This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft File: vMdRnWKILvRnL6ISdmJXJ6L74GE.mft (raw, json) Hash identifier: W9nzfMpP99kEaPoLWGRgCAAvvrrpeoqxx6KQgXyJI+A= Subject key identifier: 26:30:A3:02:FC:96:CF:C8:81:06:B4:62:16:2E:06:16:2C:07:44:EB Authority key identifier: BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61 Certificate issuer: /CN=bcc7519d62882ef4672fa21276625727a2fbe061 Certificate serial: 019C4322940FCB17F41E132B9C08BA527939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft Manifest number: 1075 Signing time: Mon 09 Feb 2026 16:01:05 +0000 Manifest this update: Mon 09 Feb 2026 16:01:05 +0000 Manifest next update: Tue 10 Feb 2026 16:01:05 +0000 Files and hashes: 1: vMdRnWKILvRnL6ISdmJXJ6L74GE.crl (hash: AL2NDdMQ84vpwdAlF1ywB7LrVG4JsgASYTtDRv69Rnc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:94:0f:cb:17:f4:1e:13:2b:9c:08:ba:52:79:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc7519d62882ef4672fa21276625727a2fbe061 Validity Not Before: Feb 9 16:01:05 2026 GMT Not After : Feb 10 16:01:05 2026 GMT Subject: CN=2630a302fc96cfc88106b462162e06162c0744eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:83:ac:72:e4:a9:8d:37:8e:c7:bc:c0:a7:17: 1c:57:8e:4e:66:0b:06:b6:24:f5:dd:0f:eb:3d:a9: 74:6c:bf:4e:a6:99:bf:6c:57:ae:ae:34:b4:56:3f: 16:87:42:2b:ff:81:40:7f:c2:a5:54:1a:cb:3c:0b: 60:0c:01:6e:c9:44:4c:85:bb:c7:22:54:a0:9f:9a: 65:f6:de:a9:24:ec:b4:20:96:68:d6:df:34:b7:1b: 16:76:eb:af:03:96:2f:6f:7e:65:da:bd:56:cc:00: 44:19:f5:3c:47:ec:02:ea:57:90:ba:72:79:59:62: 6b:d3:0b:c4:fc:1e:23:df:aa:09:62:2a:4e:a4:42: c7:0b:47:2c:ec:b0:c7:fb:fa:4c:21:9e:f4:4a:3c: 88:40:54:9d:0e:da:cb:8d:f7:23:77:82:8e:1f:c2: 7b:8c:c8:9a:32:be:99:c4:0d:91:af:a7:0d:d3:71: 97:08:fd:42:27:39:a4:c0:11:54:88:73:bd:f5:b5: be:8c:14:5c:d0:fd:2b:6b:dc:d6:db:88:36:a3:6e: 95:25:9b:5f:98:75:05:99:fe:00:e0:7a:62:24:fb: 8a:be:69:aa:ce:8c:72:fa:d8:65:de:e9:43:29:10: 47:8b:33:d5:b3:9a:bd:07:98:a8:a8:03:2a:e2:11: 8e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:30:A3:02:FC:96:CF:C8:81:06:B4:62:16:2E:06:16:2C:07:44:EB X509v3 Authority Key Identifier: keyid:BC:C7:51:9D:62:88:2E:F4:67:2F:A2:12:76:62:57:27:A2:FB:E0:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMdRnWKILvRnL6ISdmJXJ6L74GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/25944e-c51c-4e20-8753-2bf0c6787fbb/1/vMdRnWKILvRnL6ISdmJXJ6L74GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:23:5b:81:91:92:2a:e9:c2:41:80:86:11:e4:cb:c6:85:8b: db:ec:d9:25:e4:50:6a:23:9b:98:74:d6:99:ba:0c:65:c9:06: f4:59:5d:3b:93:4f:32:3e:2f:b8:48:d6:74:f1:c9:db:b9:0c: 7a:42:71:5b:97:39:eb:6a:83:48:5e:c2:cb:d2:88:8f:7d:97: f3:35:bd:7d:36:c3:35:29:ca:d9:bd:c0:d2:62:1a:53:e8:ab: 5e:25:77:47:9b:79:47:63:0d:84:b1:c9:37:86:a7:b2:37:75: bd:e5:5a:9c:a0:dd:2b:60:b6:8c:9f:6b:88:1c:fa:69:c5:b1: d8:c0:c5:2d:10:f0:8b:dc:a6:bb:fe:f9:25:2e:54:57:cc:0f: bb:a8:e9:88:ac:7a:52:05:8e:64:5f:92:8d:94:e6:bb:35:26: ab:58:4f:8e:9d:ee:e1:e6:f1:c4:c6:53:27:88:1d:f1:1a:a1: 5a:84:bb:88:fe:4a:b8:ab:aa:95:c6:da:7b:a4:d3:e3:08:02: e0:65:eb:2b:03:fc:c2:40:36:3e:92:72:46:25:45:43:3f:61: 5c:3a:de:5b:a3:65:a9:7c:8f:34:e5:51:5c:21:a6:ec:29:3d: 2f:84:f9:44:76:b8:e8:04:43:76:99:08:10:af:88:a6:5e:09: 87:20:e2:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpQPyxf0HhMrnAi6Unk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYzc1MTlkNjI4ODJlZjQ2NzJmYTIxMjc2NjI1NzI3YTJm YmUwNjEwHhcNMjYwMjA5MTYwMTA1WhcNMjYwMjEwMTYwMTA1WjAzMTEwLwYDVQQD EygyNjMwYTMwMmZjOTZjZmM4ODEwNmI0NjIxNjJlMDYxNjJjMDc0NGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoOscuSpjTeOx7zApxccV45OZgsG tiT13Q/rPal0bL9Oppm/bFeurjS0Vj8Wh0Ir/4FAf8KlVBrLPAtgDAFuyURMhbvH IlSgn5pl9t6pJOy0IJZo1t80txsWduuvA5Yvb35l2r1WzABEGfU8R+wC6leQunJ5 WWJr0wvE/B4j36oJYipOpELHC0cs7LDH+/pMIZ70SjyIQFSdDtrLjfcjd4KOH8J7 jMiaMr6ZxA2Rr6cN03GXCP1CJzmkwBFUiHO99bW+jBRc0P0ra9zW24g2o26VJZtf mHUFmf4A4HpiJPuKvmmqzoxy+thl3ulDKRBHizPVs5q9B5ioqAMq4hGOcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCYwowL8ls/IgQa0YhYuBhYsB0TrMB8GA1UdIwQY MBaAFLzHUZ1iiC70Zy+iEnZiVyei++BhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk1kUm5XS0lMdlJuTDZJU2RtSlhKNkw3NEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC8yNTk0NGUtYzUxYy00ZTIwLTg3NTMt MmJmMGM2Nzg3ZmJiLzEvdk1kUm5XS0lMdlJuTDZJU2RtSlhKNkw3NEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC8yNTk0NGUtYzUxYy00ZTIwLTg3NTMtMmJmMGM2Nzg3ZmJi LzEvdk1kUm5XS0lMdlJuTDZJU2RtSlhKNkw3NEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiCNbgZGS KunCQYCGEeTLxoWL2+zZJeRQaiObmHTWmboMZckG9FldO5NPMj4vuEjWdPHJ27kM ekJxW5c562qDSF7Cy9KIj32X8zW9fTbDNSnK2b3A0mIaU+irXiV3R5t5R2MNhLHJ N4ansjd1veVanKDdK2C2jJ9riBz6acWx2MDFLRDwi9ymu/75JS5UV8wPu6jpiKx6 UgWOZF+SjZTmuzUmq1hPjp3u4ebxxMZTJ4gd8RqhWoS7iP5KuKuqlcbae6TT4wgC 4GXrKwP8wkA2PpJyRiVFQz9hXDreW6NlqXyPNOVRXCGm7Ck9L4T5RHa46ARDdpkI EK+Ipl4JhyDigQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:41 2026 by rpki-client