This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft File: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft (raw, json) Hash identifier: XY/5de91KgYftaKeW19QhAcDX0hIggZ/Qt3iggjGH2M= Subject key identifier: C8:7E:41:EB:A4:C3:BA:C2:F0:B6:31:88:33:4A:99:ED:AD:36:84:FA Authority key identifier: BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4 Certificate issuer: /CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4 Certificate serial: 019C4322ECD583A0C69CFC8E146333E89882 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 16:01:28 +0000 Manifest this update: Mon 09 Feb 2026 16:01:28 +0000 Manifest next update: Tue 10 Feb 2026 16:01:28 +0000 Files and hashes: 1: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl (hash: x4j7u5VDVUlaAaJSHhE2YRHkp7k5YN81c2qQ3HSyKNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ec:d5:83:a0:c6:9c:fc:8e:14:63:33:e8:98:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4 Validity Not Before: Feb 9 16:01:28 2026 GMT Not After : Feb 10 16:01:28 2026 GMT Subject: CN=c87e41eba4c3bac2f0b63188334a99edad3684fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:83:5c:15:39:8f:79:a1:76:1d:cf:9c:a1:83: 90:8d:22:37:2a:67:5d:40:a4:85:b4:df:ed:5c:4a: 97:8a:81:39:d5:3d:d3:87:25:8c:1e:67:31:24:d9: d3:e6:65:7d:16:09:bf:86:bd:f2:56:ea:45:77:b3: 57:57:7f:fd:ff:86:e8:36:78:e4:45:67:db:93:03: 5e:81:97:59:67:9d:51:ca:a9:4c:36:1c:d1:bb:c4: db:ab:65:10:87:c4:92:ff:a5:6d:f1:6a:b9:63:70: 07:4f:e2:b5:f4:63:2b:d3:fe:1f:85:d1:4a:2e:db: 6a:7a:c2:77:44:5b:62:18:18:7f:c7:31:36:7b:ee: 9b:34:18:9c:6c:eb:3a:47:c4:fd:a4:45:ef:36:66: 74:ee:f0:c6:9e:c0:fe:d7:9f:31:e0:6b:03:db:83: a3:04:50:c5:cb:d9:20:55:bf:5b:df:78:70:92:c0: a3:0e:cb:3c:de:ec:63:cd:75:61:5e:e4:5d:08:56: c7:96:7f:22:d0:a0:ca:78:f0:19:70:86:74:90:52: 1a:96:ff:2d:74:53:6a:b2:fa:0f:56:ef:ac:1b:07: cd:a8:7c:99:7f:4b:3a:3f:14:de:23:1b:9c:87:b2: da:ac:ba:13:34:bb:af:98:bf:32:66:6f:74:fa:88: 83:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:7E:41:EB:A4:C3:BA:C2:F0:B6:31:88:33:4A:99:ED:AD:36:84:FA X509v3 Authority Key Identifier: keyid:BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:d0:c0:81:1e:36:89:9d:07:b4:db:ac:32:fd:9c:1e:08:b2: 29:e3:03:c5:03:ee:25:7f:10:8c:aa:50:07:37:b8:f3:4b:ac: b4:dc:d4:ff:d9:03:6f:95:73:ea:5d:b1:5a:33:37:c7:ee:df: c9:f1:9b:a3:66:46:43:3d:3c:b8:b7:a3:7b:88:0b:31:09:1c: 6d:6a:a3:ec:4f:35:7d:52:94:66:f0:d9:17:22:05:1d:35:4f: 9f:fa:0c:a1:b6:b6:c7:7c:8f:c0:b5:48:74:ba:51:91:5a:64: 13:95:ce:a7:1c:71:35:3f:3d:f9:7c:eb:31:8a:51:21:db:b4: fc:74:f6:b6:3b:a9:05:6a:60:26:12:0f:24:62:03:2e:a2:dc: 0f:15:dd:1d:d6:fc:90:37:db:8e:3d:bc:d4:b6:e7:54:0a:42: d2:25:3a:f3:04:cb:64:bc:09:96:a4:80:db:3a:6e:71:5b:d4: 8b:0f:2d:64:50:d7:3f:dd:38:6b:70:c9:22:0a:85:2f:68:6c: 71:0d:f6:74:86:90:7f:37:f2:90:2c:ee:ed:1f:b1:6c:68:38: 59:4e:98:9a:c1:5c:f6:ec:02:ab:4d:b5:7c:d0:fc:64:ae:43: 2f:44:c1:bd:4c:21:c8:38:f1:54:a0:af:d8:12:6d:93:76:5e: fc:da:3d:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIuzVg6DGnPyOFGMz6JiCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNzdjYjg5NjRjNGVkNjAxNDQ4YTQzNjg2ODViZjA4ZGNi NWUxZjQwHhcNMjYwMjA5MTYwMTI4WhcNMjYwMjEwMTYwMTI4WjAzMTEwLwYDVQQD EyhjODdlNDFlYmE0YzNiYWMyZjBiNjMxODgzMzRhOTllZGFkMzY4NGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYNcFTmPeaF2Hc+coYOQjSI3Kmdd QKSFtN/tXEqXioE51T3ThyWMHmcxJNnT5mV9Fgm/hr3yVupFd7NXV3/9/4boNnjk RWfbkwNegZdZZ51RyqlMNhzRu8Tbq2UQh8SS/6Vt8Wq5Y3AHT+K19GMr0/4fhdFK LttqesJ3RFtiGBh/xzE2e+6bNBicbOs6R8T9pEXvNmZ07vDGnsD+158x4GsD24Oj BFDFy9kgVb9b33hwksCjDss83uxjzXVhXuRdCFbHln8i0KDKePAZcIZ0kFIalv8t dFNqsvoPVu+sGwfNqHyZf0s6PxTeIxuch7LarLoTNLuvmL8yZm90+oiDlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMh+Qeukw7rC8LYxiDNKme2tNoT6MB8GA1UdIwQY MBaAFLx3y4lkxO1gFEikNoaFvwjcteH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkhmTGlXVEU3V0FVU0tRMmhvV19DTnkxNGZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNzVlMTYtNjY0Ny00MDdhLWEyMDEt ZDAzMjdkZjAyNjI4LzEvdkhmTGlXVEU3V0FVU0tRMmhvV19DTnkxNGZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jNzVlMTYtNjY0Ny00MDdhLWEyMDEtZDAzMjdkZjAyNjI4 LzEvdkhmTGlXVEU3V0FVU0tRMmhvV19DTnkxNGZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAINDAgR42 iZ0HtNusMv2cHgiyKeMDxQPuJX8QjKpQBze480ustNzU/9kDb5Vz6l2xWjM3x+7f yfGbo2ZGQz08uLeje4gLMQkcbWqj7E81fVKUZvDZFyIFHTVPn/oMoba2x3yPwLVI dLpRkVpkE5XOpxxxNT89+XzrMYpRIdu0/HT2tjupBWpgJhIPJGIDLqLcDxXdHdb8 kDfbjj281LbnVApC0iU68wTLZLwJlqSA2zpucVvUiw8tZFDXP904a3DJIgqFL2hs cQ32dIaQfzfykCzu7R+xbGg4WU6YmsFc9uwCq021fND8ZK5DL0TBvUwhyDjxVKCv 2BJtk3Ze/No9wA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:21 2026 by rpki-client