This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft File: VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft (raw, json) Hash identifier: 4fakXaC4aMlkDLYQmmXX2/nraMOGd7WcdSZeAAgSQzY= Subject key identifier: 23:40:0B:4B:65:DA:47:21:B5:13:51:9C:31:69:DF:EC:84:E3:CB:6B Authority key identifier: 54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0 Certificate issuer: /CN=54ce2445a2e8874318bf249b73a654c990919ee0 Certificate serial: 019C43FDB95C3AEA9FBB082CBFFB148C7EA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft Manifest number: 0FA4 Signing time: Mon 09 Feb 2026 20:00:27 +0000 Manifest this update: Mon 09 Feb 2026 20:00:27 +0000 Manifest next update: Tue 10 Feb 2026 20:00:27 +0000 Files and hashes: 1: 2oHiZnjzT420MbEkQGJ7v40Fe9I.roa (hash: Czu1tA9q/Wmcp0lOrzTS/3SnNIxEWPYmLWHdzKOsNLk=) 2: VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl (hash: +je0zNgnTyX1Tf+wHB/EcEqTBpTP7VcsVUhb1dbCcV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:b9:5c:3a:ea:9f:bb:08:2c:bf:fb:14:8c:7e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54ce2445a2e8874318bf249b73a654c990919ee0 Validity Not Before: Feb 9 20:00:27 2026 GMT Not After : Feb 10 20:00:27 2026 GMT Subject: CN=23400b4b65da4721b513519c3169dfec84e3cb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:00:8f:43:f1:db:0f:6a:87:d5:b7:50:7f:ef: c8:9d:81:43:3a:29:20:07:46:b3:5a:23:f4:e4:0a: 48:89:14:88:1c:dc:eb:60:bc:2e:21:27:40:61:6c: 25:81:ad:c9:4b:2e:4b:39:19:80:7b:1d:e8:53:b4: 79:1c:c6:ae:82:37:de:f9:23:5c:71:dd:95:84:ea: 17:b0:eb:6b:13:ea:46:fa:61:df:14:aa:10:bb:7b: 21:24:4d:03:2a:86:be:55:47:32:7b:46:02:dd:5d: 3d:12:28:3f:54:4c:dd:fe:71:ff:f5:61:d6:bc:39: 6d:62:8b:05:74:4f:08:03:ca:db:e1:3c:45:36:46: c5:39:e5:ba:b1:5b:45:81:9b:92:da:d1:ec:02:f9: 5d:73:da:0e:f2:be:5f:6c:e9:9d:84:88:89:8b:ad: 6a:58:a1:03:04:1f:5c:10:9c:61:b2:0b:2d:e1:2f: d3:72:9e:5f:44:f6:06:f1:18:2a:bc:3e:69:ac:94: c6:1a:14:14:ae:2b:dc:8b:07:51:c0:3d:91:13:2a: 47:db:0b:2d:d3:be:12:b3:47:b9:33:35:b2:93:83: 47:b2:02:16:d9:47:73:78:cf:3e:f2:d1:eb:fe:d3: 5c:d9:30:16:4a:84:1a:5e:0c:4f:b3:1b:a1:7a:ba: 0b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:40:0B:4B:65:DA:47:21:B5:13:51:9C:31:69:DF:EC:84:E3:CB:6B X509v3 Authority Key Identifier: keyid:54:CE:24:45:A2:E8:87:43:18:BF:24:9B:73:A6:54:C9:90:91:9E:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VM4kRaLoh0MYvySbc6ZUyZCRnuA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bd7780-eb53-4c1d-acce-cfe7e3f9f92d/1/VM4kRaLoh0MYvySbc6ZUyZCRnuA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:cc:d7:af:9f:15:44:d1:1f:79:14:ba:1f:3c:44:10:6e:c4: 6c:94:59:79:ff:ee:62:1e:af:c8:ae:7f:4a:21:ee:d1:3e:38: 52:34:ed:97:57:00:77:99:aa:02:ae:92:3e:e3:48:97:d0:ff: 9b:a2:96:0b:50:c6:c6:7e:16:cf:d7:60:30:b1:c9:0b:41:59: 1f:fa:b5:54:37:c4:57:57:33:7e:4a:a2:a1:dd:79:f0:a7:05: 78:90:78:89:98:9f:b7:b7:59:7e:28:22:82:8e:de:af:5f:4b: 6e:ae:ef:f1:b8:a6:9e:d8:98:14:5b:9f:23:3c:13:1e:1b:80: 55:23:28:f8:78:ba:56:9a:c3:93:d2:4a:b2:a2:8f:6a:43:b1: 24:1e:bd:12:94:bc:3e:fb:22:67:a2:73:17:9c:76:9a:31:26: ea:e1:39:82:34:c0:1e:e0:e5:f4:6c:a8:de:75:64:7e:4d:50: 68:8c:07:33:c6:1b:98:70:66:73:e5:bc:63:a3:37:d6:fc:93: e5:d8:94:ff:d7:cf:c6:01:bc:64:84:f7:fe:19:8b:aa:a1:d3: 51:bf:43:dc:59:9b:b9:43:6b:90:47:ac:09:47:69:a1:01:57: 50:4d:dd:8f:14:9e:35:4a:24:8a:04:e1:9f:89:eb:96:23:07: 83:c3:e6:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/blcOuqfuwgsv/sUjH6nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Y2UyNDQ1YTJlODg3NDMxOGJmMjQ5YjczYTY1NGM5OTA5 MTllZTAwHhcNMjYwMjA5MjAwMDI3WhcNMjYwMjEwMjAwMDI3WjAzMTEwLwYDVQQD EygyMzQwMGI0YjY1ZGE0NzIxYjUxMzUxOWMzMTY5ZGZlYzg0ZTNjYjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlACPQ/HbD2qH1bdQf+/InYFDOikg B0azWiP05ApIiRSIHNzrYLwuISdAYWwlga3JSy5LORmAex3oU7R5HMaugjfe+SNc cd2VhOoXsOtrE+pG+mHfFKoQu3shJE0DKoa+VUcye0YC3V09Eig/VEzd/nH/9WHW vDltYosFdE8IA8rb4TxFNkbFOeW6sVtFgZuS2tHsAvldc9oO8r5fbOmdhIiJi61q WKEDBB9cEJxhsgst4S/Tcp5fRPYG8RgqvD5prJTGGhQUrivciwdRwD2REypH2wst 074Ss0e5MzWyk4NHsgIW2UdzeM8+8tHr/tNc2TAWSoQaXgxPsxuheroL7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNAC0tl2kchtRNRnDFp3+yE48trMB8GA1UdIwQY MBaAFFTOJEWi6IdDGL8km3OmVMmQkZ7gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk00a1JhTG9oME1ZdnlTYmM2WlV5WkNSbnVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iZDc3ODAtZWI1My00YzFkLWFjY2Ut Y2ZlN2UzZjlmOTJkLzEvVk00a1JhTG9oME1ZdnlTYmM2WlV5WkNSbnVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iZDc3ODAtZWI1My00YzFkLWFjY2UtY2ZlN2UzZjlmOTJk LzEvVk00a1JhTG9oME1ZdnlTYmM2WlV5WkNSbnVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjczXr58V RNEfeRS6HzxEEG7EbJRZef/uYh6vyK5/SiHu0T44UjTtl1cAd5mqAq6SPuNIl9D/ m6KWC1DGxn4Wz9dgMLHJC0FZH/q1VDfEV1czfkqiod158KcFeJB4iZift7dZfigi go7er19Lbq7v8bimntiYFFufIzwTHhuAVSMo+Hi6VprDk9JKsqKPakOxJB69EpS8 PvsiZ6JzF5x2mjEm6uE5gjTAHuDl9Gyo3nVkfk1QaIwHM8YbmHBmc+W8Y6M31vyT 5diU/9fPxgG8ZIT3/hmLqqHTUb9D3FmbuUNrkEesCUdpoQFXUE3djxSeNUokigTh n4nrliMHg8Pmtw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:11:18 2026 by rpki-client