This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft File: vqTtMeEp6Vu17P2FdXyddNO-42g.mft (raw, json) Hash identifier: +aCDHk1OhsYmlCNruNWjD2xccm8xXNmgPiL6RltLQ3w= Subject key identifier: E0:8A:74:22:9C:EB:63:FC:DE:D2:75:CD:07:69:87:A2:D7:72:42:67 Authority key identifier: BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68 Certificate issuer: /CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368 Certificate serial: 019C43C75B32B66286EAD1C8C3584F753134 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft Manifest number: 0C0B Signing time: Mon 09 Feb 2026 19:01:04 +0000 Manifest this update: Mon 09 Feb 2026 19:01:04 +0000 Manifest next update: Tue 10 Feb 2026 19:01:04 +0000 Files and hashes: 1: vqTtMeEp6Vu17P2FdXyddNO-42g.crl (hash: abLrFUxjYvxaxEqCeev0gykpId9MuxK/m2OBElynEdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:5b:32:b6:62:86:ea:d1:c8:c3:58:4f:75:31:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368 Validity Not Before: Feb 9 19:01:04 2026 GMT Not After : Feb 10 19:01:04 2026 GMT Subject: CN=e08a74229ceb63fcded275cd076987a2d7724267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fc:05:b6:19:00:04:84:19:98:fd:35:ee:c6: 6f:30:4a:1b:b9:da:e5:41:db:80:ec:c5:8b:6f:9d: 3a:21:d3:5d:9c:3c:8c:8b:54:ac:d0:c8:e7:b5:ca: f2:31:60:96:d9:e0:59:5f:b1:eb:76:b2:95:b9:85: 15:48:97:17:66:10:10:12:59:40:42:75:e1:c2:61: 6e:ff:aa:3e:7b:72:f1:67:a7:50:7c:13:a3:d1:c1: d4:3d:0c:05:57:fa:ea:ea:ab:2d:9b:88:f2:0f:d5: 77:78:74:5b:a0:5d:4f:93:10:a4:dd:90:0f:95:20: b6:25:10:71:51:41:38:6a:c8:ee:d9:e6:a7:7c:f1: 1b:c3:d0:6d:92:67:28:f0:d8:0b:e3:02:e5:ef:a5: eb:de:f9:9b:6f:e7:46:5c:fa:59:ed:f1:9a:11:03: 33:62:61:aa:07:d0:a0:24:29:04:8e:a4:4f:e0:43: c7:d2:77:7f:f2:ff:16:19:a2:fa:9c:91:7f:ab:88: c4:d7:f9:b8:d6:4d:0d:23:a9:9d:62:11:ee:68:52: e0:dd:eb:a2:bf:f9:cd:10:bf:57:e0:25:39:b2:8d: da:ea:8b:8a:c9:1f:07:0a:7c:d7:fb:68:a5:65:c8: c2:36:82:31:73:df:39:a8:5e:31:8e:76:b0:2b:60: 0e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8A:74:22:9C:EB:63:FC:DE:D2:75:CD:07:69:87:A2:D7:72:42:67 X509v3 Authority Key Identifier: keyid:BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:41:54:22:5a:02:02:d2:4e:0e:de:79:d2:af:5c:da:d7:f1: de:c9:55:a7:15:e3:8d:d2:9c:4a:d9:24:4e:c8:64:a5:43:a3: c8:a3:24:53:87:7a:00:d2:7a:d3:b5:f6:d9:86:f4:66:fa:86: ac:59:e7:80:18:96:06:d7:05:f4:fb:92:4c:f6:44:45:14:ee: 58:b1:48:d7:92:20:ff:85:4a:d3:66:e2:cc:c5:cd:4f:cb:f5: c7:9c:91:2b:19:0c:79:4f:06:d8:51:98:31:70:50:b3:6d:64: 17:07:0e:7b:dd:74:f9:ea:af:8b:74:08:41:15:b6:a5:18:df: 69:f4:18:39:d9:7d:a4:6a:99:33:39:0e:d2:4c:ef:71:2d:94: bb:ae:e9:5e:a0:60:2b:e8:8e:6a:5e:e0:71:22:1e:24:88:40: ec:fc:66:24:9b:f2:3c:30:5b:eb:75:c9:7e:5e:aa:8a:91:cc: 09:f0:ef:33:7f:64:80:28:70:3b:bf:5e:c0:00:3e:81:01:b1: 82:1c:c6:c6:e1:56:a0:f6:d4:4a:d9:16:83:bf:06:72:34:9a: 3c:48:0e:cb:27:32:b5:9b:28:10:96:91:82:dc:80:de:a2:1c: 86:46:66:7a:64:b1:d3:4a:82:07:79:30:c5:21:57:fd:30:a2: 0e:f6:98:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx1sytmKG6tHIw1hPdTE0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlYTRlZDMxZTEyOWU5NWJiNWVjZmQ4NTc1N2M5ZDc0ZDNi ZWUzNjgwHhcNMjYwMjA5MTkwMTA0WhcNMjYwMjEwMTkwMTA0WjAzMTEwLwYDVQQD EyhlMDhhNzQyMjljZWI2M2ZjZGVkMjc1Y2QwNzY5ODdhMmQ3NzI0MjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/wFthkABIQZmP017sZvMEobudrl QduA7MWLb506IdNdnDyMi1Ss0MjntcryMWCW2eBZX7HrdrKVuYUVSJcXZhAQEllA QnXhwmFu/6o+e3LxZ6dQfBOj0cHUPQwFV/rq6qstm4jyD9V3eHRboF1PkxCk3ZAP lSC2JRBxUUE4asju2eanfPEbw9Btkmco8NgL4wLl76Xr3vmbb+dGXPpZ7fGaEQMz YmGqB9CgJCkEjqRP4EPH0nd/8v8WGaL6nJF/q4jE1/m41k0NI6mdYhHuaFLg3eui v/nNEL9X4CU5so3a6ouKyR8HCnzX+2ilZcjCNoIxc985qF4xjnawK2AOkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOCKdCKc62P83tJ1zQdph6LXckJnMB8GA1UdIwQY MBaAFL6k7THhKelbtez9hXV8nXTTvuNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTIt OGM0YzY0MDUyNTFlLzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi83NzMyYzAtODZmYS00ZTNhLWI2NTItOGM0YzY0MDUyNTFl LzEvdnFUdE1lRXA2VnUxN1AyRmRYeWRkTk8tNDJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0FUIloC AtJODt550q9c2tfx3slVpxXjjdKcStkkTshkpUOjyKMkU4d6ANJ607X22Yb0ZvqG rFnngBiWBtcF9PuSTPZERRTuWLFI15Ig/4VK02bizMXNT8v1x5yRKxkMeU8G2FGY MXBQs21kFwcOe910+eqvi3QIQRW2pRjfafQYOdl9pGqZMzkO0kzvcS2Uu67pXqBg K+iOal7gcSIeJIhA7PxmJJvyPDBb63XJfl6qipHMCfDvM39kgChwO79ewAA+gQGx ghzGxuFWoPbUStkWg78GcjSaPEgOyycytZsoEJaRgtyA3qIchkZmemSx00qCB3kw xSFX/TCiDvaYPA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:17 2026 by rpki-client