This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier: UUL2y5jTBEYnP1Kcv19JbJ64hEDokDtab6lRxUk8CNg=
Subject key identifier: 5C:4A:87:C9:9C:46:07:2A:C3:AA:72:27:27:79:72:CA:A0:F6:F9:AD
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer: /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial: 019C42B44A98F2610C5D4D228DAB43C1B54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number: 1352
Signing time: Mon 09 Feb 2026 14:00:37 +0000
Manifest this update: Mon 09 Feb 2026 14:00:37 +0000
Manifest next update: Tue 10 Feb 2026 14:00:37 +0000
Files and hashes: 1: hYLp43OSPXsL4JxLswilkc5UtXM.roa (hash: rqjG85ikI7yDLzBtgViqukIp7fUAhh1OKd6HYF2+ojM=)
2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: cme2lKkQ+hXAHhIungMhINgxaNQCTmEKabMdVlwkvmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:4a:98:f2:61:0c:5d:4d:22:8d:ab:43:c1:b5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Validity
Not Before: Feb 9 14:00:37 2026 GMT
Not After : Feb 10 14:00:37 2026 GMT
Subject: CN=5c4a87c99c46072ac3aa7227277972caa0f6f9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:5c:0a:54:bf:d0:b0:cc:7a:d7:7e:9e:55:
34:1b:cb:45:e1:e5:89:b0:2c:15:bb:45:c8:f3:16:
8b:42:29:9d:4b:7c:48:10:54:5c:e0:d0:c8:30:d4:
0c:19:b9:4a:38:1c:52:86:e3:57:a0:a9:03:ba:a6:
7d:b5:d3:1d:82:a4:a0:5e:d9:f2:17:dd:b9:fd:29:
3d:04:1c:39:10:7b:37:1a:db:45:3a:9d:53:d9:bc:
ca:f2:16:8b:3a:77:27:30:ec:54:11:9b:ed:a7:7e:
58:a8:c3:0b:1c:13:47:45:2b:3d:84:ba:15:fb:b3:
58:41:12:b1:0f:03:9b:45:2a:2e:b6:51:f7:0c:2a:
21:76:cf:f3:91:8e:fa:6e:5c:8e:88:e1:d3:44:45:
94:c6:af:1e:47:6b:39:2c:dc:d8:00:ae:67:58:85:
e8:d1:23:66:3b:2c:a5:ab:bc:fa:ea:91:04:43:ca:
26:60:86:c9:ef:5f:93:41:e1:35:d4:3d:02:9b:cd:
97:53:e0:b3:dd:ab:fd:a9:41:7e:f2:94:ce:10:2f:
dd:89:8e:10:60:84:77:6a:44:1c:15:e3:8a:8c:9c:
bc:a0:41:2e:d0:0f:fb:ed:0a:2e:45:4e:c0:f0:96:
6b:bf:2b:d4:51:6e:32:e0:d8:76:3d:08:54:46:cf:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4A:87:C9:9C:46:07:2A:C3:AA:72:27:27:79:72:CA:A0:F6:F9:AD
X509v3 Authority Key Identifier:
keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:bb:26:41:4f:fd:b0:7b:41:ad:cd:ba:82:f6:ca:4c:2c:ea:
99:e1:8d:1c:57:d9:67:a3:35:31:8f:be:7a:b1:53:d4:54:35:
f6:90:57:2f:19:a8:e7:af:e0:07:d5:85:84:e7:d5:5d:00:8b:
50:9a:aa:5f:e7:d6:2a:29:17:7c:53:1e:82:31:97:b6:f7:66:
c5:86:00:a2:14:0b:62:e4:b0:af:a7:65:c8:d9:f1:31:0e:5e:
01:af:93:32:83:42:d3:d6:25:17:a4:3f:03:1a:06:4c:53:ba:
7d:ed:87:c8:f6:ba:65:51:5c:3a:cd:a4:16:6a:f2:f6:af:35:
f7:cf:45:55:a1:be:a9:09:fa:6d:ae:d4:a6:60:17:2b:5f:32:
d5:94:08:a5:6c:e6:08:cb:6c:35:ba:f1:5f:a4:b5:3e:0b:cf:
22:c8:b1:d9:8d:d2:d9:59:b0:ca:fa:90:e1:9c:79:ec:56:db:
34:5a:87:93:7e:43:70:e9:f1:fb:d9:2c:68:82:b5:07:b1:df:
ca:7f:3b:22:f5:b5:06:e6:4b:d9:a5:71:a2:29:da:3e:43:fc:
58:f9:12:a7:d0:8b:7a:08:d6:6f:ea:90:74:75:90:3f:07:6f:
5d:f5:d6:22:4f:0d:da:04:bb:2a:aa:ee:3d:e0:c3:79:f0:27:
86:3e:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:57:12 2026 by rpki-client