This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft File: vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json) Hash identifier: mCJB5errep36lvNuZNT8RgF1GqLFBZmfu2Esun+K6Rw= Subject key identifier: E5:EA:5E:6F:9D:C8:54:19:6A:E1:B5:8E:89:6B:D1:41:5C:CE:17:CE Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3 Certificate issuer: /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3 Certificate serial: 019C44DA087646D895AACF1CF212406DDFC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft Manifest number: 1668 Signing time: Tue 10 Feb 2026 00:01:05 +0000 Manifest this update: Tue 10 Feb 2026 00:01:05 +0000 Manifest next update: Wed 11 Feb 2026 00:01:05 +0000 Files and hashes: 1: GG89hAoixp0ZJE8Ef-5VuRyD-Wg.roa (hash: fpAmvEh19YQT+8W5VCcnDo3VDNg2kVBnOH7P5uACyqA=) 2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: ttC2O1GDwOtlst05fKiWNzG76yv6MP6uV8o0/x39510=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:08:76:46:d8:95:aa:cf:1c:f2:12:40:6d:df:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3 Validity Not Before: Feb 10 00:01:05 2026 GMT Not After : Feb 11 00:01:05 2026 GMT Subject: CN=e5ea5e6f9dc854196ae1b58e896bd1415cce17ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8d:37:40:c1:56:e9:7d:67:25:50:3f:8a:30: 48:19:14:1e:44:a8:4a:72:59:50:9d:79:b0:59:52: e7:78:5e:d9:65:59:6e:6f:e8:8e:6a:e1:b1:13:c9: 5f:23:18:1b:5a:28:c0:13:c1:80:aa:4a:da:be:fe: 49:a9:61:d5:05:87:6b:ae:d7:40:c6:06:4a:97:49: 76:dd:18:01:28:89:0b:b7:f3:b6:c4:a0:42:b5:55: c8:aa:5b:90:bc:b0:f1:dd:fd:81:2b:cb:e8:8f:25: 50:d9:89:c3:30:60:20:e3:47:ca:67:a8:a2:e1:27: 07:92:a5:d7:61:5f:a5:74:09:a0:1a:01:de:93:26: a8:02:e2:1c:97:2d:8e:8b:9c:81:73:66:93:ce:85: 4b:89:3e:ac:5b:2c:62:84:ea:93:07:3c:b6:f9:a0: 64:da:70:ca:a0:e7:8e:39:5c:12:6a:4a:d2:37:26: eb:b1:de:4a:76:23:97:ac:74:f5:db:d3:42:e8:78: fe:6e:4c:17:e9:94:ab:e0:00:df:0f:12:42:65:26: f1:c5:1f:03:f8:68:70:f0:de:f3:39:17:03:97:e0: 53:3d:69:f2:33:38:84:98:ab:3d:d6:cb:f5:2c:12: c8:ad:e8:98:08:b2:b7:48:23:04:09:25:f3:2e:a2: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EA:5E:6F:9D:C8:54:19:6A:E1:B5:8E:89:6B:D1:41:5C:CE:17:CE X509v3 Authority Key Identifier: keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:9d:4d:bd:5c:dd:9f:b3:e7:42:98:ef:06:44:6b:8e:7e:8e: 10:7d:19:61:48:04:8b:8f:78:a0:de:36:e4:a0:a5:f4:e1:9a: ef:cb:7e:c1:1b:b8:f9:43:af:14:0a:4a:58:b0:a7:a1:bf:1d: 16:db:7c:41:38:0b:97:2e:f9:c8:0e:f6:c4:74:bf:4a:fc:4a: 4d:57:00:3d:a0:b5:13:9e:79:c3:5f:5f:a2:7a:b0:a2:5d:82: a2:c7:c7:8b:9f:c9:71:64:92:56:f7:2c:1a:56:39:61:f9:94: 05:0e:59:43:d7:e0:8f:4c:aa:ce:43:f8:eb:9b:8b:f9:f3:4d: 23:f1:4d:25:15:66:49:46:1b:41:09:d5:1a:36:81:b6:5e:46: 02:23:87:66:ac:1e:b8:4b:55:ae:28:95:da:f2:41:f8:af:e8: 10:6d:99:84:b0:e4:b8:9a:e4:9d:25:ac:ce:e5:74:eb:4f:17: 44:e5:e3:aa:3a:1b:b6:2d:51:fb:d3:4e:ca:c9:16:78:74:e6: b3:b5:40:38:67:5d:1f:81:4f:2a:7e:29:1c:00:ee:7e:47:e3: ce:4a:c4:25:62:7d:65:25:4a:e8:d2:a9:03:61:c0:f3:1b:e0: cc:de:bf:69:1e:5e:c1:98:01:04:db:60:c5:f3:94:b0:57:d7: b5:7e:58:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2gh2RtiVqs8c8hJAbd/IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmM2RlODgyYzI2MTlkNjgwZjJkN2ZlNjAwYjkwMTZkYTI4 N2E4ZDMwHhcNMjYwMjEwMDAwMTA1WhcNMjYwMjExMDAwMTA1WjAzMTEwLwYDVQQD EyhlNWVhNWU2ZjlkYzg1NDE5NmFlMWI1OGU4OTZiZDE0MTVjY2UxN2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7o03QMFW6X1nJVA/ijBIGRQeRKhK cllQnXmwWVLneF7ZZVlub+iOauGxE8lfIxgbWijAE8GAqkravv5JqWHVBYdrrtdA xgZKl0l23RgBKIkLt/O2xKBCtVXIqluQvLDx3f2BK8vojyVQ2YnDMGAg40fKZ6ii 4ScHkqXXYV+ldAmgGgHekyaoAuIcly2Oi5yBc2aTzoVLiT6sWyxihOqTBzy2+aBk 2nDKoOeOOVwSakrSNybrsd5KdiOXrHT129NC6Hj+bkwX6ZSr4ADfDxJCZSbxxR8D +Ghw8N7zORcDl+BTPWnyMziEmKs91sv1LBLIreiYCLK3SCMECSXzLqJPuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXqXm+dyFQZauG1jolr0UFczhfOMB8GA1UdIwQY MBaAFL896ILCYZ1oDy1/5gC5AW2ih6jTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODIt MDNiZjZjZjczZmYxLzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS80NmY5OTYtMzhkZS00MmZiLWI5ODItMDNiZjZjZjczZmYx LzEvdnozb2dzSmhuV2dQTFhfbUFMa0JiYUtIcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZ1NvVzd n7PnQpjvBkRrjn6OEH0ZYUgEi494oN425KCl9OGa78t+wRu4+UOvFApKWLCnob8d Ftt8QTgLly75yA72xHS/SvxKTVcAPaC1E555w19fonqwol2CosfHi5/JcWSSVvcs GlY5YfmUBQ5ZQ9fgj0yqzkP465uL+fNNI/FNJRVmSUYbQQnVGjaBtl5GAiOHZqwe uEtVriiV2vJB+K/oEG2ZhLDkuJrknSWszuV0608XROXjqjobti1R+9NOyskWeHTm s7VAOGddH4FPKn4pHADufkfjzkrEJWJ9ZSVK6NKpA2HA8xvgzN6/aR5ewZgBBNtg xfOUsFfXtX5YMw== -----END CERTIFICATE-----Generated at Tue Feb 10 06:00:26 2026 by rpki-client