This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
File: _vMpNgwbb8r79SU6ZX4-nX8iT34.mft (raw, json)
Hash identifier: a/zxKwHJ7bbC09GPsX3yoyDFXNKebVvYrCvRAs8V3z4=
Subject key identifier: 10:FC:77:31:46:8A:BE:2F:67:12:F0:E4:73:08:EF:C3:4E:1E:EA:5A
Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
Certificate issuer: /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Certificate serial: 019C4358C1EEF640B374ABFDCE7AC2591950
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
Manifest number: 0C49
Signing time: Mon 09 Feb 2026 17:00:15 +0000
Manifest this update: Mon 09 Feb 2026 17:00:15 +0000
Manifest next update: Tue 10 Feb 2026 17:00:15 +0000
Files and hashes: 1: _vMpNgwbb8r79SU6ZX4-nX8iT34.crl (hash: Q8fegB/X3hKMqrvU1BexAKEoCKeOROJ0YwA/qapM2us=)
2: lJ1PR8O3Xc-1RUBjbzMCbjEey70.roa (hash: ND2UsW0Ml1x7tPRxGB8XCDz5Q1jLKGp5jR1NgcOXORc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:58:c1:ee:f6:40:b3:74:ab:fd:ce:7a:c2:59:19:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Validity
Not Before: Feb 9 17:00:15 2026 GMT
Not After : Feb 10 17:00:15 2026 GMT
Subject: CN=10fc7731468abe2f6712f0e47308efc34e1eea5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e1:1e:c3:aa:2c:ce:b7:61:ff:3a:ae:ce:65:
73:a5:4c:bb:8e:56:64:ca:be:61:00:dc:98:ed:e4:
1b:49:4c:dc:df:0c:ca:ae:dd:97:16:4a:f5:2a:52:
8a:97:c2:45:d4:bd:72:bc:f7:e2:a6:73:d1:e5:ce:
a9:ed:c4:76:5f:7e:1e:6f:11:2b:82:aa:d1:ae:40:
9a:66:00:5d:b9:77:0c:f1:38:d6:a5:f7:ea:d4:0a:
c5:fa:e4:07:65:70:5f:f6:77:f4:b9:00:6e:eb:5e:
91:60:c5:ff:7d:98:04:1c:a9:b9:39:70:9f:16:ac:
82:ca:5b:57:d0:6d:9d:71:05:d3:39:2f:db:af:ce:
2a:94:2a:07:1f:c4:1b:6b:bf:26:86:61:ca:5d:c1:
26:56:03:ce:b2:f4:09:90:9a:a7:7b:8b:5f:45:dc:
9d:a9:1b:a0:7e:d5:93:c8:04:e3:06:bc:d4:0e:1b:
22:11:47:b7:0a:a4:32:20:52:22:8f:f7:32:a8:81:
61:75:6e:bc:b4:a6:83:bd:71:f5:01:ef:66:bf:73:
3b:2a:d7:92:5e:57:7d:d2:70:54:98:e4:1a:26:cd:
d0:ac:93:4c:8e:af:31:39:5f:7a:c8:9c:ec:1e:3c:
f0:ce:65:fe:0f:5f:3c:a8:37:9a:7e:c4:6e:03:eb:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:FC:77:31:46:8A:BE:2F:67:12:F0:E4:73:08:EF:C3:4E:1E:EA:5A
X509v3 Authority Key Identifier:
keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2c:60:95:95:59:f5:32:23:a0:5b:dc:b5:2e:de:d8:74:6e:
0a:60:d9:f4:6b:93:46:3c:c0:0f:35:58:de:8a:2f:c7:50:b1:
02:d1:fa:e2:ea:07:43:3c:e3:60:c8:71:4e:41:a5:09:78:9e:
17:fd:45:62:d8:a9:6a:f9:77:f9:0e:3a:40:59:57:eb:0f:ee:
ce:de:3e:8a:03:7d:fb:7f:de:e9:f4:9a:60:14:d7:4e:f6:a1:
d5:e4:e2:d8:c4:7b:c9:9f:a6:38:04:6c:2b:85:45:90:d9:fe:
35:eb:1f:84:41:17:08:08:4d:08:64:2a:4c:50:79:ee:c1:85:
99:c9:02:47:ec:d4:8f:47:83:13:c1:a7:c6:9f:ce:2b:a6:17:
3d:dd:85:f1:f2:f1:b2:e7:9c:ed:25:d5:2d:0c:96:16:84:93:
24:05:8e:7e:e5:4e:c8:00:ff:0d:61:17:43:e0:c8:fe:d8:5f:
c9:b9:fb:41:09:2e:10:d2:a2:7b:fb:91:04:67:bd:44:12:10:
b3:b2:c9:c5:fd:7a:23:78:57:a4:25:81:55:15:6a:d1:38:17:
30:60:1c:fb:78:fd:64:7a:9b:67:07:5b:8a:ac:e8:af:2b:ce:
04:6d:0c:20:ff:2b:d7:a4:ee:1a:f6:f8:01:a2:ab:f3:b3:45:
5f:e2:65:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:21 2026 by rpki-client