This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9f9ea1-5f53-4e2b-bc63-536e9c63469b/1/VmHcWpFRx4ITkPT3C-dorNd7taI.mft
File: VmHcWpFRx4ITkPT3C-dorNd7taI.mft (raw, json)
Hash identifier: DM1862dmxuzaKvYYKccTmmdIHAaheNXpPf7bDvBJQXw=
Subject key identifier: 48:9F:E7:B6:6A:42:FE:15:A3:3A:60:E7:5D:65:4A:E6:29:66:5C:6B
Authority key identifier: 56:61:DC:5A:91:51:C7:82:13:90:F4:F7:0B:E7:68:AC:D7:7B:B5:A2
Certificate issuer: /CN=5661dc5a9151c7821390f4f70be768acd77bb5a2
Certificate serial: 019C42B461AFC353645ED5AD27FD46C69BA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHcWpFRx4ITkPT3C-dorNd7taI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9f9ea1-5f53-4e2b-bc63-536e9c63469b/1/VmHcWpFRx4ITkPT3C-dorNd7taI.mft
Manifest number: 3B
Signing time: Mon 09 Feb 2026 14:00:43 +0000
Manifest this update: Mon 09 Feb 2026 14:00:43 +0000
Manifest next update: Tue 10 Feb 2026 14:00:43 +0000
Files and hashes: 1: MF6MLfWJPwV-yPLIF_0nZ7bOwsM.roa (hash: 6dApg/Qg1KQtk7rezLH61i3WO99VCx8PzPPW1oB5WB8=)
2: VmHcWpFRx4ITkPT3C-dorNd7taI.crl (hash: pkfGg+hHSVqMwgswXkOX9Bh4YzxlABwm8e8QasXa67w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9f9ea1-5f53-4e2b-bc63-536e9c63469b/1/VmHcWpFRx4ITkPT3C-dorNd7taI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9f9ea1-5f53-4e2b-bc63-536e9c63469b/1/VmHcWpFRx4ITkPT3C-dorNd7taI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmHcWpFRx4ITkPT3C-dorNd7taI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:b4:61:af:c3:53:64:5e:d5:ad:27:fd:46:c6:9b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5661dc5a9151c7821390f4f70be768acd77bb5a2
Validity
Not Before: Feb 9 14:00:43 2026 GMT
Not After : Feb 10 14:00:43 2026 GMT
Subject: CN=489fe7b66a42fe15a33a60e75d654ae629665c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:50:57:d9:28:ba:f8:13:cb:5d:f4:ea:d0:13:
3c:1e:81:a6:1f:b1:f3:aa:0a:50:5b:c9:20:f5:12:
17:1d:2d:91:51:89:a3:21:60:4e:9f:f6:51:50:e1:
55:4a:28:c2:29:80:00:35:38:40:98:bd:55:f1:6c:
86:fd:63:3c:1c:fa:3c:d6:60:0a:c4:08:31:b1:b6:
b4:b6:80:fd:c1:3b:c1:b8:ff:5f:b5:52:d8:d1:e4:
65:68:c6:ff:d5:e7:31:72:1d:8c:5d:e2:c0:31:8e:
55:ac:eb:03:10:7c:ce:e3:2b:ae:0f:35:c3:8c:76:
82:44:94:e9:09:3b:ba:9e:d4:83:c6:ed:01:08:70:
73:5d:bf:a4:ca:8f:74:8c:33:31:7a:5f:9a:0d:c1:
38:85:4c:45:c0:f5:24:09:dd:f4:ea:72:d1:b2:f2:
b5:fa:53:87:31:af:56:05:61:ee:04:62:72:aa:04:
6e:09:0f:fc:be:1b:a5:3e:52:46:4f:be:15:24:18:
15:78:91:eb:6e:f8:5a:c1:a8:56:b6:37:92:4d:b5:
7c:b7:b1:b5:f1:6d:9a:b2:a7:f9:12:31:a0:38:3e:
fa:cd:08:1d:f9:3a:ae:44:7f:d3:29:67:e4:f8:e1:
dc:0b:56:ea:b7:c1:c8:0d:cf:8c:0f:33:76:42:62:
20:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:9F:E7:B6:6A:42:FE:15:A3:3A:60:E7:5D:65:4A:E6:29:66:5C:6B
X509v3 Authority Key Identifier:
keyid:56:61:DC:5A:91:51:C7:82:13:90:F4:F7:0B:E7:68:AC:D7:7B:B5:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHcWpFRx4ITkPT3C-dorNd7taI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9f9ea1-5f53-4e2b-bc63-536e9c63469b/1/VmHcWpFRx4ITkPT3C-dorNd7taI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9f9ea1-5f53-4e2b-bc63-536e9c63469b/1/VmHcWpFRx4ITkPT3C-dorNd7taI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:19:3c:2e:1c:1b:5d:f8:e9:28:a7:06:0b:f6:1b:2c:2b:f2:
6c:cd:8f:09:3f:4e:db:44:55:77:3f:1c:b2:05:dc:ea:1d:97:
39:45:12:2e:95:87:59:11:8b:4d:10:86:b5:21:63:1a:68:07:
6d:40:6e:c9:fa:5b:f0:fc:d0:94:3f:83:40:64:50:47:1a:62:
33:41:0b:b4:18:72:f0:7c:2d:14:56:9d:d3:b0:cc:71:d4:79:
37:53:1b:1e:e6:0a:84:e4:86:6d:9f:9a:26:41:1c:2f:b0:91:
78:29:2e:92:2b:a7:81:a5:87:6a:92:b1:78:ce:e7:e5:03:dd:
e4:ca:9a:84:72:84:df:42:92:c0:b2:81:e1:36:df:a5:03:5a:
92:7d:a2:9e:c6:1f:3a:be:5e:22:f1:5c:7d:ff:cd:23:43:40:
8d:e1:24:8d:fb:f6:5d:a9:b3:1b:c7:6e:db:b3:07:a6:db:79:
63:5a:63:a2:73:d3:25:bb:ca:1a:87:88:15:6a:71:f9:d8:52:
a3:ff:7f:5c:55:4b:2f:b4:bf:6b:db:f3:78:8b:56:c0:9a:bf:
e1:62:8f:c4:d7:c7:41:70:4a:fa:bc:c8:d2:3c:c8:5a:f3:98:
46:44:62:d8:65:9b:cd:72:f9:d6:ef:27:67:53:9e:fe:ca:7b:
7b:44:be:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:45:36 2026 by rpki-client