This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File: vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier: 4vWicPxlp7FQnssucGoiBqS8zRvQJWj8c+k78PTKwAk=
Subject key identifier: DA:DC:2D:F4:E5:97:C3:D9:94:A9:2D:75:70:02:98:D1:A7:CA:B9:7A
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer: /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial: 019BF83F9CC803E33C80DB90DD80BD94F1B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number: 0404
Signing time: Mon 26 Jan 2026 03:01:17 +0000
Manifest this update: Mon 26 Jan 2026 03:01:17 +0000
Manifest next update: Tue 27 Jan 2026 03:01:17 +0000
Files and hashes: 1: T0yo1RTWcLkKjj9BCwI7fzMhqKs.roa (hash: q8a/g/tCJJ065beXU3o3AgznSWXuuLeSniWGL98Zjek=)
2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: 6rrC2Jy/Ue/ycfcl6012dlBO6qk9pt+GIF3S64oIrIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Jan 2026 03:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f8:3f:9c:c8:03:e3:3c:80:db:90:dd:80:bd:94:f1:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
Validity
Not Before: Jan 26 03:01:17 2026 GMT
Not After : Jan 27 03:01:17 2026 GMT
Subject: CN=dadc2df4e597c3d994a92d75700298d1a7cab97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:e9:f7:b8:1a:37:ba:90:bf:10:51:15:c7:
b9:6a:09:03:27:df:71:43:95:fa:45:a0:ad:17:04:
31:2b:8c:cd:f6:0b:0d:da:bb:1b:5d:07:9d:7c:bb:
a0:58:c5:4e:31:25:69:cf:93:1f:2f:60:29:bd:a8:
3f:8b:6e:d2:ba:89:39:13:b0:ae:00:fa:b3:dd:f0:
20:f7:e1:9d:1d:76:f7:4b:6d:da:8d:91:fe:c7:50:
89:b0:32:26:99:dc:46:68:f5:7a:46:97:f9:6c:7b:
e6:95:99:a4:7e:03:66:78:5a:ed:ff:f4:5f:65:75:
f7:5a:84:84:39:53:1a:8f:e4:7b:9a:60:d5:80:d6:
e2:cb:2e:84:75:70:d1:c4:2c:85:e4:41:03:2b:9a:
8d:11:f5:c9:4d:db:a7:1b:59:a2:25:45:70:fc:e3:
7d:d1:ee:cb:22:40:b4:03:19:06:71:3e:e0:ec:d0:
ac:c9:2e:38:0c:7d:0b:01:a7:6a:ac:dc:c2:5d:db:
d6:4d:ae:9a:3a:18:27:01:5c:df:97:d5:a3:54:d1:
1c:42:98:5d:f1:d7:8a:a0:91:dd:d0:28:17:4d:3e:
be:dd:88:71:f4:7f:83:b4:7a:1d:bc:dd:be:d2:d6:
b5:40:88:bb:c3:6f:b7:80:e9:be:ed:64:33:80:65:
b8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DC:2D:F4:E5:97:C3:D9:94:A9:2D:75:70:02:98:D1:A7:CA:B9:7A
X509v3 Authority Key Identifier:
keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:71:60:d0:94:94:af:61:de:ec:89:69:85:b9:c7:65:af:24:
8f:5b:13:1e:fc:5f:52:b4:c6:03:a8:fb:79:3b:90:d6:d5:82:
c2:31:a9:28:ef:32:94:ec:f2:aa:95:51:01:a2:8a:9c:23:64:
c5:e5:58:1b:f8:f1:5b:c8:86:bd:5c:7b:ab:78:f2:63:a0:9b:
8d:a7:44:a9:20:d5:a9:dc:52:bf:fd:ec:ff:f3:46:f4:e6:1b:
5c:95:d4:8a:c6:32:67:55:1c:02:5e:f8:61:16:de:ea:29:b3:
34:82:4d:57:d0:c1:35:01:ad:06:42:37:de:ad:86:cf:21:fd:
a3:3b:0b:85:fa:11:2b:9d:8f:7d:5e:cf:86:5a:24:46:64:5c:
e8:46:79:ef:14:3b:78:46:b6:ec:4a:2c:b2:7f:93:f4:c2:ae:
90:dd:1f:8d:1d:21:28:9d:7a:0c:d3:cf:a6:ae:88:64:f4:e7:
03:78:36:63:75:de:c4:2a:70:ef:ad:e8:70:34:7b:99:ad:c6:
e9:3c:74:22:39:97:0e:8e:86:8c:07:1c:06:87:f6:67:1f:cf:
bc:ee:1c:6d:1d:35:37:c3:76:4d:f1:08:0c:7b:00:c4:46:99:
c7:2c:8d:b1:45:79:24:54:0e:d2:ed:94:fa:2a:1f:4d:4a:71:
fc:f8:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:36:04 2026 by rpki-client