This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
File: vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft (raw, json)
Hash identifier: qZ3q1xDv0vF10Daz+i8Tl6MjL00UPAzY0ClEHMMD0vY=
Subject key identifier: 8F:B1:73:B2:8C:08:44:EF:2C:40:0F:92:20:3D:7A:C9:4B:59:8E:B3
Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
Certificate issuer: /CN=bd60edf96266b7c0d43836c854ab472cb74db034
Certificate serial: 019BF5AC0FEF47646C7940546C52C0103EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
Manifest number: 01E9
Signing time: Sun 25 Jan 2026 15:00:52 +0000
Manifest this update: Sun 25 Jan 2026 15:00:52 +0000
Manifest next update: Mon 26 Jan 2026 15:00:52 +0000
Files and hashes: 1: 8HPlLJKGC0uGDXpjxVBwb6wa0qk.roa (hash: Ojh5/xBT32ZIv2cbh6f99Qcqv0JCaF6De9sA3ACbGs0=)
2: VK85rpozFq-WBREloOuqHfpQLVI.roa (hash: VLGfCYG/IdB8dymdqFgTGB3V6ioYoYPUTJ+uFq78shw=)
3: XyAp-ULJDGqQnYw4x0VOKO9WL4A.roa (hash: p7Y5UggA9XaPiUt8v09KTFjc/O7q3EmBodfSudOJ2G0=)
4: p-FRidV19Ral8HYCkTftp8ZGx_I.roa (hash: hshHmTn3wzmrRXENipR4Ti5XKN7QbdSwu9BQI5Ilgp0=)
5: vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl (hash: no0zW6+4c37TykII7uSTYNKPdzilt+yU4BQ7KQ4x6tU=)
6: wlWnFSIiYVvXp_mwjODRnhkY0UE.roa (hash: Uu3Z+8tn4NyyEWREHHOZxn7oBRlFx43GJ0VENqzt+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ac:0f:ef:47:64:6c:79:40:54:6c:52:c0:10:3e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034
Validity
Not Before: Jan 25 15:00:52 2026 GMT
Not After : Jan 26 15:00:52 2026 GMT
Subject: CN=8fb173b28c0844ef2c400f92203d7ac94b598eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:84:9b:4c:71:c1:b0:c4:53:ec:3c:3e:87:40:
23:c1:7c:17:70:57:b0:7e:b1:f6:0b:92:86:60:72:
25:bb:82:15:05:f3:55:21:09:24:87:d7:ca:4f:1e:
fd:47:96:71:8e:67:0e:f6:4c:8c:ac:10:41:18:8c:
10:29:15:e8:13:98:77:f6:81:82:81:d3:2d:a7:86:
0e:07:94:95:86:36:89:ac:b1:b5:6c:c0:12:ce:cd:
63:67:48:78:4a:12:e9:44:15:c1:22:76:75:1f:81:
88:d0:8d:eb:21:47:9c:7a:e0:00:60:b1:b6:41:a0:
ff:d6:91:44:1f:ab:17:91:19:b1:81:74:86:e3:9c:
95:f5:b9:18:37:f1:de:ef:ed:66:43:d2:04:f7:c7:
04:a8:0c:3b:30:57:84:7e:2e:96:f8:29:b6:2b:eb:
70:b6:f9:e9:ac:a1:5a:a7:b3:72:ef:0d:c8:2f:11:
8c:e3:47:05:05:0f:ac:b8:91:fc:b4:d3:22:78:50:
88:b2:bd:dc:6f:98:b5:fb:d9:8c:af:73:9e:da:78:
62:ec:36:3b:5a:d2:2f:43:f1:fa:4a:5a:fa:a2:62:
0e:ca:9f:cf:00:7d:d4:e3:3e:a1:d6:72:7e:31:18:
61:1f:cd:fd:b5:81:48:a4:21:01:61:f0:a2:e1:0f:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:73:B2:8C:08:44:EF:2C:40:0F:92:20:3D:7A:C9:4B:59:8E:B3
X509v3 Authority Key Identifier:
keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c8:4c:a4:4e:18:4f:dc:d4:34:8c:c3:cb:f1:99:94:91:87:
22:aa:e3:72:94:d3:98:3a:a6:cd:ad:db:13:fa:ca:bd:9f:ed:
48:3a:cb:ea:2f:8a:66:5c:de:cc:68:ee:d7:3f:08:94:5c:49:
8b:a8:2a:a2:6c:c8:44:2d:2f:50:8f:fa:19:36:2b:9d:77:8b:
5c:e5:5a:5a:16:e8:6b:25:03:ce:44:0d:77:59:ef:64:ae:3a:
78:80:30:6b:9b:71:07:e0:be:07:85:d3:51:87:31:78:13:e6:
2e:f0:0f:75:8a:1f:1f:1a:47:f7:a5:31:ab:8a:d8:eb:1b:6c:
b2:40:92:a6:15:2f:66:ba:5f:93:9c:05:c7:3b:90:50:8a:7c:
b8:cc:27:10:6d:c9:ad:de:36:6d:8a:12:93:2a:54:48:9f:c8:
37:e9:83:22:a8:f8:4e:96:55:9b:f6:eb:b8:4b:be:97:5f:36:
65:fa:1e:17:13:34:16:7e:70:54:87:88:a2:54:be:ae:44:34:
5b:a9:15:82:9f:71:66:ec:ea:be:98:b7:1a:91:d8:32:05:30:
cb:5e:b1:ab:04:c3:e7:1a:7a:87:f6:a8:36:67:4b:bc:9f:74:
f5:4a:77:1d:ae:36:89:18:18:a2:a7:9d:f6:7f:b0:3c:11:1a:
4b:36:1c:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1rA/vR2RseUBUbFLAED7cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjBlZGY5NjI2NmI3YzBkNDM4MzZjODU0YWI0NzJjYjc0
ZGIwMzQwHhcNMjYwMTI1MTUwMDUyWhcNMjYwMTI2MTUwMDUyWjAzMTEwLwYDVQQD
Eyg4ZmIxNzNiMjhjMDg0NGVmMmM0MDBmOTIyMDNkN2FjOTRiNTk4ZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4SbTHHBsMRT7Dw+h0AjwXwXcFew
frH2C5KGYHIlu4IVBfNVIQkkh9fKTx79R5ZxjmcO9kyMrBBBGIwQKRXoE5h39oGC
gdMtp4YOB5SVhjaJrLG1bMASzs1jZ0h4ShLpRBXBInZ1H4GI0I3rIUeceuAAYLG2
QaD/1pFEH6sXkRmxgXSG45yV9bkYN/He7+1mQ9IE98cEqAw7MFeEfi6W+Cm2K+tw
tvnprKFap7Ny7w3ILxGM40cFBQ+suJH8tNMieFCIsr3cb5i1+9mMr3Oe2nhi7DY7
WtIvQ/H6Slr6omIOyp/PAH3U4z6h1nJ+MRhhH839tYFIpCEBYfCi4Q9OKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+xc7KMCETvLEAPkiA9eslLWY6zMB8GA1UdIwQY
MBaAFL1g7fliZrfA1Dg2yFSrRyy3TbA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0Yzgt
NDJiYmYxYTZhNjViLzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9iNWQ1YmItMjNjNi00YjNkLTk0YzgtNDJiYmYxYTZhNjVi
LzEvdldEdC1XSm10OERVT0RiSVZLdEhMTGROc0RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL8hMpE4Y
T9zUNIzDy/GZlJGHIqrjcpTTmDqmza3bE/rKvZ/tSDrL6i+KZlzezGju1z8IlFxJ
i6gqomzIRC0vUI/6GTYrnXeLXOVaWhboayUDzkQNd1nvZK46eIAwa5txB+C+B4XT
UYcxeBPmLvAPdYofHxpH96Uxq4rY6xtsskCSphUvZrpfk5wFxzuQUIp8uMwnEG3J
rd42bYoSkypUSJ/IN+mDIqj4TpZVm/bruEu+l182ZfoeFxM0Fn5wVIeIolS+rkQ0
W6kVgp9xZuzqvpi3GpHYMgUwy16xqwTD5xp6h/aoNmdLvJ909Up3Ha42iRgYoqed
9n+wPBEaSzYc0w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:52:51 2026 by rpki-client