This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
File: vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft (raw, json)
Hash identifier: /pFqOb2Sd5oc1tRyYohf2HrAlZnhm53tR6r6ubfJLJs=
Subject key identifier: 0B:E0:A7:92:89:A9:17:65:02:AB:25:39:09:81:16:88:22:54:75:81
Authority key identifier: BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A
Certificate issuer: /CN=bc90a0c58f9129225e191924aab72c7c03b43c5a
Certificate serial: 019C43223A19C621FC680726DC18267C8FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
Manifest number: 02C4
Signing time: Mon 09 Feb 2026 16:00:42 +0000
Manifest this update: Mon 09 Feb 2026 16:00:42 +0000
Manifest next update: Tue 10 Feb 2026 16:00:42 +0000
Files and hashes: 1: vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl (hash: qnsBRiLboL9Mni5tfmYadlpLKQXKNnMprNYNYHOxwn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:22:3a:19:c6:21:fc:68:07:26:dc:18:26:7c:8f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc90a0c58f9129225e191924aab72c7c03b43c5a
Validity
Not Before: Feb 9 16:00:42 2026 GMT
Not After : Feb 10 16:00:42 2026 GMT
Subject: CN=0be0a79289a9176502ab25390981168822547581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:38:f2:c6:6f:94:6d:96:c5:9d:87:d8:48:ac:
85:59:b3:3c:f7:37:83:f7:dd:4b:ce:e2:8b:44:e1:
e0:75:c7:c3:b8:fd:7f:d5:8a:34:70:4d:b6:17:06:
15:07:ae:f7:3d:80:1e:a8:6b:35:39:89:c4:45:90:
a5:45:33:35:1f:e2:21:8f:61:16:30:b2:2d:0d:28:
76:73:9f:df:27:51:ee:f7:de:f2:bf:f0:16:e8:31:
1d:9b:a6:85:59:45:c2:da:99:ff:d7:6a:d5:db:63:
f3:41:cb:64:d2:70:97:6e:03:0e:a7:da:87:fc:e8:
5e:55:ba:4d:ec:3f:e8:6b:5c:26:f7:12:f8:37:3e:
e9:45:18:77:49:7b:e9:2a:eb:f0:7e:ef:51:be:7e:
1b:9e:e6:ab:ee:3c:2d:72:aa:8d:3b:46:09:f0:53:
6a:32:c6:aa:5d:e1:74:e5:c1:5d:99:a8:ad:e3:74:
4e:bf:0d:cc:37:23:0d:b3:9f:46:0a:6b:bd:7d:3b:
03:be:b4:3c:10:3c:02:63:8c:09:22:99:ed:1b:ef:
76:24:1b:15:fb:5e:20:de:8c:3c:e0:04:84:6e:4a:
b9:dd:d8:af:ea:f9:1e:94:c2:ef:88:38:ef:f7:50:
c4:fc:69:87:31:12:2b:04:05:66:d5:54:4e:23:73:
4e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E0:A7:92:89:A9:17:65:02:AB:25:39:09:81:16:88:22:54:75:81
X509v3 Authority Key Identifier:
keyid:BC:90:A0:C5:8F:91:29:22:5E:19:19:24:AA:B7:2C:7C:03:B4:3C:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJCgxY-RKSJeGRkkqrcsfAO0PFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/107b31-2fcf-4b89-b0c1-ed5de7714348/1/vJCgxY-RKSJeGRkkqrcsfAO0PFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:44:1e:ef:67:87:03:46:85:6f:1c:35:e0:ce:ca:c3:60:a9:
f7:54:00:68:d5:64:54:a9:f8:22:27:15:fc:81:61:7c:4c:f3:
22:c0:e4:27:25:9f:92:e3:4a:8e:bb:8c:95:99:f1:94:24:d7:
a4:48:5f:ef:64:b0:5c:58:95:db:df:41:cf:9b:27:ef:4b:d5:
a4:c7:e5:4e:e8:34:c2:3f:e2:eb:7d:ae:c4:99:f8:71:2f:87:
8f:a6:b0:14:80:da:50:4b:e7:1a:da:a8:64:ff:ee:9c:a3:a6:
77:c3:73:ba:82:1c:1c:e2:84:d7:7a:4f:08:59:ec:17:13:49:
ef:3f:ff:a9:cc:5c:c9:72:f6:db:ad:24:59:52:c2:51:c9:16:
dd:78:bb:d9:61:b4:f2:4b:bb:ab:92:ce:09:ce:b0:a7:35:05:
b5:0d:58:97:12:0c:23:5b:49:06:5a:55:4e:0b:1f:94:e5:4c:
48:d9:47:c8:4f:2d:1d:0e:c1:ae:4d:8e:af:e4:35:be:78:67:
3a:a4:0e:4f:86:ac:34:a6:12:a0:1b:41:01:5e:92:07:7a:d2:
7b:46:a8:70:f9:a7:3f:52:ec:f2:b1:1c:5c:40:ab:25:dd:e4:
e9:d7:f3:39:f6:27:b9:c2:49:d0:0c:1d:26:f4:3a:a0:5c:ed:
05:f6:39:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 20:54:17 2026 by rpki-client