This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
File: VICpFlHjeO69hx0K3WleZ3v1DS4.mft (raw, json)
Hash identifier: 2GWj6CwFOF8GPm0fZUCvjiKQODCZs2dbghngYAe40Fg=
Subject key identifier: 8D:6A:9E:CC:D5:90:17:06:6D:00:4E:7E:F6:5B:C1:59:1F:BA:58:DA
Authority key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
Certificate issuer: /CN=5480a91651e378eebd871d0add695e677bf50d2e
Certificate serial: 019C4322149C9A8F015BD8D7FBE5699185D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
Manifest number: 0B42
Signing time: Mon 09 Feb 2026 16:00:32 +0000
Manifest this update: Mon 09 Feb 2026 16:00:32 +0000
Manifest next update: Tue 10 Feb 2026 16:00:32 +0000
Files and hashes: 1: VICpFlHjeO69hx0K3WleZ3v1DS4.crl (hash: Sfv7DdtKAClE64PnhqkLnFryi1dkwUDe3kGYHkRFH+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:14:9c:9a:8f:01:5b:d8:d7:fb:e5:69:91:85:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5480a91651e378eebd871d0add695e677bf50d2e
Validity
Not Before: Feb 9 16:00:32 2026 GMT
Not After : Feb 10 16:00:32 2026 GMT
Subject: CN=8d6a9eccd59017066d004e7ef65bc1591fba58da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:66:ad:01:41:57:ce:c0:47:33:38:94:e5:05:
c1:a7:bf:e5:c2:c0:9d:08:ff:f6:6d:7d:b1:5a:30:
00:9c:3b:00:1e:22:d1:ab:c7:06:3d:74:9c:54:03:
fb:a0:e6:a5:7f:dc:a3:c7:df:00:ab:ef:7c:49:9c:
9c:6b:5c:36:f9:39:1d:2a:4e:4e:68:83:14:27:79:
c7:85:98:34:11:43:61:ab:16:1d:75:c5:68:e6:6e:
67:a7:fd:96:2f:b6:89:f1:54:4f:ca:7c:ce:0c:43:
3d:59:7d:74:33:e1:a6:82:b6:b4:a2:91:f3:09:88:
35:9a:3e:8a:83:7e:9d:2a:26:f0:f5:40:23:46:c9:
5c:da:a3:34:e0:a9:00:d3:bf:6e:cf:3a:31:56:f2:
fc:b6:12:e3:3e:77:9d:d3:1c:b7:9f:6d:f8:ab:f5:
b7:e8:c3:03:a4:2b:72:60:62:a4:28:c4:fd:1a:45:
54:d6:3d:8d:40:9d:32:c9:b4:42:0a:f0:b5:09:a1:
f2:fa:f1:66:28:10:97:da:a2:94:fa:e8:92:9c:aa:
be:ca:db:77:e7:91:c9:c9:b3:61:22:4a:6c:71:4d:
99:cf:8a:90:b8:f9:2b:98:8c:6c:a6:ad:14:41:21:
0a:57:6d:4b:17:87:cd:88:44:bb:d2:a1:46:a0:f6:
43:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:9E:CC:D5:90:17:06:6D:00:4E:7E:F6:5B:C1:59:1F:BA:58:DA
X509v3 Authority Key Identifier:
keyid:54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:02:c7:88:39:ab:78:2d:d8:53:25:cd:c7:63:14:a4:ea:03:
12:88:be:fd:4a:53:39:e0:22:93:9e:67:e4:7f:c5:d3:0a:2e:
fe:95:78:41:a6:4f:c6:25:35:6d:5c:55:e7:9b:51:6e:16:01:
84:25:84:8d:34:77:2a:ca:03:c2:0b:a9:c5:b1:a7:05:35:35:
a0:10:38:1b:24:b3:b7:f5:60:f5:37:4b:ae:71:bc:55:51:c1:
d7:fb:7b:1c:1e:35:8c:69:cc:3d:1d:e6:0f:14:03:55:9a:39:
78:98:48:47:d6:fb:93:d5:de:cf:67:b9:48:5e:eb:fe:70:d1:
62:82:76:51:41:e9:ff:6c:41:35:4a:20:c6:03:9d:8c:7b:67:
9e:a9:b4:02:07:4b:d1:b2:17:b0:80:ed:26:2a:8f:ba:5e:fa:
dc:69:4c:d8:7e:43:f7:1d:7d:21:b3:c1:d7:3a:cd:c7:f8:79:
47:0d:b7:4d:ee:d2:25:9e:34:b9:cb:09:52:d9:b4:e9:8a:b8:
8b:5a:cd:bf:15:c3:8a:5e:6b:91:0e:58:4c:aa:3b:27:1e:5f:
50:ba:9a:50:6f:cb:85:09:25:12:37:26:26:b4:73:cd:2d:e7:
38:a2:21:0b:07:1c:bc:12:51:dd:08:fb:43:17:bb:3b:d1:41:
e5:e7:8b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:23 2026 by rpki-client