This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json) Hash identifier: DDdb/S2A2Qo22LVzY5u6TApHj/C8wAmvB6kyucoSL4E= Subject key identifier: 17:00:53:FC:D0:C3:15:FA:EF:15:2C:2A:FD:4B:A9:4E:56:6A:C6:E8 Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e Certificate serial: 019C4322C9A41B5B3357BC927D5D4ECCF822 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft Manifest number: 1338 Signing time: Mon 09 Feb 2026 16:01:19 +0000 Manifest this update: Mon 09 Feb 2026 16:01:19 +0000 Manifest next update: Tue 10 Feb 2026 16:01:19 +0000 Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: tBOY2N6G2301Fe8I+JGFuEer9rKliDePC03vtWWmW0Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:c9:a4:1b:5b:33:57:bc:92:7d:5d:4e:cc:f8:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e Validity Not Before: Feb 9 16:01:19 2026 GMT Not After : Feb 10 16:01:19 2026 GMT Subject: CN=170053fcd0c315faef152c2afd4ba94e566ac6e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:83:cf:45:e6:7d:da:8e:ea:f1:14:67:4a:9b: eb:e1:5a:1d:3d:d1:3b:71:ef:e2:70:85:61:d0:78: 28:80:7b:bf:06:0f:58:57:37:a8:a4:97:74:98:cc: f3:62:d0:1f:1a:48:e5:1e:87:56:02:46:f2:a8:a1: 74:c8:7f:e2:a7:31:fb:43:27:90:5f:b4:8d:87:82: b5:50:58:b0:62:1a:aa:de:aa:bd:2e:f7:c0:08:e7: 2a:cc:ee:dd:ee:1d:a9:75:3b:bb:06:c6:b5:be:4d: d2:a5:80:18:0a:9c:72:c9:d0:2b:cf:22:49:11:31: 56:a0:f3:3c:96:24:ff:86:73:60:b9:45:38:d8:67: 3b:13:22:6b:5c:8f:07:e2:f6:c0:88:fd:9f:c8:1a: a2:e7:54:a8:c1:86:f2:33:ca:96:96:91:da:35:55: ca:73:73:3f:8c:d2:7b:73:fa:1c:f7:f2:80:ea:02: 5f:88:f5:98:87:f5:bc:1f:ca:ff:f2:b9:4f:a2:96: 9d:07:e5:3a:31:09:71:62:22:13:d9:92:32:52:58: dd:bd:07:c6:91:30:ec:88:96:0b:87:49:57:e7:75: 14:58:6e:2e:a6:da:75:76:3c:8c:f2:35:2b:b9:d3: 1c:ea:bd:91:af:61:2e:26:14:63:21:21:d7:e7:e3: 52:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:00:53:FC:D0:C3:15:FA:EF:15:2C:2A:FD:4B:A9:4E:56:6A:C6:E8 X509v3 Authority Key Identifier: keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:74:3b:08:18:59:4d:26:02:19:40:07:97:b7:5e:23:c7:92: ba:6c:01:89:6f:c3:93:14:0a:18:ac:6b:00:e3:c2:d7:f2:3d: 99:2c:18:c3:8b:fd:15:55:01:f5:08:6f:d7:f4:43:33:4d:df: 6d:55:e4:76:25:9a:a4:b4:39:0c:0d:35:4a:a0:c9:b8:e2:60: 76:73:a5:f9:4d:75:43:45:ef:89:d6:70:e1:72:3e:1a:67:7f: bb:eb:f0:0d:77:e3:12:89:38:20:8a:d7:8d:8f:24:cf:a9:f3: ba:3c:e1:73:e8:d3:5e:cd:bc:09:64:80:25:8a:28:da:34:ab: e7:cf:11:a9:8f:de:1b:e3:26:ba:2f:b6:54:9f:b3:51:2e:db: e4:49:78:01:07:51:b2:55:90:46:06:89:6d:a7:8a:dd:f7:86: 1d:c4:04:14:9b:07:3b:5d:68:dc:6c:5d:0d:e9:71:95:5e:d7: ca:97:18:ac:4e:3e:c0:29:bb:69:69:02:ab:7b:38:9b:25:75: 1b:62:ef:f8:95:3f:01:72:a6:e4:61:b9:c4:a3:5c:70:e9:80: 74:01:9d:b1:0a:a0:51:a0:a7:31:c4:6f:02:51:63:87:cb:a9: bb:d9:69:d9:a2:2a:fa:97:32:07:79:b7:46:5b:78:4c:94:fd: 83:08:9f:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsmkG1szV7ySfV1OzPgiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MTRmMmM3YzY0NmVjMzFhMDQ5NWUwNTFkNmE0ZGUxYWJm MGM3NGUwHhcNMjYwMjA5MTYwMTE5WhcNMjYwMjEwMTYwMTE5WjAzMTEwLwYDVQQD EygxNzAwNTNmY2QwYzMxNWZhZWYxNTJjMmFmZDRiYTk0ZTU2NmFjNmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4PPReZ92o7q8RRnSpvr4VodPdE7 ce/icIVh0HgogHu/Bg9YVzeopJd0mMzzYtAfGkjlHodWAkbyqKF0yH/ipzH7QyeQ X7SNh4K1UFiwYhqq3qq9LvfACOcqzO7d7h2pdTu7Bsa1vk3SpYAYCpxyydArzyJJ ETFWoPM8liT/hnNguUU42Gc7EyJrXI8H4vbAiP2fyBqi51SowYbyM8qWlpHaNVXK c3M/jNJ7c/oc9/KA6gJfiPWYh/W8H8r/8rlPopadB+U6MQlxYiIT2ZIyUljdvQfG kTDsiJYLh0lX53UUWG4uptp1djyM8jUrudMc6r2Rr2EuJhRjISHX5+NS0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcAU/zQwxX67xUsKv1LqU5WasboMB8GA1UdIwQY MBaAFFUU8sfGRuwxoEleBR1qTeGr8MdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85MGJkMjEtYWNkMC00OGU1LTlhZGYt Mjc4MGQ2ZjE2MTJjLzEvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85MGJkMjEtYWNkMC00OGU1LTlhZGYtMjc4MGQ2ZjE2MTJj LzEvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3Q7CBhZ TSYCGUAHl7deI8eSumwBiW/DkxQKGKxrAOPC1/I9mSwYw4v9FVUB9Qhv1/RDM03f bVXkdiWapLQ5DA01SqDJuOJgdnOl+U11Q0XvidZw4XI+Gmd/u+vwDXfjEok4IIrX jY8kz6nzujzhc+jTXs28CWSAJYoo2jSr588RqY/eG+Mmui+2VJ+zUS7b5El4AQdR slWQRgaJbaeK3feGHcQEFJsHO11o3GxdDelxlV7XypcYrE4+wCm7aWkCq3s4myV1 G2Lv+JU/AXKm5GG5xKNccOmAdAGdsQqgUaCnMcRvAlFjh8upu9lp2aIq+pcyB3m3 Rlt4TJT9gwifHQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:48 2026 by rpki-client