This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft File: vDImMeLrfqv7XttPywq4yZaCPEg.mft (raw, json) Hash identifier: xTht7jr9yoYYE+E2YD0QeK7lgaGuCadOlcskL/Ps6s0= Subject key identifier: CD:17:B0:79:94:AE:01:A3:6E:C4:69:E7:C0:54:03:A9:0A:5B:E2:32 Authority key identifier: BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48 Certificate issuer: /CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48 Certificate serial: 019C4322B969C56C2421CA8858D10E8C0BEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft Manifest number: 0873 Signing time: Mon 09 Feb 2026 16:01:14 +0000 Manifest this update: Mon 09 Feb 2026 16:01:14 +0000 Manifest next update: Tue 10 Feb 2026 16:01:14 +0000 Files and hashes: 1: vDImMeLrfqv7XttPywq4yZaCPEg.crl (hash: pcm2K1QFotsfqgnJMt0sw8n0wzhOrsQV3fe8Na3LJ40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b9:69:c5:6c:24:21:ca:88:58:d1:0e:8c:0b:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48 Validity Not Before: Feb 9 16:01:14 2026 GMT Not After : Feb 10 16:01:14 2026 GMT Subject: CN=cd17b07994ae01a36ec469e7c05403a90a5be232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2f:bf:e3:12:c2:dc:1c:3a:8b:1e:72:cb:8a: bc:ee:9d:5b:67:18:6c:d7:bb:98:70:60:2a:b1:1c: e8:b6:2b:52:28:d2:12:0a:6e:fc:43:78:2c:0c:1c: 34:71:73:f4:ec:95:81:28:b0:8d:e3:54:e5:ec:b8: ae:4d:02:10:c3:b3:ab:b0:d6:bf:cd:ab:77:f6:41: 17:0f:45:f7:c8:9e:3e:02:36:86:61:47:f9:76:a2: 6e:22:65:18:77:b1:e3:20:3c:16:c1:e8:0e:6e:dd: 24:24:6e:73:a9:05:b3:b8:16:a6:a5:f6:82:a1:29: 2b:b4:11:a6:23:8e:a7:12:7e:9c:d9:2d:59:f7:12: 91:ac:33:12:73:de:14:c5:c6:ab:d8:74:0e:a0:2d: 42:11:7d:b8:d5:01:9a:e2:ab:a0:41:8d:1d:f3:c9: 36:f4:e0:01:c7:66:32:dc:96:47:f7:f1:ef:cf:74: cc:85:0c:66:79:e2:e5:b1:57:fb:23:5a:ac:bd:a5: 98:3c:f3:04:f5:ba:ff:dc:a2:33:f0:ac:27:d9:cf: cc:b5:a7:ac:06:6a:e7:39:d9:eb:51:e2:86:71:11: 48:bf:c8:4e:0a:84:d3:4f:21:5b:dd:8f:e6:6a:3e: 47:e2:a6:20:a5:1c:79:d9:47:b5:19:37:9d:3f:aa: 0b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:17:B0:79:94:AE:01:A3:6E:C4:69:E7:C0:54:03:A9:0A:5B:E2:32 X509v3 Authority Key Identifier: keyid:BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1e:61:7a:89:5d:b0:a6:7e:2c:f3:6a:52:8d:19:90:53:23: 94:06:23:dd:12:ff:32:dc:17:0c:e9:ea:cf:b9:e8:9e:c3:4e: 6f:43:21:c5:0b:2e:33:26:b2:40:a9:e8:bb:20:5b:8f:dd:f4: 12:ec:93:0d:8d:17:12:fd:b8:ac:30:63:79:4e:56:cc:92:f3: ec:1b:34:75:d5:de:6d:4c:12:0d:47:0e:04:08:50:67:2f:4b: 83:49:73:3e:74:b0:20:01:08:8a:a0:de:e3:6f:29:12:5c:71: eb:fa:36:c7:ff:ca:5b:ee:d4:1c:48:92:a5:40:54:82:64:7e: 2b:7d:5f:94:e2:04:0a:a4:64:30:84:e3:7a:14:ea:09:28:4b: 1d:cc:1f:90:1a:dc:42:82:4a:3f:98:1f:56:f7:9b:78:14:1c: 3a:19:fb:60:8b:f8:70:d7:9a:ee:e9:5e:dd:b3:46:d6:3f:ad: ad:68:7f:06:63:57:dc:cb:a7:d2:9d:ad:d3:f3:4c:74:d8:9b: a7:ba:ef:06:73:f7:db:73:76:36:10:06:94:07:79:60:40:45: e7:34:a3:07:36:ff:45:9f:11:c1:88:4b:74:d2:04:aa:74:75: 88:7b:a3:5d:e2:fe:bd:05:02:2e:94:88:86:28:d9:d2:56:ae: 75:f6:82:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrlpxWwkIcqIWNEOjAvvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzIyNjMxZTJlYjdlYWJmYjVlZGI0ZmNiMGFiOGM5OTY4 MjNjNDgwHhcNMjYwMjA5MTYwMTE0WhcNMjYwMjEwMTYwMTE0WjAzMTEwLwYDVQQD EyhjZDE3YjA3OTk0YWUwMWEzNmVjNDY5ZTdjMDU0MDNhOTBhNWJlMjMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC+/4xLC3Bw6ix5yy4q87p1bZxhs 17uYcGAqsRzotitSKNISCm78Q3gsDBw0cXP07JWBKLCN41Tl7LiuTQIQw7OrsNa/ zat39kEXD0X3yJ4+AjaGYUf5dqJuImUYd7HjIDwWwegObt0kJG5zqQWzuBampfaC oSkrtBGmI46nEn6c2S1Z9xKRrDMSc94Uxcar2HQOoC1CEX241QGa4qugQY0d88k2 9OABx2Yy3JZH9/Hvz3TMhQxmeeLlsVf7I1qsvaWYPPME9br/3KIz8Kwn2c/Mtaes BmrnOdnrUeKGcRFIv8hOCoTTTyFb3Y/maj5H4qYgpRx52Ue1GTedP6oLXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM0XsHmUrgGjbsRp58BUA6kKW+IyMB8GA1UdIwQY MBaAFLwyJjHi636r+17bT8sKuMmWgjxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRJbU1lTHJmcXY3WHR0UHl3cTR5WmFDUEVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zMDg2YjgtNzFmMy00YThkLTk0NTEt MjllZGZhYjM5ZjQ5LzEvdkRJbU1lTHJmcXY3WHR0UHl3cTR5WmFDUEVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8zMDg2YjgtNzFmMy00YThkLTk0NTEtMjllZGZhYjM5ZjQ5 LzEvdkRJbU1lTHJmcXY3WHR0UHl3cTR5WmFDUEVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaR5heold sKZ+LPNqUo0ZkFMjlAYj3RL/MtwXDOnqz7nonsNOb0MhxQsuMyayQKnouyBbj930 EuyTDY0XEv24rDBjeU5WzJLz7Bs0ddXebUwSDUcOBAhQZy9Lg0lzPnSwIAEIiqDe 428pElxx6/o2x//KW+7UHEiSpUBUgmR+K31flOIECqRkMITjehTqCShLHcwfkBrc QoJKP5gfVvebeBQcOhn7YIv4cNea7ule3bNG1j+trWh/BmNX3Mun0p2t0/NMdNib p7rvBnP323N2NhAGlAd5YEBF5zSjBzb/RZ8RwYhLdNIEqnR1iHujXeL+vQUCLpSI hijZ0laudfaCPg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:28 2026 by rpki-client