This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
File: VRDNubrguTLHmin42XktMJ9617c.mft (raw, json)
Hash identifier: 9NWV241s3oLOQuxfL9DOOUrtDPKh+p/OSsPdaC71QWc=
Subject key identifier: B4:2C:E2:5A:30:FF:1F:C4:81:90:82:46:33:C7:8B:46:CF:E1:90:C0
Authority key identifier: 55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
Certificate issuer: /CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Certificate serial: 019C435901B1910BD663BC8FACF89DAB2F17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
Manifest number: 04B6
Signing time: Mon 09 Feb 2026 17:00:32 +0000
Manifest this update: Mon 09 Feb 2026 17:00:32 +0000
Manifest next update: Tue 10 Feb 2026 17:00:32 +0000
Files and hashes: 1: VRDNubrguTLHmin42XktMJ9617c.crl (hash: SxlZGi0sCv0uSX1oGWauGkSDIwurArxCpqig99MnTnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:59:01:b1:91:0b:d6:63:bc:8f:ac:f8:9d:ab:2f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5510cdb9bae0b932c79a29f8d9792d309f7ad7b7
Validity
Not Before: Feb 9 17:00:32 2026 GMT
Not After : Feb 10 17:00:32 2026 GMT
Subject: CN=b42ce25a30ff1fc48190824633c78b46cfe190c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8a:f5:31:be:99:f4:de:b4:ec:a8:63:5c:69:
3c:6c:ca:43:a2:fb:96:2d:63:5c:c6:81:f5:29:85:
01:98:25:e7:d1:56:05:30:79:c5:06:ef:ec:d2:36:
a4:40:94:e7:3e:b5:1d:b7:00:ca:2e:1a:94:29:fe:
a7:b3:36:a6:31:80:a5:6d:62:1d:92:65:e0:6b:e3:
22:48:e9:1a:2c:9a:d9:ea:68:c4:7c:43:5d:b1:7b:
cd:9a:48:b0:2d:b9:92:c2:fd:a1:fb:44:3e:a9:cb:
5e:7d:74:91:c3:32:3c:6a:48:36:a9:fb:a6:38:be:
89:1c:f7:79:86:93:0f:2f:04:f4:44:56:36:cc:33:
82:a5:28:3d:e3:47:73:4d:c5:ef:74:a8:fe:9f:88:
50:4c:f9:e0:73:29:2b:f2:70:cb:db:f3:cf:37:f4:
37:83:f3:a6:ee:d8:3c:3c:f4:b2:af:25:ce:53:3e:
1a:18:59:17:3d:e7:3d:ad:96:33:37:b7:1c:da:f1:
87:87:b1:e3:14:d2:d0:9c:0b:9f:3e:3f:ec:f5:2c:
37:de:e9:39:92:ee:2a:37:03:3f:ac:60:3f:f8:d6:
1c:be:8c:b0:cf:6d:5a:df:d7:30:48:cf:1e:0e:a6:
91:a6:40:0d:a8:f1:31:26:1d:3b:1d:a3:74:91:74:
25:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:2C:E2:5A:30:FF:1F:C4:81:90:82:46:33:C7:8B:46:CF:E1:90:C0
X509v3 Authority Key Identifier:
keyid:55:10:CD:B9:BA:E0:B9:32:C7:9A:29:F8:D9:79:2D:30:9F:7A:D7:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRDNubrguTLHmin42XktMJ9617c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/770966-7dac-4e1c-b3ed-df5902013cdf/1/VRDNubrguTLHmin42XktMJ9617c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:85:50:0c:ec:90:0e:f7:6c:27:d8:88:13:49:93:3a:d3:26:
22:4b:c2:92:ce:2d:97:00:b0:c0:d0:84:c1:10:73:dd:88:02:
13:b4:33:69:30:26:bb:6d:7c:c2:87:8e:6b:3f:c4:36:bc:15:
91:43:7f:f8:e4:0d:6a:71:46:1c:86:67:55:64:1e:fa:60:01:
15:cc:bc:2d:32:27:45:53:c5:04:f4:fb:7b:55:ac:9c:11:f5:
75:36:b9:d7:d9:c4:23:07:18:13:9b:e4:8c:62:28:d7:06:d0:
41:34:8a:98:bc:c5:31:56:cf:cb:4a:2a:33:77:c3:32:18:f6:
d4:ac:c0:de:d0:cc:32:0f:ab:61:1b:1b:6d:98:58:34:b7:fe:
3d:a7:38:41:d0:e5:de:36:3e:f4:70:3c:e5:36:dc:5a:37:d5:
5d:55:69:84:a6:c5:aa:d0:96:57:c4:4e:7f:52:a3:e4:48:b7:
e1:86:5e:59:d6:5d:65:0c:74:b1:12:aa:97:20:43:87:cb:a3:
8e:f1:7d:dd:ad:b6:d4:70:61:fa:89:ed:6f:d6:20:45:24:63:
bb:1f:f0:2b:3b:50:fa:85:54:8d:cd:4e:c1:bc:c5:0c:95:52:
08:83:42:64:5f:42:63:8d:54:cc:49:8a:7f:0e:58:b0:40:65:
f3:74:f5:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDWQGxkQvWY7yPrPidqy8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTBjZGI5YmFlMGI5MzJjNzlhMjlmOGQ5NzkyZDMwOWY3
YWQ3YjcwHhcNMjYwMjA5MTcwMDMyWhcNMjYwMjEwMTcwMDMyWjAzMTEwLwYDVQQD
EyhiNDJjZTI1YTMwZmYxZmM0ODE5MDgyNDYzM2M3OGI0NmNmZTE5MGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ir1Mb6Z9N607KhjXGk8bMpDovuW
LWNcxoH1KYUBmCXn0VYFMHnFBu/s0jakQJTnPrUdtwDKLhqUKf6nszamMYClbWId
kmXga+MiSOkaLJrZ6mjEfENdsXvNmkiwLbmSwv2h+0Q+qctefXSRwzI8akg2qfum
OL6JHPd5hpMPLwT0RFY2zDOCpSg940dzTcXvdKj+n4hQTPngcykr8nDL2/PPN/Q3
g/Om7tg8PPSyryXOUz4aGFkXPec9rZYzN7cc2vGHh7HjFNLQnAufPj/s9Sw33uk5
ku4qNwM/rGA/+NYcvoywz21a39cwSM8eDqaRpkANqPExJh07HaN0kXQliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLQs4low/x/EgZCCRjPHi0bP4ZDAMB8GA1UdIwQY
MBaAFFUQzbm64Lkyx5op+Nl5LTCfete3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NzA5NjYtN2RhYy00ZTFjLWIzZWQt
ZGY1OTAyMDEzY2RmLzEvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NzA5NjYtN2RhYy00ZTFjLWIzZWQtZGY1OTAyMDEzY2Rm
LzEvVlJETnVicmd1VExIbWluNDJYa3RNSjk2MTdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgIVQDOyQ
DvdsJ9iIE0mTOtMmIkvCks4tlwCwwNCEwRBz3YgCE7QzaTAmu218woeOaz/ENrwV
kUN/+OQNanFGHIZnVWQe+mABFcy8LTInRVPFBPT7e1WsnBH1dTa519nEIwcYE5vk
jGIo1wbQQTSKmLzFMVbPy0oqM3fDMhj21KzA3tDMMg+rYRsbbZhYNLf+Pac4QdDl
3jY+9HA85TbcWjfVXVVphKbFqtCWV8ROf1Kj5Ei34YZeWdZdZQx0sRKqlyBDh8uj
jvF93a221HBh+ontb9YgRSRjux/wKztQ+oVUjc1OwbzFDJVSCINCZF9CY41UzEmK
fw5YsEBl83T18A==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:51 2026 by rpki-client