This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft File: VTq9CI9YVGJD8CJwIs20e80dfY4.mft (raw, json) Hash identifier: lhBXhqXq1p5zUwDslLMJXdL1RTaxfiHT/pJOgFzIqlg= Subject key identifier: 06:F5:80:D0:31:77:70:50:D5:B6:6F:BF:76:E8:18:BF:E9:C1:11:B6 Authority key identifier: 55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E Certificate issuer: /CN=553abd088f58546243f0227022cdb47bcd1d7d8e Certificate serial: 019C43C739486B10E77E262EB1B919D3FF81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft Manifest number: 1609 Signing time: Mon 09 Feb 2026 19:00:55 +0000 Manifest this update: Mon 09 Feb 2026 19:00:55 +0000 Manifest next update: Tue 10 Feb 2026 19:00:55 +0000 Files and hashes: 1: VTq9CI9YVGJD8CJwIs20e80dfY4.crl (hash: c3HPJsU5dvlWfsGu7Yz1ki2IEFR6FiyFs1dFvSmX6PQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:39:48:6b:10:e7:7e:26:2e:b1:b9:19:d3:ff:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553abd088f58546243f0227022cdb47bcd1d7d8e Validity Not Before: Feb 9 19:00:55 2026 GMT Not After : Feb 10 19:00:55 2026 GMT Subject: CN=06f580d031777050d5b66fbf76e818bfe9c111b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:46:e5:02:37:99:e9:2f:52:82:06:e4:0d: dd:9b:5d:3f:16:0b:17:a4:1d:a6:71:ad:44:1d:46: d3:81:6e:1e:b0:67:9a:dc:6e:39:10:9e:a8:1b:11: 9a:2d:93:56:1e:b2:a6:49:dd:d5:9e:39:53:07:5e: 2a:18:e5:6b:a3:6a:92:52:75:ac:42:23:13:bb:3d: cb:e4:63:51:01:ee:f3:45:7b:8f:23:6a:0a:a1:b0: 9b:0f:a3:64:46:52:71:c4:31:a4:36:1a:2b:34:12: 2c:c9:ea:6c:86:37:dc:fa:23:d9:0e:ee:e1:ba:4b: 42:d8:17:2d:22:c6:1b:da:30:4f:13:ae:28:83:f8: 3f:3c:fe:b3:93:d0:8d:fa:eb:fc:6d:f6:9e:58:cb: 2f:f7:fa:a4:ce:54:7d:3e:80:60:56:93:14:6e:3c: bb:fc:2e:45:bf:a2:96:26:64:a5:07:91:e9:a1:96: d4:c8:b2:d5:2c:9e:6d:24:92:83:cb:a9:ce:25:04: da:96:bd:63:cc:5c:24:3b:df:e8:be:85:65:cd:49: 7b:9b:df:ac:70:49:9a:b5:59:ec:3b:3b:b3:06:06: 12:d1:3b:64:9b:ae:d0:54:41:ce:5e:70:99:1f:82: 73:a9:20:2f:02:16:50:26:25:ee:d0:20:74:6f:f1: 3f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F5:80:D0:31:77:70:50:D5:B6:6F:BF:76:E8:18:BF:E9:C1:11:B6 X509v3 Authority Key Identifier: keyid:55:3A:BD:08:8F:58:54:62:43:F0:22:70:22:CD:B4:7B:CD:1D:7D:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTq9CI9YVGJD8CJwIs20e80dfY4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/c2daec-874e-4d22-9674-d566f73d3fb0/1/VTq9CI9YVGJD8CJwIs20e80dfY4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:da:07:d8:e9:9d:c7:e5:d4:1e:74:c9:b1:60:68:89:df:a1: 70:35:22:94:1b:95:7f:22:73:e9:68:97:d9:84:95:89:19:1a: 92:e7:d4:a7:bd:f8:e8:a0:b6:47:78:da:37:b2:fb:fb:1e:3c: c0:7e:16:79:e4:2a:da:65:cd:0a:42:b0:dc:56:76:53:c4:67: 3b:ac:4d:75:92:7f:9b:79:7f:e7:5d:77:4d:5a:ea:e2:d3:ac: cc:9d:ea:05:6f:83:95:91:7a:12:82:41:c4:8b:93:80:2f:f3: 57:11:da:b7:93:1d:c1:47:93:32:e7:f4:43:89:fe:83:6a:ce: 9b:12:7b:9c:9a:3d:10:36:09:a6:9a:af:73:62:45:e6:c2:71: 01:05:f0:ab:65:c0:d7:f7:08:58:2c:24:2f:c4:13:c0:2c:bf: 7c:2b:67:95:6b:4b:60:76:8d:5a:98:d9:ab:b3:63:f6:46:fd: b1:8d:54:9a:fd:f2:d7:60:86:40:40:3c:6b:3c:93:27:c7:56: ba:5a:9e:87:3e:8c:2d:65:18:11:bc:90:3d:18:2c:a6:55:ca: 3c:57:2b:5c:8d:9b:ec:56:3f:c9:a7:3f:e6:d6:e5:c0:6a:ec: ca:03:f4:f9:c8:eb:e8:28:8d:ad:bb:06:8e:8e:e9:77:95:6c: 6d:95:0a:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxzlIaxDnfiYusbkZ0/+BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1M2FiZDA4OGY1ODU0NjI0M2YwMjI3MDIyY2RiNDdiY2Qx ZDdkOGUwHhcNMjYwMjA5MTkwMDU1WhcNMjYwMjEwMTkwMDU1WjAzMTEwLwYDVQQD EygwNmY1ODBkMDMxNzc3MDUwZDViNjZmYmY3NmU4MThiZmU5YzExMWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovhG5QI3mekvUoIG5A3dm10/FgsX pB2mca1EHUbTgW4esGea3G45EJ6oGxGaLZNWHrKmSd3VnjlTB14qGOVro2qSUnWs QiMTuz3L5GNRAe7zRXuPI2oKobCbD6NkRlJxxDGkNhorNBIsyepshjfc+iPZDu7h uktC2BctIsYb2jBPE64og/g/PP6zk9CN+uv8bfaeWMsv9/qkzlR9PoBgVpMUbjy7 /C5Fv6KWJmSlB5HpoZbUyLLVLJ5tJJKDy6nOJQTalr1jzFwkO9/ovoVlzUl7m9+s cEmatVnsOzuzBgYS0Ttkm67QVEHOXnCZH4JzqSAvAhZQJiXu0CB0b/E/FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAb1gNAxd3BQ1bZvv3boGL/pwRG2MB8GA1UdIwQY MBaAFFU6vQiPWFRiQ/AicCLNtHvNHX2OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQt ZDU2NmY3M2QzZmIwLzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jMmRhZWMtODc0ZS00ZDIyLTk2NzQtZDU2NmY3M2QzZmIw LzEvVlRxOUNJOVlWR0pEOENKd0lzMjBlODBkZlk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP9oH2Omd x+XUHnTJsWBoid+hcDUilBuVfyJz6WiX2YSViRkakufUp7346KC2R3jaN7L7+x48 wH4WeeQq2mXNCkKw3FZ2U8RnO6xNdZJ/m3l/5113TVrq4tOszJ3qBW+DlZF6EoJB xIuTgC/zVxHat5MdwUeTMuf0Q4n+g2rOmxJ7nJo9EDYJppqvc2JF5sJxAQXwq2XA 1/cIWCwkL8QTwCy/fCtnlWtLYHaNWpjZq7Nj9kb9sY1Umv3y12CGQEA8azyTJ8dW ulqehz6MLWUYEbyQPRgsplXKPFcrXI2b7FY/yac/5tblwGrsygP0+cjr6CiNrbsG jo7pd5VsbZUK5Q== -----END CERTIFICATE-----Generated at Tue Feb 10 00:12:41 2026 by rpki-client