This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
File: vZyAy-XVeXI0X1-l66NchoieVco.mft (raw, json)
Hash identifier: xaWSEyrSnTjqQZE3snQ6Ad+dEGy0YG4ALbNkZ3TejTg=
Subject key identifier: BD:6C:53:22:6C:7C:B5:1C:05:4F:C5:51:2A:F4:4B:BC:67:24:CC:4C
Authority key identifier: BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
Certificate issuer: /CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Certificate serial: 019C4246BEE8B417D9AFCEB611956E4F28A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
Manifest number: 118F
Signing time: Mon 09 Feb 2026 12:00:58 +0000
Manifest this update: Mon 09 Feb 2026 12:00:58 +0000
Manifest next update: Tue 10 Feb 2026 12:00:58 +0000
Files and hashes: 1: C5LrSLcRHuSrJ5qA7Ys4buh2aCk.roa (hash: 6iHK7B3B74ju73Bu4UIi5X39juU33AzJxjN7DE2wqoc=)
2: vZyAy-XVeXI0X1-l66NchoieVco.crl (hash: hCL9OrfSf03ANN6ra4sv2rJQpPNQ1v1F9yUcjwvvG6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:46:be:e8:b4:17:d9:af:ce:b6:11:95:6e:4f:28:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9c80cbe5d57972345f5fa5eba35c86889e55ca
Validity
Not Before: Feb 9 12:00:58 2026 GMT
Not After : Feb 10 12:00:58 2026 GMT
Subject: CN=bd6c53226c7cb51c054fc5512af44bbc6724cc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8b:c5:bf:fb:df:91:76:33:2b:19:c7:af:96:
54:f2:56:ff:1d:25:f2:5a:42:fa:7f:49:a6:a7:02:
cd:71:41:89:c3:5e:b0:58:36:89:b5:07:8b:09:99:
55:fc:57:3c:c7:04:8c:86:9a:c4:88:4d:ec:23:0c:
e5:bf:72:ce:40:2c:06:29:c1:00:53:e5:c2:ff:0e:
ba:37:4b:b9:77:02:c7:12:31:32:6c:da:99:3d:7e:
5c:5a:14:f0:42:00:74:a1:ff:07:89:66:36:9f:c3:
c8:f4:a1:c8:ec:0d:d6:f5:e9:af:bb:d5:84:99:ae:
f9:8a:f7:f0:ee:d5:e2:a0:23:9d:10:9f:ec:38:c9:
c5:c8:3c:35:66:e9:c8:93:07:6d:a9:4d:d4:33:9b:
b1:f9:fa:ba:00:4e:00:66:37:37:b5:5a:24:9b:a4:
52:b1:05:01:99:55:58:80:81:be:42:16:2e:35:15:
d8:50:40:63:54:34:63:bf:b0:7a:48:df:6d:62:d6:
42:69:38:02:00:3f:19:ee:f6:49:f6:d6:4d:27:b9:
81:33:f9:3e:bc:5a:2d:ff:45:dc:fc:93:cd:b4:59:
6b:ef:2c:a5:6e:6b:d9:10:16:76:b4:15:c2:2b:6a:
ab:b3:bb:b9:f7:a5:f7:d6:a8:95:ea:13:ab:d3:fc:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6C:53:22:6C:7C:B5:1C:05:4F:C5:51:2A:F4:4B:BC:67:24:CC:4C
X509v3 Authority Key Identifier:
keyid:BD:9C:80:CB:E5:D5:79:72:34:5F:5F:A5:EB:A3:5C:86:88:9E:55:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZyAy-XVeXI0X1-l66NchoieVco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/bdcbc4-63b7-4ae5-8684-60e7e45399e6/1/vZyAy-XVeXI0X1-l66NchoieVco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:7e:60:eb:94:5d:ad:5d:9c:ae:e2:22:35:4b:84:d4:3f:32:
3f:42:f2:9a:57:41:20:15:fc:9a:73:46:1a:f8:e4:c6:80:9a:
07:15:fb:4f:61:a1:96:c2:d4:98:b7:86:bd:13:19:c9:52:2a:
c5:52:7d:3a:de:a8:d2:00:a4:85:09:fe:e3:79:14:6d:02:a2:
34:1d:a6:94:c5:0a:d8:95:c5:3a:55:8e:35:20:05:e8:c5:de:
9c:2c:a4:68:28:cb:f6:8c:1a:e0:b7:5a:fa:09:36:90:11:3b:
ac:31:bb:66:7a:ca:61:da:42:d1:10:34:5b:e0:68:07:e3:07:
a0:8e:66:a5:f1:24:3f:58:b4:9e:2b:5a:7e:b6:95:0a:14:37:
07:df:50:11:13:e9:29:94:aa:00:e3:3f:38:2a:31:bd:98:ad:
76:c7:26:fb:6f:d5:1e:67:24:a5:1e:e1:71:e3:75:a4:06:d6:
84:37:80:f6:2c:5d:0a:4c:6a:80:cb:3e:d3:ef:2c:e3:40:60:
bd:9f:16:08:02:5d:c3:7b:f4:8e:5f:be:06:7a:4d:e7:9f:7f:
7d:12:1b:38:35:38:2b:8b:ed:46:5b:f3:0c:c1:b5:eb:1e:f0:
9a:08:3c:39:98:cc:e8:d2:6e:64:24:fa:6d:5a:ea:cc:0b:76:
41:c0:a6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:07:17 2026 by rpki-client