This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft File: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft (raw, json) Hash identifier: 02Gl+ZQG23MXOETEdqIIgyepQwbSBzhz/KTrtckPsck= Subject key identifier: 1D:07:F3:4D:B9:AD:75:61:E7:F0:51:F3:CB:22:C8:59:C2:2C:AF:F1 Authority key identifier: 54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79 Certificate issuer: /CN=544d5a6c3919f51f8fdb95050c19c53ef849d079 Certificate serial: 019C41A1E38A427BA04D7B270FA97CCD252B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft Manifest number: 0F07 Signing time: Mon 09 Feb 2026 09:00:54 +0000 Manifest this update: Mon 09 Feb 2026 09:00:54 +0000 Manifest next update: Tue 10 Feb 2026 09:00:54 +0000 Files and hashes: 1: VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl (hash: +haz+UtuwmX9M3XLWU8ed/kj1rQOouOrgCGDNNwu2zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:e3:8a:42:7b:a0:4d:7b:27:0f:a9:7c:cd:25:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=544d5a6c3919f51f8fdb95050c19c53ef849d079 Validity Not Before: Feb 9 09:00:54 2026 GMT Not After : Feb 10 09:00:54 2026 GMT Subject: CN=1d07f34db9ad7561e7f051f3cb22c859c22caff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:00:11:2b:20:4e:16:9e:1d:16:1f:19:1d:9e: 5d:ec:0c:ba:d7:90:41:0b:54:31:4d:2f:b3:3e:4a: 2c:d3:a8:4b:cb:e2:86:16:57:4a:f6:50:53:8a:09: bd:c0:5a:0b:91:2a:41:75:cf:b8:a7:95:ac:2f:97: c7:ab:02:ff:f5:34:65:bd:f5:00:d4:d4:51:7b:8b: 1a:e2:6f:55:c0:82:af:92:0e:1a:9a:22:92:bc:90: ef:3e:c9:a3:e4:62:8a:ca:c2:3c:de:86:bf:ac:12: 86:b7:bd:6f:74:3b:ca:95:12:cf:15:8d:5f:3f:8e: 29:dc:52:10:14:9f:78:68:37:b3:82:6c:15:2c:c7: d7:b0:8f:4b:d1:47:63:43:3f:f3:17:98:3e:e6:bf: ca:55:42:8c:d7:16:fa:c4:4a:62:65:0d:e3:c4:02: 9a:06:84:1c:48:a3:00:39:ae:fc:0e:c7:0a:be:74: 43:0f:a8:c4:7f:d1:20:f9:ff:69:b1:56:7d:3f:4d: c2:d8:61:0c:75:20:63:c7:ad:70:fb:04:be:fc:cb: 51:a7:eb:10:7b:7a:af:6e:41:d3:3c:c3:59:40:10: 30:20:33:64:56:af:dd:fc:59:8d:8c:19:95:01:af: ac:bd:0e:aa:b0:ad:a3:00:7a:87:f4:22:d9:3f:bd: f3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:07:F3:4D:B9:AD:75:61:E7:F0:51:F3:CB:22:C8:59:C2:2C:AF:F1 X509v3 Authority Key Identifier: keyid:54:4D:5A:6C:39:19:F5:1F:8F:DB:95:05:0C:19:C5:3E:F8:49:D0:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/259cdc-86e2-44cb-908a-616e439fd00d/1/VE1abDkZ9R-P25UFDBnFPvhJ0Hk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d9:c5:3b:d9:5c:0f:d5:09:79:6b:50:9a:a2:a9:a7:e9:72: 79:cc:e6:5a:0b:2a:b6:05:e9:6d:5f:b7:ef:10:74:68:8a:52: 4e:d5:13:67:60:bb:23:1c:29:06:28:c0:a5:db:46:43:80:69: 5f:d5:88:c1:a1:cf:b4:54:2f:28:b8:49:ca:b9:3f:2b:47:9f: 65:e5:9c:c2:88:32:2c:63:5d:67:a0:01:c2:65:be:bd:18:e8: 56:fd:b1:b2:49:69:0c:d6:61:60:e7:9c:17:22:b4:78:70:c4: 53:c3:db:b0:03:18:b5:13:ed:37:c8:dc:f8:9e:91:3b:78:bd: 89:27:f4:61:c4:40:03:5c:75:21:40:8c:b0:65:fa:f9:3b:29: 2a:a6:fd:be:d1:ad:f1:fc:e4:76:d3:96:ec:68:4a:e1:f7:65: da:71:8e:0a:de:af:83:60:c1:61:aa:af:4c:66:5c:4b:0e:24: 36:49:ed:f1:89:03:b2:77:8a:36:10:94:8c:46:43:71:79:46: 25:91:2b:2a:29:dd:af:df:d8:a9:63:2a:5f:12:d6:fa:c0:8c: 97:ed:97:c5:44:cf:0f:a6:7e:fe:f7:93:b4:86:d5:6d:dc:44: 77:dc:d7:c6:9b:0a:fb:e3:42:61:a2:eb:da:b9:65:92:f2:24: 83:74:8a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoeOKQnugTXsnD6l8zSUrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NGQ1YTZjMzkxOWY1MWY4ZmRiOTUwNTBjMTljNTNlZjg0 OWQwNzkwHhcNMjYwMjA5MDkwMDU0WhcNMjYwMjEwMDkwMDU0WjAzMTEwLwYDVQQD EygxZDA3ZjM0ZGI5YWQ3NTYxZTdmMDUxZjNjYjIyYzg1OWMyMmNhZmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAARKyBOFp4dFh8ZHZ5d7Ay615BB C1QxTS+zPkos06hLy+KGFldK9lBTigm9wFoLkSpBdc+4p5WsL5fHqwL/9TRlvfUA 1NRRe4sa4m9VwIKvkg4amiKSvJDvPsmj5GKKysI83oa/rBKGt71vdDvKlRLPFY1f P44p3FIQFJ94aDezgmwVLMfXsI9L0UdjQz/zF5g+5r/KVUKM1xb6xEpiZQ3jxAKa BoQcSKMAOa78DscKvnRDD6jEf9Eg+f9psVZ9P03C2GEMdSBjx61w+wS+/MtRp+sQ e3qvbkHTPMNZQBAwIDNkVq/d/FmNjBmVAa+svQ6qsK2jAHqH9CLZP73zeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0H8025rXVh5/BR88siyFnCLK/xMB8GA1UdIwQY MBaAFFRNWmw5GfUfj9uVBQwZxT74SdB5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8yNTljZGMtODZlMi00NGNiLTkwOGEt NjE2ZTQzOWZkMDBkLzEvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8yNTljZGMtODZlMi00NGNiLTkwOGEtNjE2ZTQzOWZkMDBk LzEvVkUxYWJEa1o5Ui1QMjVVRkRCbkZQdmhKMEhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadnFO9lc D9UJeWtQmqKpp+lyeczmWgsqtgXpbV+37xB0aIpSTtUTZ2C7IxwpBijApdtGQ4Bp X9WIwaHPtFQvKLhJyrk/K0efZeWcwogyLGNdZ6ABwmW+vRjoVv2xsklpDNZhYOec FyK0eHDEU8PbsAMYtRPtN8jc+J6RO3i9iSf0YcRAA1x1IUCMsGX6+TspKqb9vtGt 8fzkdtOW7GhK4fdl2nGOCt6vg2DBYaqvTGZcSw4kNknt8YkDsneKNhCUjEZDcXlG JZErKindr9/YqWMqXxLW+sCMl+2XxUTPD6Z+/veTtIbVbdxEd9zXxpsK++NCYaLr 2rllkvIkg3SKfA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:34 2026 by rpki-client