This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft File: vfyFyRfr69yH36Ne4JvEAoX19Ac.mft (raw, json) Hash identifier: V52PHApOA1wuZRrgmXlPyStV/dCBobwaFNLworKCx2Q= Subject key identifier: A8:F0:AD:30:D3:1D:61:40:04:8F:05:EE:E4:A4:5D:F3:81:D2:D2:0D Authority key identifier: BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07 Certificate issuer: /CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407 Certificate serial: 019C42EB769C2F47F40E34A2FBCFA7CEB271 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft Manifest number: 04D1 Signing time: Mon 09 Feb 2026 15:00:53 +0000 Manifest this update: Mon 09 Feb 2026 15:00:53 +0000 Manifest next update: Tue 10 Feb 2026 15:00:53 +0000 Files and hashes: 1: vfyFyRfr69yH36Ne4JvEAoX19Ac.crl (hash: SPl58GwOPoeahA2F3k57AFJ+VC8bxMprHlTl6844fLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:76:9c:2f:47:f4:0e:34:a2:fb:cf:a7:ce:b2:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407 Validity Not Before: Feb 9 15:00:53 2026 GMT Not After : Feb 10 15:00:53 2026 GMT Subject: CN=a8f0ad30d31d6140048f05eee4a45df381d2d20d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7e:d4:0f:49:38:0c:7d:db:3b:e9:18:0b:2a: c0:8f:17:ae:63:08:d0:94:b6:ff:fd:e4:0d:97:62: b5:d5:df:9d:b8:2b:60:58:b3:19:f6:b0:4e:d2:98: a9:85:2c:68:ff:aa:81:c5:fd:93:02:d9:63:5b:7b: 22:e3:18:bd:25:c6:7b:22:9f:63:6b:33:1c:9f:95: 2b:52:4b:d5:01:b3:96:6a:fd:0b:2e:1d:e7:62:9e: 2b:48:f8:d5:96:ad:7a:44:52:28:16:5f:75:69:0a: 54:fd:a3:b2:59:d2:60:a1:3d:36:ce:fb:a5:94:80: d9:59:4d:b7:6f:c4:ce:cd:cd:88:a6:f7:1f:bb:67: 6d:44:ae:bb:79:89:e9:bc:bc:ed:56:55:4b:88:1b: f9:01:02:86:4e:6b:c6:e0:7a:96:e7:4a:4e:6a:68: 90:ca:db:db:73:d3:77:96:97:43:f0:2a:96:93:06: bd:77:1c:c8:6b:22:0f:ac:df:32:a1:2b:8b:52:55: 94:eb:0a:77:cf:fb:14:9a:39:c3:fb:91:ab:0b:3a: 26:11:27:5e:59:0e:96:27:81:58:3a:44:c0:b3:bf: 1d:3b:09:ed:78:46:38:41:53:08:a1:73:f4:5e:38: 01:92:a4:3d:04:08:0c:1e:47:83:d7:d0:f4:12:9a: a9:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:F0:AD:30:D3:1D:61:40:04:8F:05:EE:E4:A4:5D:F3:81:D2:D2:0D X509v3 Authority Key Identifier: keyid:BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:0b:ab:80:bd:94:46:19:ad:ce:d1:41:69:bc:79:13:f2:0a: 00:ef:56:21:c9:6c:8f:76:6d:2f:7b:c5:d7:c0:9d:de:a8:0c: dc:c2:3f:03:23:bc:2e:0f:57:50:35:77:fc:9b:b4:21:57:ca: da:c2:5b:76:03:fe:55:7a:e6:98:73:9d:a4:da:0d:21:23:68: a3:e5:fb:dd:f1:a3:96:49:e1:8d:eb:ef:76:40:e2:b7:f6:8f: 52:7b:8c:87:37:17:87:56:c1:09:ee:01:9f:d0:03:00:e2:e4: ac:5a:d6:c2:1d:2f:8a:9d:de:62:ba:17:0c:71:5f:10:e9:92: e7:b4:82:eb:5f:2c:d5:64:98:11:3c:66:93:5a:2c:bd:3b:d0: af:6c:ee:be:8b:1b:ad:d2:b8:d5:0f:74:f5:ff:e5:04:a8:96: 20:c3:ae:24:e3:b1:b8:c5:a4:b0:e6:0b:53:34:5e:38:ca:96: 5b:0e:b1:03:c6:d2:91:21:69:86:1b:5b:ca:38:be:d7:c3:1f: e7:58:c5:50:2b:d9:53:5a:2c:aa:d8:1a:38:17:de:22:69:d9: db:95:7f:af:fa:81:d1:ed:f9:a6:1a:0b:e1:dc:da:71:7a:cd: fd:36:13:25:6e:8c:fa:6c:f2:25:1e:f0:b1:6d:47:43:1a:0d: d4:fb:c3:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63acL0f0DjSi+8+nzrJxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmM4NWM5MTdlYmViZGM4N2RmYTM1ZWUwOWJjNDAyODVm NWY0MDcwHhcNMjYwMjA5MTUwMDUzWhcNMjYwMjEwMTUwMDUzWjAzMTEwLwYDVQQD EyhhOGYwYWQzMGQzMWQ2MTQwMDQ4ZjA1ZWVlNGE0NWRmMzgxZDJkMjBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH7UD0k4DH3bO+kYCyrAjxeuYwjQ lLb//eQNl2K11d+duCtgWLMZ9rBO0piphSxo/6qBxf2TAtljW3si4xi9JcZ7Ip9j azMcn5UrUkvVAbOWav0LLh3nYp4rSPjVlq16RFIoFl91aQpU/aOyWdJgoT02zvul lIDZWU23b8TOzc2Ipvcfu2dtRK67eYnpvLztVlVLiBv5AQKGTmvG4HqW50pOamiQ ytvbc9N3lpdD8CqWkwa9dxzIayIPrN8yoSuLUlWU6wp3z/sUmjnD+5GrCzomESde WQ6WJ4FYOkTAs78dOwnteEY4QVMIoXP0XjgBkqQ9BAgMHkeD19D0EpqpGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjwrTDTHWFABI8F7uSkXfOB0tINMB8GA1UdIwQY MBaAFL38hckX6+vch9+jXuCbxAKF9fQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hZDBlMjItMjQ0OS00MWUyLTkzNjct N2JhZDk0NTdhNDJmLzEvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hZDBlMjItMjQ0OS00MWUyLTkzNjctN2JhZDk0NTdhNDJm LzEvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgurgL2U RhmtztFBabx5E/IKAO9WIclsj3ZtL3vF18Cd3qgM3MI/AyO8Lg9XUDV3/Ju0IVfK 2sJbdgP+VXrmmHOdpNoNISNoo+X73fGjlknhjevvdkDit/aPUnuMhzcXh1bBCe4B n9ADAOLkrFrWwh0vip3eYroXDHFfEOmS57SC618s1WSYETxmk1osvTvQr2zuvosb rdK41Q909f/lBKiWIMOuJOOxuMWksOYLUzReOMqWWw6xA8bSkSFphhtbyji+18Mf 51jFUCvZU1osqtgaOBfeImnZ25V/r/qB0e35phoL4dzacXrN/TYTJW6M+mzyJR7w sW1HQxoN1PvD8A== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:20 2026 by rpki-client