This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
File: VKwN3sMOJORX4W5lB9IZcoMQiT0.mft (raw, json)
Hash identifier: 8qht5NAe+eaGlN6WShlQ1eqLYyABNmTq102AOaB5vbc=
Subject key identifier: 22:64:0F:0B:D6:F5:A5:33:3A:14:A3:06:10:12:AD:CD:C8:93:E2:6A
Authority key identifier: 54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
Certificate issuer: /CN=54ac0ddec30e24e457e16e6507d219728310893d
Certificate serial: 019C4322FC66D758008DAACC4A07EE360569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
Manifest number: 037A
Signing time: Mon 09 Feb 2026 16:01:32 +0000
Manifest this update: Mon 09 Feb 2026 16:01:32 +0000
Manifest next update: Tue 10 Feb 2026 16:01:32 +0000
Files and hashes: 1: R7QMGmuA2wDaBVvULaWvGaz5Evg.roa (hash: fySPMSDcnymZQ851W9mCK2einppIFGfSXw6lDW7Rxuo=)
2: VKwN3sMOJORX4W5lB9IZcoMQiT0.crl (hash: cynsZ9tr3YXB45Dhni+V7kx68R2eBNePJJM+lu0wQck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:fc:66:d7:58:00:8d:aa:cc:4a:07:ee:36:05:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ac0ddec30e24e457e16e6507d219728310893d
Validity
Not Before: Feb 9 16:01:32 2026 GMT
Not After : Feb 10 16:01:32 2026 GMT
Subject: CN=22640f0bd6f5a5333a14a3061012adcdc893e26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:07:26:83:9f:13:3f:b7:d1:d5:2c:fc:52:ae:
a1:95:4f:9f:6b:f8:1b:45:d2:08:d4:9f:08:72:c7:
af:49:b8:c3:91:30:21:7b:bf:6b:af:fc:44:c4:51:
dd:a4:8f:0a:53:20:36:fd:64:f6:80:80:13:d3:9e:
e0:c0:f4:54:7d:b1:40:7b:51:6e:c3:6c:4f:2a:db:
64:9f:d7:c6:2c:55:6b:6b:05:4a:f1:30:75:e6:e9:
ef:fd:fc:35:b4:ea:98:e2:fb:72:32:fe:94:0d:5d:
c5:bc:4b:87:9c:05:c4:57:9e:d2:2a:ed:60:77:2a:
62:af:ef:0e:ea:07:12:2c:59:97:3b:79:ff:d4:11:
d4:54:48:15:b7:f7:34:40:b5:92:b8:85:d9:d1:fd:
d6:9b:b0:b1:8d:8c:09:4f:e1:42:88:e3:05:12:1a:
c9:1a:59:39:a8:eb:29:f1:2c:c3:4f:91:31:52:09:
2d:84:5b:92:58:a4:1b:b3:34:a1:e2:4d:2b:9a:b8:
38:f7:f8:13:69:d0:2b:08:03:59:cd:cc:cb:09:eb:
c9:fb:8b:99:bb:3d:46:23:79:09:f5:61:87:f4:d9:
22:2a:18:c3:16:3a:16:0c:a3:53:b5:6d:cc:6b:d9:
0c:4f:a6:e0:07:47:11:05:ee:d6:99:f3:d2:ec:9b:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:64:0F:0B:D6:F5:A5:33:3A:14:A3:06:10:12:AD:CD:C8:93:E2:6A
X509v3 Authority Key Identifier:
keyid:54:AC:0D:DE:C3:0E:24:E4:57:E1:6E:65:07:D2:19:72:83:10:89:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKwN3sMOJORX4W5lB9IZcoMQiT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2ddd39-e7bd-44ba-ab21-2f0655f01029/1/VKwN3sMOJORX4W5lB9IZcoMQiT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:91:ba:4f:6e:26:e8:7c:00:6f:ef:22:b5:c2:54:ae:eb:5e:
09:1d:08:ef:d4:f8:09:3d:c7:d8:a7:88:17:50:c6:24:3e:1b:
c3:21:e7:ad:ab:a9:42:23:7f:0c:c9:4c:e9:0f:20:a0:47:e9:
dd:e9:df:fd:e0:14:c4:58:1c:b6:ce:47:cb:2a:09:bd:71:73:
fe:96:c4:98:ac:d0:23:2f:27:6c:04:75:5d:98:ff:d5:4d:62:
a8:e7:ec:5c:9f:79:79:4d:da:e6:c8:45:d4:e7:48:49:66:09:
91:2b:77:58:54:d7:d9:60:cf:60:5e:7f:09:89:11:b0:d4:b4:
ee:f3:04:ee:73:60:a5:40:a6:2b:2d:5a:9a:33:47:db:2d:32:
d5:58:40:a4:14:1c:95:90:67:4f:0d:4d:0d:92:5c:d6:22:16:
ea:99:03:15:92:fc:a7:d5:fe:6c:c1:e0:ef:92:a6:9f:21:ab:
7a:c6:92:b0:e5:e4:15:a8:8a:37:c7:d7:51:72:ef:69:a5:da:
1f:7f:d8:3e:ea:8f:b2:7e:8c:94:3c:6a:d9:ac:9a:08:97:5a:
bc:49:95:a6:8f:38:7a:9f:b1:f1:f7:bf:64:96:0a:16:72:1b:
77:39:9d:89:0a:e6:12:76:b1:ff:96:e1:a9:bb:47:2c:ad:94:
47:fe:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:25 2026 by rpki-client