This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft File: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft (raw, json) Hash identifier: hI+v9kfGMYkmTkhE5y0tCRm3eLEncAZsxbEpk9irGJ0= Subject key identifier: 50:25:28:AA:26:CB:00:27:8B:6E:CA:49:69:D5:14:3F:AB:31:D8:3E Authority key identifier: BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F Certificate issuer: /CN=bea7769343c691f675bb369253cb3f6fc304b01f Certificate serial: 019C4390AE1766F3F1074F11CB6F9797818A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft Manifest number: 0BB3 Signing time: Mon 09 Feb 2026 18:01:21 +0000 Manifest this update: Mon 09 Feb 2026 18:01:21 +0000 Manifest next update: Tue 10 Feb 2026 18:01:21 +0000 Files and hashes: 1: vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl (hash: epwoTbK5ajPBdRcl7YToQqbRSCyQVsQ9h4ILKtvkbwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:ae:17:66:f3:f1:07:4f:11:cb:6f:97:97:81:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea7769343c691f675bb369253cb3f6fc304b01f Validity Not Before: Feb 9 18:01:21 2026 GMT Not After : Feb 10 18:01:21 2026 GMT Subject: CN=502528aa26cb00278b6eca4969d5143fab31d83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:70:96:a0:58:b0:f2:da:8f:36:dc:ca:73:2f: 21:6b:18:e3:82:ba:5c:fb:aa:c8:b2:70:b3:a3:0f: 13:76:16:d4:66:d2:c5:32:a8:32:2b:e8:81:d0:df: 11:42:74:91:68:29:37:04:ca:35:20:03:ff:27:17: 9c:ea:2e:d3:fa:11:32:9d:98:28:70:60:ba:d8:02: d7:87:54:6c:3d:fa:0b:f5:c0:48:0a:0c:32:f4:cb: 29:0f:40:ed:57:63:cc:5f:aa:c6:b2:8f:9f:36:a1: a5:69:5e:17:9f:29:b5:2e:1b:66:cf:80:89:6a:22: a1:c6:83:b2:8d:32:c9:22:ad:37:15:02:7e:5e:b2: 4b:dd:e8:1f:09:7a:46:3a:7e:34:c1:35:6f:29:3d: a8:25:67:af:f0:fe:35:a3:c1:8f:ea:89:77:9c:a9: 4f:b8:9d:7f:06:d1:6d:0a:10:e8:95:9a:52:1e:e0: a0:70:8c:5a:64:cc:d1:71:e4:ab:33:c8:ca:22:92: 12:90:c1:16:4c:22:16:3b:26:fa:00:92:67:df:90: b9:31:0c:a6:10:9a:97:ea:03:18:bd:25:6a:4e:84: 5f:67:92:76:41:67:f9:0d:d6:08:34:a3:db:c3:d8: b2:7b:4a:03:b4:21:51:d1:b3:d3:1c:80:67:95:ee: 98:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:25:28:AA:26:CB:00:27:8B:6E:CA:49:69:D5:14:3F:AB:31:D8:3E X509v3 Authority Key Identifier: keyid:BE:A7:76:93:43:C6:91:F6:75:BB:36:92:53:CB:3F:6F:C3:04:B0:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7d9eaa-ec75-424e-9c5e-e24d588bb03f/1/vqd2k0PGkfZ1uzaSU8s_b8MEsB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:87:b8:f3:f6:7b:6d:e6:c6:0a:59:c6:c5:39:7d:0e:0d:9a: 9a:e0:bc:70:c8:fc:86:45:b5:39:fc:da:48:0b:a5:5d:5f:9d: 73:70:5e:68:ab:06:7f:74:93:3d:85:07:f0:61:d4:87:3a:98: 77:52:77:57:f1:f6:fe:3b:b8:c0:7a:b6:5f:3e:44:dc:ed:9d: a5:c6:60:3a:29:41:df:c8:b9:d8:6f:e8:fe:56:50:33:bb:0a: 1d:27:5f:b0:70:c5:5e:fe:a6:09:ee:6a:8e:76:96:24:d0:a9: dd:09:6f:62:12:32:e3:c5:cc:28:ee:94:5f:a3:c5:eb:b0:be: 2c:30:7b:f5:46:00:5c:fb:6b:0c:fd:5c:5d:94:df:bc:eb:47: 2e:f2:25:ee:b0:a3:57:79:0e:48:c2:97:5c:7d:44:f7:8c:32: ba:aa:3f:b4:89:54:84:df:a1:06:86:b3:ed:e1:70:b1:b5:e1: 4a:86:f1:6a:95:61:19:c7:96:12:fc:27:c9:e1:47:cd:f9:92: 14:aa:55:4f:29:7c:1b:c8:78:36:92:95:bb:89:c2:9e:dc:ca: 5c:20:c5:7e:24:f6:c5:a7:16:a0:19:31:e6:6c:25:37:f1:f5: 23:22:56:a3:5a:bf:3b:79:4b:14:1f:5c:bf:78:2c:49:6b:49: 95:cb:6b:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkK4XZvPxB08Ry2+Xl4GKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTc3NjkzNDNjNjkxZjY3NWJiMzY5MjUzY2IzZjZmYzMw NGIwMWYwHhcNMjYwMjA5MTgwMTIxWhcNMjYwMjEwMTgwMTIxWjAzMTEwLwYDVQQD Eyg1MDI1MjhhYTI2Y2IwMDI3OGI2ZWNhNDk2OWQ1MTQzZmFiMzFkODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43CWoFiw8tqPNtzKcy8haxjjgrpc +6rIsnCzow8TdhbUZtLFMqgyK+iB0N8RQnSRaCk3BMo1IAP/Jxec6i7T+hEynZgo cGC62ALXh1RsPfoL9cBICgwy9MspD0DtV2PMX6rGso+fNqGlaV4Xnym1Lhtmz4CJ aiKhxoOyjTLJIq03FQJ+XrJL3egfCXpGOn40wTVvKT2oJWev8P41o8GP6ol3nKlP uJ1/BtFtChDolZpSHuCgcIxaZMzRceSrM8jKIpISkMEWTCIWOyb6AJJn35C5MQym EJqX6gMYvSVqToRfZ5J2QWf5DdYINKPbw9iye0oDtCFR0bPTHIBnle6YLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAlKKomywAni27KSWnVFD+rMdg+MB8GA1UdIwQY MBaAFL6ndpNDxpH2dbs2klPLP2/DBLAfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUt ZTI0ZDU4OGJiMDNmLzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni83ZDllYWEtZWM3NS00MjRlLTljNWUtZTI0ZDU4OGJiMDNm LzEvdnFkMmswUEdrZloxdXphU1U4c19iOE1Fc0I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYe48/Z7 bebGClnGxTl9Dg2amuC8cMj8hkW1OfzaSAulXV+dc3BeaKsGf3STPYUH8GHUhzqY d1J3V/H2/ju4wHq2Xz5E3O2dpcZgOilB38i52G/o/lZQM7sKHSdfsHDFXv6mCe5q jnaWJNCp3QlvYhIy48XMKO6UX6PF67C+LDB79UYAXPtrDP1cXZTfvOtHLvIl7rCj V3kOSMKXXH1E94wyuqo/tIlUhN+hBoaz7eFwsbXhSobxapVhGceWEvwnyeFHzfmS FKpVTyl8G8h4NpKVu4nCntzKXCDFfiT2xacWoBkx5mwlN/H1IyJWo1q/O3lLFB9c v3gsSWtJlctrEQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:16 2026 by rpki-client