This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
File: v9dqdFixnRZfMvDsM9cVaeX0_vk.mft (raw, json)
Hash identifier: duzURoqRgyFktCwGNDLF1O1uGocedRnqX3tjLnbJ/Ck=
Subject key identifier: 5F:41:8D:84:24:44:98:72:F4:FB:3C:E4:CA:7C:3D:CD:2B:C6:5F:23
Authority key identifier: BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
Certificate issuer: /CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Certificate serial: 019BF5ABF40B9B63E7B9F1E67D5A17C21D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
Manifest number: 074D
Signing time: Sun 25 Jan 2026 15:00:45 +0000
Manifest this update: Sun 25 Jan 2026 15:00:45 +0000
Manifest next update: Mon 26 Jan 2026 15:00:45 +0000
Files and hashes: 1: CdSBrOUKTuPZdHo1rhDRbIWCZVk.roa (hash: vomX7/L5tiX3Xm3yDlRhzTvRbnk/SDC+k2Z0lNB/FvE=)
2: v9dqdFixnRZfMvDsM9cVaeX0_vk.crl (hash: CkywutAA27nRii+mpU4cz1EZF0z0EydDqwFc6u9fHrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:ab:f4:0b:9b:63:e7:b9:f1:e6:7d:5a:17:c2:1d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd76a7458b19d165f32f0ec33d71569e5f4fef9
Validity
Not Before: Jan 25 15:00:45 2026 GMT
Not After : Jan 26 15:00:45 2026 GMT
Subject: CN=5f418d8424449872f4fb3ce4ca7c3dcd2bc65f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4b:c6:b9:57:41:9c:8f:dc:24:e2:43:cb:ea:
0e:8e:c2:c1:51:9b:de:e8:5f:5b:e9:7c:00:cd:b0:
88:8e:76:06:48:c6:3f:1c:34:b7:a8:9d:ef:93:04:
a4:1e:df:1d:64:d4:5b:bb:c7:9f:2c:e4:25:12:f8:
12:e7:a6:01:80:39:02:53:a1:79:e7:ff:06:3b:64:
cf:04:9b:1b:38:4a:21:8e:cd:4d:a8:e3:65:c1:7e:
e7:7c:05:65:6e:f7:3a:3d:4d:2a:8e:f9:ec:e7:b4:
78:91:b5:13:1e:d2:4c:d8:cb:e9:24:f6:2e:17:26:
ff:f7:24:31:1c:4e:77:51:96:b9:b6:89:aa:a9:ec:
e1:22:04:f7:93:c3:a3:51:19:1c:f3:31:86:0d:cf:
9d:21:98:a1:1c:e1:49:c0:2f:f9:c0:d1:4c:c4:94:
d7:a8:17:c0:c6:cf:18:3a:20:b3:e1:1a:0c:8b:50:
c7:25:06:2f:5f:95:35:41:cc:0a:6b:08:fd:d5:36:
75:7e:38:a4:21:0f:ad:05:32:cb:c6:40:77:19:54:
63:fa:fa:a5:50:f0:c7:7e:90:7c:3d:51:b4:0e:16:
d7:f8:5a:0e:d9:6b:42:da:98:c6:b4:41:5d:2c:5b:
09:bf:8d:86:90:e1:62:6a:7d:3a:65:51:ee:0a:cf:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:41:8D:84:24:44:98:72:F4:FB:3C:E4:CA:7C:3D:CD:2B:C6:5F:23
X509v3 Authority Key Identifier:
keyid:BF:D7:6A:74:58:B1:9D:16:5F:32:F0:EC:33:D7:15:69:E5:F4:FE:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9dqdFixnRZfMvDsM9cVaeX0_vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b5c810-9109-4729-b41d-b491f5b39ef2/1/v9dqdFixnRZfMvDsM9cVaeX0_vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:45:66:4c:34:4f:c6:14:eb:72:71:7a:d8:bb:08:f6:03:b8:
bc:06:dd:e0:9d:fb:14:90:f0:fa:04:47:20:65:0c:09:fe:de:
38:d0:31:73:4c:7b:d2:b2:31:37:ae:7c:0d:90:64:42:e2:90:
aa:c5:3d:f3:12:ff:4d:6f:3e:e0:2e:30:3d:00:db:09:2d:73:
b8:5f:26:79:34:67:6e:23:66:25:68:ee:68:1f:c4:52:d7:38:
42:5e:97:e9:7e:6d:7e:3e:cb:4f:4a:5b:91:39:f7:92:c7:46:
25:b3:b7:01:d7:92:83:e9:c6:5e:0a:1e:0e:c9:00:3c:c9:51:
5e:a8:3d:46:2e:3b:05:9f:03:89:f6:02:1e:ed:6e:d0:92:9e:
50:3e:4c:fc:07:17:3a:8b:6b:7b:56:83:f9:c3:9e:44:4c:a2:
e9:15:ff:31:e0:e0:f5:7b:fa:99:a0:bb:62:2f:87:a6:eb:9c:
07:e4:40:d9:dd:63:41:bd:e7:cc:dd:2c:a0:3b:f6:98:ec:fb:
69:77:29:71:77:7f:5e:4c:ed:20:39:de:43:fa:69:42:0b:ce:
9d:b2:d1:f7:dd:d3:ed:83:bf:75:b4:86:40:c7:27:1e:8a:00:
c3:94:ef:f1:04:e8:b6:0e:65:6f:e2:3b:28:0b:c4:bd:71:4b:
6f:95:bd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:52:53 2026 by rpki-client