This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
File: vbg-mb9yVPlIBXpemBvm-lwgVN0.mft (raw, json)
Hash identifier: x9YDt6cdIWSyM5PkufQu02K9VWIt2TECVObGAH9nNl0=
Subject key identifier: B8:FB:B0:C7:60:2E:A6:09:2B:51:1A:08:72:7B:05:92:78:F7:A6:F8
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 019BF7D1C335DF181333AF6988A857BA3881
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
Manifest number: 1107
Signing time: Mon 26 Jan 2026 01:01:17 +0000
Manifest this update: Mon 26 Jan 2026 01:01:17 +0000
Manifest next update: Tue 27 Jan 2026 01:01:17 +0000
Files and hashes: 1: VuJy_h9yiEtXdeS3jEq2JEGWOrQ.roa (hash: 6jm3n4nB1GAtB2pm4IrAYPs2Z3+kEy2KBDMkRIb5wOw=)
2: aV6_5NcVm_s_aITq8cO34-jcjdE.roa (hash: wyuL5qGlVbtKqVgWA06NjGvCVBW+hNLdZho7A6q9rj8=)
3: t9K07-YfC37xfsi0CJIfCJMmpKE.roa (hash: PQbYcAqj6BprPtKQ6O22/5nEOF93VrxV7IFUUnr7fGM=)
4: vbg-mb9yVPlIBXpemBvm-lwgVN0.crl (hash: gWGB3zPcM4JXnelXHNt5CC2evlzOBQ5fQaI8ucNLYxc=)
5: vkSOzCbWxXVE1i3At-sNNCxqlkM.roa (hash: S9kOozaJr4eTIL0/lY0wRLTeBXqDXUPbwXx1kILAQxw=)
6: zahqiNXuee3DPbW8Fb6Ml_-RDaw.roa (hash: ORhfsYL2KXu+13H3lG8CeoaGQhHHQ9KlWSYICdYGKU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f7:d1:c3:35:df:18:13:33:af:69:88:a8:57:ba:38:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: Jan 26 01:01:17 2026 GMT
Not After : Jan 27 01:01:17 2026 GMT
Subject: CN=b8fbb0c7602ea6092b511a08727b059278f7a6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4a:95:4f:a3:c0:7b:46:eb:e1:fe:57:a8:67:
b2:25:36:0a:75:4c:38:30:24:7a:0b:94:e9:e2:92:
16:44:45:ad:3f:c0:1d:89:c6:01:01:14:c0:40:c7:
2d:1f:ce:8d:99:4b:f1:7d:cc:e0:d4:ee:aa:55:d6:
5b:ff:86:b5:89:53:ca:2c:c6:f3:0f:0a:58:08:dd:
a2:a1:19:ec:dd:d9:e4:5a:88:82:ae:b4:24:5a:62:
4c:2f:69:d3:70:b7:5f:fd:2e:a9:e0:98:76:25:6b:
de:a7:84:a6:67:90:3b:20:64:43:18:ad:6a:08:5c:
e8:5c:f7:27:be:a9:d6:51:0a:e0:9e:77:e9:ef:63:
5d:0b:d3:63:86:d6:e3:01:32:38:72:4c:d6:62:85:
f2:ae:2f:74:a3:e5:64:4d:49:a8:9d:50:32:60:e0:
b2:02:26:df:58:f7:74:0c:a5:f5:82:b2:0a:80:35:
af:ff:7d:f8:65:2a:32:a5:6a:ea:e7:c5:60:42:29:
b6:84:c5:89:04:ef:9d:28:17:20:7f:18:c4:87:90:
75:bb:1c:ab:1c:aa:b6:ca:2a:2a:b6:66:3d:fd:31:
76:07:16:5a:32:a2:a3:79:9a:50:df:a1:ea:65:c0:
e9:65:cc:8e:70:a3:20:2c:92:98:e5:11:29:15:93:
ba:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FB:B0:C7:60:2E:A6:09:2B:51:1A:08:72:7B:05:92:78:F7:A6:F8
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:92:d6:75:cb:f3:a8:a5:93:1e:2b:b8:22:a6:5e:75:c4:e3:
85:2a:94:9e:5c:70:59:a0:b2:96:2e:d4:09:fb:3a:15:47:8a:
9c:2b:8e:59:92:ce:69:32:19:7d:bb:be:89:68:00:ff:b4:b3:
a7:6e:af:24:90:ae:c2:e7:ec:3c:21:e8:90:0f:eb:74:f4:f3:
f3:fc:34:b5:b4:eb:1b:54:0b:1c:c5:04:26:18:5e:22:2e:96:
46:cd:8a:f2:66:db:bd:8d:67:b2:fd:62:69:a6:f9:62:cc:a4:
ea:77:b2:7e:3c:aa:09:a3:9e:bf:51:00:a9:bf:d2:42:e9:02:
ca:fb:83:4d:63:3d:b3:9a:86:61:28:76:3e:c9:e8:6e:7c:db:
55:51:47:b8:67:c1:9b:81:1a:ca:84:b8:61:50:66:60:f9:6c:
b3:3c:32:bc:07:73:e3:a5:8f:9c:ac:ff:d4:88:88:b7:4c:a5:
cd:7a:31:5b:81:fc:97:09:1f:f7:3d:8d:61:91:17:ee:9a:2b:
e8:25:33:94:01:15:8d:ed:e9:9f:18:d5:59:04:bf:85:aa:fd:
5b:a7:1c:7b:cd:9e:27:17:f0:f6:28:c1:e0:2c:35:75:5f:b9:
55:30:4a:c8:41:5a:dc:45:8f:8c:c9:21:cd:9c:14:64:2e:42:
ce:8e:dc:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:51:31 2026 by rpki-client