This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json) Hash identifier: hMtGde/Esx1jC8FCFag4cPI7dP8p1D+sML7RHlWo5x0= Subject key identifier: 64:96:45:10:97:FD:2B:70:14:6B:30:E6:05:4D:B7:0A:26:C7:54:81 Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99 Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99 Certificate serial: 019C420F78A2E0538B8EE61E99A0B8E76C6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft Manifest number: 1204 Signing time: Mon 09 Feb 2026 11:00:35 +0000 Manifest this update: Mon 09 Feb 2026 11:00:35 +0000 Manifest next update: Tue 10 Feb 2026 11:00:35 +0000 Files and hashes: 1: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: jrJILX6qajL/aJpMQNiatPf6SUZHVhyM7qobFm8Lr88=) 2: i7eXSggzIa8jg89Jivwa78vJNEM.roa (hash: UXM3SC+hGfgrD/liPgCeamJJIYAqzLm8hy7hdC8Ta6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:78:a2:e0:53:8b:8e:e6:1e:99:a0:b8:e7:6c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99 Validity Not Before: Feb 9 11:00:35 2026 GMT Not After : Feb 10 11:00:35 2026 GMT Subject: CN=6496451097fd2b70146b30e6054db70a26c75481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:b7:f2:9d:03:16:bc:5e:b0:83:ef:7f:87: 2b:aa:86:7d:43:cb:97:1b:c0:82:dd:b7:34:11:89: d1:91:de:8a:33:ca:b1:76:f3:66:56:d4:a0:23:5d: a4:76:71:b7:0c:00:d8:74:64:a7:f6:44:6b:fd:c8: 77:25:8b:22:26:30:4a:50:be:1c:5d:bd:79:36:6d: 76:67:58:12:53:82:5d:d9:5e:85:c6:ca:df:65:01: 69:06:5c:a0:49:b7:07:60:75:53:6c:d4:83:08:3a: fc:cb:c1:e1:8f:0b:2e:b1:25:62:89:d8:46:71:32: cf:f6:fe:4a:82:97:c7:b4:c0:9f:95:3f:61:f3:00: d9:3d:22:c3:61:51:0a:1e:c1:f6:26:3b:21:13:db: c7:89:b0:f6:bf:2c:e8:f3:bf:c2:6a:28:6d:d2:e2: 3b:f9:17:ac:a1:72:dd:8d:80:b0:de:cd:f3:06:a2: 56:c1:fa:12:e9:f1:f6:5a:96:68:56:13:6b:8f:57: cb:87:10:05:19:e0:be:c0:f3:5a:44:8d:1c:ad:6b: 36:7c:88:45:49:bb:ec:31:9b:8e:f0:00:da:5e:c2: 55:e7:2d:14:c1:40:6b:aa:29:d2:65:f8:9b:30:f6: e7:73:7e:c5:e1:15:f1:2e:57:09:cd:5b:64:dd:1c: e6:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:96:45:10:97:FD:2B:70:14:6B:30:E6:05:4D:B7:0A:26:C7:54:81 X509v3 Authority Key Identifier: keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:53:1b:4c:96:1c:ff:f3:04:e4:c0:4b:a2:dc:19:d0:b2:89: 6a:c1:7d:bd:3d:4f:d5:5e:30:a0:24:4a:9c:5c:2c:1a:f0:2e: b9:a4:86:09:a6:95:68:f5:e7:89:85:fa:6b:dc:d2:60:08:15: 96:e9:a2:05:9d:c1:22:c4:54:06:e5:6b:e9:45:70:fd:4d:b8: cc:3a:57:49:59:7f:bc:39:62:7e:59:c5:43:71:37:3d:bf:d6: df:1d:51:36:cc:8f:a2:7e:b2:4b:a4:ba:13:ad:72:af:74:c7: e8:1a:d1:8f:11:9f:ba:65:8e:ce:93:a8:8f:5b:d5:d5:6d:af: bc:19:52:76:12:07:02:d6:30:49:32:8f:e7:c7:b2:80:0f:43: fb:8e:08:1f:ae:85:6f:e3:24:9e:8c:89:2a:1c:45:59:2d:70: ed:03:cb:97:6b:f2:ea:6a:29:38:03:e2:d3:b6:d4:0f:57:a4: 51:4c:cc:90:df:8b:c1:9d:74:9a:e5:9c:53:5a:b4:a3:51:74: 19:9f:cd:92:01:a8:ed:bd:f2:49:6a:1d:5f:7d:65:d5:ac:89: 5f:00:de:51:76:c8:53:5e:2d:cb:96:da:1e:ef:10:80:78:01: 43:b8:9f:5c:5f:21:71:77:a0:f0:af:cb:e2:77:0f:21:07:4a: 0f:47:3c:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD3ii4FOLjuYemaC452xqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGM0Zjc0MmZkMzI5YTM2ZmNkMjljNGViOTg0ZTVmNDk1 MTVkOTkwHhcNMjYwMjA5MTEwMDM1WhcNMjYwMjEwMTEwMDM1WjAzMTEwLwYDVQQD Eyg2NDk2NDUxMDk3ZmQyYjcwMTQ2YjMwZTYwNTRkYjcwYTI2Yzc1NDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rm38p0DFrxesIPvf4crqoZ9Q8uX G8CC3bc0EYnRkd6KM8qxdvNmVtSgI12kdnG3DADYdGSn9kRr/ch3JYsiJjBKUL4c Xb15Nm12Z1gSU4Jd2V6FxsrfZQFpBlygSbcHYHVTbNSDCDr8y8HhjwsusSViidhG cTLP9v5KgpfHtMCflT9h8wDZPSLDYVEKHsH2JjshE9vHibD2vyzo87/Caiht0uI7 +ResoXLdjYCw3s3zBqJWwfoS6fH2WpZoVhNrj1fLhxAFGeC+wPNaRI0crWs2fIhF SbvsMZuO8ADaXsJV5y0UwUBrqinSZfibMPbnc37F4RXxLlcJzVtk3RzmPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSWRRCX/StwFGsw5gVNtwomx1SBMB8GA1UdIwQY MBaAFFQMT3Qv0ymjb80pxOuYTl9JUV2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQt Y2ZiMGQwNDkzYzNhLzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQtY2ZiMGQwNDkzYzNh LzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVMbTJYc //ME5MBLotwZ0LKJasF9vT1P1V4woCRKnFwsGvAuuaSGCaaVaPXniYX6a9zSYAgV lumiBZ3BIsRUBuVr6UVw/U24zDpXSVl/vDliflnFQ3E3Pb/W3x1RNsyPon6yS6S6 E61yr3TH6BrRjxGfumWOzpOoj1vV1W2vvBlSdhIHAtYwSTKP58eygA9D+44IH66F b+MknoyJKhxFWS1w7QPLl2vy6mopOAPi07bUD1ekUUzMkN+LwZ10muWcU1q0o1F0 GZ/NkgGo7b3ySWodX31l1ayJXwDeUXbIU14ty5baHu8QgHgBQ7ifXF8hcXeg8K/L 4ncPIQdKD0c8Mw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:29 2026 by rpki-client