMmUPnZholMB6dsQYDDsQ39+mpcmiwa7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:14:af:b2:8a:2b:f3:bf:a3:e1:cb:58:a5:9e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0
Validity
Not Before: Feb 9 15:00:28 2026 GMT
Not After : Feb 10 15:00:28 2026 GMT
Subject: CN=d48b9d1af5970fcde152da2926c8333866461557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e1:c4:40:52:82:ec:03:88:56:8b:ba:d4:9b:
92:b3:6a:09:77:be:e3:e4:b6:2d:31:91:7c:6a:c7:
c5:b3:79:c7:93:37:07:9c:dc:1d:e4:e6:dd:89:37:
59:87:18:67:bd:ac:99:f1:2a:90:ee:67:b2:cd:8f:
11:47:df:1d:74:14:9b:ab:0a:df:8e:97:ec:0e:e1:
e0:6c:5e:61:1a:91:8e:7c:20:c2:a7:ca:5e:1e:65:
a7:df:0c:56:95:f8:8b:68:e5:d8:12:85:c4:db:37:
ab:b3:d8:ee:38:81:b8:67:30:bd:1a:51:fc:ea:eb:
54:43:1e:25:43:89:1f:93:e5:6c:88:de:cc:a2:95:
d5:15:d8:d7:0b:55:74:bd:5c:a6:6a:d3:9d:76:f9:
d5:3c:8c:b9:6d:27:c7:c9:f2:e0:88:91:a3:aa:d4:
88:32:45:ff:f6:a8:44:d2:e0:10:2e:88:14:da:9c:
32:14:9c:60:d3:8e:47:39:4a:54:0c:5b:07:5f:9c:
97:41:9e:32:82:43:cc:19:6f:47:04:c7:68:08:58:
18:7e:3b:53:e3:aa:2d:06:93:2f:ae:01:53:b2:26:
ea:a8:76:fb:9a:f1:f6:33:af:a6:6d:c9:9b:16:85:
0f:2c:07:4b:b5:65:25:f2:a5:5a:a0:02:1e:3a:a2:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8B:9D:1A:F5:97:0F:CD:E1:52:DA:29:26:C8:33:38:66:46:15:57
X509v3 Authority Key Identifier:
keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:c6:3d:aa:d3:a1:0b:86:79:97:76:b1:fa:7c:7b:f7:dd:95:
52:7c:5a:b3:e1:b5:21:26:f4:fe:36:98:0e:d8:34:d4:e4:4c:
fb:4b:58:50:4c:49:44:c7:78:d1:9f:6c:c1:23:2d:8f:85:7b:
2d:e4:b0:cb:9e:db:a1:60:fc:f0:82:0a:71:72:52:e4:0a:79:
3e:dd:4f:c8:76:b7:34:7f:45:c7:aa:d5:f0:af:b1:5c:b7:1f:
0e:b8:2b:e5:03:28:3c:ce:5f:a2:a2:10:25:54:0b:ba:cf:88:
6d:aa:b3:43:20:80:88:cb:ce:e1:f6:34:94:3b:6e:4c:42:c7:
82:bf:43:01:61:d3:40:a1:28:45:bd:a9:77:c9:96:83:21:c5:
b4:56:e9:4f:d7:94:af:09:dc:83:18:91:85:f7:b2:8a:a6:cc:
d7:3c:a4:18:ad:37:f0:cc:59:cd:28:75:e8:f4:e8:ba:f9:33:
c3:94:5f:e1:1a:aa:35:70:61:0a:cb:f4:cf:c0:e3:f4:db:a7:
b6:c1:4c:66:7f:9d:24:8a:64:a1:a6:29:03:aa:33:93:32:d0:
c3:0a:42:e9:1d:ef:35:d1:29:f0:fe:24:42:39:f9:23:f5:6a:
7c:7a:10:7e:78:98:6d:aa:07:9b:8c:f7:22:92:85:7c:67:1a:
22:3c:bd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:48:07 2026 by rpki-client