This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json) Hash identifier: MQFA1yfbeL2J2VdP7Ug/cQdgqMyBQLBzvAXAmvpWc1k= Subject key identifier: 18:31:08:B4:CE:AE:28:6F:6E:48:6B:50:38:54:B1:21:AE:36:E0:F4 Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37 Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537 Certificate serial: 019C4359291805925D6560303FAFD639D6FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft Manifest number: 0404 Signing time: Mon 09 Feb 2026 17:00:42 +0000 Manifest this update: Mon 09 Feb 2026 17:00:42 +0000 Manifest next update: Tue 10 Feb 2026 17:00:42 +0000 Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: LNj+lUNT+3TtWgUt9g2CPQbyMf47QqXZTSknvJ2Xal4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:29:18:05:92:5d:65:60:30:3f:af:d6:39:d6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537 Validity Not Before: Feb 9 17:00:42 2026 GMT Not After : Feb 10 17:00:42 2026 GMT Subject: CN=183108b4ceae286f6e486b503854b121ae36e0f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:32:a0:4c:50:87:b3:bb:dd:1b:fa:1c:02:7c: 0e:63:2e:2d:eb:79:ac:17:e6:f0:39:d0:cf:0b:dc: b1:b8:7f:ef:d0:d3:b0:2e:1c:d7:e1:2f:e7:86:71: 1b:ab:43:84:c8:48:f6:36:cd:4d:33:95:55:95:b7: c2:e2:5b:b8:cf:52:67:ed:a1:45:0b:e1:d5:de:54: aa:c7:04:2c:ef:45:8b:e3:a7:c6:f3:a1:4c:18:f4: e0:b8:d4:1b:c4:b1:32:32:09:8b:ac:b8:a3:84:ac: cc:3c:73:6b:60:f4:74:9b:9c:fb:e9:c1:1e:58:9f: 19:a3:60:f9:fe:ec:e2:22:8a:3f:80:2b:db:de:3f: fd:cf:9d:25:11:43:29:d5:84:e8:7f:64:4a:17:ed: f8:dd:a6:75:af:42:67:b6:3f:35:40:d4:aa:b9:33: 08:3b:38:c2:48:70:0a:a7:6c:59:3e:c7:65:c7:f8: 27:2a:71:97:09:74:83:46:7d:d0:8f:d8:6c:0a:a4: ba:8e:31:e0:29:44:e0:22:95:45:74:a6:fa:12:c3: 96:d7:fe:7d:71:d9:dd:d1:2c:90:d2:4b:c8:e5:d7: b5:c4:9c:b3:e2:f0:db:c3:83:ba:b8:f3:bb:4b:ab: ac:80:21:ee:2a:4f:bb:3e:20:40:4e:ba:7a:2d:e4: 81:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:31:08:B4:CE:AE:28:6F:6E:48:6B:50:38:54:B1:21:AE:36:E0:F4 X509v3 Authority Key Identifier: keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9d:b5:29:98:f6:ff:1e:75:02:5c:09:f2:cc:01:52:b1:74: 82:67:20:3b:d9:3d:34:f7:ac:40:14:0e:4a:da:de:80:75:a7: 22:b2:d8:a8:ff:64:22:e7:63:76:82:f3:1c:eb:bf:98:74:c1: 3e:24:4d:0f:b2:6c:83:79:95:9f:67:8b:78:52:97:22:05:ec: 93:59:39:59:82:d2:96:2b:02:57:84:33:55:dc:43:1d:7b:81: 14:4d:9b:37:d9:be:2c:fa:46:1b:91:a2:e1:f7:8d:76:c1:6a: b4:f7:0a:a4:eb:4a:21:6f:58:b6:b0:13:3d:eb:d8:8b:c4:7d: ed:cb:60:96:71:1a:07:9f:4e:d8:f1:22:ad:bc:7f:63:e3:14: e0:b3:52:c2:2a:39:ad:74:28:fd:5f:cd:d2:00:12:9b:8b:9d: 25:c5:57:32:f7:0a:c1:21:11:18:a1:c7:fc:2d:93:80:24:bd: cb:9b:18:55:66:dc:b2:3a:ab:63:e6:17:05:c7:84:de:f3:f1: 8b:2a:95:87:83:b5:67:7e:dc:6b:6c:ef:61:ab:04:64:72:c7: 11:b1:15:59:df:28:c6:80:33:86:77:a4:e3:e9:ba:7c:93:e7: 28:cc:2a:3b:38:a4:00:84:5f:f2:f7:01:87:8a:64:ed:ae:45: 10:d0:63:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSkYBZJdZWAwP6/WOdb/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDMzZGYwM2VkNTFjZTc5MjRhNDgwMTgzYmNmZmRiNGYw NDI1MzcwHhcNMjYwMjA5MTcwMDQyWhcNMjYwMjEwMTcwMDQyWjAzMTEwLwYDVQQD EygxODMxMDhiNGNlYWUyODZmNmU0ODZiNTAzODU0YjEyMWFlMzZlMGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTKgTFCHs7vdG/ocAnwOYy4t63ms F+bwOdDPC9yxuH/v0NOwLhzX4S/nhnEbq0OEyEj2Ns1NM5VVlbfC4lu4z1Jn7aFF C+HV3lSqxwQs70WL46fG86FMGPTguNQbxLEyMgmLrLijhKzMPHNrYPR0m5z76cEe WJ8Zo2D5/uziIoo/gCvb3j/9z50lEUMp1YTof2RKF+343aZ1r0Jntj81QNSquTMI OzjCSHAKp2xZPsdlx/gnKnGXCXSDRn3Qj9hsCqS6jjHgKUTgIpVFdKb6EsOW1/59 cdnd0SyQ0kvI5de1xJyz4vDbw4O6uPO7S6usgCHuKk+7PiBATrp6LeSBPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgxCLTOrihvbkhrUDhUsSGuNuD0MB8GA1UdIwQY MBaAFL0DPfA+1RznkkpIAYO8/9tPBCU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jYzY2ZDQtN2Q5OC00M2I1LWIyMDkt Yjg0ODdmZTk2MTQ5LzEvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jYzY2ZDQtN2Q5OC00M2I1LWIyMDktYjg0ODdmZTk2MTQ5 LzEvdlFNOThEN1ZIT2VTU2tnQmc3el8yMDhFSlRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJ21KZj2 /x51AlwJ8swBUrF0gmcgO9k9NPesQBQOStregHWnIrLYqP9kIudjdoLzHOu/mHTB PiRND7Jsg3mVn2eLeFKXIgXsk1k5WYLSlisCV4QzVdxDHXuBFE2bN9m+LPpGG5Gi 4feNdsFqtPcKpOtKIW9YtrATPevYi8R97ctglnEaB59O2PEirbx/Y+MU4LNSwio5 rXQo/V/N0gASm4udJcVXMvcKwSERGKHH/C2TgCS9y5sYVWbcsjqrY+YXBceE3vPx iyqVh4O1Z37ca2zvYasEZHLHEbEVWd8oxoAzhnek4+m6fJPnKMwqOzikAIRf8vcB h4pk7a5FENBjPw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:05 2026 by rpki-client