This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft File: I-VNMniWj26JlDXq-hVwlnX20DA.mft (raw, json) Hash identifier: HB/ZnqppUHBJc+gvfS+ti6Hxe+bfn6mTiLH817kXpjA= Subject key identifier: 0A:39:C7:C7:D5:9E:5B:25:9F:72:71:26:E8:DA:12:45:86:B7:93:49 Authority key identifier: 23:E5:4D:32:78:96:8F:6E:89:94:35:EA:FA:15:70:96:75:F6:D0:30 Certificate issuer: /CN=23e54d3278968f6e899435eafa15709675f6d030 Certificate serial: 019C41D82FB70E1B19C9C466B7A032AA69EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-VNMniWj26JlDXq-hVwlnX20DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft Manifest number: 0148 Signing time: Mon 09 Feb 2026 10:00:12 +0000 Manifest this update: Mon 09 Feb 2026 10:00:12 +0000 Manifest next update: Tue 10 Feb 2026 10:00:12 +0000 Files and hashes: 1: I-VNMniWj26JlDXq-hVwlnX20DA.crl (hash: ff09gHLas+dIspf3OVMkBCMvAK+rUyzA1h5GFlB36sI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft rsync://rpki.ripe.net/repository/DEFAULT/I-VNMniWj26JlDXq-hVwlnX20DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:2f:b7:0e:1b:19:c9:c4:66:b7:a0:32:aa:69:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e54d3278968f6e899435eafa15709675f6d030 Validity Not Before: Feb 9 10:00:12 2026 GMT Not After : Feb 10 10:00:12 2026 GMT Subject: CN=0a39c7c7d59e5b259f727126e8da124586b79349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:72:4d:91:89:7b:2a:a4:8d:e3:d9:b7:c5: 6e:ba:db:ac:fa:9b:d0:93:bd:bd:ea:47:6d:5e:dc: b5:85:3a:4f:2e:b3:ea:4b:fe:d5:f6:c7:4a:a4:32: fb:55:3a:d1:da:04:57:bc:6d:eb:56:cf:3d:d9:20: 62:af:1f:90:06:4d:d4:f4:61:0b:de:13:6d:66:14: 63:16:d1:8d:33:d9:e3:e9:87:17:29:7b:a1:18:d8: 55:95:84:1a:57:d7:aa:12:3c:82:da:f4:52:d0:72: 72:f1:f5:6e:e9:7b:44:97:a5:75:fb:50:4f:23:0e: 29:41:15:ae:cb:3c:6b:d7:36:4b:7a:34:12:de:eb: ef:ad:78:af:07:53:e5:fa:0b:da:83:dd:88:bc:9f: a8:08:ac:d8:58:35:c7:e8:c7:b8:b8:35:ca:b6:a4: 35:8e:d6:2c:3e:1e:3f:48:f8:bd:97:b5:c5:25:bf: c6:ab:aa:da:6b:5a:98:54:9f:72:46:19:fd:8b:f0: c8:bc:28:5c:99:71:df:96:ea:e5:76:5d:a9:d7:c9: f7:66:0b:38:6b:1f:3b:d2:57:11:48:03:d1:3f:75: c3:ab:1c:0b:43:63:1a:8c:24:68:98:92:3b:74:9e: d9:17:a7:47:ca:5a:d2:f4:e7:aa:d1:b5:b9:9f:78: 10:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:39:C7:C7:D5:9E:5B:25:9F:72:71:26:E8:DA:12:45:86:B7:93:49 X509v3 Authority Key Identifier: keyid:23:E5:4D:32:78:96:8F:6E:89:94:35:EA:FA:15:70:96:75:F6:D0:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-VNMniWj26JlDXq-hVwlnX20DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:6a:9a:fe:bb:c9:0b:3a:69:54:0d:b3:9d:b2:bc:c3:f8:2b: fe:98:19:2f:6c:4c:e9:8d:3e:02:73:d6:44:53:32:f0:cd:95: 3f:e2:4e:bd:fd:a8:44:f7:9d:b3:19:c7:ab:8a:19:db:50:5b: 7f:72:72:9d:3e:e9:81:c7:9f:1f:82:59:81:f8:27:ae:e8:47: 3a:31:41:a1:1f:e1:93:3d:5f:f8:cd:6f:17:a0:85:e1:74:8f: 8b:1f:74:27:34:83:34:74:f7:1e:af:b5:eb:34:25:61:cd:86: 62:d5:19:03:5e:32:01:9f:35:db:cf:af:84:3c:4c:f8:2e:8a: da:b2:9d:70:9b:8d:e8:ec:b8:db:fd:cf:ca:7d:77:22:5f:1c: fc:fd:dd:84:bc:40:65:f5:0e:cc:29:ff:76:56:cf:f4:6e:5d: 29:08:11:77:dc:b3:ac:0e:bb:1d:37:be:4e:50:a7:16:d8:14: c5:d8:49:b1:bc:fc:a5:38:cb:4a:dc:44:ad:b5:b2:7a:38:37: 22:bb:85:47:db:e4:bd:ef:f0:50:8f:82:cc:2d:f0:ec:53:24: 66:31:f3:4e:9b:21:f7:b6:00:e5:61:ea:1f:ae:1f:0a:1a:84: bd:86:1f:92:18:64:da:fd:bf:52:b7:53:25:11:97:44:7e:47: 80:cb:31:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2C+3DhsZycRmt6AyqmnqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTU0ZDMyNzg5NjhmNmU4OTk0MzVlYWZhMTU3MDk2NzVm NmQwMzAwHhcNMjYwMjA5MTAwMDEyWhcNMjYwMjEwMTAwMDEyWjAzMTEwLwYDVQQD EygwYTM5YzdjN2Q1OWU1YjI1OWY3MjcxMjZlOGRhMTI0NTg2Yjc5MzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbdyTZGJeyqkjePZt8Vuutus+pvQ k7296kdtXty1hTpPLrPqS/7V9sdKpDL7VTrR2gRXvG3rVs892SBirx+QBk3U9GEL 3hNtZhRjFtGNM9nj6YcXKXuhGNhVlYQaV9eqEjyC2vRS0HJy8fVu6XtEl6V1+1BP Iw4pQRWuyzxr1zZLejQS3uvvrXivB1Pl+gvag92IvJ+oCKzYWDXH6Me4uDXKtqQ1 jtYsPh4/SPi9l7XFJb/Gq6raa1qYVJ9yRhn9i/DIvChcmXHflurldl2p18n3Zgs4 ax870lcRSAPRP3XDqxwLQ2MajCRomJI7dJ7ZF6dHylrS9Oeq0bW5n3gQ4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo5x8fVnlsln3JxJujaEkWGt5NJMB8GA1UdIwQY MBaAFCPlTTJ4lo9uiZQ16voVcJZ19tAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1WTk1uaVdqMjZKbERYcS1oVndsblgyMERBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84OTM3MTItMGU2Ni00Y2FlLWE2ZGUt OWExNjBjMjc4OGQxLzEvSS1WTk1uaVdqMjZKbERYcS1oVndsblgyMERBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84OTM3MTItMGU2Ni00Y2FlLWE2ZGUtOWExNjBjMjc4OGQx LzEvSS1WTk1uaVdqMjZKbERYcS1oVndsblgyMERBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlGqa/rvJ CzppVA2znbK8w/gr/pgZL2xM6Y0+AnPWRFMy8M2VP+JOvf2oRPedsxnHq4oZ21Bb f3JynT7pgcefH4JZgfgnruhHOjFBoR/hkz1f+M1vF6CF4XSPix90JzSDNHT3Hq+1 6zQlYc2GYtUZA14yAZ8128+vhDxM+C6K2rKdcJuN6Oy42/3Pyn13Il8c/P3dhLxA ZfUOzCn/dlbP9G5dKQgRd9yzrA67HTe+TlCnFtgUxdhJsbz8pTjLStxErbWyejg3 IruFR9vkve/wUI+CzC3w7FMkZjHzTpsh97YA5WHqH64fChqEvYYfkhhk2v2/UrdT JRGXRH5HgMsxvA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:52 2026 by rpki-client