This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft File: VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft (raw, json) Hash identifier: v0mPrOs3ifLG9xf0Gkdueb51IbsTdLGQPB5RnkEm6tk= Subject key identifier: 82:0C:9B:8C:88:17:7D:19:91:86:94:68:F6:2C:B4:7C:9B:BB:0F:52 Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59 Certificate issuer: /CN=5420cc313d6913848e00e1ff5782e394c1f60159 Certificate serial: 019C4359359FF0EE998F84E6AF94FC36C437 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft Manifest number: 15 Signing time: Mon 09 Feb 2026 17:00:45 +0000 Manifest this update: Mon 09 Feb 2026 17:00:45 +0000 Manifest next update: Tue 10 Feb 2026 17:00:45 +0000 Files and hashes: 1: VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl (hash: 3LtR2cexjt/JDEW/dPMVaNV+Pj1buH1vnCQn2lzJlmw=) 2: h-6Hikp9cHcZOssU1183HN4wp4Y.roa (hash: R00HdvW9D6DfIfs8gclp/aguSIWpcB6sdyY5Ji+wu6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:35:9f:f0:ee:99:8f:84:e6:af:94:fc:36:c4:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159 Validity Not Before: Feb 9 17:00:45 2026 GMT Not After : Feb 10 17:00:45 2026 GMT Subject: CN=820c9b8c88177d1991869468f62cb47c9bbb0f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5d:0b:44:ea:aa:54:be:cf:1f:ad:2d:08:12: 20:9d:12:4e:3e:04:1e:4d:51:14:0e:54:e0:be:1f: 52:05:18:22:29:aa:b5:2a:a0:ed:29:b1:2e:7b:af: a2:1d:c7:02:42:d4:3f:f0:1b:5d:57:56:6a:ce:9b: 3c:aa:db:e0:16:1b:79:51:fc:7e:71:c3:4d:b6:f4: 9a:16:3b:4d:ce:21:7d:b3:38:b8:52:dd:d7:16:3a: 77:85:97:46:64:7f:73:2a:10:64:8e:24:08:e5:35: a4:7b:2c:d3:42:99:2b:6c:b2:b3:11:ae:f9:ee:85: ec:9f:18:bb:2d:ca:79:f3:a6:53:ee:6a:bc:bd:44: 83:20:2d:4a:3e:8f:5e:08:33:11:86:0a:90:9d:d6: 74:ba:80:20:f6:ca:aa:1a:0e:7b:6d:19:cc:99:80: 2f:a0:f1:25:3b:6a:73:d0:bb:83:67:36:84:1f:c1: 7c:93:42:3b:7c:55:58:5e:8e:00:1f:d2:18:24:ed: 6f:42:95:cd:9c:d4:42:e8:03:da:e5:63:a7:e5:15: b5:20:b4:fe:d2:83:7f:dc:76:dd:94:3b:db:93:a2: 77:53:85:1e:d0:62:d9:71:49:ed:fb:31:c9:86:ac: cb:aa:a4:09:e8:9a:32:14:f0:f3:ac:05:0c:f1:3b: 14:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0C:9B:8C:88:17:7D:19:91:86:94:68:F6:2C:B4:7C:9B:BB:0F:52 X509v3 Authority Key Identifier: keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:98:0c:9b:b5:9e:4c:71:f3:08:65:c2:0d:2d:aa:36:7a:5c: 91:d5:95:5f:5f:f1:77:97:b6:fb:33:a8:14:14:b1:29:dc:62: 92:56:86:c5:c6:5f:41:e7:61:ec:c4:11:4d:ca:d0:fd:ce:e7: 09:74:50:2f:6c:99:a3:5a:7f:e2:5b:b7:4d:cd:e8:0f:97:5a: ef:2b:a3:1f:1c:97:39:10:5a:90:35:ca:d6:a3:34:ab:5b:7b: 54:76:b7:44:12:08:dc:c6:70:dc:90:27:ee:e6:16:7f:ed:b3: b4:3a:d8:36:20:1e:78:e2:a9:cb:b9:08:8a:a2:4e:c2:5e:0c: 10:dc:4f:16:9c:d2:db:e0:79:ad:fc:95:2b:13:6a:77:81:9a: c1:b7:1f:5c:3b:d3:6c:0a:8f:e4:ce:a5:34:ce:aa:37:82:a9: 82:7c:4d:5d:c9:b5:38:ae:70:a9:6c:e8:7a:36:f0:04:4c:0e: 41:bc:9e:ca:d7:c6:1f:56:45:5a:72:63:3e:45:7d:ad:43:68: c4:4f:78:8e:07:ad:4d:92:e5:86:56:a7:aa:3f:4c:1b:01:b5: 46:7b:a5:4e:04:95:ca:00:f1:5a:5e:67:58:9c:ef:9f:9e:57: 0b:ff:a2:75:7b:11:2f:53:75:df:8b:53:f3:2f:18:17:09:e9: b7:aa:12:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTWf8O6Zj4Tmr5T8NsQ3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MjBjYzMxM2Q2OTEzODQ4ZTAwZTFmZjU3ODJlMzk0YzFm NjAxNTkwHhcNMjYwMjA5MTcwMDQ1WhcNMjYwMjEwMTcwMDQ1WjAzMTEwLwYDVQQD Eyg4MjBjOWI4Yzg4MTc3ZDE5OTE4Njk0NjhmNjJjYjQ3YzliYmIwZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV0LROqqVL7PH60tCBIgnRJOPgQe TVEUDlTgvh9SBRgiKaq1KqDtKbEue6+iHccCQtQ/8BtdV1Zqzps8qtvgFht5Ufx+ ccNNtvSaFjtNziF9szi4Ut3XFjp3hZdGZH9zKhBkjiQI5TWkeyzTQpkrbLKzEa75 7oXsnxi7Lcp586ZT7mq8vUSDIC1KPo9eCDMRhgqQndZ0uoAg9sqqGg57bRnMmYAv oPElO2pz0LuDZzaEH8F8k0I7fFVYXo4AH9IYJO1vQpXNnNRC6APa5WOn5RW1ILT+ 0oN/3HbdlDvbk6J3U4Ue0GLZcUnt+zHJhqzLqqQJ6JoyFPDzrAUM8TsU7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIIMm4yIF30ZkYaUaPYstHybuw9SMB8GA1UdIwQY MBaAFFQgzDE9aROEjgDh/1eC45TB9gFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYt ZjBkNWE5YmU3YzJiLzEvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9jM2MyNDYtYjg3ZS00MGUwLTkyNDYtZjBkNWE5YmU3YzJi LzEvVkNETU1UMXBFNFNPQU9IX1Y0TGpsTUgyQVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZgMm7We THHzCGXCDS2qNnpckdWVX1/xd5e2+zOoFBSxKdxiklaGxcZfQedh7MQRTcrQ/c7n CXRQL2yZo1p/4lu3Tc3oD5da7yujHxyXORBakDXK1qM0q1t7VHa3RBII3MZw3JAn 7uYWf+2ztDrYNiAeeOKpy7kIiqJOwl4MENxPFpzS2+B5rfyVKxNqd4GawbcfXDvT bAqP5M6lNM6qN4KpgnxNXcm1OK5wqWzoejbwBEwOQbyeytfGH1ZFWnJjPkV9rUNo xE94jgetTZLlhlanqj9MGwG1RnulTgSVygDxWl5nWJzvn55XC/+idXsRL1N134tT 8y8YFwnpt6oSDA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:35 2026 by rpki-client