This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft File: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft (raw, json) Hash identifier: JpgJOM1fjKfzfi7AIf7IuWGVcGIi+VBhQaxXI2iy540= Subject key identifier: A8:2D:58:1C:E3:49:51:E1:61:76:C3:B4:7F:BF:D1:F9:F8:C1:FD:2A Authority key identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4 Certificate issuer: /CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4 Certificate serial: 019C42EAEF98997B271F472DF93C1A5B08B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft Manifest number: 11FB Signing time: Mon 09 Feb 2026 15:00:18 +0000 Manifest this update: Mon 09 Feb 2026 15:00:18 +0000 Manifest next update: Tue 10 Feb 2026 15:00:18 +0000 Files and hashes: 1: 2OdhPZZ2rBcNbZJORD0Md1l0kJ0.roa (hash: x16LGl9tSAnIdYULX5uuM4GVuw4G/u/nooD8QEjNIcs=) 2: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl (hash: TC+zUp3cdMx+0kSNnp6CmAFRcFZmpwvrUQ6qPFCGWqs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:ef:98:99:7b:27:1f:47:2d:f9:3c:1a:5b:08:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4 Validity Not Before: Feb 9 15:00:18 2026 GMT Not After : Feb 10 15:00:18 2026 GMT Subject: CN=a82d581ce34951e16176c3b47fbfd1f9f8c1fd2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fe:33:bb:f8:78:3e:44:3b:21:6d:a5:25:ed:3e: d8:d8:65:d8:ad:eb:bb:6f:c9:1b:f4:e5:00:19:f4: 76:d3:ae:43:2c:42:d2:6e:7b:28:17:a2:79:81:1d: 98:8d:36:0d:41:56:19:68:c3:53:1f:71:2e:87:92: ae:c1:70:5f:8d:f6:14:04:37:1b:65:f7:a5:a8:52: 44:23:42:86:dd:ec:13:64:c6:e0:54:7d:7c:e8:bf: 04:08:43:59:a1:65:75:46:52:cb:4e:da:ae:8a:21: d3:a0:cc:31:c6:36:9d:5d:8b:63:04:ed:a5:45:a4: 01:a4:07:05:a0:b4:02:d1:40:7b:7d:95:a3:28:da: 3e:c8:8f:8b:fb:03:8e:0a:0b:ce:21:b9:c6:33:42: 45:4a:4e:f0:a3:06:97:c0:b7:8a:fb:f5:6f:a6:54: d9:a7:f6:a7:9c:1f:7e:90:b9:21:48:1f:fb:0f:ab: c8:f9:b0:f8:0c:56:48:5c:32:f8:1d:c1:20:49:37: bb:3d:66:f1:9c:1d:8a:47:59:16:eb:d2:25:6f:8e: 69:93:cb:e0:78:8f:7a:1e:a6:39:5b:cb:18:55:e1: 95:57:21:60:f5:79:68:7a:a3:a9:7e:32:3b:e0:27: ea:4b:31:23:b7:b7:64:7f:b7:7c:17:eb:25:05:59: 62:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2D:58:1C:E3:49:51:E1:61:76:C3:B4:7F:BF:D1:F9:F8:C1:FD:2A X509v3 Authority Key Identifier: keyid:BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:15:a1:d4:0f:8a:a0:88:3d:f0:63:4e:80:10:53:73:3d:5e: 2c:0d:70:f9:5d:93:86:40:6d:cf:fd:2d:8f:73:ed:e4:dd:8c: 99:ef:13:f8:e1:9e:ef:8d:49:9f:f6:ba:01:a4:47:5f:32:f7: 3f:90:ad:bc:6a:55:f0:7e:e0:4d:1c:1f:ed:dc:74:46:f4:1f: 1d:86:4c:70:a8:d9:37:da:22:7e:a9:a1:7d:9b:fb:6f:00:c1: e7:8b:7c:0a:26:78:03:2b:c6:ae:39:cc:c1:e9:e3:fa:f2:85: bd:fb:4e:1b:06:3d:58:a5:b1:ea:ba:7c:92:ee:be:e9:e0:9d: 67:80:70:06:b8:fa:d8:20:45:f5:65:0c:83:5a:87:a7:02:f3: 32:59:10:7d:fd:76:21:16:85:2e:d4:92:08:aa:aa:f6:6d:f2: ca:ee:22:61:20:9f:4a:1b:b8:f1:e2:f4:89:4c:a3:81:cc:09: 57:92:27:27:04:1d:18:4a:06:ca:76:f3:a2:5c:cf:67:99:04: 9f:67:03:55:54:fa:cf:1c:4c:1d:9c:27:3b:eb:4e:c2:28:84: 5a:d7:20:ea:c0:42:b5:a6:d6:8f:26:01:91:67:6b:f8:3c:d5: 6c:a0:b2:2a:8a:55:04:d1:6a:d1:83:90:20:94:f3:65:ad:a2: a2:0d:04:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6u+YmXsnH0ct+TwaWwi3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYTFlNTVmNzQ0ZTE0MTJiZDc1M2ZkMjc3Yjc3NDA4ZGNk ZjhjYjQwHhcNMjYwMjA5MTUwMDE4WhcNMjYwMjEwMTUwMDE4WjAzMTEwLwYDVQQD EyhhODJkNTgxY2UzNDk1MWUxNjE3NmMzYjQ3ZmJmZDFmOWY4YzFmZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/jO7+Hg+RDshbaUl7T7Y2GXYreu7 b8kb9OUAGfR2065DLELSbnsoF6J5gR2YjTYNQVYZaMNTH3Euh5KuwXBfjfYUBDcb ZfelqFJEI0KG3ewTZMbgVH186L8ECENZoWV1RlLLTtquiiHToMwxxjadXYtjBO2l RaQBpAcFoLQC0UB7fZWjKNo+yI+L+wOOCgvOIbnGM0JFSk7wowaXwLeK+/VvplTZ p/annB9+kLkhSB/7D6vI+bD4DFZIXDL4HcEgSTe7PWbxnB2KR1kW69Ilb45pk8vg eI96HqY5W8sYVeGVVyFg9XloeqOpfjI74CfqSzEjt7dkf7d8F+slBVliPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgtWBzjSVHhYXbDtH+/0fn4wf0qMB8GA1UdIwQY MBaAFL2h5V90ThQSvXU/0ne3dAjc34y0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmFIbFgzUk9GQks5ZFRfU2Q3ZDBDTnpmakxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zY2Q0NWYtMGI3OS00M2I3LWE5ZTYt YzBiY2VkYjM0Mjc0LzEvdmFIbFgzUk9GQks5ZFRfU2Q3ZDBDTnpmakxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8zY2Q0NWYtMGI3OS00M2I3LWE5ZTYtYzBiY2VkYjM0Mjc0 LzEvdmFIbFgzUk9GQks5ZFRfU2Q3ZDBDTnpmakxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRWh1A+K oIg98GNOgBBTcz1eLA1w+V2ThkBtz/0tj3Pt5N2Mme8T+OGe741Jn/a6AaRHXzL3 P5CtvGpV8H7gTRwf7dx0RvQfHYZMcKjZN9oifqmhfZv7bwDB54t8CiZ4AyvGrjnM wenj+vKFvftOGwY9WKWx6rp8ku6+6eCdZ4BwBrj62CBF9WUMg1qHpwLzMlkQff12 IRaFLtSSCKqq9m3yyu4iYSCfShu48eL0iUyjgcwJV5InJwQdGEoGynbzolzPZ5kE n2cDVVT6zxxMHZwnO+tOwiiEWtcg6sBCtabWjyYBkWdr+DzVbKCyKopVBNFq0YOQ IJTzZa2iog0EJw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:20 2026 by rpki-client