This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
File: VFmECNI871JWD36q1OHbDIYgYsM.mft (raw, json)
Hash identifier: EFPM4wREfj/EmhSnLymtyN0rdNNgVCzsQGOC/ogjqe8=
Subject key identifier: 88:FE:89:03:70:20:FD:32:4C:9D:0D:63:B7:82:39:8F:CF:19:4D:B2
Authority key identifier: 54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
Certificate issuer: /CN=54598408d23cef52560f7eaad4e1db0c862062c3
Certificate serial: 019C41A24F7DED40AEAFCC9F0CD8B56C8DFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
Manifest number: 180E
Signing time: Mon 09 Feb 2026 09:01:22 +0000
Manifest this update: Mon 09 Feb 2026 09:01:22 +0000
Manifest next update: Tue 10 Feb 2026 09:01:22 +0000
Files and hashes: 1: VFmECNI871JWD36q1OHbDIYgYsM.crl (hash: 0RD+nOyGO0GkhIbWXwbiPD4pBBWuDc5X2MCVrvbhjZ8=)
2: Zu8OUTqEJdgOEuCrzaxS93F6oOw.roa (hash: nLLJAITVfYEFMYRyN3x5RMOELDek19fGEta6GIsZ1vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:a2:4f:7d:ed:40:ae:af:cc:9f:0c:d8:b5:6c:8d:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54598408d23cef52560f7eaad4e1db0c862062c3
Validity
Not Before: Feb 9 09:01:22 2026 GMT
Not After : Feb 10 09:01:22 2026 GMT
Subject: CN=88fe89037020fd324c9d0d63b782398fcf194db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9d:29:ee:dd:23:3c:f1:66:49:8d:94:30:33:
42:c3:30:06:28:0a:35:cf:28:70:a5:6b:8e:7c:10:
b0:aa:58:c4:35:17:de:cc:1b:84:41:ed:a0:18:09:
ed:14:4b:cf:07:4f:33:f8:fd:90:5b:e3:37:4c:51:
6f:8e:21:a8:aa:39:6d:86:7a:97:43:fc:3e:70:09:
43:0f:8a:b9:d6:60:ed:94:4b:40:52:2c:60:fc:8e:
e8:05:ec:2f:e9:f1:dc:76:74:83:68:f5:48:f4:e6:
f2:94:7b:f8:e5:95:7a:a7:41:1a:83:5d:b0:9c:92:
59:28:66:67:1c:27:32:3d:b4:e0:ae:2a:25:f8:48:
41:90:75:fc:5b:a2:10:42:b9:47:88:1a:55:55:ee:
68:ad:36:c5:4a:0c:b2:37:ad:9e:fa:4c:b4:75:ef:
c4:64:8a:69:9e:37:1a:54:30:c8:3a:07:8f:49:26:
e6:c0:79:2d:43:b5:b7:fc:2c:6e:d9:16:2c:3b:c3:
75:a8:44:b8:5a:b1:86:40:3e:1d:7f:72:b4:f5:60:
05:f1:d4:f2:b7:30:69:aa:05:c8:23:26:9a:b9:86:
fa:8f:9d:ea:5b:f4:3e:05:b0:01:15:8a:79:22:8b:
00:04:2b:1e:8b:06:1f:5d:78:b3:14:04:fa:57:ce:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FE:89:03:70:20:FD:32:4C:9D:0D:63:B7:82:39:8F:CF:19:4D:B2
X509v3 Authority Key Identifier:
keyid:54:59:84:08:D2:3C:EF:52:56:0F:7E:AA:D4:E1:DB:0C:86:20:62:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFmECNI871JWD36q1OHbDIYgYsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f9d152-ca00-46c4-936a-e9093fee3fd3/1/VFmECNI871JWD36q1OHbDIYgYsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:5f:b1:8f:a6:cc:d2:67:07:7b:b3:78:e1:45:16:47:cb:54:
2b:8f:04:0d:b7:cc:ea:7b:83:37:42:dc:c6:a1:25:cd:45:8c:
25:d0:70:b4:87:14:23:26:ec:f8:c6:7f:68:3f:39:0d:19:77:
e8:c1:da:81:a6:5f:bb:5a:29:7c:ea:ca:a9:3c:73:b6:0e:df:
61:14:10:47:9e:a8:0e:90:88:42:d8:8c:80:34:41:70:44:a1:
e1:f2:ba:16:7d:08:02:d7:fc:8e:8b:0c:1c:5d:d8:0a:bb:70:
1a:d7:cd:4b:b5:35:df:db:ea:14:0e:42:86:4f:2d:e0:ea:7c:
3d:22:81:c5:99:28:f2:73:93:cf:52:cd:de:d5:bf:63:64:d1:
cd:e4:9b:10:e2:01:75:32:46:a2:b5:99:e4:3d:62:11:a7:8b:
16:6f:35:4b:43:74:fc:41:8f:57:c1:6d:9b:be:37:a6:fe:5f:
f7:6e:12:86:74:08:92:9d:d9:2b:c0:94:7c:41:74:16:ae:b5:
50:16:ee:4c:d4:9a:80:52:50:eb:b0:dd:94:88:8a:e5:df:52:
a6:c7:77:a2:93:7e:cd:a5:41:ac:b1:e6:3d:84:5a:28:bc:6e:
11:29:74:48:ea:da:fe:01:ee:2d:5a:13:1b:4d:3d:2c:f0:51:
42:8e:ae:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:29:45 2026 by rpki-client