This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
File: vzrHIKEXt01NE8Jj95R3kp7btLw.mft (raw, json)
Hash identifier: ydzUnKgSXmoZQqJM2vMmdhRPGR5pcUTeQPJG6Hfc+wU=
Subject key identifier: A7:87:1B:C3:87:FA:89:E2:30:70:F6:1D:82:21:2C:9F:A8:DF:7B:AB
Authority key identifier: BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
Certificate issuer: /CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Certificate serial: 019C4358C97A210C8730F8B77E89CE6D746E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
Manifest number: 05FA
Signing time: Mon 09 Feb 2026 17:00:18 +0000
Manifest this update: Mon 09 Feb 2026 17:00:18 +0000
Manifest next update: Tue 10 Feb 2026 17:00:18 +0000
Files and hashes: 1: jshUcB9xo_4UjMSMpv_Atyyty9w.roa (hash: An++hrgldtP3cS4PiEwsT48K4V8iq3LI6SDvvL0nHOE=)
2: vzrHIKEXt01NE8Jj95R3kp7btLw.crl (hash: w7f+2q6qREFeFbXTkwfGgegk5cdhYL1ANtZpsnLOdMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:c9:7a:21:0c:87:30:f8:b7:7e:89:ce:6d:74:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf3ac720a117b74d4d13c263f79477929edbb4bc
Validity
Not Before: Feb 9 17:00:18 2026 GMT
Not After : Feb 10 17:00:18 2026 GMT
Subject: CN=a7871bc387fa89e23070f61d82212c9fa8df7bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:99:68:be:89:fb:54:a2:46:b2:a7:c9:9f:
91:25:a1:b5:ac:7e:2d:80:f2:f0:51:8c:74:0a:d7:
d0:cb:c0:ed:11:48:61:9d:e3:7b:6b:51:9a:b6:fe:
73:16:40:b7:62:5f:bf:b6:0a:39:92:b5:da:d4:e9:
d6:e9:18:c7:d4:d8:ba:ff:2a:08:a5:d2:da:4f:cc:
6b:f4:7e:06:27:bd:c4:ea:56:df:a8:c4:89:e1:39:
7d:72:5d:55:45:a2:bc:d9:06:e8:f9:08:89:09:3a:
d3:5f:b6:31:ae:50:23:76:a6:ad:1b:12:61:f7:cc:
fe:8f:ef:dc:7f:92:cc:71:b3:03:ab:00:13:45:b3:
22:42:be:45:c8:e1:3a:d6:3a:44:79:69:be:a8:eb:
00:ef:6c:94:92:b8:86:2d:0d:69:64:42:44:19:38:
e2:9e:c4:ce:5d:07:58:1f:95:90:22:91:d2:cb:9a:
69:03:ed:84:46:ad:9e:97:03:07:ba:27:d4:16:c5:
c9:a1:ac:46:52:56:5e:51:23:f9:bb:0f:0a:ce:03:
af:e1:ce:a6:7b:7d:ca:aa:9a:50:5e:17:2c:8d:d0:
7d:30:65:2f:42:e9:ed:e1:39:c6:a1:b3:44:8b:a5:
9c:47:36:01:d2:71:b4:f5:63:83:69:de:cf:40:b4:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:87:1B:C3:87:FA:89:E2:30:70:F6:1D:82:21:2C:9F:A8:DF:7B:AB
X509v3 Authority Key Identifier:
keyid:BF:3A:C7:20:A1:17:B7:4D:4D:13:C2:63:F7:94:77:92:9E:DB:B4:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzrHIKEXt01NE8Jj95R3kp7btLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db5f5e-7b7d-4b28-a9b3-0ac1bbd434d0/1/vzrHIKEXt01NE8Jj95R3kp7btLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:54:4a:f9:0c:af:bb:58:3b:f0:a7:2a:9f:c5:42:a6:c0:23:
ba:67:5d:07:46:42:b3:1e:13:78:14:af:79:31:fb:b0:68:60:
00:36:43:85:ae:61:a7:10:e5:95:5e:3d:6b:0f:c8:87:98:6c:
35:11:6b:10:2a:97:d0:0d:63:00:79:d0:6f:ce:d9:82:ba:c2:
8e:a7:39:60:6d:69:ab:e5:8f:74:7d:27:69:69:8f:b9:3d:4c:
f7:56:bf:a9:0c:93:15:2c:e4:16:17:16:54:1d:1f:05:78:d0:
b2:60:17:4c:e3:e4:01:95:46:b9:3f:07:81:3a:a2:16:f1:2a:
e1:83:1b:39:cc:fa:e9:4b:ec:4d:49:0b:8a:fe:79:59:32:ff:
7c:5f:20:fe:b7:e6:a4:6a:a5:ad:08:75:3d:9a:a0:8f:11:82:
7c:9e:ec:94:29:e7:93:1e:cb:d8:04:ce:83:ff:53:80:60:f9:
6a:19:6a:b8:ca:c8:55:e2:a6:57:70:47:95:60:28:ac:5b:4d:
82:c3:64:2d:e3:37:ba:98:f9:b5:45:3c:b9:96:7c:52:9a:36:
f3:a3:6e:db:4d:a4:a2:7d:16:43:3f:74:8d:7d:cd:2d:89:d6:
90:ff:ae:44:70:65:37:a6:c8:b4:da:55:8b:10:28:a4:f4:a5:
4c:b7:40:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:46:05 2026 by rpki-client