This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json)
Hash identifier: 2vI4J/X77meOkWi6QMcVcZ7TAh57ts4MV7NEU04qtXs=
Subject key identifier: DD:1C:68:4B:00:81:F6:50:C2:A7:B8:83:E8:AF:98:B2:9F:36:E7:01
Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a
Certificate serial: 019C43C6EE82290A40F3DA6A903F09C878C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
Manifest number: 14F7
Signing time: Mon 09 Feb 2026 19:00:36 +0000
Manifest this update: Mon 09 Feb 2026 19:00:36 +0000
Manifest next update: Tue 10 Feb 2026 19:00:36 +0000
Files and hashes: 1: MxmtZpT39ziVe-pzqj79_Ed_jAo.roa (hash: 4OhUHwywmDOO3mmhT6ZwnGr79zua7TEwc4pRLTJjvFc=)
2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: 1YikzVHtqSMxadojXroQzrWQyntBoXClH17/AYFtY4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:c6:ee:82:29:0a:40:f3:da:6a:90:3f:09:c8:78:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a
Validity
Not Before: Feb 9 19:00:36 2026 GMT
Not After : Feb 10 19:00:36 2026 GMT
Subject: CN=dd1c684b0081f650c2a7b883e8af98b29f36e701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0f:cd:74:1a:9a:51:31:34:de:85:7d:f5:ff:
ec:fd:d5:b2:a3:1e:55:68:97:02:3a:c4:3f:b7:fe:
25:f2:a7:04:8e:0c:1c:4e:5c:25:c4:b6:9e:60:c4:
9e:81:61:83:24:e8:b4:e4:aa:b4:83:51:77:f1:c0:
ce:b5:c0:eb:3c:43:34:4b:91:43:a7:a0:18:99:dc:
72:66:de:a2:56:e5:c4:b1:dd:8c:8b:b0:61:c0:b2:
d7:c2:f9:9c:1f:af:13:8c:af:ae:e3:58:be:bf:64:
ef:f7:db:e5:2e:55:35:c0:a5:ba:43:44:ba:06:d8:
3e:e5:36:29:c3:55:6c:38:dd:07:0f:8c:58:94:12:
fe:fa:6e:9c:a3:86:89:d5:cb:c6:ab:47:7a:7b:82:
55:60:fa:49:5a:6b:9b:3b:92:f9:0d:b5:a9:ef:81:
28:0c:ef:c2:e0:0f:43:53:cc:d9:75:9d:a3:f8:2c:
b4:b5:16:94:40:51:f3:05:24:15:1f:ed:62:c1:48:
04:de:35:44:9a:63:81:77:33:87:04:64:de:67:bc:
0c:99:d4:c1:9d:ae:10:aa:d5:43:19:79:38:28:cb:
c7:80:89:07:72:3b:0c:56:7a:01:43:e3:f4:51:3d:
f4:8d:f1:fb:a6:56:e3:8b:e4:27:04:eb:f4:4e:68:
67:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:1C:68:4B:00:81:F6:50:C2:A7:B8:83:E8:AF:98:B2:9F:36:E7:01
X509v3 Authority Key Identifier:
keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:5f:e6:12:5a:60:99:1b:7a:94:50:26:0d:a3:ef:06:0a:75:
63:df:f9:60:85:e5:3d:2c:78:8e:b6:bb:7c:7c:e1:7b:0c:c5:
ec:bd:7d:d1:66:94:80:dd:31:46:ee:ba:37:f8:ce:14:65:7b:
9f:9d:6b:be:ac:03:41:37:54:b5:25:82:e4:07:0b:14:74:5c:
3c:3f:e3:15:ce:13:17:db:7b:c1:c2:44:26:04:0c:e3:a0:43:
69:c3:82:72:7a:2e:f8:a7:0c:f2:45:1d:48:ab:e1:3d:a2:9e:
0c:9f:36:aa:76:8d:ee:a0:07:0c:40:e4:cd:95:40:ad:0c:7b:
e1:c3:77:0b:5e:9e:42:51:44:aa:ce:94:4e:30:e6:e6:85:1f:
9c:14:72:9d:ed:d6:21:07:1b:85:0d:b6:ff:26:08:59:e6:7a:
3c:81:b6:5a:38:0a:56:8b:41:9e:a9:44:5a:0c:cd:89:c4:7f:
17:aa:55:59:dc:ff:bd:cd:4f:02:e3:23:bd:78:31:f0:fe:30:
25:6a:38:33:4d:19:2c:dd:f1:a3:91:a1:6d:89:55:b4:c9:4b:
d9:54:51:eb:d8:6a:39:30:36:1f:94:71:1a:07:1b:f5:dd:39:
bd:19:6d:a6:5f:fc:b3:6a:5a:a6:6c:c5:19:9c:9b:3e:d4:45:
3c:bc:19:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:06:16 2026 by rpki-client