This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json) Hash identifier: m8rsVutXIkHhn9w6IR+cE+ZZugI8voF6CHEB5uYXCek= Subject key identifier: 64:7F:D6:54:75:D1:D3:A6:D5:85:6A:04:CC:95:6D:3A:75:31:85:CA Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5 Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5 Certificate serial: 019C43905A794B4580CD242E2088203E712E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft Manifest number: 0D45 Signing time: Mon 09 Feb 2026 18:00:59 +0000 Manifest this update: Mon 09 Feb 2026 18:00:59 +0000 Manifest next update: Tue 10 Feb 2026 18:00:59 +0000 Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: GzU+Oy90yJuE3VieziifziOdacRDdVsStZYnVDlVVaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:5a:79:4b:45:80:cd:24:2e:20:88:20:3e:71:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5 Validity Not Before: Feb 9 18:00:59 2026 GMT Not After : Feb 10 18:00:59 2026 GMT Subject: CN=647fd65475d1d3a6d5856a04cc956d3a753185ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:50:84:00:bf:ec:db:41:3e:ce:63:a6:04:69: d7:c0:5f:6d:26:64:52:ce:bb:4d:04:31:ae:e5:d2: 05:51:31:ec:76:d6:14:11:11:26:5b:e8:dd:1c:85: 01:f6:c8:c7:a6:f9:66:d1:36:2f:85:3d:6d:7e:4c: 16:81:e0:32:7e:ab:09:bb:df:e1:e9:05:a9:83:2d: 5f:3f:a1:60:7a:49:48:0d:50:c2:b9:f5:0e:be:2e: 6d:82:fd:a4:b7:9e:8a:23:e6:86:db:79:6c:a8:b9: c7:9a:c9:59:da:5c:e3:df:6c:a9:33:ef:dc:e7:16: 4d:b8:f0:35:42:2d:8d:b2:6e:59:4c:9c:2a:da:d6: 97:12:7e:89:47:62:b2:3a:ca:93:5e:91:97:21:63: 30:b0:ed:fb:0c:f8:2a:6f:40:d5:a5:f3:6f:b6:dd: 66:72:b2:1d:a6:d7:ff:06:3b:e1:3e:99:94:e9:f9: 98:14:fd:60:b5:b1:83:a7:8b:91:a3:f6:73:56:6e: 3c:03:80:29:52:1e:83:5d:82:51:52:04:b4:5f:08: 19:00:92:14:e8:d8:09:35:ce:c7:b6:b8:2b:40:e5: 15:9d:75:d4:65:3c:21:04:65:83:b4:f2:57:de:df: a2:7f:7b:fd:00:71:6e:c9:8c:39:f5:e7:68:28:68: a6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:7F:D6:54:75:D1:D3:A6:D5:85:6A:04:CC:95:6D:3A:75:31:85:CA X509v3 Authority Key Identifier: keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:93:e9:bb:e2:9e:76:45:55:17:38:19:4e:fd:5b:fe:a5:42: 59:28:f8:44:d0:05:8d:b5:a1:4a:81:ab:3b:b9:38:f3:7e:4e: 60:a9:42:85:5e:51:27:d3:dc:81:33:dd:02:b6:a5:85:6c:a0: c8:82:34:7e:ab:c8:33:da:10:d2:c8:ee:06:73:49:ab:eb:a6: 7f:c7:1d:d3:a6:74:27:3d:b2:e2:64:f1:93:28:a3:eb:ef:a3: 03:f1:77:f2:50:a9:b3:82:0b:0f:eb:37:a0:29:ad:28:fb:5f: bc:58:e9:16:a1:fb:06:d1:11:bb:94:35:64:62:2a:55:f2:e4: 30:e4:85:c4:dc:71:ba:4c:43:a3:f2:a6:34:52:38:83:58:e1: aa:3e:33:9b:b9:46:d0:5a:d6:a3:bf:e8:2a:93:55:30:25:c3: fd:f3:f6:c8:98:d7:79:13:35:67:c8:b8:6b:d9:2d:c5:4a:91: c9:bb:87:93:96:97:a3:f4:f3:f9:e3:10:44:99:de:8b:b3:b7: 55:9e:e2:10:00:c4:ea:4b:0a:c3:07:c5:98:6f:f6:cd:48:07: 5a:b7:bf:30:14:14:ca:87:45:e1:63:5f:5c:c0:fe:d1:6a:19: 6c:19:7b:2f:42:23:7f:da:8b:71:47:8f:10:00:fb:56:8e:01: cc:79:36:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFp5S0WAzSQuIIggPnEuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNDk0MmJiN2JkMjRjYWRiNzQ4NWU4Y2VhNTkyNTA5YTNj N2RhZjUwHhcNMjYwMjA5MTgwMDU5WhcNMjYwMjEwMTgwMDU5WjAzMTEwLwYDVQQD Eyg2NDdmZDY1NDc1ZDFkM2E2ZDU4NTZhMDRjYzk1NmQzYTc1MzE4NWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVCEAL/s20E+zmOmBGnXwF9tJmRS zrtNBDGu5dIFUTHsdtYUEREmW+jdHIUB9sjHpvlm0TYvhT1tfkwWgeAyfqsJu9/h 6QWpgy1fP6FgeklIDVDCufUOvi5tgv2kt56KI+aG23lsqLnHmslZ2lzj32ypM+/c 5xZNuPA1Qi2Nsm5ZTJwq2taXEn6JR2KyOsqTXpGXIWMwsO37DPgqb0DVpfNvtt1m crIdptf/BjvhPpmU6fmYFP1gtbGDp4uRo/ZzVm48A4ApUh6DXYJRUgS0XwgZAJIU 6NgJNc7HtrgrQOUVnXXUZTwhBGWDtPJX3t+if3v9AHFuyYw59edoKGimvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGR/1lR10dOm1YVqBMyVbTp1MYXKMB8GA1UdIwQY MBaAFL9JQrt70kytt0hejOpZJQmjx9r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBsQ3UzdlNUSzIzU0Y2TTZsa2xDYVBIMnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hZDJjNDItNGQ4MS00MDdhLWE2NmIt MmY5NDI1OGFiNjliLzEvdjBsQ3UzdlNUSzIzU0Y2TTZsa2xDYVBIMnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9hZDJjNDItNGQ4MS00MDdhLWE2NmItMmY5NDI1OGFiNjli LzEvdjBsQ3UzdlNUSzIzU0Y2TTZsa2xDYVBIMnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS5Ppu+Ke dkVVFzgZTv1b/qVCWSj4RNAFjbWhSoGrO7k4835OYKlChV5RJ9PcgTPdAralhWyg yII0fqvIM9oQ0sjuBnNJq+umf8cd06Z0Jz2y4mTxkyij6++jA/F38lCps4ILD+s3 oCmtKPtfvFjpFqH7BtERu5Q1ZGIqVfLkMOSFxNxxukxDo/KmNFI4g1jhqj4zm7lG 0FrWo7/oKpNVMCXD/fP2yJjXeRM1Z8i4a9ktxUqRybuHk5aXo/Tz+eMQRJnei7O3 VZ7iEADE6ksKwwfFmG/2zUgHWre/MBQUyodF4WNfXMD+0WoZbBl7L0Ijf9qLcUeP EAD7Vo4BzHk2yQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:45 2026 by rpki-client