This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier: qlK1INskic2l2czLS0N402QH5kxAUpJVUJHcZrBcDu4=
Subject key identifier: DD:F9:34:67:69:07:C2:D5:50:37:14:D4:8F:DC:50:EB:B3:8D:CC:95
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial: 019C2D3FEBAEE0F13716BFF7577C002B39AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number: 0498
Signing time: Thu 05 Feb 2026 10:01:29 +0000
Manifest this update: Thu 05 Feb 2026 10:01:29 +0000
Manifest next update: Fri 06 Feb 2026 10:01:29 +0000
Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: wukcYu4sS4MwAmS8uAn46ImxWqsvmxDS//H8QGS9n+Q=)
2: Yuo4raHbuV1AupPWdNm1jMw95T8.roa (hash: lmnKCE9fJdmr7z73updpBxSnhRCLKa9yvUVY95GYbw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Feb 2026 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:3f:eb:ae:e0:f1:37:16:bf:f7:57:7c:00:2b:39:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Validity
Not Before: Feb 5 10:01:29 2026 GMT
Not After : Feb 6 10:01:29 2026 GMT
Subject: CN=ddf934676907c2d5503714d48fdc50ebb38dcc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:1c:56:47:ba:5a:ad:95:84:8e:69:64:0d:
9f:b5:ac:50:1a:cc:54:ec:90:e4:18:b2:0c:6b:c7:
78:30:7d:fd:12:73:59:3a:44:a7:53:e0:d0:d4:da:
00:27:bc:6e:96:7a:46:8d:b1:85:1b:02:aa:be:48:
27:cf:7b:c5:3d:4c:88:c3:7d:38:a0:a5:02:37:41:
7c:ed:23:f2:24:5d:c5:8c:67:a3:ce:4d:32:bf:eb:
0a:5f:64:4b:d5:2b:89:c7:54:91:ef:04:69:28:65:
49:54:37:4b:85:01:1a:0f:04:12:e3:3f:3d:94:5f:
a6:b7:ab:d5:e7:45:2f:fe:77:54:e6:7e:09:2a:c0:
14:7f:d8:bf:a1:a0:31:d3:7c:2f:81:4b:c5:64:34:
61:68:26:27:98:fe:b2:e0:36:ed:42:35:6b:65:5f:
20:ae:74:25:dc:b1:a8:91:f2:d4:94:53:54:1a:40:
ec:0c:b6:54:c3:1a:ee:e4:67:a3:90:7c:54:87:92:
cb:cd:b9:81:74:6c:76:3a:8b:ab:bd:58:aa:b9:38:
3e:18:47:a5:2a:32:05:71:26:33:a1:6f:84:4a:4f:
eb:98:f4:14:06:68:fb:6b:dd:6d:0e:be:90:dd:d6:
fc:ad:c4:bb:78:04:94:a2:f1:19:50:1f:03:80:ae:
64:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:34:67:69:07:C2:D5:50:37:14:D4:8F:DC:50:EB:B3:8D:CC:95
X509v3 Authority Key Identifier:
keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:88:56:7f:ac:05:77:ce:16:f9:b8:df:0d:cd:ba:9d:8b:79:
e7:e5:e2:ca:e1:8e:7e:49:46:9c:4a:48:68:ec:ad:e1:78:f9:
62:a3:b3:37:4b:29:82:85:e7:7b:be:c5:1f:df:90:d0:e3:26:
4b:26:38:48:50:c4:d5:ce:ce:80:64:35:74:c6:33:0e:c4:bd:
14:0b:0a:04:f1:27:cf:1d:be:c3:6a:d2:b3:a3:3f:11:ca:01:
0a:3d:13:10:f5:40:9d:22:76:18:55:49:8d:e0:e8:af:7c:18:
3e:85:3f:39:13:0a:96:ed:9e:18:c8:50:11:26:5e:5b:0d:ac:
70:c4:84:6b:cc:d6:87:a1:c0:c8:41:03:26:d1:cf:d0:ac:fa:
f9:27:c1:41:a2:20:b7:4b:c3:72:69:34:37:bc:e4:ed:fa:d2:
fc:2c:4c:e8:9f:8b:28:f6:b9:77:93:65:d8:1b:45:0a:d3:5f:
35:a9:4d:39:d8:5b:86:55:ad:af:d8:cb:06:84:3c:d6:84:a6:
19:11:dd:7e:d5:fe:28:d8:c4:6c:36:8f:d0:00:61:b8:12:bc:
e0:38:1b:4e:70:ad:b3:b1:4f:48:16:04:2a:56:8d:1c:4b:4a:
a5:0e:de:bf:c2:e0:0e:ad:8b:e5:c0:59:ba:e0:7d:a5:38:a9:
58:3d:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 18:33:13 2026 by rpki-client