This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft File: VHFLUoQ1EPnzrDC4GbYQ15a338E.mft (raw, json) Hash identifier: fFNj9ByF8BgajEKjijPFfmaRlDZy0GfS9axzdyrw1OY= Subject key identifier: 12:DA:C5:FC:5E:D8:49:23:EA:99:62:D7:08:E3:92:D5:71:42:E3:B0 Authority key identifier: 54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1 Certificate issuer: /CN=54714b52843510f9f3ac30b819b610d796b7dfc1 Certificate serial: 019C42EB7AB2E71D952F6341DFF515473109 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft Manifest number: 13AA Signing time: Mon 09 Feb 2026 15:00:54 +0000 Manifest this update: Mon 09 Feb 2026 15:00:54 +0000 Manifest next update: Tue 10 Feb 2026 15:00:54 +0000 Files and hashes: 1: VHFLUoQ1EPnzrDC4GbYQ15a338E.crl (hash: dOcY9MmcuVeZOfz3eVvqHhuLzfqfoHSBy8Ova9P34qQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:7a:b2:e7:1d:95:2f:63:41:df:f5:15:47:31:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54714b52843510f9f3ac30b819b610d796b7dfc1 Validity Not Before: Feb 9 15:00:54 2026 GMT Not After : Feb 10 15:00:54 2026 GMT Subject: CN=12dac5fc5ed84923ea9962d708e392d57142e3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:71:5a:f3:96:f2:39:3c:d2:66:7e:d7:c9: 05:b7:c5:31:d3:7c:85:14:52:7f:e9:3b:2e:b7:85: 90:b8:1c:e1:12:5f:6f:c0:a2:f3:cc:6e:89:fa:88: c8:af:c2:d9:07:5e:11:4d:db:c3:32:42:3a:90:84: f5:0e:57:10:c2:51:2d:99:60:e0:74:51:7c:3b:a1: 7e:14:94:99:6a:1e:75:58:9b:6d:ba:27:ca:59:8a: 57:36:1f:fb:ac:f8:58:25:cf:6e:32:81:58:a4:13: 06:e6:78:65:f8:b6:c4:7c:c7:15:36:26:25:c8:68: a0:e8:35:9d:f6:8d:80:31:2b:5d:88:84:15:f4:94: 61:d5:bf:1b:a5:27:65:92:84:55:ff:c5:d8:eb:90: 76:5b:88:3b:73:f8:4c:28:2b:af:e2:4b:2d:ec:33: ee:11:b3:43:3e:96:ec:9b:cb:46:2a:3c:a5:e8:7c: 96:d6:17:50:59:9b:48:7d:b2:8a:0e:b5:f4:35:20: 9b:6f:bc:d1:c3:46:1b:5b:66:fd:7b:ba:31:17:a9: c6:6e:5a:4d:fd:2b:5d:27:fc:f4:65:98:7a:c6:f1: 15:b3:94:73:5d:2f:52:13:84:a3:cb:2a:70:ed:96: 21:2d:5b:6d:fe:cc:0f:24:dc:54:aa:c0:7c:32:1a: 20:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DA:C5:FC:5E:D8:49:23:EA:99:62:D7:08:E3:92:D5:71:42:E3:B0 X509v3 Authority Key Identifier: keyid:54:71:4B:52:84:35:10:F9:F3:AC:30:B8:19:B6:10:D7:96:B7:DF:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHFLUoQ1EPnzrDC4GbYQ15a338E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/cbf036-1980-46b3-b7f6-26caec3c484a/1/VHFLUoQ1EPnzrDC4GbYQ15a338E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d6:df:37:43:1d:f5:72:9c:8b:8b:03:ac:5c:d1:8d:15:ce: 97:af:b7:ca:3b:f2:23:53:58:54:80:29:56:37:85:37:4e:a0: 7c:42:da:34:1f:ac:f3:ce:a6:d4:ca:95:30:e4:33:37:32:f0: 11:ce:26:06:0d:9d:db:ba:12:f2:0e:fa:97:71:23:1b:e4:2a: cd:f2:1c:bd:b5:e3:cc:3b:35:92:c0:8b:d9:90:86:4c:68:34: 3a:aa:66:0e:63:c9:d9:f4:6e:6b:7d:57:3f:97:e9:74:4c:b3: 23:54:55:b5:01:a6:3d:8e:a0:3b:73:5e:d7:82:1f:f4:7a:58: 10:6f:5c:36:08:0e:c7:a6:ba:e1:4d:92:a4:a3:0f:90:21:cd: 84:cb:ab:33:3a:b9:a0:b6:ae:21:de:30:08:7c:e7:36:d1:0a: fd:dc:d4:a4:ea:f1:b4:31:cd:7b:1f:c3:0f:4d:e3:72:72:d7: 90:4f:05:ed:da:2f:14:3c:00:4a:7d:ef:6c:7d:85:61:f0:d6: 5e:90:20:79:75:f3:d0:0b:96:7c:e7:96:08:27:67:e0:86:a7: 6a:05:9c:bb:21:b7:9b:0e:40:85:74:7d:0d:24:58:ab:de:53: 99:fb:52:24:72:da:3b:b9:c0:7e:10:9f:bb:fe:74:5f:cb:c9: 75:ee:fa:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63qy5x2VL2NB3/UVRzEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NzE0YjUyODQzNTEwZjlmM2FjMzBiODE5YjYxMGQ3OTZi N2RmYzEwHhcNMjYwMjA5MTUwMDU0WhcNMjYwMjEwMTUwMDU0WjAzMTEwLwYDVQQD EygxMmRhYzVmYzVlZDg0OTIzZWE5OTYyZDcwOGUzOTJkNTcxNDJlM2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD1xWvOW8jk80mZ+18kFt8Ux03yF FFJ/6Tsut4WQuBzhEl9vwKLzzG6J+ojIr8LZB14RTdvDMkI6kIT1DlcQwlEtmWDg dFF8O6F+FJSZah51WJttuifKWYpXNh/7rPhYJc9uMoFYpBMG5nhl+LbEfMcVNiYl yGig6DWd9o2AMStdiIQV9JRh1b8bpSdlkoRV/8XY65B2W4g7c/hMKCuv4kst7DPu EbNDPpbsm8tGKjyl6HyW1hdQWZtIfbKKDrX0NSCbb7zRw0YbW2b9e7oxF6nGblpN /StdJ/z0ZZh6xvEVs5RzXS9SE4Sjyypw7ZYhLVtt/swPJNxUqsB8Mhog1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLaxfxe2Ekj6pli1wjjktVxQuOwMB8GA1UdIwQY MBaAFFRxS1KENRD586wwuBm2ENeWt9/BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhGTFVvUTFFUG56ckRDNEdiWVExNWEzMzhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jYmYwMzYtMTk4MC00NmIzLWI3ZjYt MjZjYWVjM2M0ODRhLzEvVkhGTFVvUTFFUG56ckRDNEdiWVExNWEzMzhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9jYmYwMzYtMTk4MC00NmIzLWI3ZjYtMjZjYWVjM2M0ODRh LzEvVkhGTFVvUTFFUG56ckRDNEdiWVExNWEzMzhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9bfN0Md 9XKci4sDrFzRjRXOl6+3yjvyI1NYVIApVjeFN06gfELaNB+s886m1MqVMOQzNzLw Ec4mBg2d27oS8g76l3EjG+QqzfIcvbXjzDs1ksCL2ZCGTGg0OqpmDmPJ2fRua31X P5fpdEyzI1RVtQGmPY6gO3Ne14If9HpYEG9cNggOx6a64U2SpKMPkCHNhMurMzq5 oLauId4wCHznNtEK/dzUpOrxtDHNex/DD03jcnLXkE8F7dovFDwASn3vbH2FYfDW XpAgeXXz0AuWfOeWCCdn4IanagWcuyG3mw5AhXR9DSRYq95TmftSJHLaO7nAfhCf u/50X8vJde76pw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:11 2026 by rpki-client