This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File: vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier: SMb1n9wvSngdtkX2VqxrKp89c2Se4czrW6CHUlZD68o=
Subject key identifier: FA:89:3D:4F:07:6C:7B:A8:27:08:7F:D1:9F:1B:46:B3:B9:B1:40:2B
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer: /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial: 019C4547C02F0627B309C9C970DB6EF68368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number: 17A2
Signing time: Tue 10 Feb 2026 02:00:55 +0000
Manifest this update: Tue 10 Feb 2026 02:00:55 +0000
Manifest next update: Wed 11 Feb 2026 02:00:55 +0000
Files and hashes: 1: 5DvFWn8hN7piazN1T8HIXkNFc8w.roa (hash: XsihtnWpKZygkLBke+BN9JF5neJLF/Mp9MsWC2DKCb8=)
2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: dS4OdQ5HzFRer5CimE4kN/Ax19EPo8eRpTrK94Zps6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:05:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:45:47:c0:2f:06:27:b3:09:c9:c9:70:db:6e:f6:83:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Validity
Not Before: Feb 10 02:00:55 2026 GMT
Not After : Feb 11 02:00:55 2026 GMT
Subject: CN=fa893d4f076c7ba827087fd19f1b46b3b9b1402b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:d0:f4:9e:51:0a:d9:65:42:81:b8:23:4d:
38:0d:d4:ce:e1:36:22:bc:77:ec:a1:51:e8:73:fa:
e8:51:ae:1b:37:18:5b:78:b8:88:43:bc:a0:ef:e6:
c8:85:d7:59:2a:86:5c:8d:55:66:69:8c:5b:a3:b1:
f0:78:ad:03:aa:b4:39:52:3c:e6:68:e5:35:95:12:
8b:97:57:79:f7:21:6a:a9:39:10:20:b2:2d:36:d8:
e2:22:60:26:0e:e7:6c:90:22:ea:ae:72:13:44:b5:
07:98:c8:6b:9e:34:9a:3d:11:4f:d2:b4:67:70:65:
4d:21:c4:99:93:c8:5e:0c:7a:d4:42:8d:e4:7b:d5:
10:e3:e3:76:23:69:e3:e9:9f:c6:f3:09:15:6a:6e:
c4:6a:11:21:0c:68:06:3e:fa:ad:6a:12:82:0a:ca:
ab:e5:cc:97:87:13:07:1b:16:17:22:b0:18:e8:84:
e5:24:ef:9a:15:5b:0d:e0:d6:a3:c0:43:3e:d9:1a:
51:d6:00:90:28:f9:69:1a:67:99:e1:81:46:9f:a5:
1d:12:54:77:49:6d:b9:2e:bd:45:7d:bf:21:42:36:
f7:85:be:85:83:2d:88:5f:cf:ed:2d:ab:4a:bf:8e:
23:1e:58:9b:64:71:37:8f:e5:2d:ff:f0:65:e2:4c:
ac:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:89:3D:4F:07:6C:7B:A8:27:08:7F:D1:9F:1B:46:B3:B9:B1:40:2B
X509v3 Authority Key Identifier:
keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:cb:25:b7:03:38:5c:12:86:39:9f:c4:9f:88:ab:05:0e:b6:
1c:b1:e3:c0:63:62:a9:cf:7c:4a:17:18:e5:66:0b:cf:1f:4e:
1a:01:aa:3f:c1:7f:7c:dc:8a:99:e1:0e:00:24:d3:0b:76:7e:
31:35:d9:95:ec:f9:68:d0:4b:27:62:c9:1a:2b:1b:62:9b:96:
ee:47:63:0b:da:48:74:a7:e4:1c:82:76:30:7f:33:b9:f2:f9:
2e:90:be:57:35:86:18:0d:1b:b4:b8:a5:16:e0:b8:0d:94:51:
51:4e:6c:4c:1c:2a:63:ee:2d:b0:f0:17:61:84:f1:54:17:3d:
65:b5:3e:4d:f4:b5:40:d2:36:3f:a3:17:1c:9a:58:11:2e:6e:
f9:ee:b2:87:24:00:38:87:c2:4d:fa:26:34:16:04:75:02:28:
98:68:9e:f2:1c:7a:a2:8a:35:80:8b:6f:c7:d3:35:50:aa:38:
61:25:93:62:4d:ef:9d:0c:e5:de:a8:33:dc:aa:56:95:be:5b:
49:17:00:1d:b9:24:5d:97:ef:7f:d3:0a:b8:14:f2:6b:6c:7e:
00:82:e0:7d:82:aa:eb:02:8c:ae:5a:10:71:1b:25:34:58:97:
14:7f:fd:36:cf:b2:88:32:28:39:48:78:5f:19:a6:77:67:40:
aa:c1:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 04:02:25 2026 by rpki-client