This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier: B1yNwFZkC05tT89Qk9j1BfGycPnRyOog1VyU77PDpls=
Subject key identifier: FA:E1:84:9B:BC:20:87:7D:C9:C2:BC:6A:50:F8:38:33:08:5D:28:87
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial: 019BF4634D79E5F9E0C5ED165FD13CA0E508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number: 1605
Signing time: Sun 25 Jan 2026 09:01:47 +0000
Manifest this update: Sun 25 Jan 2026 09:01:47 +0000
Manifest next update: Mon 26 Jan 2026 09:01:47 +0000
Files and hashes: 1: R-q6ieQ5ZRpyZAS3VuKsjP1lbqI.roa (hash: LE0wpmfemoMC71Up9yLLrAR45HiWA1m8U6namnoo6+E=)
2: RoC9yHrjkOJ0GiednXz9KzpBgEI.roa (hash: kugJughWaN4KyRcT9vU8DskQM03Ay2SChRmN27jdndQ=)
3: Uj9qErLJ7z3sRt5hNWIVbAoCTJU.roa (hash: XmHbyEYbwLMwHEMXeqgjX8MuDffCoDklGaGBFZdSn00=)
4: u_BnVwDhAa2ItOuzTxp9mi3OVGk.roa (hash: DT0/HarFisk4IStUU9LzkErJGL5WNt4QSQVHnd5C+vo=)
5: upv2bkah2kmcgwzii9vlsV1YYx0.roa (hash: DdoCoWJ4MAXwMUb9LrgBORU0OoZ8wqZEHBq3WjBn6lw=)
6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: WA+FtSx/B/Ebzl+H2Nag13hlaSZAWNz6Uhdjm4/1FU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:63:4d:79:e5:f9:e0:c5:ed:16:5f:d1:3c:a0:e5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Validity
Not Before: Jan 25 09:01:47 2026 GMT
Not After : Jan 26 09:01:47 2026 GMT
Subject: CN=fae1849bbc20877dc9c2bc6a50f83833085d2887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:53:a6:db:72:47:41:4f:96:5a:a7:b5:64:
e7:bc:d5:34:d2:10:a8:f1:8d:99:39:d3:6c:47:a1:
bf:9a:c4:ab:00:c3:d3:b8:66:2d:ff:e7:96:a1:d7:
81:a7:aa:b9:55:a9:7f:43:ba:4c:55:05:25:31:cf:
43:77:b9:43:b4:80:66:25:09:eb:df:7a:74:dc:1d:
46:eb:41:a7:08:70:99:da:9d:92:6a:92:6d:d9:77:
e1:e9:d6:d6:61:23:71:dc:d5:0f:f2:d1:da:fb:71:
92:ae:1f:ab:ba:04:00:63:da:48:f5:b7:35:77:ba:
c6:44:f4:50:ba:4e:a2:38:57:a9:c7:b4:7b:cd:cf:
e9:45:cc:62:80:fd:3b:11:6d:38:67:af:80:3e:80:
3b:31:d6:1e:59:96:25:a1:4a:c7:45:b7:4a:a3:78:
c6:70:a6:72:d3:3c:bf:b6:49:02:d3:50:e7:b4:49:
14:f4:07:0e:36:04:0e:f6:a2:7d:cb:7a:f3:62:70:
c9:93:ad:d3:ff:51:51:9e:63:a5:b9:64:76:dd:71:
77:7f:6d:22:57:d8:d7:fa:fc:81:68:dd:c4:ef:ec:
1b:e0:ea:ef:4b:88:9e:ef:45:68:45:bf:7d:3d:f0:
5c:a8:e2:84:bf:9a:7a:9b:0b:e5:0b:1a:89:be:e8:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E1:84:9B:BC:20:87:7D:C9:C2:BC:6A:50:F8:38:33:08:5D:28:87
X509v3 Authority Key Identifier:
keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:33:07:ca:15:5c:ce:89:63:be:3a:00:2b:9d:dc:af:c6:01:
c7:29:c5:29:b0:11:80:c0:ba:f6:fa:b3:6a:90:37:90:bd:62:
ca:be:48:46:22:00:dd:81:ff:18:1c:bd:c7:df:e5:fb:91:cf:
ab:ce:7a:f6:fb:73:f1:07:a7:24:91:bd:ce:35:e6:ec:ba:c4:
36:d8:d8:0a:62:6e:39:51:99:23:bd:9d:b0:4a:9c:b0:a3:46:
1b:3a:44:f1:df:09:5a:e0:16:9e:11:dd:fb:0b:03:46:5b:04:
89:de:61:a4:98:dd:b5:fe:44:16:e0:84:a9:92:5b:0e:ee:11:
68:76:e3:33:a8:7b:86:2e:7b:c6:64:20:1a:74:cb:27:9b:82:
b2:91:4b:21:e8:91:1c:93:7e:49:e0:39:6b:d2:ba:b5:c6:8e:
95:fb:55:4b:97:b9:0f:c7:a3:20:e4:e0:1b:8d:fc:af:27:1b:
58:46:f1:ee:62:22:2b:55:d8:37:ab:c2:89:02:6a:5f:0a:54:
23:b1:81:5a:b3:3a:b5:95:ac:87:77:8c:4f:70:03:a7:57:2d:
bb:97:7b:86:7e:d7:12:4d:0e:02:b9:a3:e1:03:0b:5c:5c:6b:
12:6d:ff:82:af:d7:21:c3:00:27:fc:9e:ae:c8:36:79:5b:99:
5e:8b:d8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:22 2026 by rpki-client