This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
File: VZxkpqxMSXatNiFBKhN0WeZJq54.mft (raw, json)
Hash identifier: uSdNnpm7bqniCqLLXCYz7de9LwnH76uYpLCFfX4KZJo=
Subject key identifier: 0F:84:E7:2A:3A:D8:FF:97:D0:D8:06:35:1D:7A:0A:61:F6:0C:46:E0
Authority key identifier: 55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
Certificate issuer: /CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Certificate serial: 019C41A21D5BB438704C42DC406DF306B2BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
Manifest number: 13A7
Signing time: Mon 09 Feb 2026 09:01:09 +0000
Manifest this update: Mon 09 Feb 2026 09:01:09 +0000
Manifest next update: Tue 10 Feb 2026 09:01:09 +0000
Files and hashes: 1: OPRz51uzznqYUEPxfg90oEwb7MQ.roa (hash: eZ6pMS8abjtpitMERgpepOF6OAkDWhegDlYVypYAvp8=)
2: VZxkpqxMSXatNiFBKhN0WeZJq54.crl (hash: /30eRUnLFEeKVQFAOTzbc+MpAbPxuWbY6gjyATJV/XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:1d:5b:b4:38:70:4c:42:dc:40:6d:f3:06:b2:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559c64a6ac4c4976ad3621412a137459e649ab9e
Validity
Not Before: Feb 9 09:01:09 2026 GMT
Not After : Feb 10 09:01:09 2026 GMT
Subject: CN=0f84e72a3ad8ff97d0d806351d7a0a61f60c46e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:28:b9:76:bf:d9:e6:97:db:61:8d:39:bd:07:
3b:fb:c8:bf:10:63:bf:10:d8:66:cc:b1:91:b9:d8:
8f:10:ea:84:53:62:e4:cf:9f:50:0e:45:f4:e8:1e:
ab:01:61:12:61:27:28:02:cd:d4:46:7c:95:4e:4f:
cd:40:68:6c:58:73:f9:c5:03:10:ed:ac:f3:0c:7b:
f4:ff:b4:38:c7:45:5e:ea:99:11:b8:d0:64:b4:70:
a7:31:57:9f:26:17:eb:34:de:c9:90:3c:3f:44:e1:
73:a1:98:3e:54:f7:69:82:1e:aa:aa:66:77:e4:25:
ea:67:37:17:f4:c6:83:29:68:9c:0f:99:47:27:4f:
3d:d9:f7:36:f4:ff:bd:bf:60:33:3a:cf:c9:fd:09:
9b:1a:ca:0e:0d:0f:5c:db:75:1e:1a:c6:d4:34:ce:
a0:3a:05:76:11:5f:cc:2b:12:85:9f:a6:f8:c7:5e:
48:ac:9d:d9:c2:f7:81:45:86:e6:44:f8:4f:66:f7:
b3:fa:49:7c:74:1e:41:8f:41:3f:05:b6:ef:d1:22:
0f:2f:0b:b6:36:cc:00:e4:be:76:eb:0e:cc:4a:cf:
4e:dd:ea:9d:ec:35:41:26:7b:ba:68:47:b0:fb:9e:
aa:c7:f0:83:f1:7f:77:5b:ac:e7:d3:1e:e4:3d:51:
5b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:84:E7:2A:3A:D8:FF:97:D0:D8:06:35:1D:7A:0A:61:F6:0C:46:E0
X509v3 Authority Key Identifier:
keyid:55:9C:64:A6:AC:4C:49:76:AD:36:21:41:2A:13:74:59:E6:49:AB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZxkpqxMSXatNiFBKhN0WeZJq54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2e7fd7-0556-4dd9-b6b2-f31510771185/1/VZxkpqxMSXatNiFBKhN0WeZJq54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:c4:aa:fb:b0:47:49:f3:79:32:bb:71:ca:88:e7:79:ca:
b5:91:d9:d7:ea:5f:6a:16:14:72:c7:d6:05:4a:1e:08:2a:49:
5e:49:5a:a2:12:14:44:1a:4b:61:40:00:5e:7e:cf:71:13:c7:
98:ed:86:cb:5d:0f:b0:19:1f:0b:f3:2d:02:ef:29:3b:38:67:
9a:43:a6:a9:bc:c1:9a:f1:45:93:de:41:95:2e:65:07:d0:96:
62:c8:b7:4c:08:14:ed:01:cf:1c:5a:0b:01:d0:06:cf:e8:ac:
71:82:3e:26:f3:9f:37:30:a2:93:5a:e8:77:b8:2f:90:a1:50:
84:50:f9:18:51:3e:d5:2b:1f:99:20:70:d2:48:a2:3c:39:41:
f9:19:c0:cd:1c:2a:c7:22:98:87:f8:a2:b4:ad:a7:89:e0:9d:
72:0b:1a:c2:61:33:f3:a1:86:a0:51:4e:0e:75:9e:01:5c:0e:
5e:9f:ed:c0:92:13:d3:f7:9c:60:99:46:51:6b:a6:9e:d0:64:
6a:7b:c4:70:3b:89:a9:c2:1a:e7:8d:17:f0:fa:40:23:a9:e6:
68:6a:83:b6:b9:60:aa:4d:4f:05:ad:33:7a:1d:86:d9:62:aa:
ab:17:f0:15:bc:d6:f0:06:7d:16:cc:f2:c7:79:00:fc:87:aa:
f0:b9:63:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:24 2026 by rpki-client