This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft File: mVehWqmJPxyRW0SX6_kqijPV5Dk.mft (raw, json) Hash identifier: sO6qx5kW9kCX0MwNyMSwerH2xf0cYWRHD0Cy1QkkL6w= Subject key identifier: 4C:B0:59:8F:B2:B4:74:9B:5E:B3:9C:CE:4B:02:76:3C:65:BE:C7:65 Authority key identifier: 99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39 Certificate issuer: /CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439 Certificate serial: 019C42B41491768691F3866F8B3B31125602 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft Manifest number: 0C7A Signing time: Mon 09 Feb 2026 14:00:23 +0000 Manifest this update: Mon 09 Feb 2026 14:00:23 +0000 Manifest next update: Tue 10 Feb 2026 14:00:23 +0000 Files and hashes: 1: MB_fxyRovNDE1Ao_sqXvMCyvsHs.roa (hash: 1RlOpJPGUwPySnoc4bJ92X2BUeJ9PgaVyLOke+PwpWY=) 2: mVehWqmJPxyRW0SX6_kqijPV5Dk.crl (hash: ZK4c+223HC7+jvW3icawESj/THI45TGRfyoUiyoK6ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:14:91:76:86:91:f3:86:6f:8b:3b:31:12:56:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9957a15aa9893f1c915b4497ebf92a8a33d5e439 Validity Not Before: Feb 9 14:00:23 2026 GMT Not After : Feb 10 14:00:23 2026 GMT Subject: CN=4cb0598fb2b4749b5eb39cce4b02763c65bec765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:03:99:5f:40:76:68:b3:d0:c7:5f:4d:37:17: 86:48:ea:10:94:a5:41:fb:49:a9:f7:d2:93:f0:e3: 65:64:88:55:6a:d6:49:89:21:81:69:e5:c6:b7:d9: df:0f:96:0b:ab:98:fd:7b:cb:d2:b9:0a:52:70:45: b3:d1:35:33:b1:2f:5d:8f:d3:7b:37:72:e3:21:a9: e7:64:53:db:7e:c1:13:e7:63:1f:ee:d7:cf:8f:1e: ba:3b:ae:58:49:9f:93:b5:97:51:6c:83:2b:f9:b0: e0:c3:e6:bd:32:05:25:c3:70:20:fe:f3:fd:7a:48: ac:7e:8f:af:6d:c4:94:44:5d:e1:7c:cc:0f:27:4f: c0:d2:45:ff:65:3a:ec:d1:f4:ed:06:29:78:5c:e1: 05:fe:c5:4a:49:90:2b:61:c6:e1:78:e4:e8:f4:6a: 4f:fb:77:c1:82:3e:b9:1e:d5:73:77:9f:cf:14:e2: 3b:0b:72:91:10:23:94:6e:a0:e0:28:97:00:b5:5c: a7:f8:53:50:ed:43:5f:84:a1:89:b5:ba:70:8b:a8: f8:17:f0:7e:29:a9:a6:54:d8:75:38:b1:69:89:ce: 79:50:ac:ce:c3:d0:9c:46:3c:87:be:a5:29:71:a2: 64:4e:4e:c9:6f:87:72:52:fc:98:de:b6:fa:28:1d: aa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B0:59:8F:B2:B4:74:9B:5E:B3:9C:CE:4B:02:76:3C:65:BE:C7:65 X509v3 Authority Key Identifier: keyid:99:57:A1:5A:A9:89:3F:1C:91:5B:44:97:EB:F9:2A:8A:33:D5:E4:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mVehWqmJPxyRW0SX6_kqijPV5Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/939e00-3bd9-435b-8f8b-bcddc44b03ab/1/mVehWqmJPxyRW0SX6_kqijPV5Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:01:47:4c:ad:41:e9:2e:f8:3e:62:08:cc:b5:b6:47:36:0c: d4:30:5c:4d:34:b9:47:48:6e:09:df:d7:1d:10:35:95:83:d0: 0a:e5:83:8f:64:20:78:40:78:a2:f4:9c:bc:a9:ab:9c:11:64: 0b:40:cd:04:21:ec:aa:db:42:50:54:6a:0d:a5:79:b1:67:ed: 36:5a:6e:b8:98:8f:0c:3b:6d:ae:aa:55:af:82:b2:e3:61:90: 8e:03:f9:02:af:5c:45:2d:82:25:44:fd:f1:2a:3e:a5:86:23: 84:93:55:6f:03:8d:07:7b:9f:9a:ab:9f:58:1f:21:9b:cc:8f: 4c:3a:79:82:03:3d:04:c2:62:81:a9:68:46:31:3b:35:e4:7e: bf:a7:57:7e:e2:50:da:83:ee:a1:bc:15:8d:20:86:30:f5:8d: 53:51:5e:a7:ca:51:92:50:52:05:6d:af:a9:f7:e0:32:99:bd: d6:19:a9:ce:d1:01:2a:13:47:41:99:82:73:29:55:09:72:9b: 80:9f:a4:f0:09:ae:c8:46:f8:1c:17:0a:fb:3c:10:7c:18:4e: c3:20:fe:83:e5:29:30:80:6f:c5:62:cc:6e:8e:93:77:f6:0d: a4:15:4e:fa:ce:42:69:4e:64:5c:83:0e:39:89:66:e8:aa:e7: e4:68:8f:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBSRdoaR84ZvizsxElYCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5NTdhMTVhYTk4OTNmMWM5MTViNDQ5N2ViZjkyYThhMzNk NWU0MzkwHhcNMjYwMjA5MTQwMDIzWhcNMjYwMjEwMTQwMDIzWjAzMTEwLwYDVQQD Eyg0Y2IwNTk4ZmIyYjQ3NDliNWViMzljY2U0YjAyNzYzYzY1YmVjNzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQOZX0B2aLPQx19NNxeGSOoQlKVB +0mp99KT8ONlZIhVatZJiSGBaeXGt9nfD5YLq5j9e8vSuQpScEWz0TUzsS9dj9N7 N3LjIannZFPbfsET52Mf7tfPjx66O65YSZ+TtZdRbIMr+bDgw+a9MgUlw3Ag/vP9 ekisfo+vbcSURF3hfMwPJ0/A0kX/ZTrs0fTtBil4XOEF/sVKSZArYcbheOTo9GpP +3fBgj65HtVzd5/PFOI7C3KRECOUbqDgKJcAtVyn+FNQ7UNfhKGJtbpwi6j4F/B+ KammVNh1OLFpic55UKzOw9CcRjyHvqUpcaJkTk7Jb4dyUvyY3rb6KB2qTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEywWY+ytHSbXrOczksCdjxlvsdlMB8GA1UdIwQY MBaAFJlXoVqpiT8ckVtEl+v5Kooz1eQ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVZlaFdxbUpQeHlSVzBTWDZfa3FpalBWNURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi85MzllMDAtM2JkOS00MzViLThmOGIt YmNkZGM0NGIwM2FiLzEvbVZlaFdxbUpQeHlSVzBTWDZfa3FpalBWNURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi85MzllMDAtM2JkOS00MzViLThmOGItYmNkZGM0NGIwM2Fi LzEvbVZlaFdxbUpQeHlSVzBTWDZfa3FpalBWNURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoQFHTK1B 6S74PmIIzLW2RzYM1DBcTTS5R0huCd/XHRA1lYPQCuWDj2QgeEB4ovScvKmrnBFk C0DNBCHsqttCUFRqDaV5sWftNlpuuJiPDDttrqpVr4Ky42GQjgP5Aq9cRS2CJUT9 8So+pYYjhJNVbwONB3ufmqufWB8hm8yPTDp5ggM9BMJigaloRjE7NeR+v6dXfuJQ 2oPuobwVjSCGMPWNU1Fep8pRklBSBW2vqffgMpm91hmpztEBKhNHQZmCcylVCXKb gJ+k8AmuyEb4HBcK+zwQfBhOwyD+g+UpMIBvxWLMbo6Td/YNpBVO+s5CaU5kXIMO OYlm6Krn5GiPJA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:02 2026 by rpki-client