This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
File: vm0t9XQLV9Se09LeKamMvGfyAWU.mft (raw, json)
Hash identifier: +YXP+cYYARp+jFkIA0c0anf5wlPEgI1pYhHknQVzUI0=
Subject key identifier: A4:48:FF:B5:07:FF:73:62:0C:8D:CF:C1:AB:95:D7:3E:50:49:B1:94
Authority key identifier: BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65
Certificate issuer: /CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
Certificate serial: 019C4434F1CDE3690E6B2AB0217A0743B5FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
Manifest number: 154A
Signing time: Mon 09 Feb 2026 21:00:46 +0000
Manifest this update: Mon 09 Feb 2026 21:00:46 +0000
Manifest next update: Tue 10 Feb 2026 21:00:46 +0000
Files and hashes: 1: vm0t9XQLV9Se09LeKamMvGfyAWU.crl (hash: 8O878k9vBfijxyGdzFbZq1Pjl2B3JFtg3jbUOw9L4a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:44:34:f1:cd:e3:69:0e:6b:2a:b0:21:7a:07:43:b5:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6d2df5740b57d49ed3d2de29a98cbc67f20165
Validity
Not Before: Feb 9 21:00:46 2026 GMT
Not After : Feb 10 21:00:46 2026 GMT
Subject: CN=a448ffb507ff73620c8dcfc1ab95d73e5049b194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:26:5d:fa:ec:0c:5d:9b:d0:4a:34:84:c0:90:
de:94:30:ee:aa:14:e1:9d:1b:96:2e:a5:9c:e5:19:
c7:5e:fe:7b:8e:59:c6:1a:87:ab:51:ef:de:5b:cc:
e7:04:0c:3e:49:87:6d:70:d1:da:38:9f:b7:36:77:
f8:f8:af:22:8f:4e:03:62:7e:c9:37:80:d1:6a:7c:
d8:ec:e2:d9:0f:9f:4e:41:6f:52:8e:e4:30:1f:05:
92:ce:0c:16:34:aa:d3:92:5e:ce:bf:2f:14:d7:8b:
04:d2:87:95:b6:a1:1f:94:37:eb:2b:18:52:48:07:
18:2c:c4:7a:3b:4e:3b:20:bc:96:6b:3b:31:9f:30:
92:72:6f:3d:42:30:cb:18:e7:9e:1d:8d:04:ca:01:
59:67:04:45:46:a0:4c:ec:6c:63:76:e1:91:c2:5a:
1c:5a:bb:69:82:19:af:79:51:ac:cd:2f:c0:43:51:
a2:a7:03:27:e1:6b:e3:93:db:ba:8e:73:03:33:70:
d3:54:5e:bd:99:d9:a1:fa:03:29:d2:85:1d:f4:26:
bb:53:52:b8:d6:34:64:99:77:2f:8f:12:be:8e:de:
de:65:07:a5:85:be:a4:59:07:0e:d4:ee:28:c3:eb:
44:de:38:4b:19:34:04:1e:94:f3:d2:fe:ce:35:68:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:48:FF:B5:07:FF:73:62:0C:8D:CF:C1:AB:95:D7:3E:50:49:B1:94
X509v3 Authority Key Identifier:
keyid:BE:6D:2D:F5:74:0B:57:D4:9E:D3:D2:DE:29:A9:8C:BC:67:F2:01:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vm0t9XQLV9Se09LeKamMvGfyAWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0ce373-9298-48fc-9259-ba9178c79fc6/1/vm0t9XQLV9Se09LeKamMvGfyAWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:08:ac:6b:c9:c2:1a:e3:46:cc:f9:72:7f:97:65:85:35:c8:
35:56:40:40:0b:36:df:02:24:1d:fa:fb:3d:12:1a:2d:43:10:
08:a6:30:50:de:37:8b:33:1d:84:39:f6:1c:cf:15:a2:56:f8:
db:5c:80:b9:8a:25:3d:7c:fe:87:10:96:9b:6c:6f:f5:26:ea:
c8:c6:07:44:a7:76:b1:af:9a:5e:ee:7f:68:20:54:69:0a:16:
eb:cd:c3:6f:c1:9e:65:09:74:6f:67:d8:d7:4c:b7:36:95:d9:
c9:2a:e2:b0:e5:14:94:9d:cb:4e:31:ca:80:9d:84:07:76:8d:
89:75:6a:31:4a:31:f3:5a:0d:80:04:e3:f9:63:c9:ca:35:e1:
65:4c:ed:7b:48:7c:1b:70:6b:a5:0a:8f:4d:08:22:66:39:46:
ef:44:1a:fc:4a:f0:0f:11:02:3f:60:9c:69:97:1d:2c:8e:b6:
a7:55:d6:6e:36:b1:cd:7b:1a:37:0f:00:e5:a7:62:6f:f8:d2:
c8:2a:67:a1:d9:c9:a4:b7:f6:03:77:1a:9d:2a:79:8c:98:5c:
fb:95:63:0d:0b:6a:5f:63:bc:cd:18:3a:1b:64:b1:18:d7:94:
64:28:d8:8b:cd:87:fb:57:91:37:ea:10:a0:00:3d:56:57:10:
44:15:01:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 01:35:55 2026 by rpki-client