This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft File: vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json) Hash identifier: 5PYem8bJmktZRZqBJR6kcOUiK/SMw+kMWoMx9JFLPCM= Subject key identifier: 32:E9:EF:52:55:9D:03:C6:5E:53:A9:4C:D0:0D:BF:9B:C4:F2:D1:1B Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd Certificate serial: 019C4246A09B4B1879DC8FE9BA8FE8576B6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft Manifest number: 1010 Signing time: Mon 09 Feb 2026 12:00:50 +0000 Manifest this update: Mon 09 Feb 2026 12:00:50 +0000 Manifest next update: Tue 10 Feb 2026 12:00:50 +0000 Files and hashes: 1: R1-sQ-aIXEFJT-93CGHyULWdzGI.roa (hash: wTAnQ3p13dmuTH6bJb6Zb4Pwzwq21wLmg4ze6Go9HJA=) 2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: 04X+zwGZJOcY05tzeE5J/slAAQpjgDHn3sMs/D90u3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:a0:9b:4b:18:79:dc:8f:e9:ba:8f:e8:57:6b:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd Validity Not Before: Feb 9 12:00:50 2026 GMT Not After : Feb 10 12:00:50 2026 GMT Subject: CN=32e9ef52559d03c65e53a94cd00dbf9bc4f2d11b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:f3:11:c6:0f:eb:07:3d:24:0c:24:48:37: f5:b4:7c:38:27:ed:b3:ae:b7:2d:94:d2:ca:77:de: d5:f8:ba:42:c2:a6:a0:bb:7f:31:94:92:2d:09:bc: ae:51:77:55:40:74:77:9e:ef:6c:e5:75:f3:0a:07: fc:9b:ce:39:23:4b:e4:3b:df:32:c1:b2:94:8f:af: 61:75:a6:29:b3:00:15:25:c8:f0:8f:5c:f6:63:59: 2a:d3:b2:0b:9c:06:59:7a:29:d8:a0:88:bf:36:d5: 51:6a:75:e6:ed:bf:81:1b:80:2b:47:4a:f3:f2:bb: 11:92:29:97:b1:59:77:4d:f3:95:c3:a5:a7:a3:ae: 74:bc:4f:04:04:4a:eb:d9:21:30:af:84:ce:1b:36: f7:7f:37:97:f3:28:a3:d8:01:d0:f3:bf:1f:91:51: da:32:92:fc:9c:41:9a:6b:5b:c1:0c:94:cb:77:c7: 18:bf:5b:47:07:71:27:8a:bb:f8:b5:4b:52:22:46: 8a:4b:75:5d:2d:08:30:3a:d2:26:50:44:8d:00:3e: ef:f3:b1:4a:80:5d:7d:9c:ec:6b:5d:c3:7f:88:75: 77:0d:a6:71:e5:b5:e4:fe:5a:f4:d8:a5:78:ef:95: 17:f1:c6:ad:00:b8:6f:5a:a5:41:77:2e:56:4e:ab: d9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:E9:EF:52:55:9D:03:C6:5E:53:A9:4C:D0:0D:BF:9B:C4:F2:D1:1B X509v3 Authority Key Identifier: keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:3e:5e:ef:91:e3:44:36:50:22:9b:0b:fb:49:9c:88:05:7e: 40:6f:07:9b:9c:30:74:f0:2c:8e:64:c9:54:08:ca:a0:08:44: 04:6a:ea:6c:ef:3a:4c:3c:ec:b6:76:f5:b7:c9:60:d5:98:09: 41:f2:ef:ba:5f:be:25:c8:a2:b6:c5:83:62:05:15:9e:a6:93: 12:8e:0a:26:a7:13:99:e7:e1:d2:60:b4:d7:01:4d:5c:a4:76: 81:c7:50:3a:ce:fe:eb:4d:c7:6f:45:51:50:70:f0:1b:0a:a9: b5:cf:66:50:6f:d1:dc:9d:ee:cd:00:9b:93:3c:a2:59:4c:e5: 47:53:29:68:b1:28:ea:d4:84:8c:f2:af:c4:f5:d1:5e:fd:b2: 56:fc:d8:8c:bc:3e:ef:cb:64:10:f3:9e:03:23:f6:6a:3c:2c: 66:19:4a:41:6e:10:df:c0:86:25:aa:0a:ca:e1:83:6c:fa:34: 46:05:e2:03:38:e4:ae:56:5f:e2:2d:1a:37:0f:de:68:cb:66: b0:41:c8:9f:95:24:67:2d:90:83:12:00:fc:e0:d3:58:e5:3f: a4:ab:c0:c4:1e:21:7c:f6:4b:a5:a7:5a:77:41:12:c5:35:94: 0e:28:96:f8:40:49:0d:03:57:4e:99:86:a5:22:2e:47:c1:db: d6:cc:51:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqCbSxh53I/puo/oV2tqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMWU2NmVmYTAwNWE2ZGU1M2IxZDBjOTFmMzc1NTRiZGY0 Njc2YmQwHhcNMjYwMjA5MTIwMDUwWhcNMjYwMjEwMTIwMDUwWjAzMTEwLwYDVQQD EygzMmU5ZWY1MjU1OWQwM2M2NWU1M2E5NGNkMDBkYmY5YmM0ZjJkMTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAPzEcYP6wc9JAwkSDf1tHw4J+2z rrctlNLKd97V+LpCwqagu38xlJItCbyuUXdVQHR3nu9s5XXzCgf8m845I0vkO98y wbKUj69hdaYpswAVJcjwj1z2Y1kq07ILnAZZeinYoIi/NtVRanXm7b+BG4ArR0rz 8rsRkimXsVl3TfOVw6Wno650vE8EBErr2SEwr4TOGzb3fzeX8yij2AHQ878fkVHa MpL8nEGaa1vBDJTLd8cYv1tHB3Enirv4tUtSIkaKS3VdLQgwOtImUESNAD7v87FK gF19nOxrXcN/iHV3DaZx5bXk/lr02KV475UX8catALhvWqVBdy5WTqvZqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLp71JVnQPGXlOpTNANv5vE8tEbMB8GA1UdIwQY MBaAFLweZu+gBabeU7HQyR83VUvfRna9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iYjJiZGItNzQ3ZC00ODU1LTg5NDUt N2Y5YTNlNDUyNTZlLzEvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iYjJiZGItNzQ3ZC00ODU1LTg5NDUtN2Y5YTNlNDUyNTZl LzEvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATT5e75Hj RDZQIpsL+0mciAV+QG8Hm5wwdPAsjmTJVAjKoAhEBGrqbO86TDzstnb1t8lg1ZgJ QfLvul++JciitsWDYgUVnqaTEo4KJqcTmefh0mC01wFNXKR2gcdQOs7+603Hb0VR UHDwGwqptc9mUG/R3J3uzQCbkzyiWUzlR1MpaLEo6tSEjPKvxPXRXv2yVvzYjLw+ 78tkEPOeAyP2ajwsZhlKQW4Q38CGJaoKyuGDbPo0RgXiAzjkrlZf4i0aNw/eaMtm sEHIn5UkZy2QgxIA/ODTWOU/pKvAxB4hfPZLpadad0ESxTWUDiiW+EBJDQNXTpmG pSIuR8Hb1sxRiQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:21 2026 by rpki-client