This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft File: vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json) Hash identifier: lpOhrOgdEQQ349cf2BnfPlyZ6ZELdaSBQxys0Wka7Ag= Subject key identifier: B0:A6:41:56:8C:75:20:7A:C0:F4:2C:FD:B8:F1:2E:42:A1:8E:25:F8 Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE Certificate issuer: /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce Certificate serial: 019C427DEC08758B32F1C0E54BCEE02BF33D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft Manifest number: 0ADB Signing time: Mon 09 Feb 2026 13:01:14 +0000 Manifest this update: Mon 09 Feb 2026 13:01:14 +0000 Manifest next update: Tue 10 Feb 2026 13:01:14 +0000 Files and hashes: 1: 0LM2VTkMAj4vZU1AVSZWwf7QoUg.roa (hash: OeE58CarJmrARbT9+AtVI8a/6DD0VM2J/zL6Ietj1so=) 2: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: 2Coo4oVPt2vBgN/a5OIh7TP/m/mXiFGRG4HVSG4SVR8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ec:08:75:8b:32:f1:c0:e5:4b:ce:e0:2b:f3:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce Validity Not Before: Feb 9 13:01:14 2026 GMT Not After : Feb 10 13:01:14 2026 GMT Subject: CN=b0a641568c75207ac0f42cfdb8f12e42a18e25f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:03:3f:d7:27:90:82:5c:97:c0:09:c3:c4:33: 80:db:8a:81:70:73:92:46:31:1d:fc:0d:10:5e:97: 1e:83:3f:ae:18:54:e2:28:e8:c3:0f:b2:f8:26:e8: 7b:1b:16:62:a7:b5:75:cc:5b:5e:f9:b6:97:93:7c: 7e:0c:54:f9:e4:8c:1a:b7:4f:64:07:88:be:bf:0c: fc:62:e2:95:38:30:7c:dc:7b:42:ab:93:44:b4:bb: 4f:97:50:25:57:cd:68:0a:e0:61:b0:0a:f0:1d:c7: 2c:56:01:49:0a:d1:4b:d4:6d:ba:03:21:cb:ae:b2: f9:e1:d7:61:ab:e8:a4:c4:9f:5b:ed:71:0b:20:f9: cd:4d:8f:03:db:70:82:82:de:d2:54:d1:ce:29:78: 87:7b:ca:2d:5e:48:33:cd:cd:6d:03:0d:cf:95:3d: 53:42:f5:2f:23:1e:a5:f0:fb:2f:00:cb:7c:df:92: 0c:69:00:6b:f7:1d:53:90:3f:0e:bc:52:c4:2c:20: c3:75:11:24:a4:10:1d:ab:6f:54:37:2b:d8:bc:2f: 7a:2d:36:40:eb:99:3c:ac:7e:72:5c:c0:e7:00:53: 44:8d:99:6a:3a:35:7e:29:8c:b8:4c:cb:6d:19:d4: 3a:f4:77:39:68:28:88:81:34:a1:97:af:e7:2f:14: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A6:41:56:8C:75:20:7A:C0:F4:2C:FD:B8:F1:2E:42:A1:8E:25:F8 X509v3 Authority Key Identifier: keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3e:2a:25:f8:6c:20:b6:05:56:12:87:03:f5:ea:a2:6f:3c: 31:42:05:78:fa:a2:4f:a8:e3:6f:16:14:58:d8:6c:2a:3b:2a: 33:d9:54:be:74:8f:6c:d5:8e:86:42:1b:ca:7d:cd:40:52:1e: 90:66:5c:6f:06:92:ba:0d:de:ba:45:fc:84:a6:ee:a2:8c:54: 20:d0:6c:05:86:d6:b1:a9:0c:cf:80:f1:e6:ba:4a:03:a2:76: 90:80:bc:3e:9e:13:c0:44:09:54:c8:0c:f5:39:6f:63:7a:9f: 21:35:3d:98:a8:96:b8:5e:89:bd:1b:df:cc:ed:a5:d2:90:25: bf:33:a1:35:aa:f2:6b:ed:a3:42:8c:64:56:e3:a3:9f:18:75: 16:42:b2:47:87:1a:7b:90:e7:65:9c:7b:4f:39:7b:f9:c7:85: 8f:70:c8:67:52:b3:4f:81:2c:dd:fb:31:5b:f2:f0:ab:ca:02: 64:be:7d:0e:b6:56:ad:f7:64:ca:67:3a:ef:5a:41:1c:d4:e8: 8a:2e:60:04:bd:7b:f9:ec:97:7c:f6:04:3a:df:b3:fa:03:86: d2:73:f6:a8:a1:3b:86:10:1e:96:2c:06:a5:a0:1d:d9:5a:a2: e9:be:66:84:e3:06:cf:71:b1:72:51:41:e4:cf:9f:cd:75:a4: f0:52:ef:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfewIdYsy8cDlS87gK/M9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNGFkMjFhMGE2OWRjMDQxYzRlMTc3MGViMThiYTQzYjZk YjI5Y2UwHhcNMjYwMjA5MTMwMTE0WhcNMjYwMjEwMTMwMTE0WjAzMTEwLwYDVQQD EyhiMGE2NDE1NjhjNzUyMDdhYzBmNDJjZmRiOGYxMmU0MmExOGUyNWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwM/1yeQglyXwAnDxDOA24qBcHOS RjEd/A0QXpcegz+uGFTiKOjDD7L4Juh7GxZip7V1zFte+baXk3x+DFT55Iwat09k B4i+vwz8YuKVODB83HtCq5NEtLtPl1AlV81oCuBhsArwHccsVgFJCtFL1G26AyHL rrL54ddhq+ikxJ9b7XELIPnNTY8D23CCgt7SVNHOKXiHe8otXkgzzc1tAw3PlT1T QvUvIx6l8PsvAMt835IMaQBr9x1TkD8OvFLELCDDdREkpBAdq29UNyvYvC96LTZA 65k8rH5yXMDnAFNEjZlqOjV+KYy4TMttGdQ69Hc5aCiIgTShl6/nLxT0mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCmQVaMdSB6wPQs/bjxLkKhjiX4MB8GA1UdIwQY MBaAFL1K0hoKadwEHE4XcOsYukO22ynOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82N2Y3MDctMDAwNi00NjlkLWIzMTEt Y2RkNGQ4ZjhkMGQ5LzEvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC82N2Y3MDctMDAwNi00NjlkLWIzMTEtY2RkNGQ4ZjhkMGQ5 LzEvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADz4qJfhs ILYFVhKHA/Xqom88MUIFePqiT6jjbxYUWNhsKjsqM9lUvnSPbNWOhkIbyn3NQFIe kGZcbwaSug3eukX8hKbuooxUINBsBYbWsakMz4Dx5rpKA6J2kIC8Pp4TwEQJVMgM 9TlvY3qfITU9mKiWuF6JvRvfzO2l0pAlvzOhNarya+2jQoxkVuOjnxh1FkKyR4ca e5DnZZx7Tzl7+ceFj3DIZ1KzT4Es3fsxW/Lwq8oCZL59DrZWrfdkymc671pBHNTo ii5gBL17+eyXfPYEOt+z+gOG0nP2qKE7hhAeliwGpaAd2Vqi6b5mhOMGz3GxclFB 5M+fzXWk8FLvPw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:48 2026 by rpki-client