This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft File: VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft (raw, json) Hash identifier: GtXaOCNppfZhWTYlMOHQde85yAf6vIZQd0RvT7wAq80= Subject key identifier: 63:B3:A6:68:A1:55:36:FC:5A:E8:07:93:14:2E:0C:29:93:F2:0D:20 Authority key identifier: 54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D Certificate issuer: /CN=540e9ac439b8f2b27c1a267d35e0195fec85944d Certificate serial: 019C4390C3592784C782459D3A68F173A2EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft Manifest number: 0C86 Signing time: Mon 09 Feb 2026 18:01:26 +0000 Manifest this update: Mon 09 Feb 2026 18:01:26 +0000 Manifest next update: Tue 10 Feb 2026 18:01:26 +0000 Files and hashes: 1: VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl (hash: jXEm3b/jEHlHoPj7eoLVHqej3NPFkRIHQBHVBi0CFJY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:c3:59:27:84:c7:82:45:9d:3a:68:f1:73:a2:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540e9ac439b8f2b27c1a267d35e0195fec85944d Validity Not Before: Feb 9 18:01:26 2026 GMT Not After : Feb 10 18:01:26 2026 GMT Subject: CN=63b3a668a15536fc5ae80793142e0c2993f20d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e0:c3:03:05:ad:4b:9b:db:ea:dd:c7:19:c6: 3e:28:1c:57:18:f1:94:7f:93:9d:87:a3:69:ab:4c: 70:81:27:0c:9c:47:38:a9:28:a4:be:2d:25:f0:38: 24:41:87:31:94:92:88:e6:fd:5a:2b:fc:12:18:39: 93:53:7d:c2:12:14:e5:80:7d:a5:0b:e9:01:60:9d: 00:c8:48:f1:c4:e9:c9:d4:a9:9c:0d:32:e7:6a:bc: d8:bb:0e:ff:79:b3:8b:7f:5b:e6:55:e8:46:9b:e1: d1:3c:5b:53:54:45:34:8a:f2:6d:f5:83:47:a7:35: 91:aa:60:4a:2c:dc:cb:fb:aa:da:a6:7d:41:aa:c8: 90:e5:be:06:84:cd:fc:03:79:f4:ec:be:ef:66:fd: 1e:93:a4:fa:6a:54:63:72:6e:63:bb:99:7b:fd:a6: 68:08:7b:1f:d9:90:e9:d4:04:91:a1:d3:df:47:e0: 56:f3:37:c5:ba:da:17:c7:fa:b4:7c:df:54:eb:49: ab:43:6b:86:e0:3a:da:01:b4:a1:b3:95:d6:b9:bd: ff:95:f0:cc:6d:a9:9c:1c:d1:27:c2:4d:1f:cc:68: dc:b2:6a:42:93:0c:b8:69:eb:7a:6e:77:cb:52:59: d7:75:98:c3:fd:fb:f3:82:e1:2e:33:7c:a9:d0:fc: 93:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B3:A6:68:A1:55:36:FC:5A:E8:07:93:14:2E:0C:29:93:F2:0D:20 X509v3 Authority Key Identifier: keyid:54:0E:9A:C4:39:B8:F2:B2:7C:1A:26:7D:35:E0:19:5F:EC:85:94:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA6axDm48rJ8GiZ9NeAZX-yFlE0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b98c4e-1fe9-42c8-bdbb-c96e937ac955/1/VA6axDm48rJ8GiZ9NeAZX-yFlE0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:fb:f7:32:aa:c9:d4:af:2d:6b:83:b8:9d:c9:6f:62:79:81: 0f:e0:4a:3d:b2:aa:16:8e:e1:78:71:21:87:9a:7f:57:8d:67: a0:d2:cc:f2:ca:1b:70:28:2a:20:cb:10:26:cf:ba:68:1c:5b: 0c:15:4a:13:de:82:b8:b8:41:d3:b2:af:ab:18:35:30:bd:9a: 77:a8:f4:41:43:4e:98:3f:42:e9:ad:ad:84:06:2a:53:cc:a9: 0f:69:a3:47:fc:82:57:f7:18:21:b9:e1:55:8a:3f:ea:66:31: e9:35:a8:71:98:f9:37:98:5e:62:92:fa:a9:ad:26:fa:43:0d: 7e:71:15:cd:a4:26:f0:c5:ed:d1:59:00:f2:ff:3c:3a:b8:9b: 31:64:1d:0b:7c:10:e2:d1:32:33:49:19:8f:bd:c0:aa:e4:69: da:65:b7:07:dc:f0:38:8c:18:51:29:58:74:8e:5f:c2:ee:8a: f4:02:18:ee:fe:17:20:4b:51:e6:f7:4c:e8:a4:8a:60:b1:e0: 7d:bd:e7:6b:e6:ac:67:37:78:ca:1f:70:d8:e4:ce:e6:85:0f: 27:cc:0e:94:73:d4:d1:53:7b:95:96:d7:4b:dc:a3:52:b7:04: cb:e3:a5:c6:25:96:13:20:2d:22:3c:a9:0a:ec:df:cb:db:9c: ec:27:9f:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMNZJ4THgkWdOmjxc6LuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGU5YWM0MzliOGYyYjI3YzFhMjY3ZDM1ZTAxOTVmZWM4 NTk0NGQwHhcNMjYwMjA5MTgwMTI2WhcNMjYwMjEwMTgwMTI2WjAzMTEwLwYDVQQD Eyg2M2IzYTY2OGExNTUzNmZjNWFlODA3OTMxNDJlMGMyOTkzZjIwZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseDDAwWtS5vb6t3HGcY+KBxXGPGU f5Odh6Npq0xwgScMnEc4qSikvi0l8DgkQYcxlJKI5v1aK/wSGDmTU33CEhTlgH2l C+kBYJ0AyEjxxOnJ1KmcDTLnarzYuw7/ebOLf1vmVehGm+HRPFtTVEU0ivJt9YNH pzWRqmBKLNzL+6rapn1BqsiQ5b4GhM38A3n07L7vZv0ek6T6alRjcm5ju5l7/aZo CHsf2ZDp1ASRodPfR+BW8zfFutoXx/q0fN9U60mrQ2uG4DraAbShs5XWub3/lfDM bamcHNEnwk0fzGjcsmpCkwy4aet6bnfLUlnXdZjD/fvzguEuM3yp0PyT2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOzpmihVTb8WugHkxQuDCmT8g0gMB8GA1UdIwQY MBaAFFQOmsQ5uPKyfBomfTXgGV/shZRNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkE2YXhEbTQ4cko4R2laOU5lQVpYLXlGbEUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOThjNGUtMWZlOS00MmM4LWJkYmIt Yzk2ZTkzN2FjOTU1LzEvVkE2YXhEbTQ4cko4R2laOU5lQVpYLXlGbEUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOThjNGUtMWZlOS00MmM4LWJkYmItYzk2ZTkzN2FjOTU1 LzEvVkE2YXhEbTQ4cko4R2laOU5lQVpYLXlGbEUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg/v3MqrJ 1K8ta4O4nclvYnmBD+BKPbKqFo7heHEhh5p/V41noNLM8sobcCgqIMsQJs+6aBxb DBVKE96CuLhB07Kvqxg1ML2ad6j0QUNOmD9C6a2thAYqU8ypD2mjR/yCV/cYIbnh VYo/6mYx6TWocZj5N5heYpL6qa0m+kMNfnEVzaQm8MXt0VkA8v88OribMWQdC3wQ 4tEyM0kZj73AquRp2mW3B9zwOIwYUSlYdI5fwu6K9AIY7v4XIEtR5vdM6KSKYLHg fb3na+asZzd4yh9w2OTO5oUPJ8wOlHPU0VN7lZbXS9yjUrcEy+OlxiWWEyAtIjyp Cuzfy9uc7Cef7A== -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:57 2026 by rpki-client