This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
File: vrfYT-FaMkPBAANHsJkLpGuzrkI.mft (raw, json)
Hash identifier: m8t6KxdNkcAAU8FaXnl9/KKsN8xi50x4y6lGylKyqUc=
Subject key identifier: 86:8B:2A:B8:F8:8F:3E:55:4D:B0:BD:5A:47:74:B3:64:3E:FC:00:85
Authority key identifier: BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
Certificate issuer: /CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Certificate serial: 019C42EB7DCC2DB45F48B80221CC52D44E61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
Manifest number: 0841
Signing time: Mon 09 Feb 2026 15:00:55 +0000
Manifest this update: Mon 09 Feb 2026 15:00:55 +0000
Manifest next update: Tue 10 Feb 2026 15:00:55 +0000
Files and hashes: 1: MZeI3fx7Rs6vgWADfZ3b9x-IPrw.roa (hash: 88TFwnxWocrDYKNiW9RVsE1t/Ul4aE3DSPX0lbd55Bc=)
2: vrfYT-FaMkPBAANHsJkLpGuzrkI.crl (hash: 3kRByQnAk8Zx1B2QZdGUKF0uEmMOtt/dh42cljzIDOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:eb:7d:cc:2d:b4:5f:48:b8:02:21:cc:52:d4:4e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb7d84fe15a3243c1000347b0990ba46bb3ae42
Validity
Not Before: Feb 9 15:00:55 2026 GMT
Not After : Feb 10 15:00:55 2026 GMT
Subject: CN=868b2ab8f88f3e554db0bd5a4774b3643efc0085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:36:15:a5:24:f5:50:a2:2a:c1:59:ea:eb:42:
02:49:38:61:5a:c4:dc:91:25:08:61:e4:29:8b:fb:
59:70:a4:80:e8:62:8e:15:72:45:8f:93:0d:4c:e8:
4f:55:c8:a2:2a:1e:8e:73:15:47:96:c2:76:15:32:
4c:b2:9b:36:2f:d8:22:3e:01:f4:32:2b:73:00:51:
66:2f:0f:13:6a:1a:85:d4:70:8f:34:87:6d:21:1f:
1a:53:da:cc:35:10:ad:8c:2c:d2:9f:b8:a9:b6:8f:
c0:f4:51:cf:d1:36:d1:4f:95:f2:f8:6d:89:b6:d9:
52:85:68:c2:08:01:a5:62:0d:f1:a3:33:ac:8e:c6:
2e:db:0e:06:9f:3a:f5:af:ee:c3:4c:c3:15:cf:ab:
a8:68:f5:59:6d:e0:4c:d7:0e:2d:95:b0:29:75:b1:
36:d3:a6:3f:d2:c4:14:b6:42:6c:66:d8:a6:61:67:
e0:98:e6:bf:0c:c5:5e:5c:05:27:33:53:d7:ff:f2:
df:ad:5d:af:94:f3:29:f0:40:c9:89:a8:9b:59:0e:
4b:c7:56:30:ec:ba:cb:02:ec:0f:9d:13:57:76:e8:
d5:fb:0a:5c:05:46:bd:81:51:78:fa:0f:77:4a:b1:
34:7b:e6:ee:92:30:09:58:8a:22:39:52:a4:dd:f4:
c4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8B:2A:B8:F8:8F:3E:55:4D:B0:BD:5A:47:74:B3:64:3E:FC:00:85
X509v3 Authority Key Identifier:
keyid:BE:B7:D8:4F:E1:5A:32:43:C1:00:03:47:B0:99:0B:A4:6B:B3:AE:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrfYT-FaMkPBAANHsJkLpGuzrkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1774bd-6f7d-4d4f-96dc-e7b860332cb7/1/vrfYT-FaMkPBAANHsJkLpGuzrkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:50:8e:f5:25:fc:61:2e:14:42:9a:30:d2:ed:a9:50:7e:f1:
33:39:c1:e0:d2:1c:8d:4c:ac:80:18:e4:4b:9f:4e:be:94:be:
3b:00:79:88:8a:31:3b:6d:83:60:fc:d2:ee:9d:b6:a6:5d:ab:
c7:45:5a:64:d8:b6:36:d7:b9:0d:67:98:08:d5:04:6c:60:af:
78:50:e2:53:61:1b:3d:9d:1e:fb:cf:5a:6d:73:34:a5:78:4c:
32:81:6e:12:6e:11:b0:c9:a4:cc:16:8c:0c:7f:13:41:b7:57:
25:1c:df:be:cd:c3:ff:05:ac:8e:f7:65:b9:f3:3b:e9:49:c5:
a6:7e:fc:07:3c:af:40:c5:ce:63:9a:24:be:c9:86:49:b4:57:
5b:13:9d:ae:be:cd:47:29:98:98:9d:37:4b:56:6b:d7:21:4a:
c0:0f:75:36:32:7f:05:35:28:36:c5:90:e9:0d:cb:80:9a:c2:
f5:a4:d9:d0:5a:2d:91:05:4f:a2:d9:e1:8a:f6:a2:af:3f:05:
4d:91:b2:19:fa:53:91:23:2a:cc:c8:bd:b2:7b:9a:f8:86:c5:
f1:03:ef:ae:ac:24:19:6c:d5:12:ce:06:75:47:8a:6c:b2:e3:
96:dc:aa:c2:da:7f:6b:db:4c:5d:57:fe:3f:55:9d:90:9e:1e:
df:51:7b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 22:17:45 2026 by rpki-client