This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft File: vfSGpExRBdeBNXKUVhzMPROk1nE.mft (raw, json) Hash identifier: IHhevpJH2OOZKejo+Sfhc7Rr771zhtpiQh352/5PyCI= Subject key identifier: 66:79:A3:14:8D:6E:D2:E0:43:1F:3A:48:D0:49:FD:FE:7C:F3:8E:72 Authority key identifier: BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71 Certificate issuer: /CN=bdf486a44c5105d781357294561ccc3d13a4d671 Certificate serial: 019C438FC2CF272FA8AAE30554D0943B6397 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft Manifest number: 0A80 Signing time: Mon 09 Feb 2026 18:00:20 +0000 Manifest this update: Mon 09 Feb 2026 18:00:20 +0000 Manifest next update: Tue 10 Feb 2026 18:00:20 +0000 Files and hashes: 1: vfSGpExRBdeBNXKUVhzMPROk1nE.crl (hash: NLen1bQVv7/B4CTZ26Zmjogq8dfon5tnOARwx3H0PeI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:c2:cf:27:2f:a8:aa:e3:05:54:d0:94:3b:63:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdf486a44c5105d781357294561ccc3d13a4d671 Validity Not Before: Feb 9 18:00:20 2026 GMT Not After : Feb 10 18:00:20 2026 GMT Subject: CN=6679a3148d6ed2e0431f3a48d049fdfe7cf38e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:73:6c:40:1b:a7:62:6b:68:71:c2:ef:85:14: c3:05:69:0b:0e:c9:fe:5e:d7:c7:95:1c:6a:7b:72: 7b:1a:39:b5:2c:fb:33:38:97:75:d4:81:8d:f5:c5: cf:57:b8:81:fb:7d:53:88:7d:8b:f2:19:77:7c:3a: ce:55:d8:86:0e:b9:97:bd:f9:4a:e7:f2:f8:51:9a: 76:fc:90:cd:a4:ca:5e:0a:f4:42:86:7d:3b:59:9d: 08:94:dd:0b:de:0e:0b:66:f2:cd:b5:1c:c2:bf:34: 6b:2d:de:aa:c2:15:9b:90:5d:89:e5:dd:ec:3d:15: b9:56:45:2f:2f:09:98:62:f7:8c:89:61:3d:9a:0f: 12:ba:15:f5:32:29:de:c1:5e:e5:38:8c:8c:1b:c1: 66:e1:b4:8d:b7:bb:ca:ae:c1:03:d5:de:06:28:00: 58:d7:b3:9b:00:fc:74:6f:9a:e6:10:98:5b:ba:8d: d3:bb:23:bb:c3:8b:1a:1a:7a:c8:9d:99:3d:54:90: 88:f3:dc:eb:b8:0e:ac:60:d0:72:20:7a:b2:7e:3e: 42:30:60:35:d5:db:ff:04:57:41:4c:ee:a5:96:af: db:f8:68:58:3e:f7:a0:93:c0:f6:85:4e:45:d0:26: 0e:71:04:a1:9c:08:b8:d7:01:51:31:60:ed:b3:a7: 2f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:79:A3:14:8D:6E:D2:E0:43:1F:3A:48:D0:49:FD:FE:7C:F3:8E:72 X509v3 Authority Key Identifier: keyid:BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9e:92:46:b9:6d:bf:20:80:22:4d:e5:d1:2b:75:e2:a9:88: 8c:8d:b6:0c:65:45:ec:ca:99:08:7f:8c:c3:79:bb:f1:3d:e4: e4:d7:da:7d:af:93:cf:34:3a:17:27:15:f4:3d:d3:05:c4:32: f3:f7:05:ac:0b:69:bb:fd:9b:40:5c:34:63:a3:dd:0c:a0:31: b5:7e:15:b3:24:52:54:01:23:09:f7:e7:a6:4e:fc:cf:f3:6d: a2:0f:29:0a:c3:ef:59:dd:20:0a:7c:ca:42:51:2b:75:f8:bc: 17:4d:d3:4d:eb:6f:c6:20:b8:14:26:01:9b:ea:b2:98:37:0c: f1:74:6a:e7:99:62:ac:c6:68:80:c2:40:5d:ab:b1:dd:0d:16: e1:67:6e:c9:eb:46:6b:61:07:64:99:b1:39:c3:69:6c:92:03: 9c:72:04:37:01:dc:d2:e9:3c:52:eb:ea:ad:88:a4:6c:26:63: 12:71:b9:4b:1c:aa:54:09:f3:10:37:4a:3b:1a:0a:e8:c1:b0: 02:99:b4:a1:39:a5:12:9d:c8:2c:44:de:0e:62:62:55:a0:e7: 8e:b9:56:be:c7:e7:54:95:c2:f4:5e:ed:ec:d6:08:45:b5:07: 34:ab:0b:e6:ff:7b:1e:2c:9f:2f:fb:e5:d1:63:b5:5c:bd:1a: 77:57:1d:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj8LPJy+oquMFVNCUO2OXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZjQ4NmE0NGM1MTA1ZDc4MTM1NzI5NDU2MWNjYzNkMTNh NGQ2NzEwHhcNMjYwMjA5MTgwMDIwWhcNMjYwMjEwMTgwMDIwWjAzMTEwLwYDVQQD Eyg2Njc5YTMxNDhkNmVkMmUwNDMxZjNhNDhkMDQ5ZmRmZTdjZjM4ZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXNsQBunYmtoccLvhRTDBWkLDsn+ XtfHlRxqe3J7Gjm1LPszOJd11IGN9cXPV7iB+31TiH2L8hl3fDrOVdiGDrmXvflK 5/L4UZp2/JDNpMpeCvRChn07WZ0IlN0L3g4LZvLNtRzCvzRrLd6qwhWbkF2J5d3s PRW5VkUvLwmYYveMiWE9mg8SuhX1MinewV7lOIyMG8Fm4bSNt7vKrsED1d4GKABY 17ObAPx0b5rmEJhbuo3TuyO7w4saGnrInZk9VJCI89zruA6sYNByIHqyfj5CMGA1 1dv/BFdBTO6llq/b+GhYPvegk8D2hU5F0CYOcQShnAi41wFRMWDts6cvmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZ5oxSNbtLgQx86SNBJ/f58845yMB8GA1UdIwQY MBaAFL30hqRMUQXXgTVylFYczD0TpNZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZTR3BFeFJCZGVCTlhLVVZoek1QUk9rMW5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iOGIyNzgtZjliZC00MGUxLTgwM2Et ZjY5MWY2NDc1OGFjLzEvdmZTR3BFeFJCZGVCTlhLVVZoek1QUk9rMW5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iOGIyNzgtZjliZC00MGUxLTgwM2EtZjY5MWY2NDc1OGFj LzEvdmZTR3BFeFJCZGVCTlhLVVZoek1QUk9rMW5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY56SRrlt vyCAIk3l0St14qmIjI22DGVF7MqZCH+Mw3m78T3k5Nfafa+TzzQ6FycV9D3TBcQy 8/cFrAtpu/2bQFw0Y6PdDKAxtX4VsyRSVAEjCffnpk78z/Ntog8pCsPvWd0gCnzK QlErdfi8F03TTetvxiC4FCYBm+qymDcM8XRq55lirMZogMJAXaux3Q0W4WduyetG a2EHZJmxOcNpbJIDnHIENwHc0uk8UuvqrYikbCZjEnG5SxyqVAnzEDdKOxoK6MGw Apm0oTmlEp3ILETeDmJiVaDnjrlWvsfnVJXC9F7t7NYIRbUHNKsL5v97HiyfL/vl 0WO1XL0ad1cdrg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:23 2026 by rpki-client