This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
File: VsihcTx0duAO0rd_2Y_YkzA2XYc.mft (raw, json)
Hash identifier: fIqzSTs5TxOAFueYp0Lomd+zefJ988T8JZD6zKIkuNE=
Subject key identifier: 6F:EB:EB:08:F9:93:61:26:B1:0E:55:9C:46:14:41:29:37:0A:B0:42
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Certificate issuer: /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial: 019C0E5950C769C0E510F21250C6D081570F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
Manifest number: 17F9
Signing time: Fri 30 Jan 2026 10:01:00 +0000
Manifest this update: Fri 30 Jan 2026 10:01:00 +0000
Manifest next update: Sat 31 Jan 2026 10:01:00 +0000
Files and hashes: 1: 2e5AvXlufc-kEczHhTECSJ-V-JQ.roa (hash: I9+kJ0K5wv3UioVKT0ZYctRfAuqgjg7khDoT9z5Qntc=)
2: 4LBzWO_530DcCpzjlEfXk_h_vW8.roa (hash: H+p9nsy8NewbJx1+0VvALNZxKQ+AzKGCdkwiJQ4ANZM=)
3: GmiNV02KpRdxeBzvA-9_R7Rwp5k.roa (hash: 1nMmGCSVtG3D2xti3D/6NXcOSYqZ/aoCI5L5XEr0uig=)
4: VsihcTx0duAO0rd_2Y_YkzA2XYc.crl (hash: qgwwRchiq0iVP5aWuUJLQzlrpb8Tjs+eW2jcnLmyMEI=)
5: g6Ux-iBqw5pRnRrg3U9EpW7v5Jc.roa (hash: KFBqHuaTNX9BJpnJ/kNbP6C31mWv4bvManEdzG/ajqc=)
6: mk7ttr1hKMruQA-V9YpclvWNi_0.roa (hash: DCTpzfyrUDoRJthmL9oXt5chUKx5z7hp5NsgIKGeX6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Jan 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:0e:59:50:c7:69:c0:e5:10:f2:12:50:c6:d0:81:57:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Validity
Not Before: Jan 30 10:01:00 2026 GMT
Not After : Jan 31 10:01:00 2026 GMT
Subject: CN=6febeb08f9936126b10e559c46144129370ab042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d5:4b:f2:b7:20:c5:ed:36:07:e6:bb:b6:79:
00:c6:4d:1f:98:77:40:9a:e8:80:58:f6:9c:c9:bc:
d1:e7:5f:2e:e9:5f:f5:6d:b1:16:1d:c6:70:6b:2e:
fd:54:bf:f5:b0:3b:bd:e1:9d:37:36:65:65:ae:a8:
61:6d:43:ce:43:dd:18:a0:4e:68:d6:4b:b6:70:81:
3f:a6:32:a7:8a:6e:12:39:7a:d5:c7:fc:63:ae:c4:
ad:53:51:cd:d1:52:92:36:ba:6a:b8:e3:58:c9:f4:
a1:e2:92:f0:8f:fc:1d:59:15:0c:e6:22:f5:27:69:
58:01:5f:c2:80:6c:e7:9a:b3:83:81:ed:0c:c6:46:
f0:ad:49:67:06:58:68:2a:97:44:16:20:12:b2:9d:
d2:6b:fb:20:09:87:46:89:4c:89:6c:94:1a:1e:c5:
f4:60:6f:ee:9c:2a:b5:77:21:33:d4:ed:fb:e9:1f:
c5:73:5e:2a:f9:32:ce:5b:e1:f2:96:93:90:7b:a6:
4b:ed:3a:fd:6f:32:df:d0:8b:f2:67:90:44:83:bb:
0a:0c:b4:40:90:6d:4e:a2:9d:f3:0b:f8:b6:d5:04:
8a:6b:b4:94:a4:b8:83:a4:d7:79:7a:9a:9e:c9:23:
10:e0:b5:7f:a0:5c:a4:6a:a3:c5:66:af:8f:1c:10:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EB:EB:08:F9:93:61:26:B1:0E:55:9C:46:14:41:29:37:0A:B0:42
X509v3 Authority Key Identifier:
keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a1:0f:d1:2a:10:34:84:33:16:78:5c:7f:c7:d1:7d:77:7b:
b8:cc:d6:31:56:16:6c:62:d5:e1:82:5b:7c:bd:c3:47:58:6f:
26:b4:79:83:84:c7:66:d4:f7:25:e3:66:9d:84:8a:53:ee:07:
4b:24:77:64:17:a9:64:b1:96:7f:77:9b:f4:b4:61:16:61:07:
90:a6:b6:ef:97:e5:f6:f3:68:12:04:0c:ec:09:fd:25:e2:25:
82:28:e4:a8:74:3e:69:b6:39:71:ce:3f:71:41:c1:23:78:4e:
10:5b:28:3d:f1:62:63:b1:0f:a8:d6:38:7a:45:19:e3:fb:d1:
4e:b5:ca:f3:fc:e3:f4:79:0e:f9:5d:1e:f9:2c:ea:ce:4d:88:
b9:9a:9c:be:ad:71:81:8b:cc:ef:9c:da:d4:ea:c1:6a:92:7d:
a8:bb:dc:3f:b1:a5:d2:22:7e:94:ae:9b:91:81:9b:29:bf:13:
82:2b:b3:3f:e7:b2:d4:01:f9:90:70:71:02:c8:0a:be:76:e7:
90:19:aa:bf:9a:e3:e8:8a:57:46:45:5d:77:16:b8:ab:1b:fe:
93:7d:14:24:cb:13:74:eb:84:60:19:77:12:3f:e7:a3:26:5c:
df:7a:76:b0:af:3b:18:d1:35:98:00:aa:35:f0:ab:f4:d1:27:
4d:c1:ce:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 14:34:41 2026 by rpki-client