This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft File: VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json) Hash identifier: dBeOwnmBv0yT/iKcYvUoK+z9CIUz+toamxICXqnJQV4= Subject key identifier: 58:16:5D:CF:3E:9B:2E:B4:42:08:B8:D3:88:26:C8:D7:F3:F6:28:86 Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D Certificate issuer: /CN=56b58be7d2833ac39928b8b8682741b50314645d Certificate serial: 019C41341392142A920422CC502508AF9E71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft Manifest number: 0AFE Signing time: Mon 09 Feb 2026 07:00:57 +0000 Manifest this update: Mon 09 Feb 2026 07:00:57 +0000 Manifest next update: Tue 10 Feb 2026 07:00:57 +0000 Files and hashes: 1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: 6qnDw2v+Wuy6hhD/2c19ohjxmjFD00Tfc6MAB9UvWC8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:13:92:14:2a:92:04:22:cc:50:25:08:af:9e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d Validity Not Before: Feb 9 07:00:57 2026 GMT Not After : Feb 10 07:00:57 2026 GMT Subject: CN=58165dcf3e9b2eb44208b8d38826c8d7f3f62886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ed:39:d0:a1:eb:53:c7:d3:c8:ce:34:f9:da: a8:19:8e:04:e0:80:0b:68:fa:d9:f0:16:c0:9c:80: 09:16:90:25:4d:7d:10:f2:77:65:a2:95:77:b4:f6: 08:a7:ed:f7:8b:d5:34:fa:fe:a8:d7:92:4c:0c:79: cf:5e:e4:99:bb:ce:cb:d7:dd:9c:2b:29:83:86:ff: 6d:a0:92:69:82:82:0c:e1:e3:3d:2b:da:7b:bd:f7: 57:8e:4e:87:4f:d2:9a:6a:83:f4:06:14:02:66:cc: 46:2e:62:09:98:cc:d5:c4:23:c2:8b:6a:65:f0:1e: 1e:be:ec:7d:ea:a7:42:e9:76:00:e6:eb:0e:d7:74: 59:48:3e:b2:b7:09:ce:e9:e0:de:81:f3:4a:c0:1e: 5c:bf:08:6a:63:4e:a1:50:37:d9:9f:e9:7e:24:41: 4f:a1:a2:a0:08:31:4a:be:50:0d:07:85:76:e3:3c: 6b:ab:13:00:d7:b3:78:24:42:67:21:8b:49:09:1c: 71:54:6a:ba:fa:2f:b2:4d:c5:1c:34:c6:29:f3:24: e7:da:8c:65:a3:f8:df:29:fa:22:7f:32:f7:54:49: 4a:93:f7:40:d7:3a:45:e7:88:29:a3:0e:56:b7:ef: f5:a9:86:41:1c:3e:c0:7e:c7:2a:85:e1:99:59:27: e7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:16:5D:CF:3E:9B:2E:B4:42:08:B8:D3:88:26:C8:D7:F3:F6:28:86 X509v3 Authority Key Identifier: keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e7:60:aa:b3:5d:eb:25:0a:11:97:01:b7:a8:09:1f:f2:df: 6d:30:10:9c:14:eb:b2:df:5b:84:51:45:81:d8:a4:cb:38:87: 03:be:e7:7d:d4:2b:23:a4:5e:3e:9e:ab:0a:92:18:2a:27:4a: db:de:ac:73:7b:7d:d7:60:20:f7:72:fa:2f:82:30:21:7a:73: cc:d3:e4:2e:8d:69:0f:e4:0e:fc:0c:e9:f7:01:d1:9a:9d:32: de:f9:3b:a1:98:9c:05:96:9d:18:22:2a:4f:16:7c:1d:f7:4b: 8e:85:4f:5a:e9:15:ac:b8:60:5f:fd:1d:0e:11:15:ec:b6:ed: 0a:f1:42:be:8c:62:0f:84:74:a2:fb:26:6f:0c:5e:62:56:4d: 9f:c7:61:e3:c8:5d:d6:d3:5f:37:57:13:56:37:38:28:39:ce: e9:c8:f7:29:8c:d2:65:20:d0:d8:4a:1b:9c:4b:df:b8:af:76: 83:b6:2b:ee:71:b2:cd:7e:b5:49:2f:93:e2:cf:b0:08:5d:2b: d2:e6:b0:f5:97:ec:54:95:dd:11:9a:48:e6:18:11:c1:15:f5: a0:39:27:4f:bf:ef:44:2d:ea:c9:a4:a3:1c:c8:7f:29:2d:92: 70:1a:8e:d4:d5:7a:13:06:d9:d1:83:33:af:22:6d:71:f1:a3: f1:ac:8a:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNBOSFCqSBCLMUCUIr55xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YjU4YmU3ZDI4MzNhYzM5OTI4YjhiODY4Mjc0MWI1MDMx NDY0NWQwHhcNMjYwMjA5MDcwMDU3WhcNMjYwMjEwMDcwMDU3WjAzMTEwLwYDVQQD Eyg1ODE2NWRjZjNlOWIyZWI0NDIwOGI4ZDM4ODI2YzhkN2YzZjYyODg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlO050KHrU8fTyM40+dqoGY4E4IAL aPrZ8BbAnIAJFpAlTX0Q8ndlopV3tPYIp+33i9U0+v6o15JMDHnPXuSZu87L192c KymDhv9toJJpgoIM4eM9K9p7vfdXjk6HT9KaaoP0BhQCZsxGLmIJmMzVxCPCi2pl 8B4evux96qdC6XYA5usO13RZSD6ytwnO6eDegfNKwB5cvwhqY06hUDfZn+l+JEFP oaKgCDFKvlANB4V24zxrqxMA17N4JEJnIYtJCRxxVGq6+i+yTcUcNMYp8yTn2oxl o/jfKfoifzL3VElKk/dA1zpF54gpow5Wt+/1qYZBHD7AfscqheGZWSfnawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgWXc8+my60Qgi404gmyNfz9iiGMB8GA1UdIwQY MBaAFFa1i+fSgzrDmSi4uGgnQbUDFGRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODIt ZjNhOGJmMzcyMDU2LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODItZjNhOGJmMzcyMDU2 LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIOdgqrNd 6yUKEZcBt6gJH/LfbTAQnBTrst9bhFFFgdikyziHA77nfdQrI6RePp6rCpIYKidK 296sc3t912Ag93L6L4IwIXpzzNPkLo1pD+QO/Azp9wHRmp0y3vk7oZicBZadGCIq TxZ8HfdLjoVPWukVrLhgX/0dDhEV7LbtCvFCvoxiD4R0ovsmbwxeYlZNn8dh48hd 1tNfN1cTVjc4KDnO6cj3KYzSZSDQ2EobnEvfuK92g7Yr7nGyzX61SS+T4s+wCF0r 0uaw9ZfsVJXdEZpI5hgRwRX1oDknT7/vRC3qyaSjHMh/KS2ScBqO1NV6EwbZ0YMz ryJtcfGj8ayKvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:29 2026 by rpki-client