This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
File: VrVQVQ1WQYCx333rW1jTprES5-M.mft (raw, json)
Hash identifier: kQn1WiY8/kc6GWXyOri1cPxPQuoOXCqOmc/I0I55Gf8=
Subject key identifier: EC:50:2F:82:3D:30:B6:CD:6A:17:0B:35:5D:C5:9A:98:D2:C5:40:29
Authority key identifier: 56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
Certificate issuer: /CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Certificate serial: 019C41A1C5BC76A9E3B6930F66403A2BEB34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
Manifest number: 0DA5
Signing time: Mon 09 Feb 2026 09:00:46 +0000
Manifest this update: Mon 09 Feb 2026 09:00:46 +0000
Manifest next update: Tue 10 Feb 2026 09:00:46 +0000
Files and hashes: 1: 6wW52SOqWXrfAlhosP3ynpLxyA0.roa (hash: FwT8E7oaMMyN8V9+/04Bhii7J8JtbQGmipn/OxYLQDA=)
2: VrVQVQ1WQYCx333rW1jTprES5-M.crl (hash: ACRrC2Px8sYkGTGQcvhgl7blqkeagfhrCrMe5vkJ6c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:c5:bc:76:a9:e3:b6:93:0f:66:40:3a:2b:eb:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b550550d564180b1df7deb5b58d3a6b112e7e3
Validity
Not Before: Feb 9 09:00:46 2026 GMT
Not After : Feb 10 09:00:46 2026 GMT
Subject: CN=ec502f823d30b6cd6a170b355dc59a98d2c54029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d3:31:84:25:c2:c1:08:de:f4:a1:a9:9e:f3:
e2:77:f6:71:75:11:2d:80:13:e8:61:0b:3b:11:55:
4c:59:21:4b:c4:4a:a3:7c:10:e2:08:66:26:43:fe:
f1:49:c5:b3:00:d6:a2:f9:60:25:53:de:7a:1c:08:
d3:55:d9:c0:ca:87:d6:f8:cb:d8:b8:1f:1a:f8:0c:
ff:b8:41:1b:fd:f8:09:ce:2d:d1:46:49:6a:d9:ef:
09:16:d2:08:9a:14:35:ec:c3:56:3b:f4:c6:05:86:
64:bc:6b:f1:77:3d:7c:3f:1d:89:f7:cd:e2:8c:84:
be:02:bd:86:01:16:c1:a0:c7:c7:a3:8c:a6:cb:c5:
00:12:19:a4:0c:bd:bc:19:f1:2f:5f:dd:1c:c5:23:
a1:e5:a1:0a:e2:9a:83:75:1e:20:63:fa:ee:77:89:
4a:7f:de:a3:e5:8f:25:00:6f:49:73:6b:3e:16:bc:
58:1f:77:d5:0d:22:6e:9c:88:5a:b8:78:7c:1f:9c:
6b:55:17:cb:b0:3e:07:30:8a:41:71:c1:12:38:fe:
32:09:dd:fd:18:9b:c5:0b:1e:eb:69:35:3d:90:27:
df:54:ff:eb:db:70:4c:86:c6:1b:30:d2:a7:e9:ae:
1e:26:aa:21:52:7d:80:41:44:e6:52:8b:11:cd:e1:
3f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:50:2F:82:3D:30:B6:CD:6A:17:0B:35:5D:C5:9A:98:D2:C5:40:29
X509v3 Authority Key Identifier:
keyid:56:B5:50:55:0D:56:41:80:B1:DF:7D:EB:5B:58:D3:A6:B1:12:E7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrVQVQ1WQYCx333rW1jTprES5-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bead7f-480d-4841-b77d-f0eb1310e7a7/1/VrVQVQ1WQYCx333rW1jTprES5-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e3:4f:d6:e0:f0:67:e4:83:f4:6a:06:30:8d:a1:ce:48:cb:
79:43:f6:54:b9:0a:1c:09:66:62:2c:39:bf:e1:07:61:92:e7:
1e:65:c0:b4:bf:6a:86:37:6c:63:46:8f:db:60:db:38:be:c1:
29:8c:88:03:6a:c2:5d:6d:0a:a7:e0:48:7e:52:fa:49:90:39:
5a:8a:cd:e0:96:ad:1a:45:3c:d4:23:6b:cd:68:46:b7:4d:ea:
74:a6:00:ac:01:70:72:fc:53:58:80:e5:17:46:89:c3:c1:e8:
a3:82:fe:5a:80:a4:61:cc:98:10:c0:cf:0f:ec:98:53:8e:61:
01:9e:02:0c:4a:d3:fe:2e:b0:76:73:b8:98:5b:44:2e:9c:7b:
9b:48:97:d4:0c:a6:99:dc:19:d6:c8:61:a9:55:a3:9f:58:ca:
79:2a:45:b7:92:c3:21:7c:2f:e6:7b:c1:bb:c6:8c:46:bc:bb:
ea:fd:9f:e2:59:6f:b5:60:7c:28:8d:81:af:f7:b2:28:8d:a1:
64:07:cf:2f:0c:85:c5:38:f7:c9:cd:82:77:01:9a:d5:c0:c2:
45:76:3e:89:f4:c0:92:97:55:92:fb:3b:61:c6:b4:97:fe:38:
12:ff:20:e5:7c:23:48:bd:1f:dd:26:a3:eb:38:b3:05:7b:d0:
9c:81:1e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:18 2026 by rpki-client