This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier: xoYJOnh7vzLMdl8ZpxO1ctP45B0T0H4El6k0GRhydNw=
Subject key identifier: 8A:A6:D9:94:8B:3C:71:FB:4B:7A:D6:B6:D0:C4:18:9D:52:A7:32:4B
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer: /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial: 019BF619B4921392C6EABAE125C650EBDED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number: 0D4D
Signing time: Sun 25 Jan 2026 17:00:38 +0000
Manifest this update: Sun 25 Jan 2026 17:00:38 +0000
Manifest next update: Mon 26 Jan 2026 17:00:38 +0000
Files and hashes: 1: 5muXdgxc7_VI2T7gYQWqDqZVqoQ.roa (hash: y9Iyt3XNKSksdZHulslFbBftCSwFeejTJNDE7+IraYA=)
2: HB8oWPORk_kBVM_NNnN5rsZSYMw.roa (hash: JUT9QoRq3kZDCee6PYhDNYcwmNxNElz71rJ3W7dPa54=)
3: kWM8lsFwe_wFxY0y-iFsflRsUJ8.roa (hash: xNuj3kW4sY8f//DAghPZs4zV41qytpxRleGwYrYpxck=)
4: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: pVaoZcqQZFcYV15jauNXXf2xRu+EQInW4oIjS8miybY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f6:19:b4:92:13:92:c6:ea:ba:e1:25:c6:50:eb:de:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Validity
Not Before: Jan 25 17:00:38 2026 GMT
Not After : Jan 26 17:00:38 2026 GMT
Subject: CN=8aa6d9948b3c71fb4b7ad6b6d0c4189d52a7324b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:48:aa:83:34:d1:48:29:22:c8:ad:e6:f9:52:
b5:12:cd:bc:53:52:2f:60:69:b2:67:35:31:ee:9f:
1d:45:4d:ed:44:3a:d5:da:c9:c6:36:a1:1c:ab:33:
62:ca:c7:f9:c0:3a:6d:58:4e:9b:13:d8:ed:94:60:
7b:05:0a:d1:97:63:bd:3c:54:09:cf:99:e6:ee:0c:
e7:7f:ee:05:29:dc:3b:c9:b1:04:97:5e:30:30:25:
8a:7e:f2:92:e6:47:5f:11:2c:60:ea:77:4d:cf:3e:
ad:7a:4a:62:92:76:bd:a0:45:8c:5b:43:67:68:aa:
c7:6c:90:0e:85:48:d0:96:5d:34:36:3f:04:2c:5c:
88:3c:c9:55:8b:36:f3:d0:8a:c4:33:df:ea:80:53:
dc:85:16:40:1e:f9:76:da:48:f5:0c:46:7e:20:ed:
fb:c8:4d:8b:37:e0:5f:6a:57:a6:cb:89:a8:3a:94:
a6:63:7e:09:c3:d2:c5:a7:14:07:a0:d0:b4:63:77:
42:9f:44:5b:79:b4:5a:90:cc:d2:f0:ce:9c:66:3f:
96:b3:d1:78:1e:57:3e:0e:80:5c:37:51:08:48:81:
73:21:e0:58:80:29:11:7b:cf:9a:b0:3a:b3:17:07:
6e:3e:71:4f:b5:2e:90:51:ad:b7:ea:5d:ae:0f:cf:
92:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A6:D9:94:8B:3C:71:FB:4B:7A:D6:B6:D0:C4:18:9D:52:A7:32:4B
X509v3 Authority Key Identifier:
keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:3c:a8:8d:ed:5a:52:54:f4:1f:44:e6:68:c4:8a:e9:10:18:
7a:4e:6f:3e:14:3d:26:3d:5a:ca:e4:54:f4:7a:22:a8:93:81:
4a:6c:7f:7f:d3:63:d7:25:7b:f8:73:f2:36:ec:73:18:e3:b7:
d8:64:dd:71:e2:57:3e:5d:8a:82:24:b3:ae:f0:7a:ff:64:fc:
f9:a2:61:a2:d1:7c:52:89:5b:20:92:5c:23:2e:3b:03:f3:3a:
6d:74:c6:e0:3a:55:ff:ee:a2:27:fb:e7:cd:e1:78:b5:53:34:
fa:67:df:5c:8f:c3:0e:26:40:c2:98:b1:4d:e8:24:b7:d4:ed:
40:19:47:58:7c:f3:d7:e6:3f:a5:c1:c3:ad:e0:12:95:a6:84:
58:d4:db:41:f6:51:88:e4:ee:f6:cc:2a:3a:72:e9:36:c2:00:
93:7d:f9:85:28:2e:e9:ab:91:8e:45:8a:e9:95:11:f1:5f:bc:
41:90:f8:09:57:1c:15:83:4b:54:ce:2e:ea:75:7e:08:02:23:
a0:05:84:ec:1c:05:2e:9e:ac:69:4a:67:f5:23:d6:04:60:26:
9e:57:41:65:32:3e:85:3e:ea:e7:5b:4c:5a:e5:48:47:d7:ad:
6e:1d:3f:1d:11:a0:b6:8e:1c:a1:4c:d2:e9:17:1b:16:ac:ca:
01:f9:1f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:19:30 2026 by rpki-client