This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
File: VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft (raw, json)
Hash identifier: qvbANNeFYdcmMRn0BaNh012sA3WNyHOv9ow9YL1TR8M=
Subject key identifier: 3C:48:99:7E:5C:AF:58:C9:9E:8B:30:FB:BD:8F:62:65:23:2C:AD:F3
Authority key identifier: 56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
Certificate issuer: /CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Certificate serial: 019BF2AAC955B6222F2D09551951DC54234D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
Manifest number: 1443
Signing time: Sun 25 Jan 2026 01:00:37 +0000
Manifest this update: Sun 25 Jan 2026 01:00:37 +0000
Manifest next update: Mon 26 Jan 2026 01:00:37 +0000
Files and hashes: 1: BngoaXPmBES0lcWptUUTkZigcEg.roa (hash: Qe0QVZ+QGm2n+wH6gehbJlOWTxMGZjX9oLD1ObVldNI=)
2: VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl (hash: 5GVGkprBkNZbcPetmFIyWdg8BHnKRsvODk1MTfwn7nU=)
3: xcw2R2YD0BpUNlrolf3aKOVApLA.roa (hash: 2wiyEKSnDgQYW+1aN/U9IvVMDBKDQ1GzIsfrU/OlUSg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:aa:c9:55:b6:22:2f:2d:09:55:19:51:dc:54:23:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=564013e3464c16cd8589b05202fb0f0c5910dca3
Validity
Not Before: Jan 25 01:00:37 2026 GMT
Not After : Jan 26 01:00:37 2026 GMT
Subject: CN=3c48997e5caf58c99e8b30fbbd8f6265232cadf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ff:de:2d:be:ae:8e:c0:45:c2:f2:ae:2d:ad:
28:7f:0c:a6:83:f4:d8:cb:50:5a:cd:59:d0:0e:5b:
f3:b9:fe:61:0e:25:ef:8e:b7:00:89:bd:f4:d3:a3:
c7:9f:9a:51:23:0e:be:46:1c:ad:04:f7:2f:49:55:
df:f0:78:43:42:a5:e7:17:25:05:eb:49:9b:b1:0f:
18:14:00:2d:37:80:cf:3e:6a:51:64:c8:99:94:64:
64:40:fb:cd:f5:cf:e9:e1:c8:7e:80:62:3c:ea:8d:
ad:f1:da:61:40:e6:86:2f:0f:83:1e:ef:3d:11:02:
50:60:d0:bb:4a:09:91:52:a4:b8:c8:0f:ff:f8:4d:
f1:4a:8d:64:03:e4:fa:66:c2:42:0a:01:f9:a1:8c:
35:bb:2b:33:37:59:49:02:de:55:c4:09:1e:d9:2e:
ee:ed:a4:d2:02:21:14:6d:93:c5:a1:ac:b1:6b:0f:
e6:ae:76:b2:04:97:3d:36:f2:6b:df:53:ac:0d:a9:
98:6a:91:a6:d7:35:14:4e:d4:33:d7:a4:4e:41:c7:
af:6f:08:47:ab:89:e5:ba:52:91:95:07:58:6f:21:
9a:9e:a2:ef:f6:f7:3b:e6:fb:50:b6:9b:c9:b9:f8:
80:8c:fa:73:91:4e:61:08:c2:3a:3f:af:56:44:29:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:48:99:7E:5C:AF:58:C9:9E:8B:30:FB:BD:8F:62:65:23:2C:AD:F3
X509v3 Authority Key Identifier:
keyid:56:40:13:E3:46:4C:16:CD:85:89:B0:52:02:FB:0F:0C:59:10:DC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkAT40ZMFs2FibBSAvsPDFkQ3KM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/98ee76-0e02-4ff5-91ed-8667a1010143/1/VkAT40ZMFs2FibBSAvsPDFkQ3KM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f6:36:0a:43:70:c6:4f:84:78:0e:7e:9d:d9:57:3a:1d:e1:
28:bb:25:4e:e0:b8:c2:58:d5:de:20:24:22:32:a5:15:b1:94:
5e:09:94:22:a5:d0:4f:88:40:d0:bc:43:f9:50:69:ab:15:2b:
ed:13:e1:d8:e1:b3:14:9c:b9:82:7b:bf:ce:e5:74:54:d7:71:
84:89:10:da:dc:2a:59:3d:2f:c3:e1:54:43:52:95:1b:7b:10:
d4:ee:47:1e:f5:f5:86:17:e4:84:8f:22:9b:01:ba:31:96:c9:
13:c8:fd:1a:17:21:28:93:60:88:aa:4c:a8:d0:b6:a5:34:29:
68:75:5c:51:83:9f:1b:35:9b:71:4c:3f:c3:36:79:0d:f2:b9:
3f:0d:13:79:85:06:72:ef:03:3e:2f:e1:0a:6d:0d:95:01:c4:
af:89:f0:31:a5:56:02:04:ea:d7:69:77:28:93:d4:7c:f1:ac:
a6:af:1d:4f:9e:ed:0e:8c:db:7a:40:99:d2:f3:95:40:aa:3b:
58:20:83:b1:bb:54:10:3d:08:9b:a9:04:b0:6f:3d:4f:52:80:
f8:50:f6:23:d5:35:a5:76:d0:5c:69:19:07:cb:a1:f9:58:61:
55:34:f6:ee:8e:9a:30:10:7c:9d:79:f3:2e:a8:61:3d:c7:aa:
16:93:60:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:59:40 2026 by rpki-client