This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: SsRp/HF9fDbaXKlThJSGkc9yv6buHttoAfGNNveM68E=
Subject key identifier: 6B:BB:D7:2A:6C:FF:14:9B:D1:9B:E6:C0:54:E1:50:92:94:4D:17:AA
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 019C43597C3F393D51078D6AA3A29FDF842B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 13B7
Signing time: Mon 09 Feb 2026 17:01:03 +0000
Manifest this update: Mon 09 Feb 2026 17:01:03 +0000
Manifest next update: Tue 10 Feb 2026 17:01:03 +0000
Files and hashes: 1: nu2lbW0g95yVXBtDFUgDrkJzEwM.roa (hash: 8SMpinprSw+0Hderswh6JaQ9jOtPmZtb2eKAdki8fbU=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: 57++jYSunSo7MqbLjzGDObsGOlwCfZNdWf/v6lJ8o+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:7c:3f:39:3d:51:07:8d:6a:a3:a2:9f:df:84:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: Feb 9 17:01:03 2026 GMT
Not After : Feb 10 17:01:03 2026 GMT
Subject: CN=6bbbd72a6cff149bd19be6c054e15092944d17aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:e7:45:c3:ad:83:ca:4f:00:f1:4c:30:df:
9d:d2:5f:6e:51:43:f5:10:d9:81:5b:34:12:88:4f:
be:29:10:6e:55:44:b2:56:b8:ba:03:a6:bf:7d:d3:
8a:52:6f:1d:09:25:50:5c:31:68:78:c9:7f:b3:0c:
81:6b:18:28:68:20:5f:ee:b8:0d:09:60:eb:9b:f4:
96:0d:92:8a:58:1e:e2:c7:81:a2:85:e4:9d:82:81:
a8:a3:10:fa:e7:dd:ef:23:79:5b:c8:16:57:89:58:
51:fd:c4:65:ce:b1:f2:e1:86:40:a4:58:f0:26:4a:
b8:8a:b0:fe:a5:d1:3b:07:98:85:8a:44:36:00:0e:
93:d3:b9:92:52:50:76:14:fc:99:39:b2:7e:75:c6:
e3:9d:0d:d3:ca:e3:18:08:80:d0:6d:28:41:90:b0:
98:08:23:65:45:49:31:b9:db:db:88:88:1c:eb:8d:
b7:da:98:32:27:9b:d6:e4:43:d6:60:b0:f7:a7:9f:
9d:5f:8a:4b:a5:e3:64:91:15:10:48:01:c8:7d:92:
97:02:b0:19:b8:1d:fb:d9:80:d6:43:83:53:5b:81:
70:eb:6a:4b:31:c4:ed:fd:1f:1e:d8:89:94:0d:90:
d8:ec:0c:63:79:32:d1:dd:96:45:3e:e9:de:6f:f3:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:BB:D7:2A:6C:FF:14:9B:D1:9B:E6:C0:54:E1:50:92:94:4D:17:AA
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:20:37:16:8a:54:e7:cd:5e:4b:a0:96:10:ba:07:0a:9a:28:
12:f9:02:be:cf:b3:8b:1b:06:17:77:ac:75:82:75:d1:9c:b6:
e9:32:0e:69:e1:a7:6e:33:2c:32:1a:03:7d:00:d2:0e:74:3c:
e1:09:b4:1d:c4:66:13:1f:e4:2a:22:3b:f3:d3:b0:c4:46:d6:
91:d8:f9:cd:2d:0f:f2:a3:8a:06:3b:1a:0b:2c:07:b6:7c:0d:
6f:da:6b:45:81:38:9e:dd:61:ca:2c:d9:24:14:2d:a2:39:7f:
a3:16:51:4e:67:48:ba:98:a5:7c:77:5f:b3:ae:f3:13:db:55:
61:63:96:48:a8:cb:f6:83:76:e0:3b:ec:ef:16:20:a8:90:8f:
b1:08:ed:c3:b3:d2:a1:22:94:8d:0b:29:bb:ff:1f:03:04:bd:
53:03:6e:7d:b6:2a:f4:71:03:cf:9a:ab:36:18:73:89:f0:f9:
54:91:90:06:c5:3c:ca:68:45:e3:15:48:a3:bb:69:83:26:23:
f0:9d:d3:9e:81:2e:52:db:9d:af:d7:c9:27:3d:c6:10:e8:22:
2f:26:18:b8:ab:94:96:ae:84:6d:4c:17:06:6c:a6:86:ac:3e:
d5:14:ce:f6:8c:68:a8:ba:88:41:48:56:93:3d:88:78:f4:43:
00:f0:10:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:42:17 2026 by rpki-client