This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
File: vcVATIh06r8jXj5IomJ6cukiOpQ.mft (raw, json)
Hash identifier: Gx7I2FxPoeP31TF5eKNv7BAq+T6f/t/i8O3eHVnpGVo=
Subject key identifier: 4C:02:35:3B:44:0E:1D:D6:43:1C:46:40:0A:29:AF:D5:B3:AE:69:0C
Authority key identifier: BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
Certificate issuer: /CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Certificate serial: 019C43FE72628FEB6B52544B31547FBE3FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
Manifest number: 083C
Signing time: Mon 09 Feb 2026 20:01:14 +0000
Manifest this update: Mon 09 Feb 2026 20:01:14 +0000
Manifest next update: Tue 10 Feb 2026 20:01:14 +0000
Files and hashes: 1: vcVATIh06r8jXj5IomJ6cukiOpQ.crl (hash: T+mTG2z1lrK1ZMt/P6cEYtcyZktnGhlReyU4it4yNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:fe:72:62:8f:eb:6b:52:54:4b:31:54:7f:be:3f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdc5404c8874eabf235e3e48a2627a72e9223a94
Validity
Not Before: Feb 9 20:01:14 2026 GMT
Not After : Feb 10 20:01:14 2026 GMT
Subject: CN=4c02353b440e1dd6431c46400a29afd5b3ae690c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:9e:07:87:c2:72:38:89:64:12:12:89:3c:
a0:3f:c9:a0:aa:92:34:ae:c3:62:4e:82:86:69:41:
ab:0e:a4:a0:60:a0:73:27:67:54:53:4e:9b:b9:28:
ce:bd:68:cc:43:47:0a:a8:4e:88:ab:91:10:15:9d:
f2:39:84:67:72:a3:8e:3f:c3:40:72:56:20:ab:e0:
06:fb:ba:5e:f3:57:c9:81:db:43:f5:41:49:ff:a2:
14:36:f6:7f:7f:d6:3e:05:52:1e:f2:9b:99:44:39:
6c:74:8f:d6:74:a5:4a:50:8c:5f:17:01:ff:fc:36:
2a:ba:9f:a3:a6:e7:a5:cc:f6:01:3f:03:3c:ad:c5:
41:39:7b:f1:30:15:1f:d3:f5:e6:2b:02:f8:b0:05:
38:32:99:7f:ea:81:6a:bc:b4:32:d8:64:3f:b2:f2:
e4:5b:c4:6a:90:21:7d:3a:dc:d7:90:0a:d7:72:89:
74:ce:a0:9e:9c:36:a7:f6:3e:36:75:98:55:f6:c8:
3b:4d:f0:13:17:c6:2e:aa:53:8d:db:46:ac:e2:5a:
92:df:f5:80:16:6d:44:e6:7e:cb:48:b6:49:86:e8:
17:c4:78:ad:d7:d2:16:76:e3:02:29:d4:c9:82:39:
7d:34:c6:28:e6:fe:48:76:1e:9d:bc:de:86:1f:27:
0e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:35:3B:44:0E:1D:D6:43:1C:46:40:0A:29:AF:D5:B3:AE:69:0C
X509v3 Authority Key Identifier:
keyid:BD:C5:40:4C:88:74:EA:BF:23:5E:3E:48:A2:62:7A:72:E9:22:3A:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vcVATIh06r8jXj5IomJ6cukiOpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/fce9d1-f27b-42ff-b1c4-5875ff0ab5a8/1/vcVATIh06r8jXj5IomJ6cukiOpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:08:99:03:48:23:a7:c7:d2:05:14:9a:92:34:38:5e:ed:34:
89:ef:e8:e8:16:5c:dd:85:56:3b:1d:c3:73:5e:35:1c:b3:d0:
f3:22:88:12:68:fc:2f:90:29:c3:68:4c:3a:5c:b7:15:fa:72:
64:ca:49:c5:a6:f0:a5:3b:5f:2a:5c:9e:0e:88:84:46:8c:64:
71:02:77:e1:44:0d:5f:b5:84:7a:7f:a8:ac:3b:6d:00:c9:59:
9a:78:7b:75:db:97:e8:85:43:d3:17:70:93:92:0c:4d:06:b7:
1b:af:da:96:0b:2d:b3:98:14:0f:92:7d:25:65:44:fd:4a:c0:
eb:1b:f7:7c:4e:3b:88:5e:5e:71:fd:b1:e4:ef:16:f6:c1:e6:
2b:32:b8:3f:bd:7c:58:32:bd:7b:b8:fa:f7:c5:53:08:7a:67:
10:75:0c:c1:39:a5:48:24:0b:7a:c7:a1:69:a6:36:72:c2:cc:
52:c4:15:f1:0c:5d:96:32:ba:dc:9f:1b:e0:81:74:73:7c:c3:
bb:da:fb:9f:1a:17:eb:39:aa:ed:ac:9d:59:93:f6:1b:b0:c3:
dc:3d:9a:08:e5:9e:57:2a:99:19:2c:26:13:e4:89:d9:90:4e:
1a:18:a9:82:bf:f5:d7:a2:2f:6a:4c:e7:e3:82:de:6a:28:d8:
51:d1:cf:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 10 00:17:21 2026 by rpki-client