This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft File: vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json) Hash identifier: +vrKarwKVicn192sEtUXp1dur/rPAxQEecUgskdGW50= Subject key identifier: 97:FA:CE:D9:C1:D0:18:E4:C8:9D:3D:87:6F:8B:6B:5F:24:5A:17:16 Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA Certificate issuer: /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa Certificate serial: 019C420FAAF262FB0F86E251EC7D10DE5634 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft Manifest number: 0EE6 Signing time: Mon 09 Feb 2026 11:00:48 +0000 Manifest this update: Mon 09 Feb 2026 11:00:48 +0000 Manifest next update: Tue 10 Feb 2026 11:00:48 +0000 Files and hashes: 1: vH7rrGITtAP6GmK4LXyxobUcePQ.roa (hash: Wf6Z3W6bIHnyxGibTmjBzRqrlxTUGARmRUFdCoR9nYA=) 2: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: UIg9MDXIz8DJmnYYCSs/Rqn+zpvYiR67n7TLjkVzz0Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:aa:f2:62:fb:0f:86:e2:51:ec:7d:10:de:56:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa Validity Not Before: Feb 9 11:00:48 2026 GMT Not After : Feb 10 11:00:48 2026 GMT Subject: CN=97faced9c1d018e4c89d3d876f8b6b5f245a1716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:5b:81:98:9a:7b:8e:ef:4e:5b:0f:8f:03: 31:44:ae:43:d3:61:2f:2c:c6:66:0b:64:f7:6b:a6: 70:77:07:5b:fb:7a:08:96:de:9b:a3:62:60:c0:b5: c1:a4:bd:76:f6:b0:64:83:d0:97:d6:b6:b3:ec:30: 40:41:16:97:67:33:43:f2:a8:d7:15:8a:30:73:4d: f7:a7:f2:71:70:14:a4:5f:98:b0:25:f6:6b:1f:f9: 97:5c:b6:a3:54:90:9d:a9:96:a3:69:2f:be:4c:af: 15:7d:b3:f6:28:aa:73:0f:9f:be:51:fc:63:48:49: 51:51:37:9e:6a:62:88:2d:33:90:c8:7f:f6:ce:86: b0:e8:55:3f:7e:13:4f:2a:7a:a3:a5:a0:00:da:ab: b7:97:b9:3d:3e:5a:d2:44:60:a7:c2:84:7c:74:76: 18:1c:23:b7:e3:0d:7d:fb:6b:aa:a2:f9:0f:f6:0b: 1b:c1:31:ff:9b:3c:05:f8:d3:d6:6e:56:55:2a:68: 99:bf:81:c8:5c:7c:45:d0:cb:4c:cd:b1:8d:b4:31: 28:d3:57:e9:fb:dd:2b:d0:f9:df:1a:2b:f9:a6:ad: 9a:e9:fd:ba:75:4c:cb:ec:a0:26:bc:c3:63:23:2d: e0:92:20:9a:64:d8:fa:73:80:1c:f4:fe:3e:88:71: b2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:FA:CE:D9:C1:D0:18:E4:C8:9D:3D:87:6F:8B:6B:5F:24:5A:17:16 X509v3 Authority Key Identifier: keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c4:29:26:68:df:02:d6:cc:3d:c7:1c:81:ff:54:ff:39:b7: 89:93:a5:96:94:fa:e6:80:0b:7b:f5:d8:47:60:76:e0:0e:01: 41:85:f4:3f:a9:06:b1:f1:7d:20:cd:cc:e8:72:68:6a:58:9b: f3:ab:da:6c:33:73:a2:c9:e5:cd:c7:7d:06:21:2d:f4:06:57: 0f:dc:86:ce:72:d3:b0:64:8e:72:40:65:e9:7b:ec:ef:6c:4e: c9:ec:21:72:fc:d8:69:31:d3:95:c7:3b:6a:6a:d2:56:2f:db: a5:60:2e:93:91:da:28:7d:06:b1:18:cb:fc:a8:43:53:7c:ed: 56:bf:e6:bb:13:bd:1c:d1:ff:3c:ad:5c:38:9e:46:dd:83:af: 48:5e:e2:d4:71:35:5e:01:aa:13:1f:12:7d:50:ca:85:0a:b2: 5f:d0:04:ce:35:2f:7f:f6:0e:e3:b5:bf:ae:6f:dd:08:fb:e6: 19:f2:17:50:4d:49:66:3e:84:02:a9:00:8f:34:54:bd:e2:56: f6:fc:bd:d7:5d:b3:47:db:23:b0:82:71:f2:e0:78:61:14:f0: 55:9d:72:30:80:06:87:e3:4c:9a:e3:18:42:8e:fb:73:8b:da: 25:93:94:fa:70:08:7d:05:5e:8f:55:8f:1e:29:69:90:f9:db: 04:95:0c:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6ryYvsPhuJR7H0Q3lY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMGY4ZjE0ZjIyMGU5M2VlMzQ3NDdjNGQ2ZGJmMWFkMzVi MzgzZmEwHhcNMjYwMjA5MTEwMDQ4WhcNMjYwMjEwMTEwMDQ4WjAzMTEwLwYDVQQD Eyg5N2ZhY2VkOWMxZDAxOGU0Yzg5ZDNkODc2ZjhiNmI1ZjI0NWExNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RdbgZiae47vTlsPjwMxRK5D02Ev LMZmC2T3a6Zwdwdb+3oIlt6bo2JgwLXBpL129rBkg9CX1raz7DBAQRaXZzND8qjX FYowc033p/JxcBSkX5iwJfZrH/mXXLajVJCdqZajaS++TK8VfbP2KKpzD5++Ufxj SElRUTeeamKILTOQyH/2zoaw6FU/fhNPKnqjpaAA2qu3l7k9PlrSRGCnwoR8dHYY HCO34w19+2uqovkP9gsbwTH/mzwF+NPWblZVKmiZv4HIXHxF0MtMzbGNtDEo01fp +90r0PnfGiv5pq2a6f26dUzL7KAmvMNjIy3gkiCaZNj6c4Ac9P4+iHGylwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJf6ztnB0BjkyJ09h2+La18kWhcWMB8GA1UdIwQY MBaAFL4PjxTyIOk+40dHxNbb8a01s4P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQt YjBjNjA0NjRkZjA2LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9mYWY0ZWEtYTUwYS00MGUwLThhYmQtYjBjNjA0NjRkZjA2 LzEvdmctUEZQSWc2VDdqUjBmRTF0dnhyVFd6Z19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8QpJmjf AtbMPcccgf9U/zm3iZOllpT65oALe/XYR2B24A4BQYX0P6kGsfF9IM3M6HJoalib 86vabDNzosnlzcd9BiEt9AZXD9yGznLTsGSOckBl6Xvs72xOyewhcvzYaTHTlcc7 amrSVi/bpWAuk5HaKH0GsRjL/KhDU3ztVr/muxO9HNH/PK1cOJ5G3YOvSF7i1HE1 XgGqEx8SfVDKhQqyX9AEzjUvf/YO47W/rm/dCPvmGfIXUE1JZj6EAqkAjzRUveJW 9vy9112zR9sjsIJx8uB4YRTwVZ1yMIAGh+NMmuMYQo77c4vaJZOU+nAIfQVej1WP HilpkPnbBJUMiw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:48 2026 by rpki-client