This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json) Hash identifier: 4SAVBFb6TI6A/iqCxPGEAbZSbxQ2W5IzuOxGcjMbpS4= Subject key identifier: 28:05:A2:01:51:C0:57:F7:A5:B2:FB:16:B6:76:AC:4D:A2:14:F5:4D Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7 Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7 Certificate serial: 019C42B47DC53438CCFA8FEF6EE42366E51F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 14:00:50 +0000 Manifest this update: Mon 09 Feb 2026 14:00:50 +0000 Manifest next update: Tue 10 Feb 2026 14:00:50 +0000 Files and hashes: 1: bxJ1fILKZ3dmxbFS2ZOc_Hfr9Ik.roa (hash: brHlGv5imLHwbxwJPoUHI3T7npY3uz8hyi909TKqiCI=) 2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: ug38uwN3939/5WKylR8IrbissGshE2Fmk3bSt8uoDIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:7d:c5:34:38:cc:fa:8f:ef:6e:e4:23:66:e5:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7 Validity Not Before: Feb 9 14:00:50 2026 GMT Not After : Feb 10 14:00:50 2026 GMT Subject: CN=2805a20151c057f7a5b2fb16b676ac4da214f54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:2b:be:04:24:05:b2:d8:5d:e0:81:7c:85: 93:22:85:29:9a:05:02:37:3a:3c:8f:d5:a7:5a:90: 31:32:0c:83:5b:7d:ac:56:53:46:d5:19:86:74:39: a5:98:74:97:8d:91:99:4c:9a:f1:6e:5b:39:8d:56: fd:f7:ce:67:a1:e0:b0:1e:b2:97:b6:da:da:5c:68: aa:f8:ce:2e:6c:a9:91:03:0d:c0:25:f0:5b:2a:35: 90:c4:60:a1:3a:77:6a:48:f0:10:ed:9c:60:4b:e7: a6:16:bc:f1:e1:70:6c:a1:f3:da:22:b8:39:70:e5: fd:30:ac:83:b4:86:3f:a3:8c:f7:2d:4f:b3:19:fa: 58:11:72:64:c2:58:08:93:50:43:eb:47:48:87:d6: d5:5f:99:f4:f3:b7:62:7b:a2:e8:7f:c4:6a:f2:ea: 74:71:c3:64:bb:30:b6:83:0f:ba:a9:0e:be:94:b2: 4d:1d:c5:3b:40:cc:e3:01:53:a3:62:09:99:fb:43: 3e:e6:37:49:d0:c9:e2:c1:a1:f6:b0:d6:da:a4:f0: 4d:39:4c:d0:e0:7f:5c:3d:56:62:9f:d0:b5:80:89: aa:5b:cd:3c:80:d5:45:f9:0f:f5:cb:83:60:a4:85: 63:d5:49:40:57:ba:59:41:8b:48:de:5b:72:21:6c: b0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:05:A2:01:51:C0:57:F7:A5:B2:FB:16:B6:76:AC:4D:A2:14:F5:4D X509v3 Authority Key Identifier: keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:1f:0b:cd:66:c4:b1:3a:89:f3:1b:d9:51:b8:58:6e:f9:7c: ac:85:b2:9d:ff:1b:cf:cc:57:fe:02:3d:69:22:4c:49:ab:65: ce:ff:e6:87:bd:02:08:8d:01:ca:02:f2:9d:09:13:b7:c8:c4: e8:61:bf:69:9f:28:29:55:16:b4:2a:a6:f1:79:1a:76:48:af: aa:80:df:11:af:6a:a0:3b:22:2e:c6:17:ec:62:d6:4a:6d:35: a5:9c:81:6c:53:1f:fe:2d:3a:04:ee:6a:bd:28:e1:cc:87:fd: b3:c3:6a:67:92:f2:e0:44:f8:7f:3e:8a:0f:5f:12:25:42:6b: d1:5e:e9:0a:36:22:36:28:7e:84:23:27:55:90:98:d0:6a:51: 30:8e:c0:d4:da:52:de:d8:70:b2:fc:bc:ee:1f:1b:07:c3:78: d0:6c:37:df:0c:e2:65:c9:00:56:0e:1f:7a:4f:ca:3c:43:de: 7c:8e:b8:0e:78:f8:45:b4:5c:02:a1:4d:24:79:5f:83:7e:53: 63:c8:19:b2:da:2a:27:51:b7:df:4f:b6:8d:25:07:74:a9:d7: 77:dd:2e:1d:d9:50:40:5c:95:38:29:bc:ef:30:1c:32:7e:87: 1e:d4:ea:4c:4a:1d:d0:3d:cd:35:7a:71:d4:81:d1:79:98:e6: 8e:20:0c:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtH3FNDjM+o/vbuQjZuUfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTlkNTA4NjM2OTA3NmE3OGQ3NjE2MzhiMzJhOGE5Yjhl ZjcwZTcwHhcNMjYwMjA5MTQwMDUwWhcNMjYwMjEwMTQwMDUwWjAzMTEwLwYDVQQD EygyODA1YTIwMTUxYzA1N2Y3YTViMmZiMTZiNjc2YWM0ZGEyMTRmNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspQrvgQkBbLYXeCBfIWTIoUpmgUC Nzo8j9WnWpAxMgyDW32sVlNG1RmGdDmlmHSXjZGZTJrxbls5jVb9985noeCwHrKX ttraXGiq+M4ubKmRAw3AJfBbKjWQxGChOndqSPAQ7ZxgS+emFrzx4XBsofPaIrg5 cOX9MKyDtIY/o4z3LU+zGfpYEXJkwlgIk1BD60dIh9bVX5n087die6Lof8Rq8up0 ccNkuzC2gw+6qQ6+lLJNHcU7QMzjAVOjYgmZ+0M+5jdJ0MniwaH2sNbapPBNOUzQ 4H9cPVZin9C1gImqW808gNVF+Q/1y4NgpIVj1UlAV7pZQYtI3ltyIWywgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgFogFRwFf3pbL7FrZ2rE2iFPVNMB8GA1UdIwQY MBaAFK7p1QhjaQdqeNdhY4syqKm473DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODct MjAxMzYxOGMwNGZmLzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODctMjAxMzYxOGMwNGZm LzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlB8LzWbE sTqJ8xvZUbhYbvl8rIWynf8bz8xX/gI9aSJMSatlzv/mh70CCI0BygLynQkTt8jE 6GG/aZ8oKVUWtCqm8XkadkivqoDfEa9qoDsiLsYX7GLWSm01pZyBbFMf/i06BO5q vSjhzIf9s8NqZ5Ly4ET4fz6KD18SJUJr0V7pCjYiNih+hCMnVZCY0GpRMI7A1NpS 3thwsvy87h8bB8N40Gw33wziZckAVg4fek/KPEPefI64Dnj4RbRcAqFNJHlfg35T Y8gZstoqJ1G330+2jSUHdKnXd90uHdlQQFyVOCm87zAcMn6HHtTqTEod0D3NNXpx 1IHReZjmjiAM1A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:28 2026 by rpki-client