This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft File: Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json) Hash identifier: VWMwHQ+t+MSrEEtwFFBwZSX8qEmWBFc3xwxzGrGkbAs= Subject key identifier: 79:A9:4B:AB:79:D3:9C:5C:BB:C4:3A:1D:68:10:ED:2E:68:2F:38:D9 Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D Certificate issuer: /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d Certificate serial: 019C42B400B1DADC492C8D8AFD5132D54E46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 14:00:18 +0000 Manifest this update: Mon 09 Feb 2026 14:00:18 +0000 Manifest next update: Tue 10 Feb 2026 14:00:18 +0000 Files and hashes: 1: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: DFVxZT8V3er4TzO+QsWhzW+SFRafPpaQgV/Fh+nBLB0=) 2: b5RJOv7qZAeN9fC5WkVRpB4SgFc.roa (hash: Wt8WdKPtW4g2V/ELjbMd7aeJz0MptjN56nKh7aTTs9c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:00:b1:da:dc:49:2c:8d:8a:fd:51:32:d5:4e:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d Validity Not Before: Feb 9 14:00:18 2026 GMT Not After : Feb 10 14:00:18 2026 GMT Subject: CN=79a94bab79d39c5cbbc43a1d6810ed2e682f38d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7f:b7:dd:59:3a:af:ab:3e:6b:17:ed:b0:92: d6:0a:20:62:a7:d4:56:11:ba:7d:55:e3:bf:d4:b0: 73:d9:d6:ca:a9:99:0b:cc:38:57:e2:3d:f7:76:58: 2e:92:22:5a:64:fa:93:28:b0:41:50:bf:95:a7:be: 88:04:0c:36:fa:4e:40:90:5d:3d:7e:09:70:e8:df: 8a:74:0e:73:a2:2d:c9:5c:3a:72:3c:cf:31:51:15: 73:bc:53:64:1d:fd:09:22:c5:ca:81:ea:3c:b0:e5: 39:78:a2:d1:f5:b6:e1:39:f6:4a:5b:fe:ca:7b:cd: 99:51:56:ae:91:de:7a:5a:47:83:a8:08:55:da:c7: 48:1a:ed:7c:a3:f6:af:92:5b:2f:cc:b4:80:87:cd: 1d:d7:ae:69:de:f7:8b:47:46:20:6d:04:77:b8:76: f8:3a:aa:77:a5:74:2c:d6:a8:96:76:4f:b3:f4:9e: f7:dc:27:d4:c7:b2:d2:3b:56:47:2e:64:d9:6a:4c: fc:35:6f:ef:58:6a:60:0a:13:0f:cb:7e:31:72:2d: 08:2b:61:4a:46:0c:e1:20:c2:2b:d6:1e:e6:ef:db: a2:be:d5:c1:40:e6:ef:b8:a4:f7:a4:66:9c:20:d3: 83:96:fd:46:a9:fe:28:1f:39:32:10:7b:d9:9d:97: 21:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:A9:4B:AB:79:D3:9C:5C:BB:C4:3A:1D:68:10:ED:2E:68:2F:38:D9 X509v3 Authority Key Identifier: keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:75:83:2f:ff:fb:c1:8e:84:77:79:5d:d7:8a:37:e9:d4:5f: c7:4f:b0:79:d5:cc:38:97:dc:a0:51:37:0f:c9:a7:9c:e3:a4: 38:8b:ca:f9:8c:08:4c:54:5a:b4:8c:55:09:47:b2:c7:0a:61: cb:c4:75:cb:3b:e5:d3:dc:2a:79:16:c4:11:0e:f5:fe:59:09: a5:44:4e:81:b4:da:92:18:85:ac:f6:01:64:f6:47:35:40:2e: 63:77:e3:45:78:8b:dd:ca:28:fb:e5:f7:ae:ac:32:88:2c:f8: c1:09:3b:ce:66:74:9e:c0:fd:0c:4f:bd:52:b6:31:39:fc:eb: fc:88:12:fa:29:1a:33:44:72:b0:fe:a0:4d:d2:c3:ec:fe:f9: 71:4f:77:88:e4:8f:1d:38:90:89:91:b2:d4:f3:47:5c:10:86: 60:0f:50:7e:cd:30:8d:94:5e:ee:bd:d8:9d:c1:9e:87:60:6b: f7:4c:dd:36:f3:18:14:fc:45:e4:ef:a6:25:5a:36:1b:40:0e: e5:27:db:38:4c:57:65:21:72:d0:a5:ac:6f:b1:4f:16:b5:1a: 68:83:b7:d7:9d:d9:54:45:86:0e:0f:fd:ce:7f:bd:6a:84:0c: 33:4d:b3:82:0f:06:e9:46:48:64:87:91:36:a1:4c:83:36:20: 7f:be:3c:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtACx2txJLI2K/VEy1U5GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmFiZDg1YTU4OTkxYWI3MWExN2ZkNzU0MWZiOGRlOTZm NTVhN2QwHhcNMjYwMjA5MTQwMDE4WhcNMjYwMjEwMTQwMDE4WjAzMTEwLwYDVQQD Eyg3OWE5NGJhYjc5ZDM5YzVjYmJjNDNhMWQ2ODEwZWQyZTY4MmYzOGQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn+33Vk6r6s+axftsJLWCiBip9RW Ebp9VeO/1LBz2dbKqZkLzDhX4j33dlgukiJaZPqTKLBBUL+Vp76IBAw2+k5AkF09 fglw6N+KdA5zoi3JXDpyPM8xURVzvFNkHf0JIsXKgeo8sOU5eKLR9bbhOfZKW/7K e82ZUVaukd56WkeDqAhV2sdIGu18o/avklsvzLSAh80d165p3veLR0YgbQR3uHb4 Oqp3pXQs1qiWdk+z9J733CfUx7LSO1ZHLmTZakz8NW/vWGpgChMPy34xci0IK2FK RgzhIMIr1h7m79uivtXBQObvuKT3pGacINODlv1Gqf4oHzkyEHvZnZchywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmpS6t505xcu8Q6HWgQ7S5oLzjZMB8GA1UdIwQY MBaAFFcqvYWliZGrcaF/11QfuN6W9Vp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnlxOWhhV0prYXR4b1hfWFZCLTQzcGIxV24wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84NjFjNmMtYTQ3YS00NjU0LWE0ZWYt NjFmYWMyODZkMzg3LzEvVnlxOWhhV0prYXR4b1hfWFZCLTQzcGIxV24wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84NjFjNmMtYTQ3YS00NjU0LWE0ZWYtNjFmYWMyODZkMzg3 LzEvVnlxOWhhV0prYXR4b1hfWFZCLTQzcGIxV24wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJHWDL//7 wY6Ed3ld14o36dRfx0+wedXMOJfcoFE3D8mnnOOkOIvK+YwITFRatIxVCUeyxwph y8R1yzvl09wqeRbEEQ71/lkJpUROgbTakhiFrPYBZPZHNUAuY3fjRXiL3coo++X3 rqwyiCz4wQk7zmZ0nsD9DE+9UrYxOfzr/IgS+ikaM0RysP6gTdLD7P75cU93iOSP HTiQiZGy1PNHXBCGYA9Qfs0wjZRe7r3YncGeh2Br90zdNvMYFPxF5O+mJVo2G0AO 5SfbOExXZSFy0KWsb7FPFrUaaIO3153ZVEWGDg/9zn+9aoQMM02zgg8G6UZIZIeR NqFMgzYgf748fA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:26 2026 by rpki-client