This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json) Hash identifier: Dr4e6cxf74kC9MdH5oFtvi5dBtsDM11fKKzVO+FMC4c= Subject key identifier: 61:69:51:5B:51:82:D9:0E:9E:AF:07:34:63:90:D7:0C:61:04:8F:1C Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1 Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1 Certificate serial: 019C43904915AD9F082CFC91BBF10EE37CB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft Manifest number: 152F Signing time: Mon 09 Feb 2026 18:00:55 +0000 Manifest this update: Mon 09 Feb 2026 18:00:55 +0000 Manifest next update: Tue 10 Feb 2026 18:00:55 +0000 Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: OI0Mj0kkOdSGqeddnrAK5kK3wdVthPKK/l567qPUGtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:49:15:ad:9f:08:2c:fc:91:bb:f1:0e:e3:7c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1 Validity Not Before: Feb 9 18:00:55 2026 GMT Not After : Feb 10 18:00:55 2026 GMT Subject: CN=6169515b5182d90e9eaf07346390d70c61048f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a1:32:e3:cb:40:e5:20:bb:60:a4:3c:eb:81: 0d:c1:13:4c:a0:d7:06:aa:d2:96:e3:d6:ad:83:a3: 97:55:0e:26:78:74:28:1e:63:48:fb:5f:39:43:0f: 79:48:b8:23:9c:0b:93:61:ca:a8:0b:a5:05:d5:b0: 4c:d5:49:cc:dd:5f:4a:0c:d4:2a:d6:74:e4:1d:79: c4:49:16:44:ce:a4:a4:73:cf:5c:03:a6:8f:21:79: 44:a7:fc:4c:9d:75:75:95:df:42:fb:95:05:03:76: 48:24:35:d2:0e:c5:32:1d:24:58:e7:c1:c6:05:50: e1:b7:48:a7:3e:96:b6:d2:bf:67:ef:b1:31:c5:6a: da:d5:e5:02:54:66:3b:8c:c4:f7:fc:17:06:0f:10: 4c:55:cc:03:2e:39:d6:21:6f:08:fb:61:9a:20:3b: 98:b5:4e:f7:fd:48:cc:d8:d6:b5:29:ac:8c:5e:db: 33:77:1c:3c:95:21:1e:aa:73:72:71:0b:a4:31:a2: 6a:55:86:58:ea:29:3a:c8:f9:a9:c0:ae:1e:e5:e2: 60:46:00:5f:c1:38:6e:56:bc:c8:f1:cb:5a:f4:69: 62:e4:8d:94:ee:f4:89:23:69:18:dc:8a:3a:2b:c0: b9:df:c8:d8:d3:7a:93:eb:9b:d2:7a:bf:12:cb:4c: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:69:51:5B:51:82:D9:0E:9E:AF:07:34:63:90:D7:0C:61:04:8F:1C X509v3 Authority Key Identifier: keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:d4:14:d3:82:09:c4:0c:9c:9c:e8:ca:da:5a:59:6c:ca:c6: 91:9a:ac:89:b9:86:80:4a:fe:12:78:c7:f6:ea:92:5a:2d:63: 28:57:41:ca:41:ab:cc:d3:c0:6f:1d:7d:1c:34:dd:13:6a:6c: 86:89:1f:c1:7c:3f:dc:b0:a9:01:1e:c4:27:31:eb:ba:89:65: 67:1b:3c:14:71:67:ef:b9:87:07:3a:a8:09:e4:59:7f:ac:a7: 5a:77:30:87:35:15:40:97:21:c7:7d:8f:de:9f:da:2d:c2:06: 53:b8:6d:cb:5d:bd:5d:de:7e:d7:b2:85:3c:81:d1:3f:8c:71: 2a:99:11:a1:44:f2:fa:09:8e:bf:cd:c6:f9:02:76:4e:26:78: 5a:8f:89:71:51:d4:8f:07:53:2d:e2:42:04:ef:3f:51:28:3e: 9d:69:fd:f6:ac:ab:7c:a2:36:2c:27:8d:24:cd:32:87:b7:1d: 75:fa:9a:34:cf:f1:d8:20:b8:bc:e8:86:04:3c:cf:f8:c8:d5: bf:37:43:1c:ad:0b:c2:1d:39:f9:b4:c8:34:57:e1:f2:fd:67: 6c:64:7e:09:90:d9:21:6f:ed:27:e7:f2:17:f3:a1:0d:f1:4c: 0a:65:6c:0d:89:27:51:75:0e:4e:a3:60:63:1a:44:f1:f5:70: 4b:50:b9:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkEkVrZ8ILPyRu/EO43y3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZjg3NGQwMTU0MDcwZTk2MmEzYzg3MTk4MjFmZGI5Y2Ix MDE2ZTEwHhcNMjYwMjA5MTgwMDU1WhcNMjYwMjEwMTgwMDU1WjAzMTEwLwYDVQQD Eyg2MTY5NTE1YjUxODJkOTBlOWVhZjA3MzQ2MzkwZDcwYzYxMDQ4ZjFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKEy48tA5SC7YKQ864ENwRNMoNcG qtKW49atg6OXVQ4meHQoHmNI+185Qw95SLgjnAuTYcqoC6UF1bBM1UnM3V9KDNQq 1nTkHXnESRZEzqSkc89cA6aPIXlEp/xMnXV1ld9C+5UFA3ZIJDXSDsUyHSRY58HG BVDht0inPpa20r9n77ExxWra1eUCVGY7jMT3/BcGDxBMVcwDLjnWIW8I+2GaIDuY tU73/UjM2Na1KayMXtszdxw8lSEeqnNycQukMaJqVYZY6ik6yPmpwK4e5eJgRgBf wThuVrzI8cta9Gli5I2U7vSJI2kY3Io6K8C538jY03qT65vSer8Sy0zMywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFpUVtRgtkOnq8HNGOQ1wxhBI8cMB8GA1UdIwQY MBaAFL/4dNAVQHDpYqPIcZgh/bnLEBbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kNWJjNjEtNmE5OS00YzRlLTg0YzQt OWIyMWYzMzRkMDI4LzEvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9kNWJjNjEtNmE5OS00YzRlLTg0YzQtOWIyMWYzMzRkMDI4 LzEvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAktQU04IJ xAycnOjK2lpZbMrGkZqsibmGgEr+EnjH9uqSWi1jKFdBykGrzNPAbx19HDTdE2ps hokfwXw/3LCpAR7EJzHruollZxs8FHFn77mHBzqoCeRZf6ynWncwhzUVQJchx32P 3p/aLcIGU7hty129Xd5+17KFPIHRP4xxKpkRoUTy+gmOv83G+QJ2TiZ4Wo+JcVHU jwdTLeJCBO8/USg+nWn99qyrfKI2LCeNJM0yh7cddfqaNM/x2CC4vOiGBDzP+MjV vzdDHK0Lwh05+bTINFfh8v1nbGR+CZDZIW/tJ+fyF/OhDfFMCmVsDYknUXUOTqNg YxpE8fVwS1C5SA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:43 2026 by rpki-client