This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: fiRgJ95eHcPO8ki01zKv7dLK6+hFnJ+rz+jDOa9UmCk=
Subject key identifier: 6A:F2:FD:C1:DC:66:CA:DF:1F:C9:1A:14:09:0A:0E:08:5A:90:67:55
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 019C43C6F74E2EED7865ACE0BE10582CE899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 0D5D
Signing time: Mon 09 Feb 2026 19:00:38 +0000
Manifest this update: Mon 09 Feb 2026 19:00:38 +0000
Manifest next update: Tue 10 Feb 2026 19:00:38 +0000
Files and hashes: 1: IkIUfUWBgrqz-MQYA1JoiunLbZ8.roa (hash: ZkNSMusbdYjyY6Jst6K+Zs/Pf+gwZBfB+9r0tVdAYHs=)
2: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: fgRgRFiQT8YU5hCPGrpzIVxeTrPHBZAh7BzfziDj7TI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:f7:4e:2e:ed:78:65:ac:e0:be:10:58:2c:e8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Feb 9 19:00:38 2026 GMT
Not After : Feb 10 19:00:38 2026 GMT
Subject: CN=6af2fdc1dc66cadf1fc91a14090a0e085a906755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:28:5d:ce:b4:34:5e:b8:6f:10:f2:70:d7:51:
8d:54:88:97:84:86:f5:ee:e0:ff:9f:4f:a9:29:42:
42:bf:72:3f:50:5f:71:2d:62:f5:a3:6d:d4:52:f0:
c2:4d:d5:78:11:5a:9f:47:91:5a:5a:8b:18:44:53:
92:50:2e:aa:b2:3c:02:3f:da:d7:f2:74:b3:50:29:
78:25:43:b6:66:ec:96:1d:8b:55:1f:77:23:44:a2:
af:b1:a2:8e:ad:3a:f0:3d:b9:24:01:c2:59:e2:7b:
94:02:af:a2:ac:65:c5:ed:7f:95:f7:61:2b:59:2f:
8c:f3:8c:8c:e1:5a:c2:40:fd:fe:f2:00:dd:d1:58:
1c:a6:87:24:75:e1:f4:6c:5c:3a:41:1a:e3:b2:11:
18:f6:b0:6c:51:fe:dd:7e:2a:c5:1f:3c:d9:25:ca:
7c:ad:c8:02:d9:5f:73:7f:a5:e9:45:31:22:d6:7a:
d0:97:bc:75:41:bf:56:82:8a:08:7e:58:d5:8a:41:
78:4a:8d:79:e2:cb:a5:0b:b1:45:f0:c4:5f:7b:45:
6d:2f:d7:ca:60:64:7c:d5:d6:cc:0b:27:3c:12:a5:
ff:27:6d:7c:e9:56:85:fc:b5:39:ce:3b:a4:db:9d:
6a:05:49:36:d7:bc:74:b9:d7:e0:2c:07:8c:df:43:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F2:FD:C1:DC:66:CA:DF:1F:C9:1A:14:09:0A:0E:08:5A:90:67:55
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:2b:01:c4:4c:1e:50:f7:a7:37:d8:be:b8:87:bd:05:ff:e8:
14:b4:c0:c9:7d:b7:17:34:17:af:3f:b0:79:52:46:cd:ac:ba:
2f:e0:fe:ba:b4:e3:e3:33:8e:7a:df:3e:22:8b:b7:7b:b8:6a:
03:6b:5d:43:76:b1:e6:6a:26:61:25:13:46:c8:81:b3:b8:ec:
9b:03:57:7a:b1:df:07:6b:a6:56:3a:e1:d4:0d:7d:2f:0c:80:
a3:c9:91:67:38:65:fb:a8:11:1e:c0:e4:ce:f6:7a:b9:fb:0e:
85:ee:9b:98:71:49:54:80:ee:f7:bf:88:f5:39:1a:f3:c8:e6:
6e:a2:6e:cb:c0:b1:60:1a:1c:08:35:2c:57:d7:8a:3a:67:2f:
44:96:53:af:3b:5c:30:92:2d:5b:c3:c9:d4:fd:75:75:a4:1c:
99:25:b2:2a:74:84:b9:e3:68:c5:74:14:d3:a5:d9:1d:54:83:
fd:e3:24:05:67:c6:72:14:47:ab:0b:fc:6f:16:22:32:24:8f:
b5:c5:cc:54:0b:8f:83:a1:3e:0c:49:f1:36:5d:82:4b:2d:40:
24:6c:11:92:3a:0e:b0:59:a5:97:1c:3b:ae:71:56:48:7f:ee:
88:48:bb:df:78:86:8a:99:e0:b1:99:2a:0c:cc:d5:72:5f:62:
aa:b2:dc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:41 2026 by rpki-client