This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File: VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier: EhH3TnRqqqBj7zFPdlmYBxwhXBTTmC/E/z6QgzPEijg=
Subject key identifier: 0C:2F:36:09:04:7E:BA:69:99:BD:F1:D7:26:25:0E:91:53:38:D5:52
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer: /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial: 019C42B43303071F6A53F2B494E88366E1D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number: 17A1
Signing time: Mon 09 Feb 2026 14:00:31 +0000
Manifest this update: Mon 09 Feb 2026 14:00:31 +0000
Manifest next update: Tue 10 Feb 2026 14:00:31 +0000
Files and hashes: 1: F-ogY8Ta0_wee_Msr6wXjLMMLdk.roa (hash: UNtwMKF8S5Lr7jUG500KlLAuDRJg8Q6dusBqXV40+W8=)
2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: Qa0r52nPPX0OjZvoZHmpa3k5m5QM4QTSrp15qX4KA+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:33:03:07:1f:6a:53:f2:b4:94:e8:83:66:e1:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Validity
Not Before: Feb 9 14:00:31 2026 GMT
Not After : Feb 10 14:00:31 2026 GMT
Subject: CN=0c2f3609047eba6999bdf1d726250e915338d552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c1:2b:e7:1c:16:2f:2a:e5:d0:92:cf:89:d9:
22:93:3a:71:6d:04:e3:1b:f1:a6:dc:f9:b0:cb:44:
78:23:06:61:97:92:15:2c:46:bc:7c:11:49:a9:85:
13:97:e5:9d:42:db:89:e1:fd:03:18:7e:7f:42:e6:
10:05:0c:52:a3:3a:96:0e:b4:1d:2f:b5:a2:03:54:
d3:21:0b:75:d6:c9:8a:48:89:0c:5e:65:4c:a4:91:
76:fa:47:bb:c7:70:ba:6b:97:5b:c0:d1:2b:e2:55:
99:e7:ad:ba:77:d1:84:43:a8:5e:b2:7f:dc:d0:33:
d5:ee:fd:e0:15:d0:1e:3a:cf:7f:07:58:d2:e0:30:
e5:e8:13:22:8b:e9:75:40:c9:23:2a:09:f0:d6:96:
f5:82:8e:e9:60:7c:a5:54:79:53:35:0f:59:a2:61:
cf:b3:ec:c9:aa:48:31:91:42:ce:e1:ba:f1:21:3c:
6d:af:c9:69:03:75:08:68:e8:81:d1:15:d8:00:fe:
65:c8:48:da:a2:bb:d4:5f:c5:9c:17:ca:22:65:30:
0e:58:45:d4:45:65:13:3f:cc:ee:7f:d8:94:f6:a9:
02:c6:5b:fb:0c:4d:48:0b:c4:6f:f2:a4:1f:8a:ec:
e3:24:48:4b:35:ce:fd:40:5c:3c:47:87:4a:6f:71:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2F:36:09:04:7E:BA:69:99:BD:F1:D7:26:25:0E:91:53:38:D5:52
X509v3 Authority Key Identifier:
keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fe:c0:ad:ec:42:df:30:61:83:5a:51:52:7b:69:5d:a3:16:
c5:12:b1:7a:e9:2d:2f:63:1b:24:b4:81:7a:d9:3c:c5:2f:c2:
9a:64:0e:11:0d:5e:3e:f0:a4:fa:41:57:36:61:03:79:76:0d:
21:f5:8a:1b:39:72:fe:c6:04:c5:28:da:77:10:92:62:69:6b:
03:24:74:d9:87:14:ec:07:18:fc:8e:3b:4e:a6:a6:05:2e:b2:
cc:b2:3e:2a:a5:e6:59:0d:51:48:31:69:de:73:5c:c5:3f:d2:
c6:d7:a7:f3:24:b9:d5:1c:bf:4a:95:cb:01:bd:8f:a7:33:fa:
e4:f3:90:6e:b4:82:32:91:5d:16:e0:f5:e4:60:f8:44:07:89:
94:d8:83:5b:e9:38:46:72:a9:59:d7:a4:7e:39:a2:28:50:25:
a5:86:fb:aa:27:c3:12:1b:02:4b:0a:36:48:48:64:ef:ea:ff:
8b:59:6e:4d:fb:37:fd:dd:e9:45:ff:00:89:92:87:4c:ff:f3:
08:98:96:0e:2e:32:21:4d:10:b3:4a:90:c5:91:bc:dc:bf:89:
b9:03:3e:44:4f:6e:84:54:5e:01:e5:07:2f:1d:52:ef:d6:3e:
5f:9f:73:55:10:fe:73:87:74:b3:c2:5b:51:dd:7f:e9:f5:ec:
8e:ff:19:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:29 2026 by rpki-client