This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft File: VTmIsu6cEEIX3eFjmCF497TpdGc.mft (raw, json) Hash identifier: GSC5DE3F9eot4ceKCxoJjh34Wr3mAsBD/CqoUEVxgtQ= Subject key identifier: C0:B3:6D:BC:45:45:E3:B7:BE:F2:C6:0A:83:08:EC:58:AB:B9:60:7D Authority key identifier: 55:39:88:B2:EE:9C:10:42:17:DD:E1:63:98:21:78:F7:B4:E9:74:67 Certificate issuer: /CN=553988b2ee9c104217dde163982178f7b4e97467 Certificate serial: 019C43C69239A05474C4E78E2CA4749114C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft Manifest number: 015D Signing time: Mon 09 Feb 2026 19:00:12 +0000 Manifest this update: Mon 09 Feb 2026 19:00:12 +0000 Manifest next update: Tue 10 Feb 2026 19:00:12 +0000 Files and hashes: 1: VTmIsu6cEEIX3eFjmCF497TpdGc.crl (hash: eHU2D0cTrzR0Q0RpqbrjukhdopJcrSW/HzowTXzLlao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:92:39:a0:54:74:c4:e7:8e:2c:a4:74:91:14:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553988b2ee9c104217dde163982178f7b4e97467 Validity Not Before: Feb 9 19:00:12 2026 GMT Not After : Feb 10 19:00:12 2026 GMT Subject: CN=c0b36dbc4545e3b7bef2c60a8308ec58abb9607d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:6c:b6:35:33:33:89:53:6f:c5:e0:27:a5:1f: f0:3c:d5:05:55:d2:20:37:f8:0e:33:08:1f:5b:a5: da:c9:f4:02:78:a1:8e:0c:8a:7a:30:ac:3d:64:1a: 0e:a9:f4:84:ea:40:d2:bb:8a:ca:76:69:63:4d:c5: 6e:33:20:95:ef:62:c3:98:99:ce:e6:10:03:d7:fc: 4c:36:ca:26:aa:ea:8b:6d:36:d9:50:4f:82:49:e2: 65:e2:de:ab:e7:3d:34:49:13:23:c0:39:8f:5d:4f: 4f:ea:70:df:b3:94:c0:db:fd:ec:06:d5:f8:fc:96: cd:e8:71:f6:ae:0c:9a:56:e2:d9:2a:be:93:cb:08: 30:6a:31:1e:1d:49:81:28:61:0f:38:64:07:2a:76: 65:e5:9f:61:c4:55:34:86:20:91:88:a2:cf:4b:58: 56:8a:83:6a:99:41:7f:02:d0:e5:e6:3f:03:db:ad: 72:93:b9:68:bf:0d:09:40:fd:d6:11:81:e0:63:0d: f6:05:62:ad:1f:0b:69:39:ce:3b:5b:64:aa:6c:2a: ba:97:06:7e:5f:b3:e8:b5:26:37:76:fc:e0:c9:ea: 9d:14:94:42:4d:b2:b2:6a:74:95:84:bc:19:3c:67: 33:e6:9d:83:2e:b1:42:40:3d:4e:bd:f9:85:cc:fb: 56:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:B3:6D:BC:45:45:E3:B7:BE:F2:C6:0A:83:08:EC:58:AB:B9:60:7D X509v3 Authority Key Identifier: keyid:55:39:88:B2:EE:9C:10:42:17:DD:E1:63:98:21:78:F7:B4:E9:74:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTmIsu6cEEIX3eFjmCF497TpdGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4572c5-f83e-4e4f-abea-300b3ae515e6/1/VTmIsu6cEEIX3eFjmCF497TpdGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:4a:1a:97:71:4e:70:f5:4d:21:96:f8:6a:ce:10:8d:c8:85: c6:cb:7d:e5:22:8a:cf:04:57:1f:c6:4b:a3:57:47:d5:91:37: 30:a8:1c:38:f9:83:02:f9:b8:a0:6d:7a:65:da:b6:e1:21:7e: 79:e4:09:6c:59:36:ec:48:8f:0a:81:24:cf:a7:6c:22:92:7b: d7:41:87:05:a5:fd:5f:f8:a1:91:47:4e:25:34:a4:ab:e7:c3: 57:4f:c2:1c:49:85:25:44:a2:8e:c8:b2:a7:99:bc:c4:23:db: 65:4b:cf:b5:1e:37:1a:46:21:9f:53:c3:a6:47:d7:cd:79:cc: 81:5d:52:72:78:81:42:a9:4b:d5:5c:e9:78:4b:ff:c7:86:ef: 31:28:80:db:5a:ae:87:fe:cb:47:5b:50:94:81:c7:18:ab:d9: a7:a9:50:24:26:1d:4b:e6:ee:1c:6e:27:45:b5:3c:f3:e2:0d: 13:e7:1e:82:0f:e7:d9:34:0c:13:92:26:ec:17:7b:09:47:53: 40:bc:08:2e:8f:78:12:ef:54:02:63:ab:18:05:b8:88:f6:c0: a3:34:1e:76:1e:ac:a9:45:66:7a:79:b9:3a:30:e4:63:69:83: 2e:88:4d:93:ae:e7:ce:05:52:a7:ae:98:ac:43:1d:08:a1:d7: 03:43:b1:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxpI5oFR0xOeOLKR0kRTFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1Mzk4OGIyZWU5YzEwNDIxN2RkZTE2Mzk4MjE3OGY3YjRl OTc0NjcwHhcNMjYwMjA5MTkwMDEyWhcNMjYwMjEwMTkwMDEyWjAzMTEwLwYDVQQD EyhjMGIzNmRiYzQ1NDVlM2I3YmVmMmM2MGE4MzA4ZWM1OGFiYjk2MDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWy2NTMziVNvxeAnpR/wPNUFVdIg N/gOMwgfW6XayfQCeKGODIp6MKw9ZBoOqfSE6kDSu4rKdmljTcVuMyCV72LDmJnO 5hAD1/xMNsomquqLbTbZUE+CSeJl4t6r5z00SRMjwDmPXU9P6nDfs5TA2/3sBtX4 /JbN6HH2rgyaVuLZKr6TywgwajEeHUmBKGEPOGQHKnZl5Z9hxFU0hiCRiKLPS1hW ioNqmUF/AtDl5j8D261yk7lovw0JQP3WEYHgYw32BWKtHwtpOc47W2SqbCq6lwZ+ X7PotSY3dvzgyeqdFJRCTbKyanSVhLwZPGcz5p2DLrFCQD1OvfmFzPtW7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMCzbbxFReO3vvLGCoMI7FiruWB9MB8GA1UdIwQY MBaAFFU5iLLunBBCF93hY5ghePe06XRnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlRtSXN1NmNFRUlYM2VGam1DRjQ5N1RwZEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80NTcyYzUtZjgzZS00ZTRmLWFiZWEt MzAwYjNhZTUxNWU2LzEvVlRtSXN1NmNFRUlYM2VGam1DRjQ5N1RwZEdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy80NTcyYzUtZjgzZS00ZTRmLWFiZWEtMzAwYjNhZTUxNWU2 LzEvVlRtSXN1NmNFRUlYM2VGam1DRjQ5N1RwZEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0oal3FO cPVNIZb4as4QjciFxst95SKKzwRXH8ZLo1dH1ZE3MKgcOPmDAvm4oG16Zdq24SF+ eeQJbFk27EiPCoEkz6dsIpJ710GHBaX9X/ihkUdOJTSkq+fDV0/CHEmFJUSijsiy p5m8xCPbZUvPtR43GkYhn1PDpkfXzXnMgV1ScniBQqlL1VzpeEv/x4bvMSiA21qu h/7LR1tQlIHHGKvZp6lQJCYdS+buHG4nRbU88+INE+cegg/n2TQME5Im7Bd7CUdT QLwILo94Eu9UAmOrGAW4iPbAozQedh6sqUVmenm5OjDkY2mDLohNk67nzgVSp66Y rEMdCKHXA0OxNA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:31 2026 by rpki-client