This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File: Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier: lEsLmzT7wKCUIB/XsqaLcMoYdauJcq4QchaZyFa+Hls=
Subject key identifier: 31:2E:F4:2C:71:E1:EE:02:A3:15:B0:A6:6B:C0:9A:17:F1:7F:A5:83
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer: /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial: 019BF2E1D2CCBC5A9EF91528920ADB775F69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number: 0DC6
Signing time: Sun 25 Jan 2026 02:00:44 +0000
Manifest this update: Sun 25 Jan 2026 02:00:44 +0000
Manifest next update: Mon 26 Jan 2026 02:00:44 +0000
Files and hashes: 1: 0ZgQJqVgdfnRZDVgpPvaD-Dzv6E.roa (hash: r5fe+/Due4NZC1alMzrb0UAbeRWncZoeXVNrq7sfX6I=)
2: 6V0B2XbUiwZg1uwyso1jKVGrbd0.roa (hash: EhVsz4uU5vPtA18PjB+zS+ctkDe0JVsTRno6/EDARaw=)
3: GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa (hash: B73L31CSXnj3RW8bntsMgtTsreruLzDFUsANn6DFMPQ=)
4: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: FMWfcdqQ8J5tAhxt+31IExFWnmNNS9PNR/FziaQTZRs=)
5: XR8VM1EvNL7sWYYKJOlMIsJdia0.roa (hash: fBss7mgIT+jvqqxAE/g6H97kqC0eCcZI1+zi2IjDIjw=)
6: kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa (hash: Lh3WoxdQyHUINKZzWX43jjRHwq3dN4GxIBUo7levdrc=)
7: nMKIJnqj3oR3yZ-S33_tCuj09H8.roa (hash: Rm4zRm/OXMsW0P+MyrvP+GDQwYIX3dgTuHJhNyB3VN8=)
8: zd2DmvZ3rZnlw6hBIE9iR45lGwY.roa (hash: 37RUfr7BG9hoMLliPRbGltA78nwXlAxk08QWkE0P3T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Jan 2026 22:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f2:e1:d2:cc:bc:5a:9e:f9:15:28:92:0a:db:77:5f:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Validity
Not Before: Jan 25 02:00:44 2026 GMT
Not After : Jan 26 02:00:44 2026 GMT
Subject: CN=312ef42c71e1ee02a315b0a66bc09a17f17fa583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:39:87:95:a9:8b:0f:7b:c3:3b:09:31:f8:
74:1d:ce:92:0e:cf:ba:35:9c:90:bf:e5:e4:19:0f:
63:2d:ed:58:20:2c:24:a0:2d:5f:e5:16:db:99:bb:
f9:8f:ae:02:41:16:99:d6:49:b0:5b:47:2b:0b:b9:
98:b9:c5:e0:4e:cd:46:fa:1e:92:a0:b1:50:0f:7e:
8d:27:7d:72:c1:58:e4:2a:ca:fa:5d:2a:f5:8b:75:
e4:c3:1b:7f:90:ad:04:35:fc:c8:53:67:39:ca:b9:
92:0b:3d:fd:71:20:74:17:3e:e6:ff:d8:99:c2:13:
ae:f1:bd:05:39:57:92:6f:b7:dc:32:c1:60:64:40:
f4:bb:3d:20:e8:65:d3:0f:54:71:50:f5:8f:6c:c3:
ff:6d:ff:af:e1:76:ea:33:51:e6:fc:b2:7f:6e:57:
cb:cc:da:ec:10:50:19:7f:18:9c:e3:9b:a5:bd:96:
f2:e5:b8:b1:ef:3a:11:bb:1c:9c:80:97:af:d9:ac:
0b:ee:97:44:f6:6b:d9:5c:ab:14:0e:20:af:df:1d:
e0:f2:d8:86:3c:85:92:75:35:ae:d5:99:76:0f:64:
4c:78:ff:a9:49:90:67:d1:e0:26:e8:c6:fe:ae:d9:
88:e1:6d:76:8a:2f:d6:7c:ae:b5:f3:87:59:08:e1:
02:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:2E:F4:2C:71:E1:EE:02:A3:15:B0:A6:6B:C0:9A:17:F1:7F:A5:83
X509v3 Authority Key Identifier:
keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:65:9e:a1:2b:ae:fa:f6:ea:bb:27:a9:25:67:5a:18:cd:fa:
48:dc:85:2d:96:21:9a:60:18:3d:94:ef:c6:c9:f7:25:51:b5:
d8:28:76:27:c4:db:00:36:c0:ee:5b:3d:a6:7a:6c:f5:0b:1f:
7f:92:86:fe:49:ff:64:19:c5:fe:9f:75:b5:ac:e4:c1:f9:bb:
81:ef:69:b7:9a:3c:5a:cf:3f:e0:05:66:09:f4:72:f6:38:bd:
61:4a:9a:43:2a:ce:ae:b9:4a:08:f4:bc:87:5a:66:03:22:98:
8f:0a:14:ca:17:07:2b:65:f7:01:e4:e9:fb:e8:e7:64:69:d9:
81:6c:9e:a9:20:c4:8c:b4:7b:22:49:c7:e7:f6:b0:dd:76:01:
5d:43:5b:1b:c5:df:22:9a:ce:da:62:6f:19:62:9d:86:99:25:
3f:58:72:0a:7d:4b:75:71:7b:e3:27:4c:c2:20:12:7b:2b:e5:
f5:d0:d7:14:e5:ae:9b:db:69:14:87:26:f7:41:bf:d8:21:bd:
6c:18:c1:36:36:68:ef:9f:ba:29:29:41:56:03:48:09:e5:a5:
26:06:80:be:9c:2e:9f:53:5e:6b:d1:a4:82:30:f3:76:92:cb:
15:4e:19:90:07:4d:ef:05:fe:4e:9c:97:10:93:7b:8b:e6:8a:
6a:23:4c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:42:43 2026 by rpki-client