This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json) Hash identifier: HpXNm/eecM2SAn+PJCX6M8vVibKHzumCJ93SLfmXSG8= Subject key identifier: AC:A9:0D:BD:01:CB:1B:4F:2D:1C:C7:2D:3B:19:9D:DC:35:19:EB:A8 Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71 Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971 Certificate serial: 019C427D4656919B962FC1FBC51A91FB36A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft Manifest number: 0E64 Signing time: Mon 09 Feb 2026 13:00:32 +0000 Manifest this update: Mon 09 Feb 2026 13:00:32 +0000 Manifest next update: Tue 10 Feb 2026 13:00:32 +0000 Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: zzLFa/i3ylZT4MKtyRgVhR6dms+zYDZ8PK2UM3VQuAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:46:56:91:9b:96:2f:c1:fb:c5:1a:91:fb:36:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971 Validity Not Before: Feb 9 13:00:32 2026 GMT Not After : Feb 10 13:00:32 2026 GMT Subject: CN=aca90dbd01cb1b4f2d1cc72d3b199ddc3519eba8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e8:b9:e7:14:1a:76:1b:86:ac:84:92:14:40: 44:03:20:4d:2e:73:6c:ba:36:23:2f:02:54:ae:d1: 98:30:e1:3b:51:7d:a8:60:e4:30:98:23:f3:fe:9d: ec:a4:c2:58:0b:4a:e5:f9:ec:4b:b5:01:85:75:c6: ca:e3:86:2c:bb:1a:da:62:b8:e8:d4:55:43:09:5c: d1:4a:08:ba:67:e0:81:e7:de:48:2a:75:77:fb:03: 14:e1:74:07:2b:64:b9:bc:aa:3b:95:30:ee:9e:75: e7:9d:07:04:22:6a:f4:76:0e:14:ab:c5:da:c4:1c: 33:6c:af:9a:7c:48:0a:93:bb:fb:b3:0b:bc:33:11: d4:e1:e1:03:21:35:88:f7:e8:6a:03:fb:b1:68:70: 3e:df:87:57:e3:2f:1e:7a:a3:c8:ea:8f:50:f1:a8: b5:7c:4d:49:b4:71:fe:a3:1c:b8:43:9a:90:83:97: 5d:8f:bb:7e:bf:8f:aa:47:ac:42:b2:dc:29:c2:e8: a7:d1:3f:30:13:be:19:62:ca:0c:d1:1e:0b:10:5f: a1:44:0a:fb:7a:26:f4:d4:c7:cc:a9:98:62:2b:36: 2c:ad:f3:2c:1f:41:81:46:88:0d:80:09:2c:ed:86: 45:61:ab:cb:7c:a6:00:b9:cb:e9:7a:cd:0e:22:e5: e0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A9:0D:BD:01:CB:1B:4F:2D:1C:C7:2D:3B:19:9D:DC:35:19:EB:A8 X509v3 Authority Key Identifier: keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:58:c4:f9:f1:bd:00:fb:e9:a4:7d:d9:46:74:36:3d:0b:9c: f1:2b:f5:23:ba:3d:c1:3e:d2:b4:0d:61:1b:7c:84:48:76:97: f4:a9:7b:ba:43:1a:d7:1f:c7:98:72:98:53:98:30:ae:7a:8d: 0d:4a:e6:1a:13:59:db:40:f8:37:1a:78:40:bb:5b:dd:5f:e9: 7f:55:f6:4a:f3:c6:14:17:24:c9:c0:ce:31:a5:1d:60:cb:0b: 28:9f:7f:e4:a2:68:cd:e2:23:e0:a2:36:8f:a9:72:22:8b:e9: b0:50:8b:70:6a:a7:ba:96:05:af:f8:27:0d:23:b9:c8:23:2a: 7c:d6:73:26:bf:d8:3c:ec:b4:18:9a:d5:f4:f4:77:31:e5:21: a6:9b:54:bb:24:69:20:d4:36:ad:01:01:7d:f6:ea:72:18:75: 41:8d:e3:88:9f:6d:39:2d:fc:8e:9c:38:51:5f:d5:69:e5:db: 76:9c:c5:ea:14:6e:e9:a9:50:18:9c:e3:77:50:e2:fd:b6:85: 6f:61:82:ae:0c:30:e6:10:11:c9:8a:02:5f:14:9f:5d:25:51: c5:02:ee:14:1b:9f:8e:6c:41:3f:8c:66:e9:43:45:99:e0:fb: 29:80:ed:75:d6:4f:9c:8d:57:24:33:b3:e6:1d:f5:0d:2b:52: 49:da:bb:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfUZWkZuWL8H7xRqR+zanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlM2Y2ZDdjNmNkODMzYmVhNWRhZWQ1NzYyNTdkMmEzNDgy ODI5NzEwHhcNMjYwMjA5MTMwMDMyWhcNMjYwMjEwMTMwMDMyWjAzMTEwLwYDVQQD EyhhY2E5MGRiZDAxY2IxYjRmMmQxY2M3MmQzYjE5OWRkYzM1MTllYmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+i55xQadhuGrISSFEBEAyBNLnNs ujYjLwJUrtGYMOE7UX2oYOQwmCPz/p3spMJYC0rl+exLtQGFdcbK44YsuxraYrjo 1FVDCVzRSgi6Z+CB595IKnV3+wMU4XQHK2S5vKo7lTDunnXnnQcEImr0dg4Uq8Xa xBwzbK+afEgKk7v7swu8MxHU4eEDITWI9+hqA/uxaHA+34dX4y8eeqPI6o9Q8ai1 fE1JtHH+oxy4Q5qQg5ddj7t+v4+qR6xCstwpwuin0T8wE74ZYsoM0R4LEF+hRAr7 eib01MfMqZhiKzYsrfMsH0GBRogNgAks7YZFYavLfKYAucvpes0OIuXgeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKypDb0ByxtPLRzHLTsZndw1GeuoMB8GA1UdIwQY MBaAFL4/bXxs2DO+pdrtV2JX0qNIKClxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmo5dGZHellNNzZsMnUxWFlsZlNvMGdvS1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85NmQzOWItM2Q0Yy00NDdjLWIzMGQt NDNkMDE3MDk0ZTczLzEvdmo5dGZHellNNzZsMnUxWFlsZlNvMGdvS1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85NmQzOWItM2Q0Yy00NDdjLWIzMGQtNDNkMDE3MDk0ZTcz LzEvdmo5dGZHellNNzZsMnUxWFlsZlNvMGdvS1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1jE+fG9 APvppH3ZRnQ2PQuc8Sv1I7o9wT7StA1hG3yESHaX9Kl7ukMa1x/HmHKYU5gwrnqN DUrmGhNZ20D4Nxp4QLtb3V/pf1X2SvPGFBckycDOMaUdYMsLKJ9/5KJozeIj4KI2 j6lyIovpsFCLcGqnupYFr/gnDSO5yCMqfNZzJr/YPOy0GJrV9PR3MeUhpptUuyRp INQ2rQEBffbqchh1QY3jiJ9tOS38jpw4UV/VaeXbdpzF6hRu6alQGJzjd1Di/baF b2GCrgww5hARyYoCXxSfXSVRxQLuFBufjmxBP4xm6UNFmeD7KYDtddZPnI1XJDOz 5h31DStSSdq7iA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:41 2026 by rpki-client