This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
File: vVhFViKSj0TenBVdcGjh0RtEVPE.mft (raw, json)
Hash identifier: n1YO50VzQiFaQ1P7kQeihBGDeS3q7zTsUDhUbxyBYD8=
Subject key identifier: 4F:47:09:CD:3F:40:76:EB:81:06:8C:3E:62:15:CB:4F:57:51:EA:69
Authority key identifier: BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1
Certificate issuer: /CN=bd58455622928f44de9c155d7068e1d11b4454f1
Certificate serial: 019C4322927F7BE7A00F72CB6A73F61A9CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 16:01:05 +0000
Manifest this update: Mon 09 Feb 2026 16:01:05 +0000
Manifest next update: Tue 10 Feb 2026 16:01:05 +0000
Files and hashes: 1: vVhFViKSj0TenBVdcGjh0RtEVPE.crl (hash: Qs92r/7NZp91fz4DKScut0bZrddAhl1FErJSWUI5qnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:92:7f:7b:e7:a0:0f:72:cb:6a:73:f6:1a:9c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd58455622928f44de9c155d7068e1d11b4454f1
Validity
Not Before: Feb 9 16:01:05 2026 GMT
Not After : Feb 10 16:01:05 2026 GMT
Subject: CN=4f4709cd3f4076eb81068c3e6215cb4f5751ea69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ef:5d:1e:b4:33:f2:12:b9:76:5b:63:d6:76:
57:7a:06:fe:e1:69:5c:9b:59:15:2c:18:80:f2:07:
ee:ed:5a:5d:3f:02:f4:77:5b:1b:6b:14:5c:28:b2:
34:be:1d:bd:38:a0:15:db:60:0d:a3:b4:09:ff:60:
13:3c:0e:17:6b:dc:3f:02:27:ab:c4:86:7e:59:16:
30:ea:cc:4f:8d:0a:d5:09:42:6e:3c:f5:e9:0c:81:
7e:f3:53:e7:d4:f0:b3:d0:8a:cd:9f:e3:15:64:f1:
45:13:7c:e1:16:58:fe:b1:e4:25:46:1f:73:03:a5:
41:ae:a1:32:2c:fb:79:d0:1b:d7:45:48:25:ae:41:
7b:27:32:a6:b2:47:de:fd:cc:f1:98:83:71:3b:45:
01:29:12:b1:d4:26:ae:5b:83:44:32:44:bb:e2:bd:
f4:52:77:29:91:ed:fe:b5:95:e7:f2:20:22:f8:3f:
36:4b:92:3d:d2:1d:f8:fa:ef:20:a3:55:ac:50:a0:
e7:a0:51:bc:63:8f:50:d3:33:09:74:31:a5:0a:56:
7a:5f:c0:76:88:6c:ad:4c:80:82:c3:87:47:46:b7:
c4:81:cd:33:d7:83:57:95:4c:9a:af:24:17:a8:1b:
80:0f:56:fa:c1:62:d0:ee:e0:5e:db:d3:9d:98:b9:
85:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:47:09:CD:3F:40:76:EB:81:06:8C:3E:62:15:CB:4F:57:51:EA:69
X509v3 Authority Key Identifier:
keyid:BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d5:b3:00:41:1f:ef:3f:a1:66:11:d5:c8:1d:47:83:dc:47:
1e:de:9c:e9:f9:80:0a:4e:3f:6a:98:da:f4:c7:a4:6b:37:d6:
28:f6:e6:de:e5:1f:48:6a:c8:2b:b3:51:9e:2c:8a:c7:c5:8f:
6f:b3:8b:10:fc:e2:ef:db:93:3c:5a:08:4a:ed:fc:f3:90:a3:
47:b3:e3:b5:5f:e7:8a:36:69:70:9f:e4:14:8a:72:5d:bc:c7:
5e:2e:f7:bc:6c:5d:3d:28:5b:7d:55:77:22:85:fa:f0:25:db:
06:60:42:8f:0d:66:7d:c4:65:1f:2e:31:42:82:19:96:59:18:
56:7c:84:6c:bd:16:e8:f5:19:1f:01:ff:c7:1a:e7:0b:52:c5:
23:46:6a:15:49:64:ac:0c:bd:4a:36:39:ed:49:a0:49:56:1f:
3a:d9:02:19:c5:2c:35:49:b1:85:67:0d:6d:70:fb:48:3d:8b:
73:a4:1b:c8:e6:9e:b6:9f:7c:07:dd:13:48:0f:42:df:ba:33:
de:c2:17:b4:cb:71:60:6e:22:14:9b:fa:9b:46:9a:8d:b9:9c:
c0:96:3b:16:da:fd:cb:6b:c8:2b:f0:b1:16:e0:dd:dc:a0:72:
2e:95:2b:2f:3f:55:07:df:fe:e7:90:f8:8a:d8:28:19:65:b6:
da:11:ed:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:43:41 2026 by rpki-client