This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier: A6Gnnze3BX1IYSnLYaQCEFYOqqbtdGXdOqNwageJlIA=
Subject key identifier: 9F:04:AC:2E:1F:97:DE:1B:B5:AB:E4:68:EF:21:69:08:B0:30:D5:1C
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial: 019C420F74574EAB5CE8EC5A4EB9C43975F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number: 0EF7
Signing time: Mon 09 Feb 2026 11:00:34 +0000
Manifest this update: Mon 09 Feb 2026 11:00:34 +0000
Manifest next update: Tue 10 Feb 2026 11:00:34 +0000
Files and hashes: 1: ApzBB8QQLMI_xsO48Jm3jxRXuhI.roa (hash: K+MZAh6Qr7nnvD9WoHZdULSDa2rCr8sl1Vr//Yn6JfU=)
2: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: t4RngJgnhwmzph2mYImsp1MzeN3fD0X9QQTOFuZsgNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:74:57:4e:ab:5c:e8:ec:5a:4e:b9:c4:39:75:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
Validity
Not Before: Feb 9 11:00:34 2026 GMT
Not After : Feb 10 11:00:34 2026 GMT
Subject: CN=9f04ac2e1f97de1bb5abe468ef216908b030d51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7a:56:1f:25:7e:eb:7e:14:44:ae:28:51:10:
55:f8:5c:84:23:74:6f:92:64:6d:92:df:1f:d6:ec:
c2:39:52:c9:12:47:89:91:c6:49:b8:0c:a6:b9:e0:
cc:0c:9a:ec:74:8b:d0:54:e1:d7:4e:c1:18:ee:bd:
c0:4f:d2:8d:43:37:ae:6c:08:2a:61:c4:df:8c:66:
ce:6b:62:fb:1a:1d:09:08:49:aa:04:4c:16:dc:bb:
32:3b:a5:63:b5:fc:43:5e:35:f3:58:52:62:12:d9:
08:45:0c:49:22:33:fd:aa:58:0e:ac:25:1b:ca:ce:
af:cf:5c:f5:b0:4f:b9:1b:8d:cf:d6:33:96:96:0e:
1c:d9:87:4c:f4:71:9c:02:8a:d1:17:ac:43:a0:56:
33:ef:e0:a4:8d:e0:f4:c1:bd:c0:25:3e:b4:12:dd:
b8:ec:f7:71:c6:98:57:d0:38:5c:14:73:30:c6:cc:
49:04:e6:a7:73:7f:7d:c6:83:d9:d8:59:17:4b:69:
4d:dc:a9:a3:1d:fa:18:92:59:32:75:56:1e:3e:8f:
42:24:5e:5f:a8:f0:a0:c8:52:10:72:b9:7b:2d:25:
22:4f:ba:f8:fa:10:2b:da:20:43:94:9f:ca:8a:76:
72:c3:55:cf:81:b2:21:9f:d1:73:3e:71:ee:76:85:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:04:AC:2E:1F:97:DE:1B:B5:AB:E4:68:EF:21:69:08:B0:30:D5:1C
X509v3 Authority Key Identifier:
keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:51:b9:14:c4:00:d7:39:ad:5d:d7:25:99:24:b9:4e:1e:2f:
91:ae:bd:36:a7:52:e6:54:05:a2:f3:79:ed:86:f5:e4:77:da:
b6:bc:ec:83:24:a0:ad:9b:be:9b:49:40:d8:3d:35:dc:7c:5a:
ee:eb:90:41:25:2d:fa:8b:87:da:7f:f8:00:58:3f:f4:6a:d3:
83:7f:46:d3:67:2b:8d:39:f2:c5:bc:1f:c0:17:b5:26:97:ad:
1b:51:c1:61:af:8d:74:4f:44:60:11:dc:14:94:50:d5:ab:73:
af:8f:73:7a:0f:0c:67:85:21:66:88:37:0a:7f:31:bb:6c:bf:
15:b8:c1:8c:12:02:85:c7:ba:64:80:ab:a4:11:47:c4:25:78:
c3:53:58:99:f4:7a:19:2a:34:b2:2f:fe:bf:ba:ee:de:de:ce:
a5:da:ac:e7:4c:bc:fd:d4:b3:12:7a:51:4f:fe:ff:5a:4b:09:
8d:c9:f6:8a:1e:d2:4b:7d:82:72:d1:06:f7:a6:02:60:e9:1a:
0b:3a:dd:8e:f6:f6:0f:60:80:c0:8d:c3:cf:37:72:6e:30:cb:
09:15:2c:51:ac:92:6c:4d:1e:09:34:63:b5:df:98:e9:b4:0b:
8f:06:26:b4:a6:cb:34:de:df:83:83:c0:93:59:71:e9:32:96:
e1:eb:bb:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:55:52 2026 by rpki-client