This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json) Hash identifier: F3BeKX4lEAUNjs8pChTOaTdbpYdni+38RRiTrJFqyd0= Subject key identifier: 1D:30:77:80:17:5B:DD:F0:67:60:40:8E:48:3B:78:F8:44:9D:82:B2 Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49 Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149 Certificate serial: 019C42461234963712EBBD255627F4C3FDE8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 12:00:14 +0000 Manifest this update: Mon 09 Feb 2026 12:00:14 +0000 Manifest next update: Tue 10 Feb 2026 12:00:14 +0000 Files and hashes: 1: 440C9nJzfAwzFQHbbTSsKGKGkig.roa (hash: 9GaUDae42NdjzGOSW1+fUpuBNX675/CDIy2pT/BeZSI=) 2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: zskb42ZNQsJpnFtdRuXQUBTdeYT8ozJb5sE0Ghb5MXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:12:34:96:37:12:eb:bd:25:56:27:f4:c3:fd:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149 Validity Not Before: Feb 9 12:00:14 2026 GMT Not After : Feb 10 12:00:14 2026 GMT Subject: CN=1d307780175bddf06760408e483b78f8449d82b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1f:a9:7d:3b:ab:9e:7c:96:0a:33:0f:44:31: 68:f7:67:6b:12:e9:64:59:fb:66:c2:9f:aa:a9:73: 09:a8:b4:fd:ed:c2:54:37:cc:8a:98:c8:ef:5b:8b: 51:e2:68:ea:d5:27:d1:38:e8:a8:7b:d9:d0:ba:36: 74:7c:ab:7f:9c:40:3d:b7:a8:c1:14:e1:35:1a:de: c7:60:e5:4e:97:1a:03:79:30:91:5c:d4:45:66:bc: 73:79:d7:56:d6:4b:a9:d9:49:6a:c0:f3:1c:65:8e: c8:73:05:a2:cc:2e:83:51:9b:56:08:c3:76:ff:2a: b2:c7:d9:8d:73:12:d9:2b:95:ab:d7:a8:8d:06:19: 4a:7d:8a:98:21:c4:ca:e6:08:e0:e1:16:74:f9:93: 9f:3d:aa:cc:af:bb:f8:b8:16:86:f1:d9:2e:cc:e7: 52:eb:67:96:e3:b9:29:c0:4d:f9:cc:50:17:c4:93: 92:2c:f6:12:09:5c:d8:3f:eb:b9:b4:2d:11:8b:13: 1c:e5:5d:44:7e:0f:da:77:53:90:24:bd:e2:e4:9f: 87:5d:f9:85:e4:9d:29:a1:9d:3b:47:c4:5a:79:be: c4:90:53:14:56:dc:b3:c7:94:00:a3:6c:ee:03:78: 32:41:c5:20:08:b9:d3:7a:9f:cb:aa:cb:f9:ca:76: 30:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:30:77:80:17:5B:DD:F0:67:60:40:8E:48:3B:78:F8:44:9D:82:B2 X509v3 Authority Key Identifier: keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:df:0a:39:81:18:c9:17:65:32:aa:0b:70:0f:55:29:00:88: ab:12:72:da:c5:12:e1:3a:90:82:40:1d:96:59:c3:f9:5b:6e: 7b:7c:b3:6d:2f:09:ec:c1:6b:13:d0:71:e7:d1:ea:53:45:73: ef:46:8e:5f:7b:a2:a6:b8:40:02:3c:3d:9e:a0:75:bd:d9:ba: 43:eb:75:5a:ef:7d:28:dc:ec:38:43:84:60:d7:85:b7:42:bc: 03:62:b2:7e:a1:84:ec:48:cc:64:a3:8d:dc:e4:82:6b:be:3c: 00:72:f1:7a:35:36:df:f3:ca:85:21:c1:21:23:fc:e1:af:c8: 39:62:07:a3:7a:32:93:fe:63:e9:6c:82:3d:48:9a:67:8f:c2: 95:b1:f6:e2:d8:91:37:7e:a3:e8:b5:72:8e:ae:f6:32:8f:ab: ef:a2:11:0b:76:04:e3:12:91:45:28:33:31:15:ed:0b:43:59: fc:1e:f6:b5:f6:65:f3:5b:56:23:09:26:1c:db:66:c7:18:58: 82:e5:e3:56:91:b1:d6:e5:51:e1:56:12:9d:0d:e8:93:1f:13: 14:11:cc:44:5f:20:1a:2d:39:41:1e:27:88:38:38:39:3c:7d: 25:c0:52:30:b7:df:a1:52:15:1f:ec:6a:a8:ff:53:fc:59:cd: 61:35:3f:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRhI0ljcS670lVif0w/3oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNGI1MWIwYmFjNDVmYTIyNmJkMmRjZmYxMTczMGVkNDBl YzIxNDkwHhcNMjYwMjA5MTIwMDE0WhcNMjYwMjEwMTIwMDE0WjAzMTEwLwYDVQQD EygxZDMwNzc4MDE3NWJkZGYwNjc2MDQwOGU0ODNiNzhmODQ0OWQ4MmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx+pfTurnnyWCjMPRDFo92drEulk Wftmwp+qqXMJqLT97cJUN8yKmMjvW4tR4mjq1SfROOioe9nQujZ0fKt/nEA9t6jB FOE1Gt7HYOVOlxoDeTCRXNRFZrxzeddW1kup2UlqwPMcZY7IcwWizC6DUZtWCMN2 /yqyx9mNcxLZK5Wr16iNBhlKfYqYIcTK5gjg4RZ0+ZOfParMr7v4uBaG8dkuzOdS 62eW47kpwE35zFAXxJOSLPYSCVzYP+u5tC0RixMc5V1Efg/ad1OQJL3i5J+HXfmF 5J0poZ07R8Raeb7EkFMUVtyzx5QAo2zuA3gyQcUgCLnTep/Lqsv5ynYwwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0wd4AXW93wZ2BAjkg7ePhEnYKyMB8GA1UdIwQY MBaAFL9LUbC6xF+iJr0tz/EXMO1A7CFJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2Et ZTQzNTIzOTgzNzkzLzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9kZWIwNjQtYTkyMi00NmE2LTg2Y2EtZTQzNTIzOTgzNzkz LzEvdjB0UnNMckVYNkltdlMzUDhSY3c3VURzSVVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcN8KOYEY yRdlMqoLcA9VKQCIqxJy2sUS4TqQgkAdllnD+Vtue3yzbS8J7MFrE9Bx59HqU0Vz 70aOX3uiprhAAjw9nqB1vdm6Q+t1Wu99KNzsOEOEYNeFt0K8A2KyfqGE7EjMZKON 3OSCa748AHLxejU23/PKhSHBISP84a/IOWIHo3oyk/5j6WyCPUiaZ4/ClbH24tiR N36j6LVyjq72Mo+r76IRC3YE4xKRRSgzMRXtC0NZ/B72tfZl81tWIwkmHNtmxxhY guXjVpGx1uVR4VYSnQ3okx8TFBHMRF8gGi05QR4niDg4OTx9JcBSMLffoVIVH+xq qP9T/FnNYTU/YA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:29 2026 by rpki-client