This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json) Hash identifier: G5eItRk26T7CYC/Ao1tN9lCMPuSnoA26KJlngGtrbtE= Subject key identifier: 22:AA:19:9E:E7:ED:A3:38:08:77:7C:F9:84:31:B8:82:8A:1C:3A:0B Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df Certificate serial: 019C40FD628698DCD14319E1871192C5DA9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 06:01:13 +0000 Manifest this update: Mon 09 Feb 2026 06:01:13 +0000 Manifest next update: Tue 10 Feb 2026 06:01:13 +0000 Files and hashes: 1: 6ly5xS7Crn95qS-sabxmTiXk0Gw.roa (hash: orel+0qepeeJDJ5TDLnEm1CeQiuPhxAXOKIcf81qcUQ=) 2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: mOq27JoZWbCa/o60ihjjm2XjmmwApMcSlwEFJj+8AxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:62:86:98:dc:d1:43:19:e1:87:11:92:c5:da:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df Validity Not Before: Feb 9 06:01:13 2026 GMT Not After : Feb 10 06:01:13 2026 GMT Subject: CN=22aa199ee7eda33808777cf98431b8828a1c3a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2e:01:c0:30:08:cf:bb:ea:ee:7e:d9:87:6c: 3c:80:d4:ac:b2:df:bc:17:cd:70:07:c0:36:85:1d: 51:46:87:a9:da:31:82:89:e8:61:68:0a:82:71:5b: de:ec:69:ad:41:6b:14:36:d3:ed:de:9b:08:b3:0e: 72:6a:44:5b:0d:26:d0:36:30:cb:a4:a1:ba:58:b4: d0:1a:75:3a:fe:d2:df:bd:3d:74:74:0c:13:35:07: 6a:55:03:ab:a4:bb:6f:33:01:49:69:0c:fa:d0:a3: 39:e2:e0:21:f3:d8:b9:e5:d2:5e:ac:90:b0:8e:1c: 25:3e:c4:71:a4:fe:7f:4c:68:9d:f5:bc:5a:31:b8: 27:4a:24:b1:b3:b0:35:6c:93:5f:9a:5d:00:66:13: 2f:d4:81:9b:2e:ed:cc:88:ca:d2:7c:3d:7e:fa:13: c8:fd:95:73:74:de:a8:36:7a:18:1c:6f:20:80:a0: 18:e3:1e:99:30:2d:42:a0:e8:07:3a:9c:65:25:2d: 89:39:8d:b7:5e:75:b6:17:71:84:56:51:6a:1e:82: 82:a0:9a:bd:cb:b2:d3:e9:41:a0:75:67:3a:5f:82: 78:8f:06:b0:3a:42:f5:fe:46:41:c1:d8:c8:6c:59: 8b:fb:3a:b0:ca:46:5f:d1:4a:1d:9c:f2:36:cd:a4: ec:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AA:19:9E:E7:ED:A3:38:08:77:7C:F9:84:31:B8:82:8A:1C:3A:0B X509v3 Authority Key Identifier: keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:54:eb:c0:2b:dc:41:78:2c:22:4a:c6:75:2c:9f:73:8d:77: be:ad:6e:46:02:01:63:14:c7:35:86:25:da:b9:3e:c5:24:77: db:97:b1:51:17:ff:bf:c6:5b:e8:8b:2f:f6:71:bb:b0:2f:b3: d0:26:d3:8c:7e:24:d3:60:55:ec:8e:e7:15:9d:db:08:77:5c: 90:46:af:49:7d:37:27:83:6c:d8:32:22:cf:c4:13:2b:21:82: e3:dc:cd:67:a1:05:01:7d:58:c9:2b:81:c6:f1:90:80:4b:18: f9:68:15:1c:72:90:96:87:9c:dd:b6:5e:1f:54:6c:e1:df:a5: e5:54:31:62:f2:81:2d:db:fe:bc:73:bd:5a:3b:4c:bb:60:9e: 07:2e:24:68:2f:e0:b9:62:4d:5a:bb:cb:64:50:3e:db:84:9f: a7:21:7a:21:41:28:71:ac:f9:4c:10:dd:4a:cb:33:55:0c:85: 6a:04:08:a6:aa:34:1c:3c:39:13:50:ef:e8:5b:84:97:76:e9: 83:1c:0d:13:63:c2:6e:92:e1:aa:45:da:05:a5:0c:8e:d4:df: 08:13:69:8c:9f:17:7b:71:21:c3:fe:6b:f3:a8:73:fb:26:2a: 5d:2e:bb:ec:be:a1:ab:84:70:97:23:fb:bd:00:c1:06:af:5b: ce:ff:d0:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/WKGmNzRQxnhhxGSxdqfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZjlmMGIwOTQ3MzhjNTI4MmZiZjRiMzA2NzBlYzVmZGNi NTg5ZGYwHhcNMjYwMjA5MDYwMTEzWhcNMjYwMjEwMDYwMTEzWjAzMTEwLwYDVQQD EygyMmFhMTk5ZWU3ZWRhMzM4MDg3NzdjZjk4NDMxYjg4MjhhMWMzYTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i4BwDAIz7vq7n7Zh2w8gNSsst+8 F81wB8A2hR1RRoep2jGCiehhaAqCcVve7GmtQWsUNtPt3psIsw5yakRbDSbQNjDL pKG6WLTQGnU6/tLfvT10dAwTNQdqVQOrpLtvMwFJaQz60KM54uAh89i55dJerJCw jhwlPsRxpP5/TGid9bxaMbgnSiSxs7A1bJNfml0AZhMv1IGbLu3MiMrSfD1++hPI /ZVzdN6oNnoYHG8ggKAY4x6ZMC1CoOgHOpxlJS2JOY23XnW2F3GEVlFqHoKCoJq9 y7LT6UGgdWc6X4J4jwawOkL1/kZBwdjIbFmL+zqwykZf0UodnPI2zaTsXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKqGZ7n7aM4CHd8+YQxuIKKHDoLMB8GA1UdIwQY MBaAFLz58LCUc4xSgvv0swZw7F/ctYnfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZjE5ZjktODM5NS00MDg4LWFmMTct ZTVjYTY3YzExNTMzLzEvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZjE5ZjktODM5NS00MDg4LWFmMTctZTVjYTY3YzExNTMz LzEvdlBud3NKUnpqRktDLV9TekJuRHNYOXkxaWQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFTrwCvc QXgsIkrGdSyfc413vq1uRgIBYxTHNYYl2rk+xSR325exURf/v8Zb6Isv9nG7sC+z 0CbTjH4k02BV7I7nFZ3bCHdckEavSX03J4Ns2DIiz8QTKyGC49zNZ6EFAX1YySuB xvGQgEsY+WgVHHKQloec3bZeH1Rs4d+l5VQxYvKBLdv+vHO9WjtMu2CeBy4kaC/g uWJNWrvLZFA+24SfpyF6IUEocaz5TBDdSsszVQyFagQIpqo0HDw5E1Dv6FuEl3bp gxwNE2PCbpLhqkXaBaUMjtTfCBNpjJ8Xe3Ehw/5r86hz+yYqXS677L6hq4RwlyP7 vQDBBq9bzv/QxQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:46 2026 by rpki-client