This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
File: vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft (raw, json)
Hash identifier: O1R/Bff9FUP3wjtw2jhBtUO5eOG5L65f13JcyC+fNxE=
Subject key identifier: EC:ED:97:DB:D8:37:B5:27:42:04:61:FF:29:49:02:A4:45:20:3A:E3
Authority key identifier: BD:D6:41:05:A1:9D:CD:5C:67:5C:0A:3F:98:EE:8C:60:4E:80:8F:1B
Certificate issuer: /CN=bdd64105a19dcd5c675c0a3f98ee8c604e808f1b
Certificate serial: 019C413414FD8CAB162DB522B6B99499D75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
Manifest number: 0CE9
Signing time: Mon 09 Feb 2026 07:00:58 +0000
Manifest this update: Mon 09 Feb 2026 07:00:58 +0000
Manifest next update: Tue 10 Feb 2026 07:00:58 +0000
Files and hashes: 1: vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl (hash: Wg02s5fnI2wqCPgNWW4X5R0sH5Kkev5Ypoy/ScYXSkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:34:14:fd:8c:ab:16:2d:b5:22:b6:b9:94:99:d7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd64105a19dcd5c675c0a3f98ee8c604e808f1b
Validity
Not Before: Feb 9 07:00:58 2026 GMT
Not After : Feb 10 07:00:58 2026 GMT
Subject: CN=eced97dbd837b527420461ff294902a445203ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d2:98:15:7b:58:17:22:58:80:73:49:92:61:
cb:0c:fb:87:76:4c:68:a6:c3:b4:26:05:80:3a:21:
bb:6b:bb:62:05:e4:42:6c:a7:42:0b:be:c6:de:56:
ad:a6:9f:69:48:3b:69:9a:7c:04:25:35:fd:d8:fe:
e9:a3:15:59:e7:55:e0:c7:c4:b8:f1:69:bb:37:a3:
e8:df:8e:81:a5:6c:dd:9c:72:b3:4b:be:2a:8a:ee:
7c:f1:a7:2c:4c:37:a6:10:35:ef:69:5c:07:e2:53:
1c:65:3d:5d:1e:f5:3f:85:c7:34:1a:81:17:8f:2c:
9b:b2:8d:80:af:30:5c:15:32:11:bf:9c:13:d8:33:
7e:25:77:33:3f:fe:cb:5d:e9:af:5f:52:5a:cc:f3:
ba:c6:34:32:25:5b:5b:0c:2c:c0:de:8c:2b:9f:34:
13:65:ef:a3:35:56:e5:f2:3f:e5:08:e9:c6:b7:93:
db:f7:ce:9d:d5:f6:e4:9d:b2:62:b3:92:15:93:ed:
6d:d3:96:e0:f1:f5:f4:8d:d5:64:a5:7e:95:e3:92:
2c:b4:a7:d1:fd:3a:2e:fa:b7:cd:d7:7b:48:03:d6:
07:73:8b:a0:4e:64:48:cf:f2:6a:57:79:99:6c:5e:
b3:a2:72:b7:57:7b:91:0a:0d:4a:71:5d:9c:94:76:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:ED:97:DB:D8:37:B5:27:42:04:61:FF:29:49:02:A4:45:20:3A:E3
X509v3 Authority Key Identifier:
keyid:BD:D6:41:05:A1:9D:CD:5C:67:5C:0A:3F:98:EE:8C:60:4E:80:8F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0184bd-b5d2-4b9c-916b-d0456f729873/1/vdZBBaGdzVxnXAo_mO6MYE6Ajxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:06:8b:fd:f4:bc:bb:4b:48:d1:48:5e:b4:db:25:d2:c8:2b:
b2:95:59:c9:1b:77:2f:6e:b0:0a:89:14:35:d5:37:4d:e3:be:
75:2d:4b:c2:78:12:e2:2e:48:be:13:b9:41:04:3a:a0:11:a7:
75:1a:4e:9a:c7:f9:65:68:54:99:60:ec:ac:f6:1f:51:27:af:
5e:0c:35:69:eb:5d:a0:b0:8b:c9:30:7f:57:e9:1c:5a:96:50:
8e:5a:cb:e1:69:5c:6b:8c:2b:9d:c1:12:dd:c6:15:31:93:19:
d7:ef:4f:5f:e4:76:2e:d8:ef:fa:93:bc:56:2c:49:07:4f:81:
44:8c:ea:a4:11:c4:fc:1a:ab:5c:4b:a4:c8:84:6a:58:02:98:
ec:bc:06:c3:e9:cd:ad:95:19:ba:6a:d3:e5:3b:e2:21:3b:7b:
df:c1:6a:0e:1d:6d:6f:35:d2:d5:ad:e6:b7:41:91:e3:43:25:
f5:e7:67:17:d5:2b:f3:00:26:db:72:7e:37:b5:0a:68:1a:ee:
8a:a9:5f:fc:e5:78:77:82:63:1e:6e:95:09:bf:63:08:51:66:
3c:53:ae:43:82:d1:9c:e1:64:2c:84:98:fd:62:34:2b:b6:68:
72:ce:d9:69:c2:d4:6b:50:7c:80:79:f6:a6:6a:60:8c:93:e0:
20:ea:b8:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 17:02:07 2026 by rpki-client