This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: tU7gFMnXu5r0w0/L5w5bjzP2wzusy+XgdZ7Ye0UmtNU=
Subject key identifier: B9:78:E5:32:F4:55:6E:C1:92:3C:FF:C6:2A:FD:D7:07:3E:68:F8:07
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 019BF53EC10EC659F37F6F538112EABDDE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 17EC
Signing time: Sun 25 Jan 2026 13:01:29 +0000
Manifest this update: Sun 25 Jan 2026 13:01:29 +0000
Manifest next update: Mon 26 Jan 2026 13:01:29 +0000
Files and hashes: 1: ZGekjXEzpu_RZ-7_vyg6Eo2ZkNk.roa (hash: g9zJSRkWxGZifxxDK0NFw2MI+0xI5nvgLjURj1IFEFw=)
2: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: NPDUNGIjfYIf3brUgAYVXMXK6FUZKG4DXzrRpoFN53k=)
3: xj3KIjGGQeE9p2z5xDtR4kdM838.roa (hash: KadOdd0YIetDxyuEeROWrqZ3UbDrY1vHEUtLjmlaM0E=)
4: z6bCwLojIPVuxbTXw72sR-aZPSQ.roa (hash: jarPN7oKXyiEaRbhLltezQTSG2nKsHFs4sdkmV5yFgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f5:3e:c1:0e:c6:59:f3:7f:6f:53:81:12:ea:bd:de:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Jan 25 13:01:29 2026 GMT
Not After : Jan 26 13:01:29 2026 GMT
Subject: CN=b978e532f4556ec1923cffc62afdd7073e68f807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fd:7f:7d:35:77:f7:d3:e0:bf:54:59:2a:2b:
0e:d0:1d:ce:ee:15:2d:0c:cd:ca:68:c3:57:f7:93:
d4:d6:95:b4:39:7d:6e:2a:f4:e9:83:f6:8d:a1:70:
37:92:7d:76:3c:a5:bb:82:33:d4:a5:a9:9e:c3:4b:
84:e9:10:4a:41:73:90:f6:f6:ed:7c:ec:65:36:de:
e8:9c:e6:65:09:b0:3c:cc:7e:63:55:10:d3:48:e1:
cf:26:5b:2b:29:80:60:ba:c9:4b:c3:b5:3c:ac:74:
e0:bb:b3:fb:9a:d9:67:e0:94:08:93:cf:d0:f0:40:
f3:95:86:6e:63:e6:3a:a5:b4:14:d1:85:47:ad:78:
aa:a5:07:3b:22:25:3b:79:4f:d0:93:25:15:ad:aa:
c7:02:a7:c8:67:5a:82:57:f6:38:09:8d:6f:e4:49:
63:b1:99:ce:45:31:c5:90:a6:59:eb:e5:9c:e0:cc:
ae:d6:85:88:a5:fa:f0:aa:01:2c:42:31:be:6e:90:
a7:4b:b2:d4:ec:3c:2e:5a:24:06:f6:0c:5a:56:c9:
54:79:30:c8:9f:ba:b3:71:8c:0c:4b:59:af:75:56:
bc:f7:45:09:72:d4:4d:86:47:8a:1d:ce:85:04:6f:
3c:72:59:c5:79:2c:af:5b:ae:9d:ae:fd:94:ba:15:
ff:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:78:E5:32:F4:55:6E:C1:92:3C:FF:C6:2A:FD:D7:07:3E:68:F8:07
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:67:9d:0c:da:89:4c:d1:de:10:0b:0e:f2:5a:79:cb:dd:e7:
87:a8:46:61:e3:56:ec:fe:0b:0a:60:fb:eb:7b:98:db:95:8f:
7e:a2:e6:b9:be:b7:30:b9:b4:cb:67:83:f7:7b:70:fa:bc:17:
09:90:a7:de:18:0c:50:35:c7:16:fc:3c:bb:33:81:60:04:c0:
dc:51:8f:11:d4:28:f4:2c:91:4c:f4:64:e8:2e:4f:79:fa:a7:
0e:bb:00:a1:a2:54:14:45:6d:4c:0d:25:02:00:78:b4:f9:bc:
6c:30:83:09:ed:e4:2c:4c:6d:40:e4:34:11:df:90:1a:fc:17:
c7:5d:ae:9e:b2:73:e4:a3:b3:d5:54:f8:6f:e2:03:a7:0a:20:
e5:df:a6:b0:ee:e2:7a:66:59:73:9a:d1:b9:c6:ce:9d:ba:66:
62:7c:55:56:c2:9d:6a:df:2c:cb:83:3b:45:da:5b:de:b7:ba:
cb:62:e1:71:23:38:b7:04:05:15:d2:e6:7b:79:0c:4d:a2:15:
8b:17:2b:07:9f:64:19:11:20:ad:79:d5:e8:06:58:c4:7d:e3:
d2:eb:f5:be:57:2f:f3:8a:c7:9d:7d:f3:60:41:fa:d1:69:74:
81:8a:db:fd:3d:eb:54:b1:c1:82:60:18:80:6a:66:40:e6:62:
d1:0a:93:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:53:45 2026 by rpki-client