This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft File: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft (raw, json) Hash identifier: 78/golPk9XGpasdBY3OoKmZwIMu5YVY91KK1v4IDFPU= Subject key identifier: 83:D5:D5:25:94:59:0B:EB:19:BD:CF:87:43:94:BE:24:3E:E9:76:93 Authority key identifier: 54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6 Certificate issuer: /CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6 Certificate serial: 019C42EB3630D406867AD35E68BF01186FFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft Manifest number: 0FD7 Signing time: Mon 09 Feb 2026 15:00:36 +0000 Manifest this update: Mon 09 Feb 2026 15:00:36 +0000 Manifest next update: Tue 10 Feb 2026 15:00:36 +0000 Files and hashes: 1: VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl (hash: APuVUeqbNYyK+hAJMMzbJHxGAWHHuT6vGZrjXic5AdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:36:30:d4:06:86:7a:d3:5e:68:bf:01:18:6f:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5496f2e90db2bd35d54c6d23eed9b0f99f9663a6 Validity Not Before: Feb 9 15:00:36 2026 GMT Not After : Feb 10 15:00:36 2026 GMT Subject: CN=83d5d52594590beb19bdcf874394be243ee97693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7d:09:93:ff:40:fe:bc:02:11:39:f5:f3:1d: ce:61:7f:77:b2:72:e2:4a:c3:d1:e2:6f:5a:91:3a: 9e:5e:22:8b:2b:2f:eb:1f:be:81:31:4b:85:a5:b5: 03:8a:96:f7:9d:1b:8f:fb:42:66:99:75:4d:e4:2c: 83:97:b7:8e:55:77:e1:3c:a1:ba:20:0d:fb:0f:b1: de:75:ed:3f:2b:d8:a9:f3:32:13:94:27:54:25:cf: f5:82:96:9e:bc:b8:b2:d5:2d:0b:7f:48:6f:eb:3b: 4f:b6:7f:21:b2:32:1f:e7:5f:3b:69:fa:86:23:70: e5:b3:be:ae:77:e2:5b:6b:42:1a:f4:6f:9e:37:8c: a3:9d:a1:5d:e1:1e:b6:63:82:a6:31:d1:d5:2a:34: 04:52:75:f0:db:f1:a7:80:4c:5c:32:5c:31:ef:35: ae:52:3e:08:e5:99:8c:e5:6d:b6:c3:dd:f3:da:23: f3:03:12:4a:1a:09:68:e8:f4:a2:27:03:41:fd:00: 30:c7:8c:82:bc:82:b1:4e:ad:e2:4f:51:9a:1c:85: 73:d2:27:0d:d5:89:cd:2b:e3:23:31:a7:ff:8d:37: 8d:cd:a8:c5:ab:b2:68:db:85:12:f3:dc:d6:66:b9: bf:d8:33:12:e1:80:3e:93:0d:99:3c:cb:e5:b3:06: 14:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D5:D5:25:94:59:0B:EB:19:BD:CF:87:43:94:BE:24:3E:E9:76:93 X509v3 Authority Key Identifier: keyid:54:96:F2:E9:0D:B2:BD:35:D5:4C:6D:23:EE:D9:B0:F9:9F:96:63:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a96ed6-e806-4185-96e6-3bbfe2be62ab/1/VJby6Q2yvTXVTG0j7tmw-Z-WY6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3c:8a:58:d6:c7:b6:8a:a1:a8:45:83:ea:70:b0:f7:ec:a8: 6d:a9:d4:4e:58:7e:65:24:c3:0a:6f:8d:00:39:7b:b3:f3:0c: fd:36:1c:24:b3:23:14:3d:47:7a:06:30:a4:ce:ba:ff:16:c9: 6a:b2:02:5c:35:e1:5e:a3:bd:10:73:8e:26:64:1c:12:60:80: 16:a0:a3:ec:d2:24:0f:14:d8:03:b3:d3:a5:0b:61:03:70:59: 33:65:e8:09:dd:8c:cf:18:28:7a:91:45:02:10:29:72:1f:1e: b4:cc:fc:4f:27:d4:ff:89:99:22:6c:3f:65:fc:b4:17:a3:91: b7:04:71:6b:e7:54:2a:15:ef:ba:33:4f:74:12:23:1c:ee:46: ab:27:8d:22:02:4c:64:05:83:67:1b:55:b5:51:bd:64:b2:39: 5d:40:5a:32:5a:0d:1d:58:37:c5:9c:08:af:74:70:b2:c3:1c: e9:f1:09:fe:d5:69:b5:11:01:93:18:99:78:8e:ce:ee:4b:0e: 57:67:82:6c:9e:e0:70:5f:37:5e:90:43:ce:da:c5:f9:0a:f3: 8f:81:e0:03:b9:9e:de:f7:78:dd:8b:b2:6b:7f:46:b0:aa:2b: 99:a7:81:7f:94:c0:1c:dd:99:98:25:8a:b9:c7:a6:d3:59:58: bc:c8:fb:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6zYw1AaGetNeaL8BGG/6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0OTZmMmU5MGRiMmJkMzVkNTRjNmQyM2VlZDliMGY5OWY5 NjYzYTYwHhcNMjYwMjA5MTUwMDM2WhcNMjYwMjEwMTUwMDM2WjAzMTEwLwYDVQQD Eyg4M2Q1ZDUyNTk0NTkwYmViMTliZGNmODc0Mzk0YmUyNDNlZTk3NjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8X0Jk/9A/rwCETn18x3OYX93snLi SsPR4m9akTqeXiKLKy/rH76BMUuFpbUDipb3nRuP+0JmmXVN5CyDl7eOVXfhPKG6 IA37D7Hede0/K9ip8zITlCdUJc/1gpaevLiy1S0Lf0hv6ztPtn8hsjIf5187afqG I3Dls76ud+Jba0Ia9G+eN4yjnaFd4R62Y4KmMdHVKjQEUnXw2/GngExcMlwx7zWu Uj4I5ZmM5W22w93z2iPzAxJKGglo6PSiJwNB/QAwx4yCvIKxTq3iT1GaHIVz0icN 1YnNK+MjMaf/jTeNzajFq7Jo24US89zWZrm/2DMS4YA+kw2ZPMvlswYUDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPV1SWUWQvrGb3Ph0OUviQ+6XaTMB8GA1UdIwQY MBaAFFSW8ukNsr011UxtI+7ZsPmflmOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkpieTZRMnl2VFhWVEcwajd0bXctWi1XWTZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTZlZDYtZTgwNi00MTg1LTk2ZTYt M2JiZmUyYmU2MmFiLzEvVkpieTZRMnl2VFhWVEcwajd0bXctWi1XWTZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC9hOTZlZDYtZTgwNi00MTg1LTk2ZTYtM2JiZmUyYmU2MmFi LzEvVkpieTZRMnl2VFhWVEcwajd0bXctWi1XWTZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTyKWNbH toqhqEWD6nCw9+yobanUTlh+ZSTDCm+NADl7s/MM/TYcJLMjFD1HegYwpM66/xbJ arICXDXhXqO9EHOOJmQcEmCAFqCj7NIkDxTYA7PTpQthA3BZM2XoCd2MzxgoepFF AhApch8etMz8TyfU/4mZImw/Zfy0F6ORtwRxa+dUKhXvujNPdBIjHO5GqyeNIgJM ZAWDZxtVtVG9ZLI5XUBaMloNHVg3xZwIr3RwssMc6fEJ/tVptREBkxiZeI7O7ksO V2eCbJ7gcF83XpBDztrF+Qrzj4HgA7me3vd43Yuya39GsKormaeBf5TAHN2ZmCWK ucem01lYvMj7uA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:25 2026 by rpki-client