This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
File: VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft (raw, json)
Hash identifier: IJ8/VPi9a/6F+RoHacGvtPqc4XLpdNWzEoTymqd8JEc=
Subject key identifier: 40:CF:41:80:1E:0B:80:62:7F:98:F4:E9:5C:06:CA:50:D4:DE:92:46
Authority key identifier: 57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
Certificate issuer: /CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Certificate serial: 019C420F3B1A8CA3E0456E3BC5473DA8F28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
Manifest number: 0714
Signing time: Mon 09 Feb 2026 11:00:20 +0000
Manifest this update: Mon 09 Feb 2026 11:00:20 +0000
Manifest next update: Tue 10 Feb 2026 11:00:20 +0000
Files and hashes: 1: TdRoRuguftg1_CqdWk5Gt48Zm3Y.roa (hash: pIKJO4UhdvjyOo9X0IBFTTqjiFZEhP9y8W9dyCKa0M8=)
2: VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl (hash: U/cDdQqac/huhFZrZWX+I8qZDMLaEiLoJdyd5FHrRU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 11:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0f:3b:1a:8c:a3:e0:45:6e:3b:c5:47:3d:a8:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5730e2f703f698b9dceac63f1e8691d879c0b2a7
Validity
Not Before: Feb 9 11:00:20 2026 GMT
Not After : Feb 10 11:00:20 2026 GMT
Subject: CN=40cf41801e0b80627f98f4e95c06ca50d4de9246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:a4:df:52:23:e7:7f:f9:af:79:04:88:a4:
89:58:21:3f:10:84:e5:69:e0:18:7f:a5:94:64:bf:
46:c7:41:c2:9b:09:91:3d:c3:38:c6:8e:51:83:9f:
6e:47:e9:22:90:69:03:e4:c0:82:99:fc:79:0b:98:
a0:e9:8b:9d:d6:b6:8f:76:17:10:da:e4:ac:23:30:
3b:ff:fd:e3:f6:c0:15:26:8f:ee:1f:02:fc:14:d4:
15:38:b4:28:b8:cb:27:50:41:21:5e:09:44:24:88:
92:c5:42:e4:e2:57:97:42:b0:ad:d2:61:64:22:a3:
5e:ff:d7:12:81:a8:71:23:ce:90:53:75:0f:5b:2c:
b6:e3:87:8b:2d:18:d7:75:84:18:ff:39:b3:b0:8d:
43:bf:f7:26:43:9e:95:62:aa:b6:4b:99:e2:de:41:
56:c4:9c:db:ff:e1:69:ab:6d:20:2b:d8:02:1c:93:
8d:6c:e5:4c:e9:e4:04:bc:71:23:14:13:23:57:39:
4e:97:1d:f3:22:34:e2:0f:42:e2:de:09:5d:2e:14:
ef:92:3f:3c:ce:13:ad:26:6b:5c:b9:43:41:f5:b9:
7e:14:e8:19:59:05:57:ca:29:bc:70:61:6a:dd:3a:
9c:b8:dd:ab:3c:f1:e8:46:50:b2:a9:80:a5:dc:ea:
ac:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CF:41:80:1E:0B:80:62:7F:98:F4:E9:5C:06:CA:50:D4:DE:92:46
X509v3 Authority Key Identifier:
keyid:57:30:E2:F7:03:F6:98:B9:DC:EA:C6:3F:1E:86:91:D8:79:C0:B2:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDi9wP2mLnc6sY_HoaR2HnAsqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e62cdd-6ff0-4391-8b82-13df75c0d9a3/1/VzDi9wP2mLnc6sY_HoaR2HnAsqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:24:bb:c0:3c:cd:19:2c:64:0f:fa:e6:83:6a:e3:10:11:10:
22:9e:52:1d:1b:bb:6d:f3:70:02:85:63:32:27:b6:5b:5c:66:
9e:31:7d:24:18:89:60:72:b8:17:e0:59:6e:1e:f3:31:bf:5f:
9d:ee:7c:58:9e:56:36:35:2b:a2:38:c1:cc:6f:43:e3:2f:35:
96:55:d0:ba:67:4e:d7:cc:0e:37:ef:8a:77:04:f2:1c:49:9a:
7d:c6:c1:ae:07:bc:1a:9b:3c:c6:6b:6c:31:7b:ee:7b:3d:49:
ae:28:e2:02:54:b7:0b:ed:47:7e:64:17:a0:cf:0e:8d:7b:8b:
df:24:cf:ae:ac:55:76:34:48:e6:01:a8:d1:2e:28:f3:7d:0e:
8b:83:1d:7f:80:40:97:14:56:b3:49:e3:be:e4:c2:47:37:81:
d2:7e:d8:06:a8:be:d1:c6:ca:ce:86:55:10:d0:9e:eb:45:0f:
ba:da:8c:cf:94:d1:1c:39:33:e3:11:56:15:f0:35:f8:80:7c:
34:e2:74:bc:71:c4:f3:cb:b2:b2:2a:2d:8e:a9:4f:4f:4a:30:
26:c5:aa:c3:00:54:d9:96:88:c2:78:20:b8:dd:23:a8:c9:02:
08:b6:29:58:32:43:74:d9:c9:dd:a9:7d:a6:31:bf:19:a0:9d:
9c:40:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 16:53:39 2026 by rpki-client