This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
File: vkCzwr54Ndeze1gmEC-HRqUZnUk.mft (raw, json)
Hash identifier: r/S0YbNTaOyvdyPpLAtNwnzIONJH0BR7zI73R0wJL2M=
Subject key identifier: ED:82:25:DB:45:55:1B:10:69:08:15:9D:D6:92:B1:B9:45:5B:72:28
Authority key identifier: BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
Certificate issuer: /CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Certificate serial: 019BF20625DBD071A402BF28842584AEB4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
Manifest number: 1099
Signing time: Sat 24 Jan 2026 22:00:47 +0000
Manifest this update: Sat 24 Jan 2026 22:00:47 +0000
Manifest next update: Sun 25 Jan 2026 22:00:47 +0000
Files and hashes: 1: MkSFILdBcvHxyl3ayJE96taLdHo.roa (hash: vPrRnOae6/b3XpWFwaeggOdaQgs7BaMzqFikId0Jk+4=)
2: vkCzwr54Ndeze1gmEC-HRqUZnUk.crl (hash: 6ftmcWa5cwYBQR7bKRIIKX/yU4Dt23TiUpHPXu1CJ5g=)
3: zeCeXRfPu2t3BPvUAm58rbcGNoI.roa (hash: JizEg6enjfFSyI5GkuML6Yj+9pecrYJP7cQWBwD0cBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:06:25:db:d0:71:a4:02:bf:28:84:25:84:ae:b4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be40b3c2be7835d7b37b5826102f8746a5199d49
Validity
Not Before: Jan 24 22:00:47 2026 GMT
Not After : Jan 25 22:00:47 2026 GMT
Subject: CN=ed8225db45551b106908159dd692b1b9455b7228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e0:66:ff:42:69:26:11:6c:bf:45:46:16:9f:
9c:88:7b:99:8a:78:09:c6:d8:41:69:a4:cb:55:99:
f8:4a:5b:fe:46:cd:21:02:cb:ed:13:5e:0b:09:f1:
2e:d3:c4:cf:73:cd:c8:65:f1:63:a9:49:52:b2:bd:
20:9d:78:85:b2:f0:d2:5f:20:72:07:e5:e9:68:8b:
ca:32:00:7f:39:1b:44:3e:c0:eb:ea:a5:3a:f7:c8:
65:00:f4:6d:8b:a1:13:6f:ce:49:df:3b:ac:eb:5b:
6c:16:83:a0:53:82:ef:82:7c:5d:f3:5d:2e:52:22:
8c:ad:67:62:a3:c1:a9:3c:ec:74:da:95:54:27:6c:
ea:3a:38:a6:45:c4:58:7a:58:4a:56:80:f6:36:bf:
16:3b:58:47:bd:80:a8:da:2c:a5:fb:57:ce:1c:04:
f4:38:bd:1e:93:66:04:3d:08:97:8c:8d:ea:14:bb:
e4:cd:bb:37:00:4b:34:39:3e:b7:ea:04:3e:1d:10:
15:e2:ad:4e:34:f1:8f:40:76:ed:aa:3f:5a:b5:21:
e3:2e:21:01:3c:2e:c4:b8:22:da:30:01:cf:86:32:
66:00:ab:6f:32:80:70:2e:08:40:9a:53:77:86:ac:
58:69:08:26:ca:b0:58:d8:f1:b5:97:5a:c5:e8:9a:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:82:25:DB:45:55:1B:10:69:08:15:9D:D6:92:B1:B9:45:5B:72:28
X509v3 Authority Key Identifier:
keyid:BE:40:B3:C2:BE:78:35:D7:B3:7B:58:26:10:2F:87:46:A5:19:9D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkCzwr54Ndeze1gmEC-HRqUZnUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c71636-edd8-4d11-85e8-b834faf6aced/1/vkCzwr54Ndeze1gmEC-HRqUZnUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:97:86:ce:71:58:f2:50:25:a5:b3:73:4b:f6:3b:28:bc:9a:
04:10:9e:a8:3e:ab:12:13:f1:ea:29:ef:59:8c:dc:30:c0:46:
0c:4f:1e:7f:ec:53:97:69:32:e3:b1:b0:14:95:72:f4:0b:fd:
76:e0:96:38:fc:54:27:ec:44:dc:e0:58:d4:51:31:23:0d:e7:
f8:81:fe:40:1b:b9:4d:6d:47:b3:8c:19:78:8d:2e:81:d6:3e:
a5:96:78:6a:a1:2e:0f:51:28:fc:9f:0e:5f:d5:57:b3:73:8a:
37:13:6c:c6:15:f0:41:ea:1d:40:27:b4:0b:c5:45:6c:85:6b:
a9:6b:d6:43:a6:5d:10:1f:6a:2f:d0:8f:61:a9:50:8f:d8:3a:
2b:4c:79:d3:d3:4b:87:40:0a:82:50:71:6b:72:db:48:f9:72:
3d:43:a1:7a:6a:57:14:40:56:86:bf:f6:b1:3e:ef:7f:d0:29:
58:fd:21:f2:cd:9c:ab:8c:87:78:ee:3a:08:31:24:b1:1a:2f:
7f:88:61:61:e2:ec:d3:78:d3:75:77:4d:f1:f1:5f:48:93:e2:
f7:f4:4a:1a:76:92:6c:5d:f1:b7:2d:36:4d:cc:32:89:79:a9:
c0:7f:7e:82:21:60:61:ef:69:b8:dd:5b:15:8c:4b:9a:3e:c1:
a5:47:f6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:41:49 2026 by rpki-client