This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
File: VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json)
Hash identifier: sucHsksxSH59143JNw8t1R63JyWRETHi/bYxjd9qRLk=
Subject key identifier: D7:06:62:32:28:E9:A1:5C:16:3F:EA:1B:2B:BB:35:EB:DF:B9:45:84
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Certificate issuer: /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial: 019BF3BDF4378BDCEF99B00E8E633916FFE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
Manifest number: 0163
Signing time: Sun 25 Jan 2026 06:01:10 +0000
Manifest this update: Sun 25 Jan 2026 06:01:10 +0000
Manifest next update: Mon 26 Jan 2026 06:01:10 +0000
Files and hashes: 1: 043Lbp27EDcUm-b86hgRfQTIMxA.roa (hash: kfaT7xOA8Vvohn0rBNh/7C5Pf0XuWkbtD5lrheMBCvE=)
2: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (hash: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ=)
3: 5P-WAPyoM2pTC2hv8LQETP2oWJA.roa (hash: lGDaoNO2e4pY4T1TCUo7lQoxNs1+eOCSqWSzAv+esrc=)
4: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=)
5: OGdZxTPmloNqGIAa-UfynkuV3EM.roa (hash: m/cAPkjPkOHWq6QUdY18VpClF9YEIKI7RmQsvt84toU=)
6: ONsl0GDt_Tfl3JT5iRQTyJYlb_4.roa (hash: zxeBlO2k2zpHRxnbUpE9cjH71458S251L8/4aRE1B34=)
7: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: FwvjTESKJKbsYHzmO+raQrjdQ2cAyDTsRNIkpgZPEqQ=)
8: hTjSrcovPq648FqPM_7hdgfN-EI.roa (hash: lYgMjkKMuEdbys29eJuErKr4659N+NA6qhwRfkiwEHE=)
9: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=)
10: ngjkfOBH-dxB0xiqqQKvL_WdtG0.roa (hash: 1zwPy7iZtuLHaNUBo4QmZO75vcSTlaybrWc7phI+i2w=)
11: pc7FeUz9KIrSklddvonBjkHIAwA.roa (hash: iago8NlkQes9mOaOwzsAtanDYi7v2oBjhliPUjEYlLE=)
12: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f3:bd:f4:37:8b:dc:ef:99:b0:0e:8e:63:39:16:ff:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Validity
Not Before: Jan 25 06:01:10 2026 GMT
Not After : Jan 26 06:01:10 2026 GMT
Subject: CN=d706623228e9a15c163fea1b2bbb35ebdfb94584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:0e:d7:e4:81:81:55:17:a4:88:b1:67:b6:
61:a7:77:61:3c:f0:ca:12:ec:1d:37:89:28:6b:0d:
1a:2c:23:af:f8:06:67:2a:07:ee:11:dc:33:6f:90:
f4:2a:03:85:9a:02:10:9b:57:bf:c2:d2:2a:88:3b:
76:78:17:34:5a:2d:ad:fd:e3:2b:42:54:63:66:d0:
99:c9:f1:62:0f:04:9a:12:24:68:da:69:35:9a:82:
8e:92:09:09:d8:bf:b3:9b:ef:7a:13:5e:d9:b8:5b:
48:cb:b5:16:c5:8d:70:20:a2:0e:61:49:0c:12:b7:
5b:2f:05:49:46:7a:5c:a8:c8:c9:17:23:8a:39:51:
52:9b:92:ef:33:fe:d1:e9:c5:7f:b1:7e:2b:ee:97:
91:07:c5:aa:ad:22:57:9c:45:3a:b3:82:89:a4:5c:
9c:f7:8b:d1:d1:98:a8:c2:5b:4a:57:9d:71:40:03:
ec:f6:09:7a:1e:36:4e:1f:a6:63:f4:a1:d3:31:a3:
bd:78:b3:21:9b:0f:26:87:a7:ad:ce:25:5e:ba:78:
ad:73:14:43:bb:af:4d:1c:48:5c:ff:33:4a:b7:e0:
c7:f9:04:04:32:ab:e8:1c:22:2b:a8:fe:d5:f3:89:
01:a2:91:48:d6:0a:9c:e0:12:4c:0a:1b:d0:54:06:
bc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:06:62:32:28:E9:A1:5C:16:3F:EA:1B:2B:BB:35:EB:DF:B9:45:84
X509v3 Authority Key Identifier:
keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:5e:72:21:52:90:00:f2:f1:be:23:9f:cb:e1:a0:55:ac:71:
65:c6:f5:08:cf:5d:4e:a2:f1:ef:48:ea:52:88:a1:bd:ee:5a:
30:a6:88:94:f1:55:09:3f:8f:0d:a1:90:6c:65:1d:dd:36:13:
11:cf:99:66:6d:95:cd:80:68:0b:29:e7:de:09:bf:49:5e:9a:
79:d1:66:80:ff:10:8e:8f:06:74:79:48:52:e6:58:9d:f0:ca:
f0:27:38:89:05:6e:e2:f7:37:e4:23:fc:95:49:d7:6c:aa:ac:
f9:c8:f7:53:e2:a4:6a:3f:bc:90:87:26:2c:ad:21:05:c0:ad:
c4:75:3e:9d:c6:a2:97:b3:01:8d:b4:f5:b1:e0:dd:ce:2a:5a:
d2:53:31:a1:57:27:b1:cb:cd:d8:50:82:99:fb:20:39:41:17:
99:3a:46:1a:8b:19:8d:dc:0b:40:65:19:f6:4d:2a:14:d8:d2:
e6:78:b0:2e:51:1f:85:97:41:64:aa:76:60:4d:58:5a:a9:03:
9d:d4:d2:cb:9c:3b:71:d8:31:6d:4b:57:eb:d9:9f:ea:9b:ee:
1f:02:a2:a1:af:3b:ab:a2:fc:27:00:06:9c:17:00:39:1d:55:
47:0f:13:ea:85:99:cd:0b:f6:93:69:f2:23:e2:18:4f:85:83:
57:ab:95:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:01:21 2026 by rpki-client