This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
File: vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json)
Hash identifier: tQZqpoSLWL2CNDvvdtTmhVV1a47XfWj65bue02byEBI=
Subject key identifier: 4D:AF:C0:10:0D:A3:C3:30:FD:43:95:90:59:47:AF:C6:41:F7:25:D1
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial: 019C42EAF436A568AEE6B25289B216B5C73E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
Manifest number: 1318
Signing time: Mon 09 Feb 2026 15:00:20 +0000
Manifest this update: Mon 09 Feb 2026 15:00:20 +0000
Manifest next update: Tue 10 Feb 2026 15:00:20 +0000
Files and hashes: 1: qobIcfeU6nrdlOVqSH5eoEXWNc4.roa (hash: Ajh39YpvJBLhmSQ2jvIh5vojnzHR5G4xIOrDmEyjq6g=)
2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: EXWBkIp8R/lobl55h8iX+StQ7v2+h3tI/RP6ySPpbk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:ea:f4:36:a5:68:ae:e6:b2:52:89:b2:16:b5:c7:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Validity
Not Before: Feb 9 15:00:20 2026 GMT
Not After : Feb 10 15:00:20 2026 GMT
Subject: CN=4dafc0100da3c330fd4395905947afc641f725d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:76:7d:9e:3c:ce:73:d2:b4:14:45:94:30:b9:
c6:12:7c:46:17:e3:d6:da:db:6f:66:50:5c:06:7f:
43:a3:c5:47:e6:78:eb:f7:2e:02:f6:b4:97:f9:38:
be:68:08:bb:9c:d8:d4:d4:cb:86:63:df:db:23:cd:
8d:ab:96:39:38:96:f3:d1:b9:ac:d8:43:0e:92:63:
32:d3:ac:04:70:3f:77:5b:32:ac:fe:2b:ff:cb:6f:
77:20:db:c2:da:2d:b6:73:8b:7a:5d:0c:ca:ac:ae:
95:a1:53:57:54:24:98:44:6f:40:7b:0d:bf:2d:ee:
d0:64:8d:a1:d6:2d:6e:9d:d9:0e:f1:0f:99:f6:8e:
fa:19:e9:89:a9:b3:83:3e:b6:1a:4a:1d:19:ae:d3:
0a:8a:b3:9b:b2:09:d3:37:96:08:d3:36:7b:cd:b3:
f3:3d:ed:f8:d2:fb:b0:70:27:9b:a1:e1:4a:aa:92:
65:a1:fc:af:a5:e1:37:3d:b8:ab:a6:23:94:d0:47:
bd:5c:f1:c7:65:03:a2:80:a6:2f:68:39:9d:5c:da:
8f:4f:da:c9:20:23:6e:09:5f:99:f1:ca:8f:89:96:
0b:ed:04:e8:9d:f0:28:a4:c5:45:3b:03:f6:56:54:
36:7d:cc:df:1a:26:9c:fd:5e:c2:67:6f:5c:4c:86:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AF:C0:10:0D:A3:C3:30:FD:43:95:90:59:47:AF:C6:41:F7:25:D1
X509v3 Authority Key Identifier:
keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d4:07:46:7e:70:54:ed:7f:13:5e:71:b2:7c:58:79:5f:c2:
68:5f:24:7e:04:c7:f5:1d:1c:a7:63:09:ea:fe:d0:63:b7:d3:
67:d0:00:29:b6:01:66:d9:0f:95:dc:25:83:88:8a:5d:7f:30:
a5:a1:43:f4:fb:57:4c:41:cd:f5:c7:37:8d:4e:fe:c8:c9:43:
17:43:9f:5b:23:59:ad:18:b5:62:5c:f0:72:a8:f0:9c:9a:a9:
13:63:e0:f8:59:ff:cb:c0:f8:9b:d5:65:ca:f7:29:3b:d4:8f:
6f:19:f6:3f:81:ee:5f:66:2e:6e:a9:38:69:3b:fe:38:c1:36:
bb:1d:05:eb:94:37:53:c4:5d:40:3f:c9:f1:f6:fe:38:dd:8b:
2f:48:30:a8:06:c9:2d:96:a0:69:9a:f3:f1:06:ce:40:88:11:
75:1d:77:67:e7:64:b0:36:57:88:9f:ac:10:a4:cb:41:41:84:
20:df:16:94:44:73:0c:37:2f:69:38:39:34:1e:e1:50:33:33:
35:54:17:cd:fa:a6:37:fb:3b:22:1e:52:f1:13:7e:4d:ac:a7:
14:00:58:72:7e:6b:81:76:11:c4:a3:13:9c:8b:54:4f:06:32:
8e:92:ca:0d:29:8c:7e:16:66:76:b3:45:38:3b:48:7c:3d:f1:
11:b6:c0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:30:50 2026 by rpki-client