This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft File: vMBbyedz38ikm7QwgluXRt1BxPE.mft (raw, json) Hash identifier: 3EvkVhM2J3MpVHNDfrk5usviOcbPjfvU/wsPa4A6gh8= Subject key identifier: 2F:38:16:7F:72:D9:0D:FA:F9:E3:45:11:E5:F0:CC:B7:DC:30:82:5B Authority key identifier: BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1 Certificate issuer: /CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1 Certificate serial: 019C432269BE755E2D43CCF88D64B1BC4FDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:54 +0000 Manifest this update: Mon 09 Feb 2026 16:00:54 +0000 Manifest next update: Tue 10 Feb 2026 16:00:54 +0000 Files and hashes: 1: vMBbyedz38ikm7QwgluXRt1BxPE.crl (hash: 6itJvv9kbhKcRWGsnXSiuPHycO9oOjjytKpxLL8g3Qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:69:be:75:5e:2d:43:cc:f8:8d:64:b1:bc:4f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc05bc9e773dfc8a49bb430825b9746dd41c4f1 Validity Not Before: Feb 9 16:00:54 2026 GMT Not After : Feb 10 16:00:54 2026 GMT Subject: CN=2f38167f72d90dfaf9e34511e5f0ccb7dc30825b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:05:9e:58:7d:56:1b:e6:80:83:bf:c0:2e:a6: 78:05:75:cb:55:8a:4e:c7:77:60:14:d2:74:a5:56: 7c:c5:1f:29:d3:b9:87:60:1a:2b:67:67:ae:4a:45: ab:87:b0:0e:e7:d3:08:c2:ff:9e:b7:c7:09:3b:60: 2d:eb:6d:ad:b9:ff:a1:0d:b7:f5:e7:d7:16:43:6d: 86:70:89:d6:77:4d:f5:d4:86:7e:58:e1:45:ca:e1: 89:93:bb:ba:2c:fb:18:c0:8a:41:a8:d0:df:07:ce: 2c:8e:01:99:c5:1b:df:69:85:16:d0:a8:ec:99:5c: 07:ef:4d:29:d9:5a:e3:49:3f:70:92:1b:d4:8a:e7: 61:f8:15:76:2a:05:57:cf:f5:2f:32:4f:a8:5b:a6: fd:85:fa:ff:fa:fc:21:95:79:9c:ab:f3:08:8f:27: 0a:73:23:ac:15:bc:28:d3:4b:63:13:71:18:b8:e2: 18:78:a0:07:ed:2c:c6:5c:d3:44:ba:5c:cc:96:4a: 5e:70:c4:26:7e:ef:48:30:cd:dc:9f:8d:9d:14:4c: a4:27:11:0c:f2:1a:94:58:9d:69:52:82:f4:b7:29: 1a:e2:16:4c:24:df:40:28:63:af:29:99:e4:c6:5b: 6b:45:be:a0:4c:34:17:02:e6:76:10:f1:09:1c:9c: 18:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:38:16:7F:72:D9:0D:FA:F9:E3:45:11:E5:F0:CC:B7:DC:30:82:5B X509v3 Authority Key Identifier: keyid:BC:C0:5B:C9:E7:73:DF:C8:A4:9B:B4:30:82:5B:97:46:DD:41:C4:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMBbyedz38ikm7QwgluXRt1BxPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/da7f24-40d0-4a4c-8901-722e2de37f06/1/vMBbyedz38ikm7QwgluXRt1BxPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ef:cf:9e:68:dd:0d:32:38:09:33:59:ac:df:ad:ec:6b:17: f5:c5:08:30:c2:23:2f:db:0b:1f:c4:5b:a7:0f:32:58:93:db: 04:3e:7a:fa:2a:50:4b:f6:63:10:c2:2c:9e:4e:cc:a6:d0:58: d2:ac:b4:45:c7:79:ae:b4:39:f5:ea:99:a7:a2:a6:18:0d:96: 81:cc:9e:b3:ba:19:45:59:37:fa:bb:5b:ca:a4:6d:8a:88:ed: a9:f9:2f:ab:3e:52:ae:4c:ef:0b:99:e1:4d:ff:68:08:80:91: 0f:6c:d9:d9:b3:b6:37:3d:79:32:8c:a8:23:80:a2:51:58:9c: 8c:57:fb:a2:e9:b4:d9:f7:36:e4:55:c4:3e:10:9b:03:4d:2e: b8:39:3d:99:ac:b8:26:bc:d9:f6:38:b6:ae:70:6c:2e:e4:f9: fd:a5:cb:c5:4f:da:57:0a:24:50:b0:ee:c2:cf:20:bd:c6:1a: 04:0e:4d:42:b4:72:1d:1e:c4:92:c2:a9:9e:c9:25:25:51:cc: 01:99:c9:55:49:03:7d:57:b9:74:9d:47:1b:cd:c4:ee:40:83: 9e:f6:b4:77:da:eb:7d:5e:fc:6f:ca:c8:fc:24:82:c7:73:c5: 11:63:4a:22:56:bf:68:61:3d:9c:f0:80:1a:91:14:f2:c1:9d: 5d:2d:48:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImm+dV4tQ8z4jWSxvE/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYzA1YmM5ZTc3M2RmYzhhNDliYjQzMDgyNWI5NzQ2ZGQ0 MWM0ZjEwHhcNMjYwMjA5MTYwMDU0WhcNMjYwMjEwMTYwMDU0WjAzMTEwLwYDVQQD EygyZjM4MTY3ZjcyZDkwZGZhZjllMzQ1MTFlNWYwY2NiN2RjMzA4MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwWeWH1WG+aAg7/ALqZ4BXXLVYpO x3dgFNJ0pVZ8xR8p07mHYBorZ2euSkWrh7AO59MIwv+et8cJO2At622tuf+hDbf1 59cWQ22GcInWd0311IZ+WOFFyuGJk7u6LPsYwIpBqNDfB84sjgGZxRvfaYUW0Kjs mVwH700p2VrjST9wkhvUiudh+BV2KgVXz/UvMk+oW6b9hfr/+vwhlXmcq/MIjycK cyOsFbwo00tjE3EYuOIYeKAH7SzGXNNEulzMlkpecMQmfu9IMM3cn42dFEykJxEM 8hqUWJ1pUoL0tyka4hZMJN9AKGOvKZnkxltrRb6gTDQXAuZ2EPEJHJwYcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC84Fn9y2Q36+eNFEeXwzLfcMIJbMB8GA1UdIwQY MBaAFLzAW8nnc9/IpJu0MIJbl0bdQcTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk1CYnllZHozOGlrbTdRd2dsdVhSdDFCeFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kYTdmMjQtNDBkMC00YTRjLTg5MDEt NzIyZTJkZTM3ZjA2LzEvdk1CYnllZHozOGlrbTdRd2dsdVhSdDFCeFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9kYTdmMjQtNDBkMC00YTRjLTg5MDEtNzIyZTJkZTM3ZjA2 LzEvdk1CYnllZHozOGlrbTdRd2dsdVhSdDFCeFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYu/Pnmjd DTI4CTNZrN+t7GsX9cUIMMIjL9sLH8Rbpw8yWJPbBD56+ipQS/ZjEMIsnk7MptBY 0qy0Rcd5rrQ59eqZp6KmGA2Wgcyes7oZRVk3+rtbyqRtiojtqfkvqz5SrkzvC5nh Tf9oCICRD2zZ2bO2Nz15MoyoI4CiUVicjFf7oum02fc25FXEPhCbA00uuDk9may4 JrzZ9ji2rnBsLuT5/aXLxU/aVwokULDuws8gvcYaBA5NQrRyHR7EksKpnsklJVHM AZnJVUkDfVe5dJ1HG83E7kCDnva0d9rrfV78b8rI/CSCx3PFEWNKIla/aGE9nPCA GpEU8sGdXS1Ipg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:23 2026 by rpki-client