This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft File: Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft (raw, json) Hash identifier: awsi7nYS/QW8GEvI3wrp/Df75ochAgzpRG/my26TCJA= Subject key identifier: 9D:59:DE:BE:69:0E:7C:68:6D:03:A2:7E:0A:63:CD:D3:DE:B0:74:37 Authority key identifier: 55:DE:D9:D0:2E:7F:61:61:90:53:A3:72:2A:7A:5A:39:F3:EB:86:EF Certificate issuer: /CN=55ded9d02e7f61619053a3722a7a5a39f3eb86ef Certificate serial: 019C413432AFBB42C9B6919AD323BB91434C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft Manifest number: 17CA Signing time: Mon 09 Feb 2026 07:01:05 +0000 Manifest this update: Mon 09 Feb 2026 07:01:05 +0000 Manifest next update: Tue 10 Feb 2026 07:01:05 +0000 Files and hashes: 1: Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl (hash: dJ9NyWItC81IwbsHXyaitmmyc+lGVoDRb/8f3b78PN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:32:af:bb:42:c9:b6:91:9a:d3:23:bb:91:43:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55ded9d02e7f61619053a3722a7a5a39f3eb86ef Validity Not Before: Feb 9 07:01:05 2026 GMT Not After : Feb 10 07:01:05 2026 GMT Subject: CN=9d59debe690e7c686d03a27e0a63cdd3deb07437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:73:6f:d4:1f:1f:09:89:df:b9:5e:e0:12:17: ad:98:4b:ae:b5:f3:c9:ba:be:0c:fe:d3:60:07:39: a7:63:e0:4a:f4:73:d1:dc:ae:08:50:35:c0:7e:92: bb:55:2b:9d:f7:9e:3b:04:e8:bf:3a:08:07:5c:30: b2:4f:24:77:cf:6e:48:bc:65:ee:8b:0f:44:93:79: 53:ef:82:1a:1b:01:53:78:ea:b7:97:6d:ae:c2:cd: 5a:5e:8a:ff:44:70:26:20:2d:50:de:7c:1d:8a:ec: 6e:d7:dd:eb:94:73:bd:eb:56:2b:d5:f3:78:21:05: a8:78:12:ce:df:1a:a9:11:9b:d8:6c:a6:73:9d:33: a0:8a:c8:1b:6a:5a:a1:e1:e8:6c:57:c7:28:32:08: 43:b1:94:cd:86:be:5e:da:81:5c:1e:d3:e3:b1:4b: 92:5f:4c:44:b5:1b:e3:d2:16:96:c0:3d:7c:0c:88: c7:7b:41:6e:bb:b8:99:6f:1a:3e:f0:8e:64:86:7a: da:cb:b2:a6:cf:23:f3:98:28:e2:52:3b:80:ff:a0: 81:28:dc:0a:65:e7:1b:e0:b5:5e:00:14:20:a7:eb: 86:dd:a8:b8:e9:38:9f:ce:88:0b:2f:fc:94:d7:10: 58:36:29:7e:ff:68:d5:f1:33:15:bb:40:f9:8e:a2: 6b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:59:DE:BE:69:0E:7C:68:6D:03:A2:7E:0A:63:CD:D3:DE:B0:74:37 X509v3 Authority Key Identifier: keyid:55:DE:D9:D0:2E:7F:61:61:90:53:A3:72:2A:7A:5A:39:F3:EB:86:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/903410-8f77-4020-af57-15339c397550/1/Vd7Z0C5_YWGQU6NyKnpaOfPrhu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:af:fa:d4:5b:5d:7e:9f:9e:c1:8e:3b:95:dd:fd:6c:28:93: b0:49:09:b9:88:29:bb:d2:73:00:d5:e6:6f:c5:08:a2:82:ec: 1a:1a:bf:a3:46:c6:47:69:e8:0a:fc:4d:29:09:df:c8:dd:27: e9:52:d6:1f:5d:49:22:32:5f:21:f7:3f:6a:57:62:d8:79:51: fa:cb:ec:29:fb:df:6b:38:72:2c:df:d1:11:91:15:44:d5:fe: 6d:d3:e3:d5:f6:d8:e6:d1:4d:55:37:79:ed:27:90:9b:43:d9: 8c:73:69:1a:8f:21:97:56:5f:64:57:ca:08:e5:cc:40:20:7d: 2f:d4:20:58:11:9c:53:70:5e:7a:93:c2:be:73:0f:ce:1d:62: dd:65:a0:94:68:dd:83:30:e3:e9:ee:42:08:42:6a:45:fc:22: ae:d8:04:ac:3a:c9:b8:8b:c7:05:a9:16:dd:08:32:05:d4:11: a7:83:04:eb:7f:39:ee:d2:ce:10:8c:fc:07:9a:d5:76:58:0e: 59:af:52:58:88:1a:b7:3b:0c:39:b3:f3:53:c3:32:09:0e:68: 10:8f:ff:e6:a1:c1:84:1e:4e:75:34:35:33:17:79:a4:93:bf: df:fc:00:71:42:0e:85:65:88:19:e3:ce:82:1e:b1:46:b7:39: 44:36:f4:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNDKvu0LJtpGa0yO7kUNMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZGVkOWQwMmU3ZjYxNjE5MDUzYTM3MjJhN2E1YTM5ZjNl Yjg2ZWYwHhcNMjYwMjA5MDcwMTA1WhcNMjYwMjEwMDcwMTA1WjAzMTEwLwYDVQQD Eyg5ZDU5ZGViZTY5MGU3YzY4NmQwM2EyN2UwYTYzY2RkM2RlYjA3NDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHNv1B8fCYnfuV7gEhetmEuutfPJ ur4M/tNgBzmnY+BK9HPR3K4IUDXAfpK7VSud9547BOi/OggHXDCyTyR3z25IvGXu iw9Ek3lT74IaGwFTeOq3l22uws1aXor/RHAmIC1Q3nwdiuxu193rlHO961Yr1fN4 IQWoeBLO3xqpEZvYbKZznTOgisgbalqh4ehsV8coMghDsZTNhr5e2oFcHtPjsUuS X0xEtRvj0haWwD18DIjHe0Fuu7iZbxo+8I5khnray7KmzyPzmCjiUjuA/6CBKNwK Zecb4LVeABQgp+uG3ai46TifzogLL/yU1xBYNil+/2jV8TMVu0D5jqJrCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1Z3r5pDnxobQOifgpjzdPesHQ3MB8GA1UdIwQY MBaAFFXe2dAuf2FhkFOjcip6Wjnz64bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmQ3WjBDNV9ZV0dRVTZOeUtucGFPZlByaHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85MDM0MTAtOGY3Ny00MDIwLWFmNTct MTUzMzljMzk3NTUwLzEvVmQ3WjBDNV9ZV0dRVTZOeUtucGFPZlByaHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC85MDM0MTAtOGY3Ny00MDIwLWFmNTctMTUzMzljMzk3NTUw LzEvVmQ3WjBDNV9ZV0dRVTZOeUtucGFPZlByaHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVq/61Ftd fp+ewY47ld39bCiTsEkJuYgpu9JzANXmb8UIooLsGhq/o0bGR2noCvxNKQnfyN0n 6VLWH11JIjJfIfc/aldi2HlR+svsKfvfazhyLN/REZEVRNX+bdPj1fbY5tFNVTd5 7SeQm0PZjHNpGo8hl1ZfZFfKCOXMQCB9L9QgWBGcU3BeepPCvnMPzh1i3WWglGjd gzDj6e5CCEJqRfwirtgErDrJuIvHBakW3QgyBdQRp4ME63857tLOEIz8B5rVdlgO Wa9SWIgatzsMObPzU8MyCQ5oEI//5qHBhB5OdTQ1Mxd5pJO/3/wAcUIOhWWIGePO gh6xRrc5RDb0EA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:23 2026 by rpki-client