This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft File: vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json) Hash identifier: jJCVGSGL7M6BJ7O4HYzlGAF7nFUU5vPiwxnAeNY7bIM= Subject key identifier: A3:45:8F:E4:26:04:D4:3C:4D:7E:90:F2:79:15:92:94:4D:54:55:0B Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f Certificate serial: 019C41D8B5AF39C07499BEB45C691674C39D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft Manifest number: 0790 Signing time: Mon 09 Feb 2026 10:00:47 +0000 Manifest this update: Mon 09 Feb 2026 10:00:47 +0000 Manifest next update: Tue 10 Feb 2026 10:00:47 +0000 Files and hashes: 1: Nlm0isqNrpjDC-VtiMDMaY-Z5SQ.roa (hash: EGFj0yiGNTXuSH8wwtjUjE+9yF5opQRMwl047u2UKFM=) 2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: twTZOEk4lDI/IFHltk5WXECp1Co0I28nmKXXaTVl+/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:b5:af:39:c0:74:99:be:b4:5c:69:16:74:c3:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f Validity Not Before: Feb 9 10:00:47 2026 GMT Not After : Feb 10 10:00:47 2026 GMT Subject: CN=a3458fe42604d43c4d7e90f2791592944d54550b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:7b:cf:df:20:65:5b:56:a2:10:e3:98:f0: 1b:ec:a9:e3:10:10:66:58:c6:76:c1:6a:82:25:11: 32:20:8a:08:28:d9:74:af:36:24:be:e8:fe:b5:a4: b4:9c:b8:61:eb:75:dc:5f:f7:15:a4:56:91:19:1f: e3:91:0a:4a:e6:71:30:8c:7b:16:28:36:a7:a3:b4: ad:ac:06:ef:4d:7c:77:45:66:c2:fe:5d:9c:84:74: ad:26:a6:54:39:8b:f3:82:05:35:6d:70:e5:46:97: 56:02:5b:7d:7d:f0:66:b0:97:a5:9a:f3:b9:bc:57: bd:d5:a8:9b:ac:17:65:e8:90:cb:79:a5:96:0e:bd: f7:a7:2d:d1:e8:91:7e:17:e5:75:66:e0:fd:a7:0c: 27:15:ca:be:49:c4:81:37:ae:83:5f:54:e6:f8:e7: af:b4:d9:79:a8:c0:37:23:c4:e4:c5:04:f3:9d:28: a2:29:2b:f1:59:20:b4:c7:64:0a:5e:45:a8:6b:bd: 7c:a0:1b:87:66:a4:d0:e6:68:86:35:a1:5f:ea:3e: ed:e5:a4:f1:59:55:68:21:56:16:39:89:a0:a0:42: 9d:50:96:0b:e0:2a:bb:eb:0d:dd:56:fd:78:ea:07: 45:c6:4f:12:84:a1:50:da:6d:53:2d:b3:ca:1c:b8: f9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:45:8F:E4:26:04:D4:3C:4D:7E:90:F2:79:15:92:94:4D:54:55:0B X509v3 Authority Key Identifier: keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3a:43:a2:55:3e:f7:af:23:a6:be:36:a0:09:40:ed:10:ac: 3d:28:81:b2:0f:57:df:c2:bc:8a:8c:6f:5e:bc:46:51:2d:0e: 86:16:57:dc:12:77:b2:df:d0:f8:b8:5f:81:19:d4:ec:23:23: a7:b9:96:28:54:53:a4:01:84:ac:a0:61:8b:ee:e1:c7:2f:dc: 41:12:21:b9:c0:b7:23:79:95:60:4a:5c:44:4d:f3:6a:05:07: 52:53:69:0b:3c:b9:7d:55:a6:07:98:92:20:85:c8:8d:c4:66: 01:4c:c8:82:07:23:6b:ad:74:21:46:2f:56:e1:d9:d4:da:58: 70:45:0c:46:5c:eb:bc:a3:f4:96:4b:11:85:79:3f:4b:0c:98: 24:95:0f:a2:fc:63:56:56:da:c4:33:56:b2:50:62:06:95:4b: 4e:1b:24:35:e0:bc:a1:64:99:3c:d5:71:46:58:e2:f7:f6:f9: 4a:ef:79:5c:73:29:ec:c1:3c:d2:d3:3f:c0:57:84:f0:9b:f5: e5:da:8d:68:2c:d5:5c:6f:0e:6e:96:63:e9:55:7b:15:8b:b0: c8:bb:ba:c8:12:a8:56:2d:9b:12:3e:1a:3c:f0:07:67:0d:d4: 38:2d:e8:03:a8:be:9e:9a:db:cd:20:8f:81:a0:ea:e6:94:f3: 31:ff:83:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2LWvOcB0mb60XGkWdMOdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZmM4ZGRmYjg0MTg3OWYwZTUzMGRjZTNiN2Y4NTgyN2Yw YzE5M2YwHhcNMjYwMjA5MTAwMDQ3WhcNMjYwMjEwMTAwMDQ3WjAzMTEwLwYDVQQD EyhhMzQ1OGZlNDI2MDRkNDNjNGQ3ZTkwZjI3OTE1OTI5NDRkNTQ1NTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbF7z98gZVtWohDjmPAb7KnjEBBm WMZ2wWqCJREyIIoIKNl0rzYkvuj+taS0nLhh63XcX/cVpFaRGR/jkQpK5nEwjHsW KDano7StrAbvTXx3RWbC/l2chHStJqZUOYvzggU1bXDlRpdWAlt9ffBmsJelmvO5 vFe91aibrBdl6JDLeaWWDr33py3R6JF+F+V1ZuD9pwwnFcq+ScSBN66DX1Tm+Oev tNl5qMA3I8TkxQTznSiiKSvxWSC0x2QKXkWoa718oBuHZqTQ5miGNaFf6j7t5aTx WVVoIVYWOYmgoEKdUJYL4Cq76w3dVv146gdFxk8ShKFQ2m1TLbPKHLj5UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKNFj+QmBNQ8TX6Q8nkVkpRNVFULMB8GA1UdIwQY MBaAFL38jd+4QYefDlMNzjt/hYJ/DBk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2Ut YjFkNGY4YTg2ZDA5LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2UtYjFkNGY4YTg2ZDA5 LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjpDolU+ 968jpr42oAlA7RCsPSiBsg9X38K8ioxvXrxGUS0OhhZX3BJ3st/Q+LhfgRnU7CMj p7mWKFRTpAGErKBhi+7hxy/cQRIhucC3I3mVYEpcRE3zagUHUlNpCzy5fVWmB5iS IIXIjcRmAUzIggcja610IUYvVuHZ1NpYcEUMRlzrvKP0lksRhXk/SwyYJJUPovxj VlbaxDNWslBiBpVLThskNeC8oWSZPNVxRlji9/b5Su95XHMp7ME80tM/wFeE8Jv1 5dqNaCzVXG8ObpZj6VV7FYuwyLu6yBKoVi2bEj4aPPAHZw3UOC3oA6i+nprbzSCP gaDq5pTzMf+D/g== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:30 2026 by rpki-client