This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
File: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft (raw, json)
Hash identifier: 8TprP+3W/g9Dz1WX0NxZ75hwnqhTs6cU6ovhJXwnV3k=
Subject key identifier: 62:5B:72:D0:5F:14:6A:F0:22:FF:16:D6:0B:48:E3:7D:78:B5:36:B9
Authority key identifier: BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
Certificate issuer: /CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Certificate serial: 019C40FCDB622D323BF9F2C52D89148D039C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
Manifest number: 14DF
Signing time: Mon 09 Feb 2026 06:00:38 +0000
Manifest this update: Mon 09 Feb 2026 06:00:38 +0000
Manifest next update: Tue 10 Feb 2026 06:00:38 +0000
Files and hashes: 1: vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl (hash: ks1jiGlmgbf1tBIRGeVezVli+Mw2CZ3t2zhoFlQTrMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:fc:db:62:2d:32:3b:f9:f2:c5:2d:89:14:8d:03:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb3e44095f38ca388836bf665b6f9f098dc5794
Validity
Not Before: Feb 9 06:00:38 2026 GMT
Not After : Feb 10 06:00:38 2026 GMT
Subject: CN=625b72d05f146af022ff16d60b48e37d78b536b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:af:bd:1a:86:d4:6d:fe:54:c6:c6:64:32:
36:5c:32:3b:03:41:cd:49:03:67:bf:ca:af:8b:83:
f6:a1:c6:42:90:62:63:e4:a2:ac:b7:dd:0e:11:f3:
43:2a:c4:c9:55:df:ad:b4:1d:e2:7b:0a:a1:ff:fa:
52:60:3b:bf:81:c0:b3:25:8b:56:ac:d5:5c:3c:76:
3d:fb:c2:22:17:0b:50:9b:8c:32:ca:b6:c8:a9:54:
0a:a3:9c:12:26:a1:ae:60:ca:6f:f5:ab:f2:dc:3c:
7c:09:37:c1:7d:6c:6a:18:7d:25:a3:a8:7b:12:69:
07:62:ef:d5:23:87:c9:a8:79:d8:b4:6d:8f:5b:f6:
4a:d2:cd:8a:8f:cd:95:ee:c3:c4:14:6a:46:7c:c0:
81:06:c4:c1:73:50:81:10:76:c1:5d:33:64:ec:c6:
bd:07:b9:ca:f6:6c:0c:63:3b:87:85:c7:4e:3e:3f:
69:2d:a4:88:4e:cf:64:71:78:18:23:45:80:1c:c0:
d9:6a:a0:7c:5d:41:22:d2:7e:16:80:e6:e8:3a:1d:
f7:fc:47:e3:51:ad:1e:db:44:bf:39:6e:79:e0:38:
e5:c4:04:31:0b:6d:53:19:47:f3:91:99:fb:b1:af:
06:ec:53:2e:0d:cb:bb:cf:a1:20:0a:02:d4:5a:f6:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5B:72:D0:5F:14:6A:F0:22:FF:16:D6:0B:48:E3:7D:78:B5:36:B9
X509v3 Authority Key Identifier:
keyid:BE:B3:E4:40:95:F3:8C:A3:88:83:6B:F6:65:B6:F9:F0:98:DC:57:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/65a525-a259-4023-9f95-a6a494562e1d/1/vrPkQJXzjKOIg2v2Zbb58JjcV5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:7b:4c:c3:24:22:ac:ca:81:ba:d6:89:25:28:95:78:56:c2:
fe:2e:44:56:59:a7:23:3b:37:7d:20:34:6a:f0:fc:d6:8c:75:
fa:44:e1:cb:d9:ac:1e:c3:ff:6f:bb:5b:af:12:25:0b:ec:e1:
60:5f:fb:57:4c:db:37:a2:42:44:16:2b:b1:0a:15:bf:84:8b:
24:ca:25:1f:a8:8f:8e:51:11:76:e1:00:b4:d3:41:fd:5e:ee:
45:63:70:ec:e3:4d:91:5e:4b:f0:76:2f:56:bb:7d:7b:ee:60:
51:57:e2:4b:09:9d:e7:b2:4d:d5:9c:21:8c:40:cb:a3:be:af:
5f:89:d9:ce:89:d6:fa:54:d7:de:91:af:75:bc:32:70:21:c7:
1f:23:3d:92:c2:59:57:cb:9b:ba:c9:d5:c1:08:d1:6c:3d:60:
27:02:4c:e8:34:57:41:b6:db:10:68:ff:96:f9:fa:57:c6:6b:
0e:ef:88:3b:44:7e:04:89:38:82:3a:d4:ae:3d:21:5b:d1:4f:
86:e6:de:1a:f9:fc:34:5c:3c:a0:06:70:35:f0:f8:84:1b:2f:
90:cb:63:04:00:65:fd:7f:c5:f8:f3:42:91:cd:85:58:21:58:
30:2d:19:94:bf:a2:6a:db:5d:c2:01:d4:f4:b3:ed:fe:7d:c1:
99:d7:72:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:56:32 2026 by rpki-client