This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File: VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier: cNwBDvyneacuyCKJELmsu5ytjKhgRmnzQE0PmMlzg2M=
Subject key identifier: AA:99:82:2F:00:76:A6:C8:C2:7F:FD:EC:64:D5:51:2C:06:99:1A:BF
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer: /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial: 019C4246B0BE1612584262320D4EC840DD32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number: 0391
Signing time: Mon 09 Feb 2026 12:00:54 +0000
Manifest this update: Mon 09 Feb 2026 12:00:54 +0000
Manifest next update: Tue 10 Feb 2026 12:00:54 +0000
Files and hashes: 1: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: Pm87BssLF2isVabqW12fh+eIXjJ7SmCT36QGwTE2K1U=)
2: YjCGgAmzduZSK_5-gRARaBbNei0.roa (hash: jfHZjRD1+MaIdb39vxs02Km81VVmAsPrQrgbVdWjjqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:b0:be:16:12:58:42:62:32:0d:4e:c8:40:dd:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
Validity
Not Before: Feb 9 12:00:54 2026 GMT
Not After : Feb 10 12:00:54 2026 GMT
Subject: CN=aa99822f0076a6c8c27ffdec64d5512c06991abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0d:70:d8:ff:0d:e3:72:32:8f:a9:cf:ec:cb:
2d:f5:84:e7:49:5b:d9:28:0f:09:b8:14:be:b2:79:
3f:bb:b1:bd:b8:cf:07:08:8d:1f:18:1f:e1:1e:34:
58:ac:cf:d2:c2:67:27:2b:ab:9c:40:6f:70:85:22:
7b:8f:c8:d9:0a:ae:86:35:9b:57:54:ed:ac:3d:84:
81:6d:bc:ff:bf:49:63:36:e5:05:6f:2b:0c:6b:52:
0c:75:0a:6e:70:89:10:60:de:a9:fc:14:66:1f:63:
0d:82:1b:ee:33:45:74:f7:ae:d6:c5:39:04:36:54:
71:bf:c8:db:47:cb:7a:54:37:8b:88:d7:81:a3:ae:
57:7d:92:95:83:9f:11:7e:e7:9c:13:f7:c6:1d:c9:
25:42:4b:ef:90:b1:11:a8:4e:17:8d:d7:ad:08:dd:
44:5a:d8:1c:f5:f5:52:ff:f4:ee:c5:98:b9:9f:5e:
3f:b1:e3:79:ba:ea:3b:d0:27:8a:1f:c5:12:fe:ed:
01:51:d9:89:24:78:6d:1d:bf:6b:d4:f1:19:30:0e:
b3:5d:de:1b:34:d5:5a:9e:0c:4d:48:77:2d:99:4f:
15:c0:2b:c1:e4:ef:18:a6:53:52:63:60:da:a9:c6:
ae:18:4e:74:d2:b6:af:a3:bc:6d:93:2d:7a:e7:5f:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:99:82:2F:00:76:A6:C8:C2:7F:FD:EC:64:D5:51:2C:06:99:1A:BF
X509v3 Authority Key Identifier:
keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bf:fb:a5:e8:24:89:1f:ed:ba:a4:1f:5b:17:d7:bb:25:03:
a4:75:e8:d5:4a:bf:d4:5a:26:8a:27:8d:72:56:1a:1f:2a:b1:
69:f9:1a:d4:cd:c6:7b:7e:59:dc:80:f1:1b:01:1d:cc:75:a0:
91:46:b5:08:e1:95:a6:67:81:53:bb:dc:d7:3a:a8:92:76:9d:
41:48:ca:fd:ab:06:40:9f:66:d4:22:aa:0e:fd:37:96:bc:07:
37:16:54:67:cc:2d:fb:09:57:b7:2c:cc:5a:88:01:64:c2:7b:
56:d7:b5:39:6b:85:0e:f0:28:cb:6f:66:a6:46:58:7a:77:b3:
35:5b:15:09:3d:c1:d6:2a:00:3e:7e:ee:08:a0:8d:9b:94:f0:
a2:1c:9f:c3:e9:20:b5:43:71:5d:04:bf:c3:1c:f8:be:ef:e8:
56:6b:8b:51:a5:be:ae:99:2b:1d:a8:41:c6:cf:94:d7:e1:e9:
ef:92:de:fe:3d:65:39:91:bb:54:7c:39:25:e5:62:72:ad:24:
69:56:6a:bf:58:e9:c7:10:91:5a:97:ef:48:0d:17:4c:30:11:
b5:b0:1d:07:14:1b:2b:b1:9e:5b:01:29:cb:a7:fd:e5:58:37:
aa:45:e3:3c:4e:20:12:32:fd:d0:4f:98:9e:9a:9f:08:ad:c9:
a8:d2:56:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:17 2026 by rpki-client