This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft File: vdI1_DzDTEVIxqhONeSVMyhTm-E.mft (raw, json) Hash identifier: O+EO7SMeLifZZXsyQ4lQdEQUeOKPo9lp3g64zHWVEsA= Subject key identifier: 49:F4:C2:88:2F:BF:51:0F:CB:B0:16:B0:F2:93:22:38:85:64:C1:2D Authority key identifier: BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1 Certificate issuer: /CN=bdd235fc3cc34c4548c6a84e35e4953328539be1 Certificate serial: 019C424659AFB10DFC27DE2214D65908DE43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft Manifest number: 1219 Signing time: Mon 09 Feb 2026 12:00:32 +0000 Manifest this update: Mon 09 Feb 2026 12:00:32 +0000 Manifest next update: Tue 10 Feb 2026 12:00:32 +0000 Files and hashes: 1: vdI1_DzDTEVIxqhONeSVMyhTm-E.crl (hash: MzXHMMFBLDOrq3wINbUwVMnZ25W28KnD94LEiTrVm4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:59:af:b1:0d:fc:27:de:22:14:d6:59:08:de:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd235fc3cc34c4548c6a84e35e4953328539be1 Validity Not Before: Feb 9 12:00:32 2026 GMT Not After : Feb 10 12:00:32 2026 GMT Subject: CN=49f4c2882fbf510fcbb016b0f29322388564c12d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6d:c7:b3:0f:42:c9:93:9b:a3:e1:33:83:94: e2:92:2d:cf:3e:02:5a:6f:89:46:85:99:14:b2:94: 79:5e:49:38:df:5f:19:4d:a4:93:af:c4:4a:76:bc: 88:b7:ee:45:42:54:fd:84:62:4c:c5:6f:e7:4f:a9: 46:93:8f:26:95:86:83:f2:cb:ef:1d:8e:a3:4a:b7: bb:f7:de:89:8a:19:9a:fe:12:7b:e2:92:a7:7b:ab: 2f:2d:ca:b8:f5:ec:6b:40:a3:c1:b0:0f:e8:38:a8: ce:56:58:6d:c8:a5:7d:43:06:e9:1f:56:db:fa:9d: fc:0a:d2:b1:93:f0:51:62:89:9d:2a:a5:06:37:76: 7f:65:ac:52:30:8b:13:19:29:01:ee:f6:6c:d2:81: fb:1c:a5:73:e4:84:aa:98:63:27:58:d3:fd:d5:8d: 3c:54:bc:55:f2:c2:50:81:15:37:da:a4:a5:1a:45: 86:9b:1f:01:a5:90:17:6d:f8:f7:16:77:63:96:45: c6:82:4c:6d:e2:02:be:34:91:9d:bf:5e:01:36:58: 17:3f:17:a2:33:6b:4e:f0:bd:dd:3f:91:4b:85:91: 69:0e:e2:d7:2d:28:35:87:a4:71:8a:47:0d:9e:2a: 76:a9:de:ca:42:9c:7d:35:25:cf:40:39:95:e1:02: 6c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F4:C2:88:2F:BF:51:0F:CB:B0:16:B0:F2:93:22:38:85:64:C1:2D X509v3 Authority Key Identifier: keyid:BD:D2:35:FC:3C:C3:4C:45:48:C6:A8:4E:35:E4:95:33:28:53:9B:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdI1_DzDTEVIxqhONeSVMyhTm-E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/244f29-3b70-4155-b28c-1ecf1ed6487b/1/vdI1_DzDTEVIxqhONeSVMyhTm-E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:2e:63:77:ba:08:49:c3:76:d6:62:3b:26:35:c5:f8:f5:4f: 6d:b5:52:ca:7f:0d:22:41:e9:08:ec:e6:e2:de:47:03:a1:7e: 6d:d1:72:29:d3:d0:7a:86:c6:3e:58:89:d4:e1:65:f8:d7:0b: 88:f2:dc:e3:5a:98:f1:1f:41:84:22:ca:00:62:c1:91:75:fd: 74:47:aa:1b:23:89:e8:92:21:fb:27:3c:22:43:82:c5:5e:9f: 53:70:a6:f3:b0:5e:cb:80:76:63:63:ac:66:c2:34:3a:29:7d: 7d:6d:ed:40:4b:01:49:ec:a6:59:fb:c1:3b:fe:b6:e8:9b:29: 7a:20:50:73:62:7f:c4:3a:75:89:98:39:6d:14:af:2d:65:fb: fc:be:f7:76:7c:8a:e1:7a:7d:71:bb:79:c4:e8:8d:7d:5e:0f: 0e:50:9e:32:1c:2c:6c:8e:73:d2:76:d2:e5:ed:1a:bf:2e:b5: c3:8b:2f:2f:83:14:7a:b7:06:1b:a8:ed:d7:b5:e0:d7:e8:59: 41:ee:c7:d4:8a:de:cd:e4:5c:4c:39:92:9b:86:96:11:1f:5a: 18:6b:53:9a:b6:ce:31:94:eb:77:cf:5a:f2:6b:24:36:b9:5e: 65:5b:99:b9:37:c0:4b:c9:5e:ea:10:1e:ff:5f:78:43:5f:7e: 0d:07:bc:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlmvsQ38J94iFNZZCN5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZDIzNWZjM2NjMzRjNDU0OGM2YTg0ZTM1ZTQ5NTMzMjg1 MzliZTEwHhcNMjYwMjA5MTIwMDMyWhcNMjYwMjEwMTIwMDMyWjAzMTEwLwYDVQQD Eyg0OWY0YzI4ODJmYmY1MTBmY2JiMDE2YjBmMjkzMjIzODg1NjRjMTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G3Hsw9CyZObo+Ezg5Tiki3PPgJa b4lGhZkUspR5Xkk4318ZTaSTr8RKdryIt+5FQlT9hGJMxW/nT6lGk48mlYaD8svv HY6jSre7996Jihma/hJ74pKne6svLcq49exrQKPBsA/oOKjOVlhtyKV9QwbpH1bb +p38CtKxk/BRYomdKqUGN3Z/ZaxSMIsTGSkB7vZs0oH7HKVz5ISqmGMnWNP91Y08 VLxV8sJQgRU32qSlGkWGmx8BpZAXbfj3FndjlkXGgkxt4gK+NJGdv14BNlgXPxei M2tO8L3dP5FLhZFpDuLXLSg1h6RxikcNnip2qd7KQpx9NSXPQDmV4QJsRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEn0wogvv1EPy7AWsPKTIjiFZMEtMB8GA1UdIwQY MBaAFL3SNfw8w0xFSMaoTjXklTMoU5vhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmRJMV9EekRURVZJeHFoT05lU1ZNeWhUbS1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8yNDRmMjktM2I3MC00MTU1LWIyOGMt MWVjZjFlZDY0ODdiLzEvdmRJMV9EekRURVZJeHFoT05lU1ZNeWhUbS1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8yNDRmMjktM2I3MC00MTU1LWIyOGMtMWVjZjFlZDY0ODdi LzEvdmRJMV9EekRURVZJeHFoT05lU1ZNeWhUbS1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAy5jd7oI ScN21mI7JjXF+PVPbbVSyn8NIkHpCOzm4t5HA6F+bdFyKdPQeobGPliJ1OFl+NcL iPLc41qY8R9BhCLKAGLBkXX9dEeqGyOJ6JIh+yc8IkOCxV6fU3Cm87Bey4B2Y2Os ZsI0Oil9fW3tQEsBSeymWfvBO/626JspeiBQc2J/xDp1iZg5bRSvLWX7/L73dnyK 4Xp9cbt5xOiNfV4PDlCeMhwsbI5z0nbS5e0avy61w4svL4MUercGG6jt17Xg1+hZ Qe7H1IrezeRcTDmSm4aWER9aGGtTmrbOMZTrd89a8mskNrleZVuZuTfAS8le6hAe /194Q19+DQe8nw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:11 2026 by rpki-client