This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft File: VwciOmKIeWeXTXTfTljijV5DfYY.mft (raw, json) Hash identifier: iEIq/nwb0RHqMFuNvO5EPz85UJ/lHR1jIpo5epYl35Y= Subject key identifier: D6:27:DB:B9:2F:D1:C9:C6:E8:B9:21:67:FE:86:91:31:CF:BA:F9:EF Authority key identifier: 57:07:22:3A:62:88:79:67:97:4D:74:DF:4E:58:E2:8D:5E:43:7D:86 Certificate issuer: /CN=5707223a62887967974d74df4e58e28d5e437d86 Certificate serial: 019C4321E748064742E3CA7D3251E7ACEC26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwciOmKIeWeXTXTfTljijV5DfYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft Manifest number: 0111 Signing time: Mon 09 Feb 2026 16:00:21 +0000 Manifest this update: Mon 09 Feb 2026 16:00:21 +0000 Manifest next update: Tue 10 Feb 2026 16:00:21 +0000 Files and hashes: 1: VwciOmKIeWeXTXTfTljijV5DfYY.crl (hash: cOrTpCOxoNqI5pf7c6nHy7OnDfzQNUd1zq5tpE/8CeA=) 2: p0ShZyZrwUY3Z8d8i-UzhwWKWVc.roa (hash: Xb9kX/JSqQvcz9Un5jVk/fOLkQYgqLNMso1gG+CAwN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft rsync://rpki.ripe.net/repository/DEFAULT/VwciOmKIeWeXTXTfTljijV5DfYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e7:48:06:47:42:e3:ca:7d:32:51:e7:ac:ec:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5707223a62887967974d74df4e58e28d5e437d86 Validity Not Before: Feb 9 16:00:21 2026 GMT Not After : Feb 10 16:00:21 2026 GMT Subject: CN=d627dbb92fd1c9c6e8b92167fe869131cfbaf9ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:6b:f0:26:85:f5:51:f5:75:75:f0:5c:1e:9c: 70:9d:f3:a8:d4:e8:3e:da:2d:89:a7:b0:32:82:17: 55:84:23:94:21:0e:85:5a:16:32:54:54:fe:4d:5e: b7:e2:ae:b5:4b:26:05:9e:34:6e:c9:46:7f:c6:2b: 5b:6e:c3:5c:9b:4c:a5:26:b2:9f:01:66:ea:98:90: ad:54:40:cb:92:31:71:93:f2:23:dc:4c:8e:2d:c7: cd:7e:6c:2b:83:58:a8:bc:53:9e:cc:e2:b6:75:55: d9:0a:8d:4c:b1:6f:3d:31:00:65:f1:2b:ea:59:2f: 39:d8:cf:bb:d5:99:ba:af:5f:49:35:c7:7b:c6:87: d4:12:91:d1:7e:14:a8:54:60:86:2c:1e:20:2f:ed: fd:17:35:0e:65:44:10:53:4c:7c:dc:f1:7f:e3:1e: 00:a4:20:4d:53:fa:3b:0c:43:0a:02:ea:4f:46:d9: e1:41:77:82:5c:60:94:c0:25:65:5c:4a:f9:82:47: 08:2c:2f:3b:fd:a0:da:83:4b:64:46:53:04:f4:e6: 2d:02:49:e8:de:9a:a3:7b:d0:a6:f5:d2:57:4b:63: bb:eb:7f:f0:5b:ce:e8:b6:a9:78:af:65:46:3d:c3: 98:51:81:58:6d:52:e8:d5:38:0c:3d:03:cd:7d:63: 3e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:27:DB:B9:2F:D1:C9:C6:E8:B9:21:67:FE:86:91:31:CF:BA:F9:EF X509v3 Authority Key Identifier: keyid:57:07:22:3A:62:88:79:67:97:4D:74:DF:4E:58:E2:8D:5E:43:7D:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwciOmKIeWeXTXTfTljijV5DfYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d056d6-8850-4fc2-b6af-ed2d2d7e9783/1/VwciOmKIeWeXTXTfTljijV5DfYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:a7:48:d0:22:de:bf:1c:e8:35:5c:6f:ab:d0:67:9a:d8:bf: 37:1d:f0:1f:ac:d9:bc:15:3b:18:dc:eb:6a:7b:01:44:1f:f8: 46:d8:90:93:1c:15:e0:7c:ba:9b:9c:68:14:40:0b:33:15:e9: 63:d9:7f:b7:d3:67:7a:d8:de:01:ca:0f:84:b6:1e:ca:94:c5: a2:80:1b:27:7a:c1:e4:18:65:31:76:1e:1a:89:5f:ec:2d:80: 0b:bf:bf:fd:c4:a7:d9:75:73:ad:bd:35:e9:6c:48:45:60:3e: d1:e6:7b:86:20:40:79:d3:a3:b0:ff:ad:49:ed:26:0f:ee:44: da:7c:a8:49:53:17:b4:4d:bc:a9:b5:96:aa:c8:c2:5c:6c:2c: 6e:d5:c9:cd:98:a6:13:b5:a7:99:7b:f4:fb:b2:89:99:b4:cd: 11:0e:79:ef:f0:44:8a:4c:84:eb:63:81:80:81:35:7b:fb:04: 27:b3:cc:d3:30:b4:ad:ec:a4:99:8e:df:9a:36:37:ac:81:70: a9:ab:13:11:fd:9b:90:9f:37:7c:8d:9c:9f:35:8b:ba:47:53: d0:74:06:68:fd:6b:89:31:7c:ad:8a:d1:89:98:1f:31:82:b5: 84:f7:72:3c:cf:ec:41:ae:d5:07:cd:fc:d0:b4:de:5d:68:ac: e7:b2:fe:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIedIBkdC48p9MlHnrOwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MDcyMjNhNjI4ODc5Njc5NzRkNzRkZjRlNThlMjhkNWU0 MzdkODYwHhcNMjYwMjA5MTYwMDIxWhcNMjYwMjEwMTYwMDIxWjAzMTEwLwYDVQQD EyhkNjI3ZGJiOTJmZDFjOWM2ZThiOTIxNjdmZTg2OTEzMWNmYmFmOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGvwJoX1UfV1dfBcHpxwnfOo1Og+ 2i2Jp7AyghdVhCOUIQ6FWhYyVFT+TV634q61SyYFnjRuyUZ/xitbbsNcm0ylJrKf AWbqmJCtVEDLkjFxk/Ij3EyOLcfNfmwrg1iovFOezOK2dVXZCo1MsW89MQBl8Svq WS852M+71Zm6r19JNcd7xofUEpHRfhSoVGCGLB4gL+39FzUOZUQQU0x83PF/4x4A pCBNU/o7DEMKAupPRtnhQXeCXGCUwCVlXEr5gkcILC87/aDag0tkRlME9OYtAkno 3pqje9Cm9dJXS2O763/wW87otql4r2VGPcOYUYFYbVLo1TgMPQPNfWM+BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYn27kv0cnG6LkhZ/6GkTHPuvnvMB8GA1UdIwQY MBaAFFcHIjpiiHlnl010305Y4o1eQ32GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVndjaU9tS0llV2VYVFhUZlRsamlqVjVEZllZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kMDU2ZDYtODg1MC00ZmMyLWI2YWYt ZWQyZDJkN2U5NzgzLzEvVndjaU9tS0llV2VYVFhUZlRsamlqVjVEZllZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kMDU2ZDYtODg1MC00ZmMyLWI2YWYtZWQyZDJkN2U5Nzgz LzEvVndjaU9tS0llV2VYVFhUZlRsamlqVjVEZllZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYKdI0CLe vxzoNVxvq9Bnmti/Nx3wH6zZvBU7GNzransBRB/4RtiQkxwV4Hy6m5xoFEALMxXp Y9l/t9NnetjeAcoPhLYeypTFooAbJ3rB5BhlMXYeGolf7C2AC7+//cSn2XVzrb01 6WxIRWA+0eZ7hiBAedOjsP+tSe0mD+5E2nyoSVMXtE28qbWWqsjCXGwsbtXJzZim E7WnmXv0+7KJmbTNEQ557/BEikyE62OBgIE1e/sEJ7PM0zC0reykmY7fmjY3rIFw qasTEf2bkJ83fI2cnzWLukdT0HQGaP1riTF8rYrRiZgfMYK1hPdyPM/sQa7VB838 0LTeXWis57L+OQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:05 2026 by rpki-client