This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft File: RVfq3Q3asUagq5nAquV40njw9H4.mft (raw, json) Hash identifier: 3wotT2IipbrdqLQcfq4ATcJ5s8TRqop+e1obleV0Jwg= Subject key identifier: 6D:03:24:3D:6C:72:B2:42:6E:08:05:36:B9:33:31:0C:C7:D8:46:7A Authority key identifier: 45:57:EA:DD:0D:DA:B1:46:A0:AB:99:C0:AA:E5:78:D2:78:F0:F4:7E Certificate issuer: /CN=4557eadd0ddab146a0ab99c0aae578d278f0f47e Certificate serial: 019C413444E750C3E6E2323678692DD93BA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft Manifest number: 54 Signing time: Mon 09 Feb 2026 07:01:10 +0000 Manifest this update: Mon 09 Feb 2026 07:01:10 +0000 Manifest next update: Tue 10 Feb 2026 07:01:10 +0000 Files and hashes: 1: RVfq3Q3asUagq5nAquV40njw9H4.crl (hash: L/5RiwGqIvhBAPjGT4NkB5Y7uVCSz0VYIn+R08XQG/Q=) 2: ck2Hnx7YLqfCAwbXnmqrOBQQJXA.roa (hash: z68wCsgmx5LNuVEfhfzGMi/AVsIBR+cwgGs5Q7LfatQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:44:e7:50:c3:e6:e2:32:36:78:69:2d:d9:3b:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4557eadd0ddab146a0ab99c0aae578d278f0f47e Validity Not Before: Feb 9 07:01:10 2026 GMT Not After : Feb 10 07:01:10 2026 GMT Subject: CN=6d03243d6c72b2426e080536b933310cc7d8467a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1a:77:51:ed:d3:d2:37:55:de:ce:03:88:32: ba:20:cc:20:39:8a:87:f8:02:f8:ff:e9:86:e1:91: a1:cd:13:0f:27:6f:46:d7:4b:74:91:e3:0d:d9:63: f5:e1:c7:c4:1d:e7:cd:5c:ae:62:8f:b8:56:c3:57: 8c:77:9e:0c:22:b9:fd:62:e5:c6:97:ad:08:d9:56: 4c:a3:c8:b4:ba:56:a5:59:46:2c:f7:21:39:24:8f: 88:a3:51:ac:1c:ff:e8:f1:29:8f:b2:37:ae:b9:62: 2d:ff:f0:54:9d:7b:40:d2:74:96:a3:d9:eb:6f:44: b6:8f:b5:da:aa:6c:e7:f8:a2:f9:4f:fd:6e:34:de: 30:3e:13:ae:36:08:0f:6f:e0:3b:c5:8a:46:d3:35: d7:a7:44:57:f9:ba:27:a2:a0:fa:ce:29:5b:a8:1c: 6d:94:76:89:20:b1:1c:c0:22:a0:2c:43:c3:35:65: 4c:99:57:2a:15:ab:9f:b9:aa:91:d5:61:e3:f6:d1: e9:28:52:f6:5d:68:52:1c:64:80:ce:52:92:bd:6e: 5d:95:f2:2a:d4:a3:8e:80:79:d1:5d:c6:07:97:fd: 2f:7c:89:e8:ff:be:a4:44:ef:c8:f5:b4:e1:2e:e8: 5f:f3:ca:4c:b0:c8:8b:ce:0a:17:d8:db:6a:f8:b3: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:03:24:3D:6C:72:B2:42:6E:08:05:36:B9:33:31:0C:C7:D8:46:7A X509v3 Authority Key Identifier: keyid:45:57:EA:DD:0D:DA:B1:46:A0:AB:99:C0:AA:E5:78:D2:78:F0:F4:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d4:5a:71:4b:78:90:aa:d6:7d:a0:e7:83:d7:86:97:a8:86: e8:9e:3e:0a:24:73:c7:23:89:24:71:89:c4:4c:13:30:e2:17: fc:f6:4e:e9:92:85:84:5a:a3:0c:8a:8b:b0:f1:41:4b:14:53: a9:22:2a:9b:59:d4:cd:7a:6d:0b:01:27:34:f2:56:82:b2:16: 8c:ea:d1:b7:1b:e7:2c:5f:a8:4c:0b:00:5b:cc:04:11:a8:0b: d2:79:45:1e:35:33:a3:11:da:ed:10:c0:3d:23:6d:09:ba:1b: d9:37:c6:53:8a:6c:a4:ba:73:59:11:c1:a7:82:6c:ac:e8:02: 67:fc:95:d2:3a:08:88:e0:f9:97:33:48:29:c1:0d:a3:b6:81: 68:ab:78:1f:43:1c:17:4b:47:d9:f1:15:c6:bb:7f:fd:3f:a6: e7:fa:55:38:2e:ec:b9:84:47:9b:56:88:94:65:8d:5b:05:ac: 51:2e:b8:5e:3f:8e:43:e9:74:ce:5e:4c:b5:33:e0:16:d9:3e: 49:f5:98:a4:a2:9a:9f:33:35:f4:aa:96:2a:fb:b3:77:42:f7: 0c:33:ba:c1:cf:8d:08:77:7b:ed:58:ac:2d:3b:27:ec:9e:bb: 56:fe:b9:9e:15:41:77:21:39:b0:be:d9:dd:31:c2:45:15:0e: 01:cc:5c:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNETnUMPm4jI2eGkt2TugMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NTdlYWRkMGRkYWIxNDZhMGFiOTljMGFhZTU3OGQyNzhm MGY0N2UwHhcNMjYwMjA5MDcwMTEwWhcNMjYwMjEwMDcwMTEwWjAzMTEwLwYDVQQD Eyg2ZDAzMjQzZDZjNzJiMjQyNmUwODA1MzZiOTMzMzEwY2M3ZDg0NjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxp3Ue3T0jdV3s4DiDK6IMwgOYqH +AL4/+mG4ZGhzRMPJ29G10t0keMN2WP14cfEHefNXK5ij7hWw1eMd54MIrn9YuXG l60I2VZMo8i0ulalWUYs9yE5JI+Io1GsHP/o8SmPsjeuuWIt//BUnXtA0nSWo9nr b0S2j7Xaqmzn+KL5T/1uNN4wPhOuNggPb+A7xYpG0zXXp0RX+bonoqD6zilbqBxt lHaJILEcwCKgLEPDNWVMmVcqFaufuaqR1WHj9tHpKFL2XWhSHGSAzlKSvW5dlfIq 1KOOgHnRXcYHl/0vfIno/76kRO/I9bThLuhf88pMsMiLzgoX2Ntq+LOVeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG0DJD1scrJCbggFNrkzMQzH2EZ6MB8GA1UdIwQY MBaAFEVX6t0N2rFGoKuZwKrleNJ48PR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlZmcTNRM2FzVWFncTVuQXF1VjQwbmp3OUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iYzJkMjYtZGNmNy00Njk1LTg4ZWUt OTMyYmI0ODY3YzJiLzEvUlZmcTNRM2FzVWFncTVuQXF1VjQwbmp3OUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9iYzJkMjYtZGNmNy00Njk1LTg4ZWUtOTMyYmI0ODY3YzJi LzEvUlZmcTNRM2FzVWFncTVuQXF1VjQwbmp3OUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdRacUt4 kKrWfaDng9eGl6iG6J4+CiRzxyOJJHGJxEwTMOIX/PZO6ZKFhFqjDIqLsPFBSxRT qSIqm1nUzXptCwEnNPJWgrIWjOrRtxvnLF+oTAsAW8wEEagL0nlFHjUzoxHa7RDA PSNtCbob2TfGU4pspLpzWRHBp4JsrOgCZ/yV0joIiOD5lzNIKcENo7aBaKt4H0Mc F0tH2fEVxrt//T+m5/pVOC7suYRHm1aIlGWNWwWsUS64Xj+OQ+l0zl5MtTPgFtk+ SfWYpKKanzM19KqWKvuzd0L3DDO6wc+NCHd77VisLTsn7J67Vv65nhVBdyE5sL7Z 3THCRRUOAcxc5w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:09 2026 by rpki-client