This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft File: vfW3EvLkkywcAwMS0ZSll4g_PV4.mft (raw, json) Hash identifier: huagjXOLF6bN4fAlWR2RT2WRb0nm5lMCEyOrcFAZQhU= Subject key identifier: 70:E9:38:2F:A1:B0:36:69:7B:7F:30:8E:95:71:4C:16:CE:5C:C7:11 Authority key identifier: BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E Certificate issuer: /CN=bdf5b712f2e4932c1c030312d194a597883f3d5e Certificate serial: 019C42B413DD0BC863B39309D3E6BE291E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 14:00:23 +0000 Manifest this update: Mon 09 Feb 2026 14:00:23 +0000 Manifest next update: Tue 10 Feb 2026 14:00:23 +0000 Files and hashes: 1: CzohGtSLcmDpSrKXCjf2wQpuklI.roa (hash: oSgq7hJ4clz8JZa9p9/cu2QQ6c0SU2FQe0lIPhhVo4k=) 2: vfW3EvLkkywcAwMS0ZSll4g_PV4.crl (hash: WKiT01v3+P+88KXDYrUgl+8BlsgpjlNSfmPb+XH10PA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:13:dd:0b:c8:63:b3:93:09:d3:e6:be:29:1e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdf5b712f2e4932c1c030312d194a597883f3d5e Validity Not Before: Feb 9 14:00:23 2026 GMT Not After : Feb 10 14:00:23 2026 GMT Subject: CN=70e9382fa1b036697b7f308e95714c16ce5cc711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:49:7b:b9:93:9f:cc:61:00:18:cc:8e:6e:95: ba:e7:ff:f5:78:f3:b3:51:4d:98:18:d8:b6:1a:dc: 08:e5:87:0e:aa:88:e6:3b:4b:08:3c:95:a7:f6:c7: a4:27:b2:d3:23:4e:7d:09:77:7f:00:1e:77:92:b4: 43:f9:db:88:da:9d:83:a5:53:82:68:ff:46:b8:23: c5:80:7e:3b:3f:35:c5:50:8e:85:4f:b0:11:5a:9b: 86:8c:e5:62:bf:6b:c5:e1:4e:54:13:6a:81:e6:98: 28:26:47:47:79:2b:18:44:dc:8d:98:f4:d8:30:6b: 2c:09:fc:2f:6f:22:89:de:01:51:80:00:e0:0f:2b: c3:e2:6e:f2:78:8b:59:46:84:e8:96:50:79:43:7a: 3c:13:1e:26:c5:b1:d8:ff:6d:a0:19:83:73:bc:b3: 3c:ca:39:49:44:e7:68:93:79:31:22:ca:f0:a8:ea: e4:e7:a8:8d:86:4c:1d:6e:9e:9d:ee:71:04:d9:61: 74:d0:74:a8:3b:a5:10:4a:88:32:53:6d:86:af:a7: df:39:56:99:9f:a4:73:67:70:ee:9e:84:99:73:64: 8e:20:aa:95:49:53:e0:3e:c5:54:c0:46:1a:eb:a8: 59:b2:47:85:c4:ae:cc:d5:88:ec:d9:4a:ac:2f:88: 89:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E9:38:2F:A1:B0:36:69:7B:7F:30:8E:95:71:4C:16:CE:5C:C7:11 X509v3 Authority Key Identifier: keyid:BD:F5:B7:12:F2:E4:93:2C:1C:03:03:12:D1:94:A5:97:88:3F:3D:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfW3EvLkkywcAwMS0ZSll4g_PV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/ce0077-c701-4ced-9d53-6c5c34586f6e/1/vfW3EvLkkywcAwMS0ZSll4g_PV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:2f:8a:19:14:32:e4:dd:6c:3c:f3:a7:fd:52:e8:71:86:6c: f7:cf:09:7c:a1:0e:a2:fc:14:de:46:56:bb:36:7c:51:eb:9b: b5:ae:05:97:64:2c:73:fc:8c:7c:2a:86:f5:a0:1c:06:47:2d: 7e:e8:fd:bb:78:84:f5:90:57:d8:68:35:b4:24:f1:51:9a:6b: 5b:58:a4:62:1b:9a:b0:39:48:e9:fe:b4:96:5b:f4:b5:6f:1d: 40:ac:61:24:f9:00:80:8d:ac:25:cb:b9:3a:5d:2e:41:3d:91: b5:27:5b:11:31:e5:1c:3a:c4:cc:10:03:e5:43:60:6a:97:93: 0f:b0:15:7f:fc:2f:b5:2d:b7:54:55:bc:cc:60:1c:00:e9:d5: cd:4e:28:50:34:39:3a:f4:78:f9:68:16:af:8e:80:a0:7e:9d: 12:5e:57:33:cd:d7:64:03:b7:dc:c2:28:54:4b:7b:b3:83:f0: f2:ae:07:43:8a:1b:95:9c:da:5c:45:76:c3:e9:6c:7c:d9:af: ed:6e:0c:15:bb:f2:a5:39:90:32:91:08:fc:41:8e:fe:bd:db: 6b:1c:97:8d:5f:28:17:d8:64:db:a8:b6:62:a1:a7:48:7b:ff: 9d:6c:76:dd:16:0b:a1:bc:cc:c9:4b:0e:28:d3:2b:77:08:6b: d1:63:c9:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBPdC8hjs5MJ0+a+KR6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZjViNzEyZjJlNDkzMmMxYzAzMDMxMmQxOTRhNTk3ODgz ZjNkNWUwHhcNMjYwMjA5MTQwMDIzWhcNMjYwMjEwMTQwMDIzWjAzMTEwLwYDVQQD Eyg3MGU5MzgyZmExYjAzNjY5N2I3ZjMwOGU5NTcxNGMxNmNlNWNjNzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0l7uZOfzGEAGMyObpW65//1ePOz UU2YGNi2GtwI5YcOqojmO0sIPJWn9sekJ7LTI059CXd/AB53krRD+duI2p2DpVOC aP9GuCPFgH47PzXFUI6FT7ARWpuGjOViv2vF4U5UE2qB5pgoJkdHeSsYRNyNmPTY MGssCfwvbyKJ3gFRgADgDyvD4m7yeItZRoTollB5Q3o8Ex4mxbHY/22gGYNzvLM8 yjlJROdok3kxIsrwqOrk56iNhkwdbp6d7nEE2WF00HSoO6UQSogyU22Gr6ffOVaZ n6RzZ3DunoSZc2SOIKqVSVPgPsVUwEYa66hZskeFxK7M1Yjs2UqsL4iJIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDpOC+hsDZpe38wjpVxTBbOXMcRMB8GA1UdIwQY MBaAFL31txLy5JMsHAMDEtGUpZeIPz1eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS9jZTAwNzctYzcwMS00Y2VkLTlkNTMt NmM1YzM0NTg2ZjZlLzEvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS9jZTAwNzctYzcwMS00Y2VkLTlkNTMtNmM1YzM0NTg2ZjZl LzEvdmZXM0V2TGtreXdjQXdNUzBaU2xsNGdfUFY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqC+KGRQy 5N1sPPOn/VLocYZs988JfKEOovwU3kZWuzZ8Ueubta4Fl2Qsc/yMfCqG9aAcBkct fuj9u3iE9ZBX2Gg1tCTxUZprW1ikYhuasDlI6f60llv0tW8dQKxhJPkAgI2sJcu5 Ol0uQT2RtSdbETHlHDrEzBAD5UNgapeTD7AVf/wvtS23VFW8zGAcAOnVzU4oUDQ5 OvR4+WgWr46AoH6dEl5XM83XZAO33MIoVEt7s4Pw8q4HQ4oblZzaXEV2w+lsfNmv 7W4MFbvypTmQMpEI/EGO/r3baxyXjV8oF9hk26i2YqGnSHv/nWx23RYLobzMyUsO KNMrdwhr0WPJcg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:55 2026 by rpki-client