This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
File: _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json)
Hash identifier: CkewkU1ghFAX1KzwjQYKtFf5tU9oHXy1qXipCPnM3do=
Subject key identifier: 3F:F0:D8:1C:34:A3:EF:70:B9:65:C8:83:7C:5A:25:FF:2E:65:7D:9B
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Certificate issuer: /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial: 019C1DCCCD59EF14A96C6BAFA82B4B454FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
Manifest number: 0197
Signing time: Mon 02 Feb 2026 10:01:27 +0000
Manifest this update: Mon 02 Feb 2026 10:01:27 +0000
Manifest next update: Tue 03 Feb 2026 10:01:27 +0000
Files and hashes: 1: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: LyyBqk1l4hrRwGTS+fo4iav7ipte5cMGe8gvxYKVbdE=)
2: cT6SuWNZtVuKzcAvYCI7FSFaYQE.roa (hash: SjRBTtGgC/H2KCUfLueFpAeHEx9PBCWk0x1hBQie0OQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Feb 2026 10:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:cc:cd:59:ef:14:a9:6c:6b:af:a8:2b:4b:45:4f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Validity
Not Before: Feb 2 10:01:27 2026 GMT
Not After : Feb 3 10:01:27 2026 GMT
Subject: CN=3ff0d81c34a3ef70b965c8837c5a25ff2e657d9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:0c:8b:f3:6b:eb:10:0f:00:5b:6a:1e:af:
48:90:ca:bd:e0:47:f1:7a:65:91:a0:72:eb:5c:d2:
5b:c8:d9:9f:64:38:76:47:10:3e:ad:f8:b3:b8:2a:
e7:7f:fc:5e:89:92:aa:14:36:59:ac:4c:8b:73:92:
f3:26:64:79:bf:e8:2f:1f:98:62:69:1f:7d:60:63:
44:ec:35:97:6c:b8:c1:cf:7f:fa:ab:a6:a6:20:bb:
dc:0d:c4:e4:47:2b:42:d2:59:ee:bc:3b:1b:e7:f4:
ae:d8:71:96:17:16:ea:b0:9e:81:29:85:df:b6:17:
59:ac:7c:e7:bd:21:78:f5:1c:05:07:d3:b3:92:9b:
23:dd:55:55:87:b2:bb:79:c1:49:00:52:e2:ac:bf:
c6:0e:cb:1b:e0:d8:3e:40:68:6d:5c:17:b2:94:e5:
03:5c:aa:7b:80:4e:6c:ea:73:5b:26:d1:af:64:f6:
6f:b0:d2:2a:19:73:64:fd:20:b2:01:10:71:29:b9:
64:c2:53:91:a6:ee:48:95:5f:bd:80:e6:04:a8:63:
1a:f7:ed:44:05:85:7c:bf:59:5a:9b:23:44:5e:cd:
71:bb:e9:69:f8:8b:55:c4:f0:41:05:8d:2a:4b:44:
44:05:e0:cf:a6:fe:61:55:fc:2b:74:99:40:c4:aa:
27:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F0:D8:1C:34:A3:EF:70:B9:65:C8:83:7C:5A:25:FF:2E:65:7D:9B
X509v3 Authority Key Identifier:
keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:36:33:32:14:77:f9:40:4d:75:39:51:b1:3a:03:6e:c4:3a:
e3:c2:ba:23:3a:f7:04:71:17:f0:b0:58:7f:33:d4:0d:01:38:
29:6f:88:9a:44:0e:20:40:9d:99:41:d9:80:f8:78:8e:00:6a:
e4:f4:e7:ba:f7:b1:c2:b3:68:1b:ba:12:68:c1:33:8b:b2:18:
4e:b9:a2:fc:47:51:5f:8e:06:4a:44:17:cc:02:23:3c:97:30:
56:95:0e:ac:ec:89:10:c6:ae:fd:93:fe:77:b8:a3:4e:ff:1d:
33:e3:fe:bc:c4:a7:f5:29:af:53:8a:45:4c:f8:d3:0f:9e:a3:
5a:44:04:d2:11:ed:01:74:14:6d:36:c5:c0:ef:ca:c6:65:dd:
4b:ef:90:71:33:1c:09:18:9b:70:39:b8:7a:cc:a0:b2:d9:33:
5d:72:6c:45:10:0f:82:c5:8f:74:ab:a7:62:49:f9:25:c1:b4:
a0:29:c3:54:78:9a:ff:97:20:68:4c:ab:3c:43:82:69:00:c1:
1d:ed:94:62:32:15:da:46:16:7a:ee:db:63:7e:6a:4e:9c:d3:
29:43:99:ec:9c:ee:55:90:e3:d7:9c:8c:1f:5f:04:6e:11:b2:
fe:d7:27:09:14:52:93:89:5c:8e:08:ef:a4:86:ea:2d:1a:61:
4d:8b:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 17:23:42 2026 by rpki-client