This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
File: Vq94S7xmnB23aovR0emTk9jyF2s.mft (raw, json)
Hash identifier: 2O0zF8CdTEnu6wJfA/Q/G1lxxMJpxvnBP+Wf/m8kGuc=
Subject key identifier: B2:76:39:F5:8C:B7:93:CA:ED:0E:52:1E:BB:29:8B:B4:7A:7C:29:A9
Authority key identifier: 56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
Certificate issuer: /CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Certificate serial: 019C4322F7EC3A82D2373B43DAA6AB378193
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
Manifest number: 11D5
Signing time: Mon 09 Feb 2026 16:01:31 +0000
Manifest this update: Mon 09 Feb 2026 16:01:31 +0000
Manifest next update: Tue 10 Feb 2026 16:01:31 +0000
Files and hashes: 1: Vq94S7xmnB23aovR0emTk9jyF2s.crl (hash: EuJAqHPulqRxUPMAVPK4kBuTH7jnXr1OYaYWVRjzHuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:f7:ec:3a:82:d2:37:3b:43:da:a6:ab:37:81:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56af784bbc669c1db76a8bd1d1e99393d8f2176b
Validity
Not Before: Feb 9 16:01:31 2026 GMT
Not After : Feb 10 16:01:31 2026 GMT
Subject: CN=b27639f58cb793caed0e521ebb298bb47a7c29a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d0:d4:71:a7:9a:48:27:95:90:09:70:92:7d:
c5:60:33:cf:28:68:bc:3a:8b:32:07:19:c0:8b:6d:
23:e7:87:84:75:50:d4:56:61:02:78:5a:b1:aa:0d:
c0:73:bd:77:8d:e0:5b:a2:25:a4:5c:91:de:bf:b2:
e8:e6:08:e7:94:4c:aa:e0:bb:e4:05:16:29:55:00:
9e:cf:77:21:89:b9:c2:b7:02:3b:58:30:a2:4e:f9:
fc:08:93:d0:55:52:65:4a:80:b5:7a:72:5d:30:ac:
3b:fd:3b:29:76:3c:c3:fe:ca:17:37:e3:34:56:4b:
d0:ce:60:c0:1d:28:91:de:5b:7d:a3:df:55:48:65:
54:5b:85:d1:23:0e:c8:1c:d5:f8:82:bd:82:a2:cf:
6d:f7:f2:89:ff:bf:8c:9f:1a:10:d6:bf:bf:10:ee:
bc:2d:45:fd:cd:42:c6:c4:4b:da:1a:e1:0c:de:27:
61:0a:9c:3f:88:dc:b1:7d:ab:27:34:94:5c:e8:fc:
09:71:41:dc:80:21:b9:50:b2:84:2b:c6:93:82:73:
74:99:cf:4f:cc:39:0e:7b:da:cc:a1:a1:5d:4c:21:
27:ad:ac:bf:7a:f9:39:82:0e:0c:7f:ef:50:57:a8:
92:e7:b3:a5:7f:99:54:5b:46:9d:65:16:33:c3:8d:
24:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:76:39:F5:8C:B7:93:CA:ED:0E:52:1E:BB:29:8B:B4:7A:7C:29:A9
X509v3 Authority Key Identifier:
keyid:56:AF:78:4B:BC:66:9C:1D:B7:6A:8B:D1:D1:E9:93:93:D8:F2:17:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq94S7xmnB23aovR0emTk9jyF2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/dd17e9-1935-4a8e-8de0-55e98e25fcad/1/Vq94S7xmnB23aovR0emTk9jyF2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f6:5c:4e:a8:e6:a3:cc:2e:6e:92:98:be:ee:f7:ef:90:54:
e2:23:5e:7f:83:69:d0:01:69:73:13:d6:f4:fd:b2:27:92:b5:
d6:be:81:eb:10:9d:3e:f2:e0:81:c6:4b:93:6f:b9:15:ff:2a:
0d:a7:0d:1f:f1:cd:29:34:b7:16:d2:70:e5:75:3d:e0:1e:d1:
e9:09:2d:aa:e5:06:56:4f:84:ac:f8:25:69:57:ef:b7:d0:84:
19:0f:18:4f:df:8d:e2:49:b0:e0:31:a9:4a:00:b2:80:82:24:
2b:6e:7c:50:a6:58:57:f6:b0:78:a8:83:18:c1:bc:98:0b:63:
b0:44:9d:ee:d5:5a:25:e7:a3:a5:66:12:8c:62:f9:e9:65:20:
dd:3a:69:53:8c:e7:25:ff:e3:ef:fe:91:0d:25:8e:8f:25:19:
04:b7:e0:2f:0e:da:60:ce:48:06:40:cb:c8:75:fa:ff:c3:67:
62:10:bf:72:65:ce:22:e7:ee:90:7c:e2:67:52:c6:b9:97:ae:
78:4e:ca:9a:e3:9a:6c:37:a7:c0:ff:a9:7e:5b:dc:04:84:d6:
db:9b:8b:33:de:56:4d:f3:6c:db:95:ae:d3:e6:8f:34:55:d4:
0a:a2:97:93:11:22:bf:2e:15:03:a6:e3:33:a9:1d:a5:89:8a:
d9:94:62:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDIvfsOoLSNztD2qarN4GTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWY3ODRiYmM2NjljMWRiNzZhOGJkMWQxZTk5MzkzZDhm
MjE3NmIwHhcNMjYwMjA5MTYwMTMxWhcNMjYwMjEwMTYwMTMxWjAzMTEwLwYDVQQD
EyhiMjc2MzlmNThjYjc5M2NhZWQwZTUyMWViYjI5OGJiNDdhN2MyOWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotDUcaeaSCeVkAlwkn3FYDPPKGi8
OosyBxnAi20j54eEdVDUVmECeFqxqg3Ac713jeBboiWkXJHev7Lo5gjnlEyq4Lvk
BRYpVQCez3chibnCtwI7WDCiTvn8CJPQVVJlSoC1enJdMKw7/TspdjzD/soXN+M0
VkvQzmDAHSiR3lt9o99VSGVUW4XRIw7IHNX4gr2Cos9t9/KJ/7+MnxoQ1r+/EO68
LUX9zULGxEvaGuEM3idhCpw/iNyxfasnNJRc6PwJcUHcgCG5ULKEK8aTgnN0mc9P
zDkOe9rMoaFdTCEnray/evk5gg4Mf+9QV6iS57Olf5lUW0adZRYzw40kDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJ2OfWMt5PK7Q5SHrspi7R6fCmpMB8GA1UdIwQY
MBaAFFaveEu8Zpwdt2qL0dHpk5PY8hdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9kZDE3ZTktMTkzNS00YThlLThkZTAt
NTVlOThlMjVmY2FkLzEvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9kZDE3ZTktMTkzNS00YThlLThkZTAtNTVlOThlMjVmY2Fk
LzEvVnE5NFM3eG1uQjIzYW92UjBlbVRrOWp5RjJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfZcTqjm
o8wubpKYvu7375BU4iNef4Np0AFpcxPW9P2yJ5K11r6B6xCdPvLggcZLk2+5Ff8q
DacNH/HNKTS3FtJw5XU94B7R6QktquUGVk+ErPglaVfvt9CEGQ8YT9+N4kmw4DGp
SgCygIIkK258UKZYV/aweKiDGMG8mAtjsESd7tVaJeejpWYSjGL56WUg3TppU4zn
Jf/j7/6RDSWOjyUZBLfgLw7aYM5IBkDLyHX6/8NnYhC/cmXOIufukHziZ1LGuZeu
eE7KmuOabDenwP+pflvcBITW25uLM95WTfNs25Wu0+aPNFXUCqKXkxEivy4VA6bj
M6kdpYmK2ZRiow==
-----END CERTIFICATE-----
Generated at Mon Feb 9 18:33:05 2026 by rpki-client