This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
File: VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft (raw, json)
Hash identifier: fo2/pd2qSoG4XcZeuZg/V3L8g7QD3NQriv5sp0Ukyoo=
Subject key identifier: 94:4B:05:AA:BA:A9:16:5F:B8:54:E7:74:81:D8:D2:E3:16:3B:EA:C6
Authority key identifier: 54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
Certificate issuer: /CN=547ce483c8241d7a4e6625977798035b638586c6
Certificate serial: 019C42EB3E837786F4F62DE0E864BDB4F379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
Manifest number: 09EA
Signing time: Mon 09 Feb 2026 15:00:39 +0000
Manifest this update: Mon 09 Feb 2026 15:00:39 +0000
Manifest next update: Tue 10 Feb 2026 15:00:39 +0000
Files and hashes: 1: UxOL8IaUSmhBUPOtpGzXZsWn7OI.roa (hash: KmTIoiBP3ZerlQ7vuojSylMU7CMgee4YhAPjdlXS/cE=)
2: VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl (hash: ht2+JRYfaOnLOwSC6swwxyuCaeZ9ourdDr4amVP1uGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:3e:83:77:86:f4:f6:2d:e0:e8:64:bd:b4:f3:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=547ce483c8241d7a4e6625977798035b638586c6
Validity
Not Before: Feb 9 15:00:39 2026 GMT
Not After : Feb 10 15:00:39 2026 GMT
Subject: CN=944b05aabaa9165fb854e77481d8d2e3163beac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:12:fb:09:3e:3b:ee:cc:45:ca:da:28:fc:
34:4c:34:7d:7d:62:98:35:f8:2a:43:43:b5:e8:4b:
2e:a6:2d:35:51:f9:3c:9f:37:52:56:39:6b:5a:5a:
83:79:f0:be:79:09:a2:bf:62:8a:51:e2:1d:7a:f6:
1d:32:9a:3e:32:e5:45:95:72:2a:ff:3b:a6:df:4e:
3d:36:5e:bd:83:63:29:31:5f:3a:4e:14:fa:85:e2:
20:bd:99:ef:38:42:b8:4f:bc:ef:bd:ee:15:d9:6c:
ae:8e:7d:2d:ab:8b:c2:1c:6b:8d:2a:a3:4a:a9:d8:
55:6b:da:f3:f0:24:82:14:58:9a:e1:d4:3b:19:8f:
bd:dd:d0:8d:f2:79:8b:2d:3b:72:87:b6:1b:25:d7:
4e:57:b4:66:f5:e2:ed:d5:69:e7:bc:10:4c:67:2c:
8d:ee:25:b1:01:84:a5:9a:26:15:fc:3c:d7:a8:71:
ae:e1:9b:f6:86:c9:c2:41:94:48:bd:01:35:12:f9:
19:69:58:28:9e:42:3a:1e:4b:88:70:2d:67:16:af:
30:6d:d7:0e:a2:7d:ab:12:d7:de:3e:c5:60:ea:eb:
55:57:cd:c6:73:10:a2:dc:6c:14:2a:01:12:37:86:
5f:0f:20:f9:ea:a8:6c:66:5f:bc:60:c0:c8:47:9a:
2c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:05:AA:BA:A9:16:5F:B8:54:E7:74:81:D8:D2:E3:16:3B:EA:C6
X509v3 Authority Key Identifier:
keyid:54:7C:E4:83:C8:24:1D:7A:4E:66:25:97:77:98:03:5B:63:85:86:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHzkg8gkHXpOZiWXd5gDW2OFhsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2cbe39-4fac-45af-99fd-52ec61bc6c00/1/VHzkg8gkHXpOZiWXd5gDW2OFhsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:ef:24:4b:c7:17:95:e3:ea:14:e1:27:76:50:e2:39:18:af:
ec:e1:16:1b:56:07:55:6e:90:61:a5:b0:74:ce:9d:9f:f6:ea:
9b:91:bb:ae:34:4b:d4:98:23:b5:5f:89:c0:10:f8:2f:59:c1:
df:ea:ff:5a:4b:02:cb:dd:58:4f:9d:22:a0:54:38:87:e3:3e:
e5:6a:51:b5:18:c5:ce:70:b6:07:5f:57:d3:1a:b4:e9:5b:58:
ee:c5:05:a6:21:41:8c:66:48:86:82:b5:3a:d7:17:3b:45:55:
86:6a:94:45:78:56:71:03:0f:7f:e2:f2:99:f1:1a:e4:32:2e:
79:b2:c5:44:ec:e5:18:08:df:ff:ad:af:21:eb:00:69:cb:e4:
a9:15:11:b5:0f:50:05:43:e6:fd:db:84:90:0d:30:8a:80:98:
1a:2f:e4:87:ed:c9:21:47:99:76:09:a9:17:c1:d2:b0:52:79:
b4:30:a2:6e:3d:55:61:44:7a:9e:85:63:01:1e:25:31:1e:30:
e2:aa:0c:fe:2f:7c:86:54:38:61:9f:4f:be:7c:da:10:e7:57:
d7:da:21:f3:1b:8d:3b:43:b8:e9:3a:d4:ab:5e:5a:00:99:29:
c3:0a:14:cf:09:9a:7d:28:f6:e6:de:f4:25:23:65:be:fe:7d:
41:c2:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:53:34 2026 by rpki-client