This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: gV0CZJjDYDNjIWLWNrDCo00LRgS7gRs6zT5ncy2INIY=
Subject key identifier: F2:30:0F:B7:CD:CE:95:C8:45:73:37:1E:A0:49:44:16:CD:FD:7E:51
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 019C41A17D4575E7B9BDD2CA72E7C0A3DB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0C9C
Signing time: Mon 09 Feb 2026 09:00:28 +0000
Manifest this update: Mon 09 Feb 2026 09:00:28 +0000
Manifest next update: Tue 10 Feb 2026 09:00:28 +0000
Files and hashes: 1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: lJkKkcc52ayNVgBZGK2D8MEunumhqK9FINca7+yP3cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a1:7d:45:75:e7:b9:bd:d2:ca:72:e7:c0:a3:db:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Feb 9 09:00:28 2026 GMT
Not After : Feb 10 09:00:28 2026 GMT
Subject: CN=f2300fb7cdce95c84573371ea0494416cdfd7e51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:11:7c:4d:f6:39:09:f5:a7:18:b7:3b:b0:03:
cd:97:d9:29:ca:c0:c9:8f:fd:bf:18:f7:6e:ad:3a:
de:dd:23:2b:a4:84:1c:dd:0e:a0:08:3c:12:5b:c0:
b5:d0:b0:37:b7:3d:29:bd:48:2a:e3:63:83:4d:46:
09:7e:f6:5a:2c:cd:bd:51:ce:04:6f:92:fa:ab:8f:
2c:92:88:68:d0:0f:e6:e3:81:b1:00:b8:07:7d:5e:
80:84:3a:98:d2:88:8c:8b:52:0e:30:0d:03:73:f2:
55:2d:c7:07:c5:90:aa:17:76:29:36:29:5d:0e:f3:
07:31:5a:77:68:83:c5:64:ad:45:1e:e6:e3:89:54:
0e:54:4e:48:55:dd:7d:ad:62:54:02:28:cd:b6:dd:
df:60:7c:d7:07:3c:22:50:81:f7:be:0b:4b:34:05:
c4:f5:86:31:0a:67:73:9a:c7:99:74:c4:db:cd:49:
5a:d8:b2:51:a7:ce:f9:01:50:f3:57:e6:e1:d4:bf:
6c:d0:85:e0:cf:67:32:c4:63:40:b7:e6:14:0e:2a:
d5:17:39:2e:c0:73:4d:b0:9f:97:a4:19:f4:10:f8:
f2:b0:9c:c3:ad:20:7d:c7:2d:c7:8b:ff:a0:e4:78:
55:c2:35:37:f8:97:92:fa:d4:52:3e:6f:4b:97:87:
2e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:30:0F:B7:CD:CE:95:C8:45:73:37:1E:A0:49:44:16:CD:FD:7E:51
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ac:9c:d2:7d:ed:25:bc:86:36:cd:d4:ba:39:2d:b1:76:f7:
41:a6:b4:00:e5:cf:1b:85:8f:aa:3b:a1:c1:32:2d:37:01:98:
b5:92:fc:ee:be:0a:12:d7:0c:b0:a5:e8:e3:56:25:dc:47:ad:
2b:23:e0:cb:42:12:05:52:f3:a2:33:a6:62:b5:59:3d:fb:70:
62:28:25:14:3e:7f:bb:8d:b6:be:98:6e:4a:27:09:18:95:2a:
1f:bd:45:23:01:16:53:0b:99:53:f7:a7:1b:8d:23:a7:d1:d7:
a0:53:08:9c:4d:ca:2a:8b:bb:14:42:6f:09:c3:af:e7:1f:98:
da:24:4d:1f:ef:ba:74:69:5f:84:8b:04:9a:5a:bc:ac:4e:cf:
de:7f:bc:fe:3c:38:e4:c8:a2:25:12:9a:2f:5f:74:37:01:63:
02:c1:5b:ee:12:75:8e:9e:7e:23:7d:09:eb:c6:d2:85:0a:cf:
84:29:d2:87:35:e4:94:67:8a:bd:30:4b:34:3b:9c:48:42:d0:
57:06:d5:4f:a9:92:8e:3e:42:95:c7:a7:2b:65:0f:2b:74:31:
cb:e0:18:04:d4:84:2b:94:be:9a:74:7a:7c:17:a4:fb:2b:11:
70:f6:7f:a1:6f:2e:e9:ba:4f:de:05:65:19:10:2d:d5:dd:db:
bc:e5:17:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:31:07 2026 by rpki-client