This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ebb662-458e-4524-b9e7-76cb989cc248/1/vW0f5TRRGyC27i-44bI9OM0NIag.mft File: vW0f5TRRGyC27i-44bI9OM0NIag.mft (raw, json) Hash identifier: Ik4eQLExrqwaZjb2UxTOaBT/KxxB5XmpI5XiIsXOD1w= Subject key identifier: F9:16:7A:5E:29:4B:FC:A0:DB:F2:88:E0:12:37:4C:66:F3:49:48:D3 Authority key identifier: BD:6D:1F:E5:34:51:1B:20:B6:EE:2F:B8:E1:B2:3D:38:CD:0D:21:A8 Certificate issuer: /CN=bd6d1fe534511b20b6ee2fb8e1b23d38cd0d21a8 Certificate serial: 019C427DCDCEC85089D84B7A3C6A44F7753D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vW0f5TRRGyC27i-44bI9OM0NIag.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/ebb662-458e-4524-b9e7-76cb989cc248/1/vW0f5TRRGyC27i-44bI9OM0NIag.mft Manifest number: 4C Signing time: Mon 09 Feb 2026 13:01:06 +0000 Manifest this update: Mon 09 Feb 2026 13:01:06 +0000 Manifest next update: Tue 10 Feb 2026 13:01:06 +0000 Files and hashes: 1: vW0f5TRRGyC27i-44bI9OM0NIag.crl (hash: CsOBxXm8bDU3ZSN0uozNztJVr6KY50nV3P9M+YYyXnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/ebb662-458e-4524-b9e7-76cb989cc248/1/vW0f5TRRGyC27i-44bI9OM0NIag.crl rsync://rpki.ripe.net/repository/DEFAULT/92/ebb662-458e-4524-b9e7-76cb989cc248/1/vW0f5TRRGyC27i-44bI9OM0NIag.mft rsync://rpki.ripe.net/repository/DEFAULT/vW0f5TRRGyC27i-44bI9OM0NIag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:cd:ce:c8:50:89:d8:4b:7a:3c:6a:44:f7:75:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd6d1fe534511b20b6ee2fb8e1b23d38cd0d21a8 Validity Not Before: Feb 9 13:01:06 2026 GMT Not After : Feb 10 13:01:06 2026 GMT Subject: CN=f9167a5e294bfca0dbf288e012374c66f34948d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6d:f2:87:72:63:15:f8:93:0d:4e:cd:c6:55: 97:3a:0a:22:58:81:47:9b:2e:b7:42:40:7b:2b:db: b5:d1:0b:4e:b4:06:a9:68:01:51:34:30:18:12:0b: be:c4:57:01:67:59:b0:64:6d:f6:33:24:d8:a0:f3: d2:10:5d:27:91:c5:07:f5:22:ac:63:a2:cf:3c:c8: f5:77:f2:06:ce:98:93:2a:7e:1f:74:84:21:99:be: 7e:2a:e0:71:1b:63:75:09:6d:f3:97:0a:2e:d5:2a: d3:7d:c6:1c:0b:97:7c:c4:74:93:d9:f4:f0:e4:52: de:2f:7c:38:e0:de:1d:87:8d:47:3f:de:69:29:ef: 5f:fc:25:59:aa:f4:fa:4a:3b:11:89:33:cb:6d:a4: 6a:38:35:04:41:2c:8d:51:4b:da:36:1a:0c:dd:ec: e4:29:51:bc:b4:c4:e3:c8:e5:15:cc:bc:37:d4:c3: 6d:ce:4b:a8:ea:6d:53:36:bc:b8:16:a2:bc:92:48: 33:0b:f4:3c:d8:53:bc:20:fb:5d:c1:07:5a:e0:b9: 30:7e:9e:2d:31:10:e6:d1:a1:51:9c:9b:f5:72:27: 39:c0:6e:68:87:b9:e0:d4:01:8b:a9:ff:17:10:60: f7:a6:1c:d3:dd:4e:30:ef:12:5d:d6:eb:8a:6c:2e: 88:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:16:7A:5E:29:4B:FC:A0:DB:F2:88:E0:12:37:4C:66:F3:49:48:D3 X509v3 Authority Key Identifier: keyid:BD:6D:1F:E5:34:51:1B:20:B6:EE:2F:B8:E1:B2:3D:38:CD:0D:21:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vW0f5TRRGyC27i-44bI9OM0NIag.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ebb662-458e-4524-b9e7-76cb989cc248/1/vW0f5TRRGyC27i-44bI9OM0NIag.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ebb662-458e-4524-b9e7-76cb989cc248/1/vW0f5TRRGyC27i-44bI9OM0NIag.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:ab:a6:76:44:06:be:ce:36:b6:ad:a8:1c:93:65:3a:ab:1e: 67:88:76:b2:c6:38:e9:a9:f7:28:1e:84:16:c9:76:1c:78:34: a4:8b:2c:69:6d:bb:23:d7:f3:08:33:15:c1:9e:0b:72:7e:bc: 70:ff:e4:47:1c:4d:cf:5c:04:d4:17:2b:1c:f3:1c:8c:c1:0b: 72:07:44:e2:5d:26:b7:b4:5b:1d:ee:c7:44:eb:92:e9:02:af: e0:dc:c5:15:c5:18:9f:f5:91:6f:84:df:6d:d7:d5:5c:7b:83: fd:83:8a:d7:7e:1f:a0:02:93:e2:cb:54:b0:7c:7c:a4:e5:7d: 37:09:70:67:a0:c0:9f:64:c8:f7:02:55:05:8d:f2:ff:4e:5e: a0:b8:25:b1:02:ba:14:3b:79:2c:74:84:43:5e:1f:f1:4e:74: 3e:d9:1f:19:13:57:7a:79:76:a7:e4:0e:90:c5:b4:a9:7b:97: 51:09:b5:13:6e:63:45:29:07:ee:f6:94:05:95:81:ae:ba:70: d4:8e:ed:86:ff:2e:ba:9c:03:71:06:49:c1:54:00:6f:3d:44: 89:e2:0a:91:37:61:4a:1b:5f:8e:12:cd:68:b7:0b:63:c3:a7: ae:8b:ad:aa:b7:7f:6d:01:64:09:f8:8a:db:5f:7b:9d:5f:c7: bf:4e:21:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfc3OyFCJ2Et6PGpE93U9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNmQxZmU1MzQ1MTFiMjBiNmVlMmZiOGUxYjIzZDM4Y2Qw ZDIxYTgwHhcNMjYwMjA5MTMwMTA2WhcNMjYwMjEwMTMwMTA2WjAzMTEwLwYDVQQD EyhmOTE2N2E1ZTI5NGJmY2EwZGJmMjg4ZTAxMjM3NGM2NmYzNDk0OGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq23yh3JjFfiTDU7NxlWXOgoiWIFH my63QkB7K9u10QtOtAapaAFRNDAYEgu+xFcBZ1mwZG32MyTYoPPSEF0nkcUH9SKs Y6LPPMj1d/IGzpiTKn4fdIQhmb5+KuBxG2N1CW3zlwou1SrTfcYcC5d8xHST2fTw 5FLeL3w44N4dh41HP95pKe9f/CVZqvT6SjsRiTPLbaRqODUEQSyNUUvaNhoM3ezk KVG8tMTjyOUVzLw31MNtzkuo6m1TNry4FqK8kkgzC/Q82FO8IPtdwQda4Lkwfp4t MRDm0aFRnJv1cic5wG5oh7ng1AGLqf8XEGD3phzT3U4w7xJd1uuKbC6IcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkWel4pS/yg2/KI4BI3TGbzSUjTMB8GA1UdIwQY MBaAFL1tH+U0URsgtu4vuOGyPTjNDSGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlcwZjVUUlJHeUMyN2ktNDRiSTlPTTBOSWFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9lYmI2NjItNDU4ZS00NTI0LWI5ZTct NzZjYjk4OWNjMjQ4LzEvdlcwZjVUUlJHeUMyN2ktNDRiSTlPTTBOSWFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9lYmI2NjItNDU4ZS00NTI0LWI5ZTctNzZjYjk4OWNjMjQ4 LzEvdlcwZjVUUlJHeUMyN2ktNDRiSTlPTTBOSWFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC6umdkQG vs42tq2oHJNlOqseZ4h2ssY46an3KB6EFsl2HHg0pIssaW27I9fzCDMVwZ4Lcn68 cP/kRxxNz1wE1BcrHPMcjMELcgdE4l0mt7RbHe7HROuS6QKv4NzFFcUYn/WRb4Tf bdfVXHuD/YOK134foAKT4stUsHx8pOV9NwlwZ6DAn2TI9wJVBY3y/05eoLglsQK6 FDt5LHSEQ14f8U50PtkfGRNXenl2p+QOkMW0qXuXUQm1E25jRSkH7vaUBZWBrrpw 1I7thv8uupwDcQZJwVQAbz1EieIKkTdhShtfjhLNaLcLY8Onroutqrd/bQFkCfiK 2197nV/Hv04hsA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:19 2026 by rpki-client