This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
File: vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json)
Hash identifier: yunu8DTggOk3lNxQIoY22rjxtXBqi0g49bf8nS1rrWY=
Subject key identifier: B1:63:B7:59:72:1E:AC:1D:48:D8:B3:05:A5:35:CE:47:5F:32:28:9B
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial: 019BA2D9A3A038418AA5FD37F96400204DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
Manifest number: 159E
Signing time: Fri 09 Jan 2026 13:02:10 +0000
Manifest this update: Fri 09 Jan 2026 13:02:10 +0000
Manifest next update: Sat 10 Jan 2026 13:02:10 +0000
Files and hashes: 1: A6vGIJGT64W29On7fsToe2iuYDQ.roa (hash: 5PMjLRbqzWbIoujPeJodXLP99q/YBLitJphbcb/ssCI=)
2: DYzQZ3HML1kOQM74C8pKJfSz8O8.roa (hash: a+eEVaBY7KRUOOfQI2kBrcwN4nVpCqX6qQedal9y39E=)
3: fHpD3phpmM9OPHLUzwT3ZU_QOuQ.roa (hash: J0wWX6BA1Q1CBgRQ+yoAf2qxwucSG2RWCFw2KHZnWAQ=)
4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: YVz3o92rJRyPLyGjftPkqFAZbEIRSBL0VloAO4EGh78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Jan 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:a2:d9:a3:a0:38:41:8a:a5:fd:37:f9:64:00:20:4d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Validity
Not Before: Jan 9 13:02:10 2026 GMT
Not After : Jan 10 13:02:10 2026 GMT
Subject: CN=b163b759721eac1d48d8b305a535ce475f32289b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:42:b5:09:c2:39:5f:89:9a:f3:ed:c1:91:de:
b0:11:a0:fd:ec:d5:33:e9:ca:e3:8c:65:70:0a:0b:
3f:41:e3:f9:20:28:18:20:1d:2b:55:ec:73:11:ad:
57:ea:fc:14:7a:2a:e7:90:3c:fb:c4:d2:71:7b:e8:
8a:ae:3e:70:68:72:95:7f:46:f8:78:d0:e7:2e:54:
f4:18:d2:50:30:1a:d4:e4:03:fb:40:e3:48:49:9e:
71:cc:85:17:20:0f:b2:da:e5:58:85:69:81:0d:2c:
61:2c:38:77:88:30:72:32:6b:fb:57:fc:fd:29:92:
82:aa:e4:7b:71:99:36:6c:b4:3c:64:13:41:b7:22:
8d:2a:26:42:61:45:97:8f:e5:e8:02:a0:7b:c1:b9:
74:33:af:46:97:41:d4:da:17:14:38:46:78:e2:ef:
7a:2c:23:11:7f:a8:0d:ff:63:c5:e5:8c:08:8e:e3:
7d:7a:9b:da:fe:bb:2b:f3:8a:f4:fd:f2:15:ac:01:
92:1e:77:ef:16:05:68:86:07:1d:0b:0a:3c:e8:f9:
52:20:fa:36:5d:7a:a9:a5:9b:45:b8:62:98:f4:b1:
0e:de:32:0e:f2:fb:5d:bc:ce:7d:81:50:df:6c:f5:
df:ad:91:f4:22:c1:fc:a1:98:3e:f4:3c:f4:27:36:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:63:B7:59:72:1E:AC:1D:48:D8:B3:05:A5:35:CE:47:5F:32:28:9B
X509v3 Authority Key Identifier:
keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:61:86:a0:95:19:2e:d6:4e:99:2f:3b:10:34:79:51:b2:20:
a5:33:6c:97:dd:44:e2:5d:36:3e:54:a3:34:7b:fc:aa:e4:74:
79:0d:dd:7d:9a:62:26:b9:0f:c8:cd:54:41:76:d2:cb:47:66:
9d:ea:f2:0e:4b:36:6a:29:e2:79:c4:c9:ac:fe:fc:1d:ce:08:
9a:98:93:60:8d:ee:af:66:d2:63:5a:ec:9d:64:4f:fa:be:3d:
4d:b9:07:fa:ea:21:1d:97:dd:b1:40:11:ef:90:9e:a0:d4:8a:
26:3f:9f:12:63:be:66:13:8c:0b:e9:e2:35:b0:97:ab:48:e7:
56:b5:76:3f:6f:7e:da:83:ec:7e:c5:5f:ed:36:46:0f:68:5d:
84:88:39:6f:83:6a:14:17:88:ff:da:87:6c:71:42:77:25:37:
af:d3:c2:5d:f2:12:7c:e3:78:14:44:f8:3b:48:a2:af:12:a6:
8d:6c:0e:a0:91:49:2a:17:c5:42:3a:50:4d:11:07:b9:24:85:
f7:51:74:cf:97:e8:42:a9:73:b6:02:d0:cc:a6:ac:29:6b:f7:
85:df:28:86:14:77:50:8d:20:5c:1f:a9:ac:22:00:bd:37:32:
60:b6:36:ee:21:82:98:75:e6:93:d3:bd:fa:26:c5:fb:33:e2:
6b:e2:0c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 17:08:57 2026 by rpki-client