This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: htTUrZyPSIfmbgKPtrg6zm7j11fcThk/Sb5tlCxOmYs=
Subject key identifier: AC:11:5C:20:BC:72:5C:BA:D0:AF:A0:B0:8B:5A:83:39:C0:DD:B6:1E
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 019BFEE6DCFC63C865FFF5F5FFFB2D6CB316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 17F1
Signing time: Tue 27 Jan 2026 10:01:41 +0000
Manifest this update: Tue 27 Jan 2026 10:01:41 +0000
Manifest next update: Wed 28 Jan 2026 10:01:41 +0000
Files and hashes: 1: ZGekjXEzpu_RZ-7_vyg6Eo2ZkNk.roa (hash: g9zJSRkWxGZifxxDK0NFw2MI+0xI5nvgLjURj1IFEFw=)
2: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: Oo/HWXZowS9IFh/clcugL//lmbJtMS1cR1Rs6TB8qzA=)
3: xj3KIjGGQeE9p2z5xDtR4kdM838.roa (hash: KadOdd0YIetDxyuEeROWrqZ3UbDrY1vHEUtLjmlaM0E=)
4: z6bCwLojIPVuxbTXw72sR-aZPSQ.roa (hash: jarPN7oKXyiEaRbhLltezQTSG2nKsHFs4sdkmV5yFgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Jan 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fe:e6:dc:fc:63:c8:65:ff:f5:f5:ff:fb:2d:6c:b3:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Jan 27 10:01:41 2026 GMT
Not After : Jan 28 10:01:41 2026 GMT
Subject: CN=ac115c20bc725cbad0afa0b08b5a8339c0ddb61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:cd:53:41:6a:79:e0:d9:47:36:59:8d:c9:10:
08:dc:33:ab:c9:67:e8:54:f9:f6:f0:28:d4:c4:08:
86:a1:58:da:ca:7a:41:33:64:6a:80:f2:91:ea:b2:
a5:a8:7b:2b:81:6f:a1:cb:0c:57:c0:1d:d1:de:35:
db:10:5b:ca:7f:fe:7b:31:f7:a5:50:dc:2a:89:2f:
86:84:f9:45:64:29:c9:88:55:f0:71:04:86:15:6a:
02:7c:cc:28:97:29:54:90:c5:82:4a:05:d2:ea:23:
82:db:90:3c:b7:ba:52:83:f7:a6:36:c2:1d:2b:01:
5f:cc:08:21:26:d9:96:a8:a0:e8:56:96:89:07:e5:
7e:35:9c:ae:81:ba:8b:b6:69:97:c7:5f:97:7f:77:
22:e3:c7:52:f1:73:d1:18:90:b5:ee:a2:4d:b1:2d:
f0:13:05:f6:1f:d8:b2:98:1a:58:96:9f:47:20:a2:
34:2b:a6:ed:fe:30:95:16:8c:d2:1f:5b:20:e5:c3:
e8:2d:7e:4b:78:d4:6b:53:82:5a:de:9f:9d:97:6a:
e1:dd:84:9e:4b:63:86:b2:7d:61:48:9f:3d:d0:38:
87:f5:0f:68:43:19:66:62:63:04:39:61:9d:01:9d:
46:9e:52:72:f4:3a:ae:0b:8c:44:cd:07:a2:65:a9:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:11:5C:20:BC:72:5C:BA:D0:AF:A0:B0:8B:5A:83:39:C0:DD:B6:1E
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:7d:bc:9f:1c:9f:38:42:66:be:ec:c0:36:99:22:42:35:6f:
cd:1b:4e:b2:42:43:01:de:b6:45:76:a7:4b:15:d2:09:0b:35:
be:75:ec:04:65:fb:d9:d3:26:5d:9f:6f:5c:d1:f7:e4:59:31:
08:e2:84:4c:f6:1d:bc:61:d1:88:75:eb:2c:5d:dd:56:02:3d:
90:d7:f6:e0:1d:6f:95:ef:9d:a7:be:e1:02:24:df:49:63:0e:
27:44:69:44:8b:ab:b2:8d:5d:65:7c:5d:50:92:12:82:c1:a1:
22:82:b8:de:f0:99:12:b4:37:43:9a:98:8e:4b:d2:00:23:1c:
65:b7:d3:8b:51:dc:ff:38:78:ad:62:68:ae:2a:0d:f6:4c:ad:
b1:37:27:9e:5c:45:1a:5d:52:bd:65:c6:7f:14:6b:30:62:49:
cb:d6:15:51:1c:25:df:6d:a4:8f:28:b2:4c:02:e0:41:9a:35:
c4:3a:e4:49:90:1b:c2:c0:4c:1b:52:ce:fc:0d:89:2b:01:eb:
14:db:8b:2c:df:b1:c0:8f:c9:ea:bc:84:74:50:47:ce:30:92:
b4:43:58:b7:46:21:ff:d7:7d:54:da:f0:63:d4:35:70:ad:be:
8a:44:b4:fa:6b:7f:e8:4f:70:ca:ce:38:b1:b4:52:25:6d:87:
2c:a9:5b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 11:51:32 2026 by rpki-client