This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json) Hash identifier: Rv/7KRL4paZbVuHDlUqylnWnlSXwKYgEnu+HrvvUK5s= Subject key identifier: 19:54:0A:08:13:89:EA:79:04:AA:0C:54:DE:F0:5A:15:88:2B:8A:C2 Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9 Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9 Certificate serial: 019C42EAFB9B72355462D9A8DA74416E34B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft Manifest number: 04DE Signing time: Mon 09 Feb 2026 15:00:21 +0000 Manifest this update: Mon 09 Feb 2026 15:00:21 +0000 Manifest next update: Tue 10 Feb 2026 15:00:21 +0000 Files and hashes: 1: rnLM_a8LAjwiWtEqOy7Mhls5gy0.roa (hash: jMUOUB5MPfYCum5RcFFu1kpq8F6mGqOp/XYY8NGS/KY=) 2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: DWmFcM9F/JBqHh0amS68IkskBDfJXcHdxtKUS4FRTgE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:fb:9b:72:35:54:62:d9:a8:da:74:41:6e:34:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9 Validity Not Before: Feb 9 15:00:21 2026 GMT Not After : Feb 10 15:00:21 2026 GMT Subject: CN=19540a081389ea7904aa0c54def05a15882b8ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:96:e8:d9:ad:af:56:26:fd:a9:45:30:f5:aa: 9e:8b:03:31:d0:97:dd:21:72:97:b1:60:be:f4:fd: 9b:53:b5:56:bc:30:ff:e7:e4:81:88:96:00:ae:b7: 62:2b:d9:e7:ac:72:da:9d:91:31:5b:e4:a4:6f:b6: d4:7f:37:47:b7:9c:1d:30:32:eb:70:e8:30:0f:c4: 5e:01:25:1f:a4:97:cc:ee:94:15:b9:40:48:d3:03: fa:41:e8:9e:7b:08:ed:65:dd:84:5d:f0:5a:cd:1b: ab:2b:37:1b:18:cf:7e:0c:47:3a:55:47:cc:8a:9f: bb:08:72:8c:64:97:22:b7:71:3f:d9:66:5e:7b:ee: 71:ca:0a:ad:fa:6d:1e:aa:98:eb:a9:5b:ac:35:b4: c6:fd:a9:19:93:86:e1:45:47:83:b5:21:29:48:a8: 0c:9a:c9:5f:f8:f8:6b:34:78:ee:49:1c:74:f9:ac: 81:7d:0d:3f:63:cb:e1:c2:66:f4:b7:57:e4:f0:ba: cc:2d:5c:98:06:75:ec:06:d6:57:9c:e7:7a:ae:c8: 2c:e9:f3:a0:41:5e:16:bc:99:44:ea:81:7b:4e:d5: 0d:79:a5:d5:38:41:8c:08:b8:6d:20:32:d4:63:1c: 1a:c3:50:79:a2:6b:69:10:fa:54:18:41:86:fd:20: cf:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:54:0A:08:13:89:EA:79:04:AA:0C:54:DE:F0:5A:15:88:2B:8A:C2 X509v3 Authority Key Identifier: keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:bc:9f:40:70:b7:95:03:51:e4:7e:2e:02:3e:65:37:db:9b: f2:b8:29:0b:1f:a4:d5:65:d2:cf:76:db:e8:7a:80:55:88:a9: 79:79:b9:ca:31:00:16:bf:b9:5a:1d:44:3e:7c:68:99:17:3d: 8d:09:a7:aa:40:47:5f:97:76:54:57:2f:1d:e1:21:85:3a:7f: 83:6f:8d:30:6f:e8:4b:ce:fb:8d:d7:24:24:66:cc:96:fb:c5: e2:72:88:7f:be:49:7f:c7:f6:32:ac:81:75:6b:a6:12:8f:f5: 39:c0:6d:19:33:0c:08:9e:28:c9:c2:9f:db:e8:fc:de:de:e4: 32:d9:d7:da:85:9e:cf:b2:12:ba:fa:43:15:4f:2a:de:af:91: 3e:b1:8d:db:f8:40:49:26:67:e5:5a:7a:7f:cd:5d:0c:1f:1d: c1:bb:12:0a:a4:b8:b9:16:68:be:28:bb:f1:f3:6a:15:29:c8: 01:61:2e:e1:25:77:c6:18:c5:5a:90:1c:f2:21:0f:b8:50:03: a2:3c:57:47:c8:97:b0:9f:91:1e:e5:9a:ed:22:f6:c9:0b:dc: 39:0f:0c:b5:ae:82:9e:9d:9a:82:a4:69:f5:e1:28:b7:f0:ac: b4:3b:98:ac:6d:c7:10:01:db:84:75:08:ea:ff:59:91:ad:93: 97:ae:e9:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6vubcjVUYtmo2nRBbjS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjI0ZGY0YTdjOWFhMjEzMWQ4NTc1MDNiOTNkNjBmN2Zi NTFiZDkwHhcNMjYwMjA5MTUwMDIxWhcNMjYwMjEwMTUwMDIxWjAzMTEwLwYDVQQD EygxOTU0MGEwODEzODllYTc5MDRhYTBjNTRkZWYwNWExNTg4MmI4YWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5bo2a2vVib9qUUw9aqeiwMx0Jfd IXKXsWC+9P2bU7VWvDD/5+SBiJYArrdiK9nnrHLanZExW+Skb7bUfzdHt5wdMDLr cOgwD8ReASUfpJfM7pQVuUBI0wP6QeieewjtZd2EXfBazRurKzcbGM9+DEc6VUfM ip+7CHKMZJcit3E/2WZee+5xygqt+m0eqpjrqVusNbTG/akZk4bhRUeDtSEpSKgM mslf+PhrNHjuSRx0+ayBfQ0/Y8vhwmb0t1fk8LrMLVyYBnXsBtZXnOd6rsgs6fOg QV4WvJlE6oF7TtUNeaXVOEGMCLhtIDLUYxwaw1B5omtpEPpUGEGG/SDPBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlUCggTiep5BKoMVN7wWhWIK4rCMB8GA1UdIwQY MBaAFL2yTfSnyaohMdhXUDuT1g9/tRvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAt ZDMwYWViMWMyMGNhLzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAtZDMwYWViMWMyMGNh LzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAbyfQHC3 lQNR5H4uAj5lN9ub8rgpCx+k1WXSz3bb6HqAVYipeXm5yjEAFr+5Wh1EPnxomRc9 jQmnqkBHX5d2VFcvHeEhhTp/g2+NMG/oS877jdckJGbMlvvF4nKIf75Jf8f2MqyB dWumEo/1OcBtGTMMCJ4oycKf2+j83t7kMtnX2oWez7ISuvpDFU8q3q+RPrGN2/hA SSZn5Vp6f81dDB8dwbsSCqS4uRZovii78fNqFSnIAWEu4SV3xhjFWpAc8iEPuFAD ojxXR8iXsJ+RHuWa7SL2yQvcOQ8Mta6Cnp2agqRp9eEot/CstDuYrG3HEAHbhHUI 6v9Zka2Tl67pnQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:30 2026 by rpki-client