This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft File: VFjdpvrZNtqJUgABqigr-syLguM.mft (raw, json) Hash identifier: DMtTzuYqCn7OrpNxGwP9A3jhIbRpAqqQXJp11AUBTpo= Subject key identifier: 3A:D9:2D:94:78:62:28:D7:3A:4C:B9:B5:72:52:35:7C:8C:BD:18:15 Authority key identifier: 54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3 Certificate issuer: /CN=5458dda6fad936da89520001aa282bfacc8b82e3 Certificate serial: 019C43224437BD0B5973277133B09B8EAFAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft Manifest number: 12F7 Signing time: Mon 09 Feb 2026 16:00:45 +0000 Manifest this update: Mon 09 Feb 2026 16:00:45 +0000 Manifest next update: Tue 10 Feb 2026 16:00:45 +0000 Files and hashes: 1: VFjdpvrZNtqJUgABqigr-syLguM.crl (hash: n9qZQvi6+THezl1szG705CyN1t4gq2SdUcKADYYjr7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:44:37:bd:0b:59:73:27:71:33:b0:9b:8e:af:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5458dda6fad936da89520001aa282bfacc8b82e3 Validity Not Before: Feb 9 16:00:45 2026 GMT Not After : Feb 10 16:00:45 2026 GMT Subject: CN=3ad92d94786228d73a4cb9b57252357c8cbd1815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:69:af:eb:c9:20:e0:89:43:3b:61:0b:f7:99: 8b:97:91:71:8d:37:c1:c0:d8:26:ae:2d:f7:e7:74: 0c:a4:08:96:d2:aa:11:0b:77:97:30:a4:75:37:98: 80:07:8e:6d:2c:f2:6e:43:3b:05:80:51:cd:6a:dc: 50:e5:f0:1d:75:ff:24:c2:10:66:27:b2:94:e2:3b: fd:67:38:11:da:b5:f3:15:15:15:95:f7:07:f2:9b: d3:f9:a7:67:bc:22:cd:76:f3:e7:31:f2:cf:d9:8f: db:0e:4a:2a:f2:f9:15:02:46:fc:b0:6b:05:76:8c: 7a:1f:0d:08:99:3d:9d:25:8d:24:d2:07:9e:f7:e7: d4:be:67:bd:cd:e0:72:9b:e0:4e:a1:ab:9c:ac:09: 89:bb:61:86:d3:83:70:64:21:cd:fd:cb:94:16:a4: c0:24:45:e8:df:5f:a5:1e:36:0c:6b:d0:88:45:c0: 1a:ac:a8:d8:60:3a:2f:aa:a1:aa:86:3f:74:96:79: ad:0e:11:8e:31:9a:8f:2a:dc:d3:db:34:22:c5:de: d8:99:c7:0f:be:05:b8:48:b2:a7:e2:b5:64:f6:8e: 15:a5:8d:32:9c:e8:bb:d4:47:c0:cc:6b:e5:25:3f: 0e:1f:7f:5f:09:85:a6:fc:06:4f:03:75:a1:b4:8c: 5a:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D9:2D:94:78:62:28:D7:3A:4C:B9:B5:72:52:35:7C:8C:BD:18:15 X509v3 Authority Key Identifier: keyid:54:58:DD:A6:FA:D9:36:DA:89:52:00:01:AA:28:2B:FA:CC:8B:82:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VFjdpvrZNtqJUgABqigr-syLguM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4781ea-0a32-43f9-9890-de97bcd40368/1/VFjdpvrZNtqJUgABqigr-syLguM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fc:3e:fe:ae:4e:17:d0:6d:11:38:e5:3e:22:91:f1:30:ba: 92:9a:4a:da:fd:8e:35:ad:22:3d:f7:2b:0d:9a:66:bc:14:10: 30:be:e9:61:8f:3a:fc:1f:c6:5d:c8:a1:e7:c3:87:0f:f6:6a: 7b:6a:77:d5:89:93:55:cf:cd:d4:ea:53:87:da:15:42:c6:93: 92:c2:ac:ea:17:30:82:e6:69:32:e8:60:42:93:8d:86:a5:37: 68:50:d8:3b:57:2e:6c:1c:25:06:33:a0:a4:fb:d9:98:13:7f: e8:a3:7b:39:12:7e:6d:67:97:a0:c6:8a:0e:f8:7f:0c:59:29: 75:cf:56:01:dc:a8:86:9a:75:aa:c3:d9:e2:27:ce:a5:d3:f3: af:f1:10:69:03:44:37:15:47:15:16:f6:0e:78:c6:92:5f:76: 4f:f4:b4:d6:0e:fb:07:d5:6f:ef:94:13:bd:0b:57:99:e1:91: 70:b5:09:07:69:37:65:4d:e0:c9:87:1f:ef:2e:93:b2:e7:24: ec:b9:fa:bf:eb:32:c8:d4:05:a7:8d:d8:b3:ff:df:9c:ef:06: fb:dc:c5:ec:f6:c8:e3:d7:17:59:a5:4c:36:08:6d:ba:08:84: 77:8c:d1:2a:99:30:c2:0f:9d:00:b0:5c:8b:4c:5c:94:42:bd: 7a:db:63:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIkQ3vQtZcydxM7Cbjq+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NThkZGE2ZmFkOTM2ZGE4OTUyMDAwMWFhMjgyYmZhY2M4 YjgyZTMwHhcNMjYwMjA5MTYwMDQ1WhcNMjYwMjEwMTYwMDQ1WjAzMTEwLwYDVQQD EygzYWQ5MmQ5NDc4NjIyOGQ3M2E0Y2I5YjU3MjUyMzU3YzhjYmQxODE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWmv68kg4IlDO2EL95mLl5FxjTfB wNgmri3353QMpAiW0qoRC3eXMKR1N5iAB45tLPJuQzsFgFHNatxQ5fAddf8kwhBm J7KU4jv9ZzgR2rXzFRUVlfcH8pvT+adnvCLNdvPnMfLP2Y/bDkoq8vkVAkb8sGsF dox6Hw0ImT2dJY0k0gee9+fUvme9zeBym+BOoaucrAmJu2GG04NwZCHN/cuUFqTA JEXo31+lHjYMa9CIRcAarKjYYDovqqGqhj90lnmtDhGOMZqPKtzT2zQixd7YmccP vgW4SLKn4rVk9o4VpY0ynOi71EfAzGvlJT8OH39fCYWm/AZPA3WhtIxadQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrZLZR4YijXOky5tXJSNXyMvRgVMB8GA1UdIwQY MBaAFFRY3ab62TbaiVIAAaooK/rMi4LjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkZqZHB2clpOdHFKVWdBQnFpZ3Itc3lMZ3VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC80NzgxZWEtMGEzMi00M2Y5LTk4OTAt ZGU5N2JjZDQwMzY4LzEvVkZqZHB2clpOdHFKVWdBQnFpZ3Itc3lMZ3VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC80NzgxZWEtMGEzMi00M2Y5LTk4OTAtZGU5N2JjZDQwMzY4 LzEvVkZqZHB2clpOdHFKVWdBQnFpZ3Itc3lMZ3VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/w+/q5O F9BtETjlPiKR8TC6kppK2v2ONa0iPfcrDZpmvBQQML7pYY86/B/GXcih58OHD/Zq e2p31YmTVc/N1OpTh9oVQsaTksKs6hcwguZpMuhgQpONhqU3aFDYO1cubBwlBjOg pPvZmBN/6KN7ORJ+bWeXoMaKDvh/DFkpdc9WAdyohpp1qsPZ4ifOpdPzr/EQaQNE NxVHFRb2DnjGkl92T/S01g77B9Vv75QTvQtXmeGRcLUJB2k3ZU3gyYcf7y6Tsuck 7Ln6v+syyNQFp43Ys//fnO8G+9zF7PbI49cXWaVMNghtugiEd4zRKpkwwg+dALBc i0xclEK9ettjvA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:44 2026 by rpki-client