This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json) Hash identifier: HNI/VrVScJID3qRqS4z1xUl8KrXeDxy94M3ow5iddbU= Subject key identifier: 4F:CC:AC:CA:A3:27:36:C7:39:D6:B5:77:22:92:4C:51:39:4E:AC:79 Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25 Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925 Certificate serial: 019C43902BFAC414341FBA68756426803CB2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft Manifest number: 1234 Signing time: Mon 09 Feb 2026 18:00:47 +0000 Manifest this update: Mon 09 Feb 2026 18:00:47 +0000 Manifest next update: Tue 10 Feb 2026 18:00:47 +0000 Files and hashes: 1: bC2nxaXOoHLRq70D4NmWbSzAMRA.roa (hash: Rlixk9Fe/cWKW5omfOghhyxI9gFtiGAWS+9ajtBV+dc=) 2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: aDtAt5Aw4HDBAJcNI7vhGPx0KwPa/nN7pX3pKFXILyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:2b:fa:c4:14:34:1f:ba:68:75:64:26:80:3c:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925 Validity Not Before: Feb 9 18:00:47 2026 GMT Not After : Feb 10 18:00:47 2026 GMT Subject: CN=4fccaccaa32736c739d6b57722924c51394eac79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:db:b0:98:7c:18:bd:72:92:f7:06:16:33: f8:da:41:6d:ce:55:cc:16:d0:f9:c2:66:27:2a:74: 07:f7:59:89:ec:6d:a5:ba:6f:f1:58:9d:72:17:18: 6f:82:73:ed:94:ba:47:80:74:67:47:3e:a8:5a:6a: c8:8e:8a:dc:5d:c3:a6:fe:fe:76:bb:ff:99:af:95: f1:f6:6e:a2:a2:7c:0c:8d:b4:cd:e2:fd:12:df:25: cf:27:5e:28:b1:5a:73:f1:b8:21:7c:c0:cc:d1:18: 7f:31:31:73:87:f1:c6:ef:1a:49:b7:0e:1e:d2:6e: 1a:ad:b6:23:60:9b:cf:19:df:17:d0:bc:e5:ca:2d: b6:06:11:32:45:6e:f7:6b:44:42:a3:b3:80:b1:82: 2b:eb:03:35:c0:c3:a0:02:22:de:22:38:20:91:28: db:aa:12:58:61:01:27:6d:9f:6f:28:f8:c0:f8:d1: af:e6:61:28:2d:c0:92:19:08:d8:f1:24:c9:a6:b0: ec:82:2c:24:77:38:83:b7:2d:35:d4:71:74:4a:91: 8a:78:c2:71:e8:58:87:db:5c:2f:30:58:08:53:bf: 74:8b:74:05:d5:fc:07:60:3c:bd:0a:29:27:c8:51: 0b:23:3a:6d:3e:90:04:70:8a:53:5c:ba:bf:49:22: 81:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:CC:AC:CA:A3:27:36:C7:39:D6:B5:77:22:92:4C:51:39:4E:AC:79 X509v3 Authority Key Identifier: keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:63:c1:a9:1b:33:25:f4:f3:1c:3e:84:fb:52:a3:9a:3c:61: 0c:4f:13:f2:96:7c:aa:80:8c:08:4e:a0:a6:41:8a:8a:27:75: a6:62:91:d1:9c:fd:2f:4e:ea:3b:7c:f2:44:d9:26:41:dc:b3: d9:88:b9:0c:77:a1:79:16:8c:4f:47:df:a0:5f:6b:5c:fa:ad: f4:3b:69:73:2a:65:8a:0b:c7:d5:37:e8:73:50:88:b4:45:aa: 07:95:5d:a0:9c:3e:0d:0e:e9:07:ac:55:3a:01:dd:a4:c4:c2: e7:3d:83:62:14:d4:d7:11:08:75:1e:19:f3:51:9d:1b:ed:ad: 20:d0:dd:36:49:b4:59:0e:06:d5:67:d8:44:e5:97:5e:2c:13: 59:17:99:54:fe:d5:0a:ed:97:e6:4f:c5:11:1a:0d:8f:21:75: d0:13:bc:21:6d:32:ef:6f:8d:ec:ca:ac:96:8f:ea:17:2f:ff: 82:0b:48:a0:a2:fc:ce:da:b6:dd:f3:77:22:92:08:b1:33:46: cf:5e:6e:46:25:a2:77:db:8e:31:ec:f2:f6:fc:7d:a5:03:49: 0e:8a:e7:99:5c:4a:9e:61:02:ce:97:75:0b:74:2d:ca:a7:b4: ab:08:b1:87:2d:26:a6:d6:ad:85:fd:4e:78:e5:a4:c8:b6:29: b6:3c:6e:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkCv6xBQ0H7podWQmgDyyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjY2NjOGY0YjM3ZDg5MjI4Y2QwMjNkMjUyMWQyOTk2OGRl MGI5MjUwHhcNMjYwMjA5MTgwMDQ3WhcNMjYwMjEwMTgwMDQ3WjAzMTEwLwYDVQQD Eyg0ZmNjYWNjYWEzMjczNmM3MzlkNmI1NzcyMjkyNGM1MTM5NGVhYzc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwfbsJh8GL1ykvcGFjP42kFtzlXM FtD5wmYnKnQH91mJ7G2lum/xWJ1yFxhvgnPtlLpHgHRnRz6oWmrIjorcXcOm/v52 u/+Zr5Xx9m6ionwMjbTN4v0S3yXPJ14osVpz8bghfMDM0Rh/MTFzh/HG7xpJtw4e 0m4arbYjYJvPGd8X0Lzlyi22BhEyRW73a0RCo7OAsYIr6wM1wMOgAiLeIjggkSjb qhJYYQEnbZ9vKPjA+NGv5mEoLcCSGQjY8STJprDsgiwkdziDty011HF0SpGKeMJx 6FiH21wvMFgIU790i3QF1fwHYDy9CiknyFELIzptPpAEcIpTXLq/SSKBpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/MrMqjJzbHOda1dyKSTFE5Tqx5MB8GA1UdIwQY MBaAFLzMyPSzfYkijNAj0lIdKZaN4LklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYt MDIxNWM0ZWFhN2MzLzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYtMDIxNWM0ZWFhN2Mz LzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmPBqRsz JfTzHD6E+1KjmjxhDE8T8pZ8qoCMCE6gpkGKiid1pmKR0Zz9L07qO3zyRNkmQdyz 2Yi5DHeheRaMT0ffoF9rXPqt9DtpcypligvH1Tfoc1CItEWqB5VdoJw+DQ7pB6xV OgHdpMTC5z2DYhTU1xEIdR4Z81GdG+2tINDdNkm0WQ4G1WfYROWXXiwTWReZVP7V Cu2X5k/FERoNjyF10BO8IW0y72+N7Mqslo/qFy//ggtIoKL8ztq23fN3IpIIsTNG z15uRiWid9uOMezy9vx9pQNJDornmVxKnmECzpd1C3Qtyqe0qwixhy0mptathf1O eOWkyLYptjxu+w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:12 2026 by rpki-client