This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
File: vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json)
Hash identifier: qwpuYlh4X+7TNgbz+wjq4qRAJOxHC1C8HCdrh4w/iwE=
Subject key identifier: B6:93:7F:70:2E:C2:22:AE:05:BE:2F:25:8A:2B:32:89:03:A5:4D:75
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial: 019C420F82C77218FA4A3C0CF8A7D6FF1DAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
Manifest number: 17A2
Signing time: Mon 09 Feb 2026 11:00:38 +0000
Manifest this update: Mon 09 Feb 2026 11:00:38 +0000
Manifest next update: Tue 10 Feb 2026 11:00:38 +0000
Files and hashes: 1: bbUvQcBL8PFNw2iTLVczp7F8xLg.roa (hash: roBeIpW3t+PPAB0V8G5Pbdujfwh3PQz2ybcfRM5Trps=)
2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: qJZvGkCGC0266Q+IHruePqvV6Xkt5jucP3OkOx7e8Ko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:82:c7:72:18:fa:4a:3c:0c:f8:a7:d6:ff:1d:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
Validity
Not Before: Feb 9 11:00:38 2026 GMT
Not After : Feb 10 11:00:38 2026 GMT
Subject: CN=b6937f702ec222ae05be2f258a2b328903a54d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2d:eb:72:d3:74:96:98:b2:0d:e9:68:57:64:
53:75:1a:bb:11:69:98:26:fd:f5:ea:a3:35:bd:f4:
d1:46:34:af:75:25:46:de:e0:c3:0c:aa:08:08:fe:
48:af:76:9b:74:e7:ed:4d:bc:bd:a7:96:46:e9:f7:
9e:ae:90:1b:b2:66:c7:8e:c5:9a:eb:51:16:10:03:
63:91:f9:04:33:b3:94:a3:e2:8a:80:fa:77:09:ac:
50:2b:56:4d:6a:5e:b5:87:ef:2e:22:4f:7b:22:fd:
c5:d2:7f:dd:f8:c8:b1:e5:ac:1d:fe:b8:17:71:a9:
d4:62:ff:e9:a5:a8:ce:29:5b:59:2c:5a:87:97:cd:
2d:1f:34:6b:8b:6e:d4:0f:85:c4:d3:c5:cc:ac:5e:
d6:56:6d:a9:35:9e:3c:fb:d5:1b:dc:af:5f:bf:a9:
98:95:65:47:d5:23:19:ea:1f:52:47:8b:ba:56:af:
31:18:08:c7:12:b2:6a:fd:9a:2e:38:2d:a8:96:7c:
a1:8b:8c:fa:ab:4f:55:0f:8a:33:43:e4:dd:5a:63:
47:89:c1:97:5d:6f:df:ab:81:8b:84:91:7a:c4:ee:
dd:60:42:7b:6b:3d:5d:8b:80:7f:67:10:f0:42:f4:
18:87:a6:bd:5e:2b:98:bf:84:4b:b8:63:7f:3b:c2:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:93:7F:70:2E:C2:22:AE:05:BE:2F:25:8A:2B:32:89:03:A5:4D:75
X509v3 Authority Key Identifier:
keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:64:7b:5a:df:c6:da:b6:ad:ff:46:14:ed:7c:43:a9:eb:13:
31:6a:de:58:46:a0:cc:17:f7:6f:b0:4d:20:68:4a:fe:9c:52:
4f:52:5d:bc:4e:cd:9b:89:b0:c9:f3:ec:9d:df:4b:a7:c9:9d:
51:eb:67:25:e9:15:89:0d:68:0c:58:4b:5a:82:e8:b2:2a:d7:
88:6c:ae:19:3b:fb:4f:3d:d2:38:1d:a0:ef:41:a2:a7:f6:2c:
90:a3:87:00:cb:51:8d:57:d2:94:61:05:24:2a:35:5d:0b:49:
8c:5a:31:5b:ae:a2:72:5a:01:6e:0c:18:77:e8:be:f4:e0:ea:
13:74:5a:6f:45:33:83:d3:d1:2e:fe:f3:0b:54:a6:81:cc:39:
96:d2:72:73:fc:2e:2e:c3:50:29:af:ca:f4:11:cf:a3:4a:30:
57:53:4d:5b:2e:ca:36:4d:17:23:31:f6:9a:09:8d:fe:b1:19:
36:a1:18:75:d8:99:fa:12:46:94:42:de:a4:29:51:a5:aa:c5:
50:02:88:39:4a:8e:a8:ef:e3:a3:10:f5:26:7f:25:31:9f:cd:
ba:8d:8c:f9:b0:24:9c:58:a5:58:aa:f7:61:fd:74:60:ef:a7:
cb:ea:7e:42:1a:7c:7b:54:e3:7d:4e:3d:81:f0:92:b4:ec:bf:
d9:4b:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:27:11 2026 by rpki-client