This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
File: vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft (raw, json)
Hash identifier: OwbZ/h0dV6HZ0NbwPnCRRfSbvsFyKKwrLjYa3K9L7Rs=
Subject key identifier: B9:F0:E2:96:E3:73:0A:A1:5B:04:09:73:44:85:4A:D3:FA:88:C4:9A
Authority key identifier: BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
Certificate issuer: /CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Certificate serial: 019BF5E39DD5004CEF3542147E5462E8D768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
Manifest number: 15C9
Signing time: Sun 25 Jan 2026 16:01:33 +0000
Manifest this update: Sun 25 Jan 2026 16:01:33 +0000
Manifest next update: Mon 26 Jan 2026 16:01:33 +0000
Files and hashes: 1: A6vGIJGT64W29On7fsToe2iuYDQ.roa (hash: 5PMjLRbqzWbIoujPeJodXLP99q/YBLitJphbcb/ssCI=)
2: DYzQZ3HML1kOQM74C8pKJfSz8O8.roa (hash: a+eEVaBY7KRUOOfQI2kBrcwN4nVpCqX6qQedal9y39E=)
3: fHpD3phpmM9OPHLUzwT3ZU_QOuQ.roa (hash: J0wWX6BA1Q1CBgRQ+yoAf2qxwucSG2RWCFw2KHZnWAQ=)
4: vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl (hash: dXxek+rsZ9qJqSiIh4x3Spl2jjw9ToWOyRciSroeR64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:21:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:e3:9d:d5:00:4c:ef:35:42:14:7e:54:62:e8:d7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb143996dfeff5f49cd2b09b941d0d5e578b3ff
Validity
Not Before: Jan 25 16:01:33 2026 GMT
Not After : Jan 26 16:01:33 2026 GMT
Subject: CN=b9f0e296e3730aa15b04097344854ad3fa88c49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:19:dc:69:d4:27:75:e7:8b:f1:db:3c:20:
e7:c4:27:10:ef:9b:d2:92:c1:80:16:b4:83:b6:13:
a2:f7:a2:07:7c:b1:42:88:07:7e:a2:75:f4:7d:b8:
b6:95:c1:2f:a8:ac:54:dc:c0:89:d8:9d:89:0d:c8:
61:41:d8:a8:e8:dc:80:83:ac:c9:de:d6:81:8b:52:
f7:ca:9f:b9:c6:50:19:54:0a:d9:d4:31:62:f8:12:
0e:16:f1:76:ad:82:17:2d:59:a9:1b:4f:79:69:0d:
8c:93:1c:2e:d4:1c:30:85:94:5a:8b:5a:af:bc:d3:
3f:ff:a8:8f:1b:e5:e0:06:b6:bd:0e:8e:38:45:f1:
ca:0d:84:07:af:3f:ce:90:3e:68:97:b1:ef:f9:ff:
48:04:74:5e:bb:df:e7:02:45:a3:41:60:e5:db:74:
2d:d8:e5:1d:42:3a:aa:2e:72:98:26:fc:a6:68:5f:
3d:20:45:40:c5:fe:7f:4c:b0:31:08:ef:1b:2d:b4:
bf:b6:f6:eb:f2:b1:e8:40:26:88:86:29:d9:5a:3b:
a2:e7:09:db:8f:b0:4c:e6:43:91:aa:1b:14:c7:41:
47:1a:4d:58:2f:f9:2a:c5:30:bc:07:75:0c:14:2e:
50:9a:85:f9:b4:a3:3c:40:42:a1:1c:cc:b5:94:43:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F0:E2:96:E3:73:0A:A1:5B:04:09:73:44:85:4A:D3:FA:88:C4:9A
X509v3 Authority Key Identifier:
keyid:BD:B1:43:99:6D:FE:FF:5F:49:CD:2B:09:B9:41:D0:D5:E5:78:B3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbFDmW3-_19JzSsJuUHQ1eV4s_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/fbd911-8d37-4e3e-9599-fc29caa5db7a/1/vbFDmW3-_19JzSsJuUHQ1eV4s_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2b:1d:b9:5f:8a:99:31:c0:3b:86:c8:86:6e:5b:93:9c:7a:
90:e6:2e:db:a2:e8:62:cb:73:3c:f2:ed:e8:56:13:cb:d1:2b:
1b:fe:e0:ba:9e:f9:42:f6:09:00:9f:9f:6c:7b:43:73:05:d2:
6b:50:c5:70:da:92:58:f9:46:e1:45:a4:19:76:53:72:dc:1c:
22:09:28:ac:87:ce:18:35:c0:82:71:99:94:cb:d2:32:f8:d9:
95:96:ef:57:3c:b9:25:99:33:9c:44:26:a6:50:4d:73:55:91:
15:0b:84:a8:90:d3:23:aa:8d:28:0c:2f:25:c3:51:e4:cd:7e:
bc:0a:33:3b:58:fe:b4:66:63:e2:92:c1:29:7a:62:4a:68:d1:
57:2a:d3:5b:39:53:5a:9f:60:a5:37:88:8e:02:2e:13:cb:05:
03:52:b3:a0:f5:b3:bc:9f:1f:dd:dd:1d:4b:25:2c:f4:61:91:
55:39:bf:dc:8e:61:44:6f:74:f8:8f:cd:80:36:48:f6:be:b9:
63:07:9b:6f:4c:96:f6:67:ae:10:89:d7:97:39:c2:99:d8:0e:
bd:62:73:08:5d:dc:6c:70:93:d8:07:2d:1c:84:b1:51:31:3c:
70:16:79:ca:fc:f6:aa:48:e9:eb:bd:ae:1f:c9:c2:63:8d:bb:
2d:84:c0:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1453VAEzvNUIUflRi6NdoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjE0Mzk5NmRmZWZmNWY0OWNkMmIwOWI5NDFkMGQ1ZTU3
OGIzZmYwHhcNMjYwMTI1MTYwMTMzWhcNMjYwMTI2MTYwMTMzWjAzMTEwLwYDVQQD
EyhiOWYwZTI5NmUzNzMwYWExNWIwNDA5NzM0NDg1NGFkM2ZhODhjNDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApq0Z3GnUJ3Xni/HbPCDnxCcQ75vS
ksGAFrSDthOi96IHfLFCiAd+onX0fbi2lcEvqKxU3MCJ2J2JDchhQdio6NyAg6zJ
3taBi1L3yp+5xlAZVArZ1DFi+BIOFvF2rYIXLVmpG095aQ2Mkxwu1BwwhZRai1qv
vNM//6iPG+XgBra9Do44RfHKDYQHrz/OkD5ol7Hv+f9IBHReu9/nAkWjQWDl23Qt
2OUdQjqqLnKYJvymaF89IEVAxf5/TLAxCO8bLbS/tvbr8rHoQCaIhinZWjui5wnb
j7BM5kORqhsUx0FHGk1YL/kqxTC8B3UMFC5QmoX5tKM8QEKhHMy1lENVHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnw4pbjcwqhWwQJc0SFStP6iMSaMB8GA1UdIwQY
MBaAFL2xQ5lt/v9fSc0rCblB0NXleLP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTkt
ZmMyOWNhYTVkYjdhLzEvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9mYmQ5MTEtOGQzNy00ZTNlLTk1OTktZmMyOWNhYTVkYjdh
LzEvdmJGRG1XMy1fMTlKelNzSnVVSFExZVY0c184LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApysduV+K
mTHAO4bIhm5bk5x6kOYu26LoYstzPPLt6FYTy9ErG/7gup75QvYJAJ+fbHtDcwXS
a1DFcNqSWPlG4UWkGXZTctwcIgkorIfOGDXAgnGZlMvSMvjZlZbvVzy5JZkznEQm
plBNc1WRFQuEqJDTI6qNKAwvJcNR5M1+vAozO1j+tGZj4pLBKXpiSmjRVyrTWzlT
Wp9gpTeIjgIuE8sFA1KzoPWzvJ8f3d0dSyUs9GGRVTm/3I5hRG90+I/NgDZI9r65
Ywebb0yW9meuEInXlznCmdgOvWJzCF3cbHCT2ActHISxUTE8cBZ5yvz2qkjp672u
H8nCY427LYTAEg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:30:57 2026 by rpki-client