This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft File: vWCuPD0yPaOUps4F9rI9fPTdE0g.mft (raw, json) Hash identifier: kCv4kmQlcz8vnKr92PjJisLI30ClnPcEeDDgN4gnosw= Subject key identifier: 1A:29:E3:9C:27:24:29:61:E7:1E:1F:59:09:C8:B7:BA:AD:4A:FB:96 Authority key identifier: BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48 Certificate issuer: /CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348 Certificate serial: 019C420FA758DD8F182DB7353998A4E32081 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft Manifest number: 1207 Signing time: Mon 09 Feb 2026 11:00:47 +0000 Manifest this update: Mon 09 Feb 2026 11:00:47 +0000 Manifest next update: Tue 10 Feb 2026 11:00:47 +0000 Files and hashes: 1: vWCuPD0yPaOUps4F9rI9fPTdE0g.crl (hash: pP/Q+a6+WQO3FJhMpeQ4EMUsX2KBojwhVPdvvnbDSMU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:a7:58:dd:8f:18:2d:b7:35:39:98:a4:e3:20:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd60ae3c3d323da394a6ce05f6b23d7cf4dd1348 Validity Not Before: Feb 9 11:00:47 2026 GMT Not After : Feb 10 11:00:47 2026 GMT Subject: CN=1a29e39c27242961e71e1f5909c8b7baad4afb96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:76:64:3c:50:97:5f:0a:6c:54:09:d3:97:96: f1:05:36:f5:c1:dc:9f:22:73:4f:b5:2a:2d:85:00: 69:82:3d:e5:57:47:b4:67:7a:46:c2:11:d9:b8:f1: 2f:91:4f:3c:93:e3:13:5d:f5:7e:40:6e:ce:6c:9d: df:b7:6a:12:f6:ad:f1:18:7e:c7:e2:6c:05:34:ae: 31:46:af:bf:76:cc:25:c3:ca:b2:5d:a5:d4:76:c2: 12:2d:34:84:ac:15:6a:88:c6:0a:51:d6:b0:90:93: 43:a1:f9:77:a6:b4:95:35:ce:f5:83:2c:e6:fc:43: 1e:6e:17:3f:ba:f1:c5:fb:24:af:f9:45:02:af:b8: a2:98:0d:6c:d4:bf:59:49:e7:d1:ba:fa:f4:58:87: dd:b0:01:af:ee:99:03:d7:83:a1:0c:14:54:78:de: 29:cb:fa:08:32:68:f0:06:a0:38:8d:5a:dc:09:c7: 71:4b:3a:d0:c4:bb:0d:9e:54:ba:04:0f:17:16:47: 11:08:99:08:71:07:19:b9:05:0a:eb:f4:cb:d0:df: ce:53:a8:be:f5:a6:ac:8b:d1:27:cc:ce:3f:b5:89: a6:26:35:fe:be:14:44:ef:f1:bd:3b:c3:25:af:f4: e6:54:16:96:06:12:6f:ee:7a:04:7d:1c:07:21:10: df:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:29:E3:9C:27:24:29:61:E7:1E:1F:59:09:C8:B7:BA:AD:4A:FB:96 X509v3 Authority Key Identifier: keyid:BD:60:AE:3C:3D:32:3D:A3:94:A6:CE:05:F6:B2:3D:7C:F4:DD:13:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWCuPD0yPaOUps4F9rI9fPTdE0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6fc5cf-998b-4e3d-9dfa-1c3864a7c2de/1/vWCuPD0yPaOUps4F9rI9fPTdE0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:9a:ea:52:87:12:f0:a3:a1:9c:0f:b0:d6:8c:13:29:35:65: 2f:89:1e:a0:81:fd:15:99:6f:05:33:6d:35:42:33:aa:59:a8: f1:d2:23:5e:78:d9:e8:7c:f2:2c:c8:04:f1:cd:f3:78:64:34: 19:6e:69:63:44:cf:44:23:b4:28:b7:5b:f6:7e:ee:b5:3e:c0: 21:18:79:d0:92:ab:1f:3b:71:0c:f2:01:ad:3e:33:b1:30:27: d5:eb:79:7a:64:ce:c0:5e:59:db:bc:d3:26:51:4e:6d:51:90: 9c:ad:af:27:4e:f4:06:b3:70:46:e4:58:6a:0f:a0:c0:1e:4c: d3:d3:da:2c:2e:40:c3:b2:60:05:18:f3:50:af:cb:ee:dd:1a: 06:44:d3:e5:f1:42:5d:cf:4e:cd:02:e7:0b:9b:f3:cf:bf:b8: b7:96:42:57:80:05:fd:f7:0f:69:80:da:f0:a1:4e:b2:ba:f4: ea:81:4e:eb:ee:5a:60:13:d5:03:fc:9a:50:af:c2:c4:7f:2b: 9a:2a:52:fd:1e:94:64:cd:18:73:f3:67:96:35:0a:b7:42:d5: 6d:31:4b:ef:cd:21:15:f5:d3:3c:c4:f5:ec:09:9a:d3:d3:41: 20:18:34:56:c5:56:e5:6a:58:3d:14:b9:82:b3:43:68:a8:a0: 5b:a4:be:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6dY3Y8YLbc1OZik4yCBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNjBhZTNjM2QzMjNkYTM5NGE2Y2UwNWY2YjIzZDdjZjRk ZDEzNDgwHhcNMjYwMjA5MTEwMDQ3WhcNMjYwMjEwMTEwMDQ3WjAzMTEwLwYDVQQD EygxYTI5ZTM5YzI3MjQyOTYxZTcxZTFmNTkwOWM4YjdiYWFkNGFmYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33ZkPFCXXwpsVAnTl5bxBTb1wdyf InNPtSothQBpgj3lV0e0Z3pGwhHZuPEvkU88k+MTXfV+QG7ObJ3ft2oS9q3xGH7H 4mwFNK4xRq+/dswlw8qyXaXUdsISLTSErBVqiMYKUdawkJNDofl3prSVNc71gyzm /EMebhc/uvHF+ySv+UUCr7iimA1s1L9ZSefRuvr0WIfdsAGv7pkD14OhDBRUeN4p y/oIMmjwBqA4jVrcCcdxSzrQxLsNnlS6BA8XFkcRCJkIcQcZuQUK6/TL0N/OU6i+ 9aasi9EnzM4/tYmmJjX+vhRE7/G9O8Mlr/TmVBaWBhJv7noEfRwHIRDfZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBop45wnJClh5x4fWQnIt7qtSvuWMB8GA1UdIwQY MBaAFL1grjw9Mj2jlKbOBfayPXz03RNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdldDdVBEMHlQYU9VcHM0RjlySTlmUFRkRTBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82ZmM1Y2YtOTk4Yi00ZTNkLTlkZmEt MWMzODY0YTdjMmRlLzEvdldDdVBEMHlQYU9VcHM0RjlySTlmUFRkRTBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82ZmM1Y2YtOTk4Yi00ZTNkLTlkZmEtMWMzODY0YTdjMmRl LzEvdldDdVBEMHlQYU9VcHM0RjlySTlmUFRkRTBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJrqUocS 8KOhnA+w1owTKTVlL4keoIH9FZlvBTNtNUIzqlmo8dIjXnjZ6HzyLMgE8c3zeGQ0 GW5pY0TPRCO0KLdb9n7utT7AIRh50JKrHztxDPIBrT4zsTAn1et5emTOwF5Z27zT JlFObVGQnK2vJ070BrNwRuRYag+gwB5M09PaLC5Aw7JgBRjzUK/L7t0aBkTT5fFC Xc9OzQLnC5vzz7+4t5ZCV4AF/fcPaYDa8KFOsrr06oFO6+5aYBPVA/yaUK/CxH8r mipS/R6UZM0Yc/NnljUKt0LVbTFL780hFfXTPMT17Ama09NBIBg0VsVW5WpYPRS5 grNDaKigW6S+BA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:50 2026 by rpki-client