This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft File: VuqlFkAibog8wIkopOAmGoAzf-I.mft (raw, json) Hash identifier: iUHdXVOBa74DOWdgKvVjJVsQ+VoOTJjSXBTdoG0Yl94= Subject key identifier: 43:FE:A8:63:9A:1A:87:66:3D:E0:CD:CA:ED:5F:D6:DF:C3:6C:30:E5 Authority key identifier: 56:EA:A5:16:40:22:6E:88:3C:C0:89:28:A4:E0:26:1A:80:33:7F:E2 Certificate issuer: /CN=56eaa51640226e883cc08928a4e0261a80337fe2 Certificate serial: 019C438FD60437DEA0B4DE74E27390710F50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuqlFkAibog8wIkopOAmGoAzf-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft Manifest number: 0111 Signing time: Mon 09 Feb 2026 18:00:25 +0000 Manifest this update: Mon 09 Feb 2026 18:00:25 +0000 Manifest next update: Tue 10 Feb 2026 18:00:25 +0000 Files and hashes: 1: VuqlFkAibog8wIkopOAmGoAzf-I.crl (hash: gTzKnf0sUd6A59xG1000c0FZan22kQfvPRbZggY0d78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft rsync://rpki.ripe.net/repository/DEFAULT/VuqlFkAibog8wIkopOAmGoAzf-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:d6:04:37:de:a0:b4:de:74:e2:73:90:71:0f:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56eaa51640226e883cc08928a4e0261a80337fe2 Validity Not Before: Feb 9 18:00:25 2026 GMT Not After : Feb 10 18:00:25 2026 GMT Subject: CN=43fea8639a1a87663de0cdcaed5fd6dfc36c30e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3c:71:41:ce:46:f1:5f:c1:6d:34:88:39:a5: f5:06:a4:74:dc:9a:e4:2f:26:28:93:44:a4:1d:c0: 57:08:61:14:2b:f5:04:95:86:da:d3:6f:53:35:79: c0:8d:66:a6:e2:3a:c2:c9:a5:99:82:98:75:d4:36: a0:b2:a7:c7:a5:f4:00:16:50:cc:19:25:e4:52:16: f8:bf:3e:66:e2:18:bf:39:d1:55:ac:be:9a:21:cc: 5f:a9:d4:d1:26:2b:e6:02:a3:cd:d2:ea:91:21:a4: 2f:a8:02:bb:ad:59:41:6b:67:38:06:78:69:ac:8a: cd:ca:cf:aa:d6:18:cb:99:d8:31:d5:84:e5:f8:27: a7:05:b0:d2:ee:00:2e:6f:ed:f2:31:f2:67:de:96: 99:c8:c8:ae:96:72:9e:ad:38:13:cc:74:af:80:3f: 2b:7a:3d:c1:7d:4c:5d:fe:60:f1:fa:77:66:c7:a4: ef:35:fe:42:4e:1b:b2:bd:09:1f:b7:8e:7a:e3:cd: 85:c2:36:21:66:49:3b:12:c3:8a:62:dd:3c:8e:66: 74:3c:c3:a4:ca:4a:31:d9:db:e6:2d:38:73:10:5a: 18:4f:d5:89:8f:08:bc:9e:8c:f9:5d:dd:de:b5:91: 10:0c:67:35:45:78:e9:27:26:e6:a3:d5:c7:f5:e7: 6d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FE:A8:63:9A:1A:87:66:3D:E0:CD:CA:ED:5F:D6:DF:C3:6C:30:E5 X509v3 Authority Key Identifier: keyid:56:EA:A5:16:40:22:6E:88:3C:C0:89:28:A4:E0:26:1A:80:33:7F:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuqlFkAibog8wIkopOAmGoAzf-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/70886a-8d76-4956-ad9c-e9ad3c369ec5/1/VuqlFkAibog8wIkopOAmGoAzf-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:87:67:71:90:20:0c:67:9d:98:e1:51:c4:25:15:30:a9:e4: 43:38:9a:86:0e:30:0a:a2:2f:f1:30:6b:ff:d7:dd:cc:4d:8c: 12:1f:b3:3c:5e:9e:4f:34:b9:7c:61:39:ac:fd:b8:19:67:c7: 6b:10:2f:6d:69:7d:e8:5a:2c:40:30:e0:99:34:46:b7:22:c9: 29:d2:be:7f:1a:1b:c3:f2:33:a8:1f:8a:c2:ef:b1:d2:61:4a: d0:7d:ce:6f:a1:95:4b:18:53:02:5c:c8:a1:fa:21:72:94:57: 3a:05:ea:c1:8d:03:6f:f5:e1:50:b7:d9:9e:56:42:22:f9:60: 97:09:71:fa:59:dd:0c:ce:63:69:50:6f:6b:f3:66:ae:bc:73: f7:d3:47:5e:65:90:fb:39:ac:67:4b:d7:bb:50:dd:79:a9:90: 64:bb:ec:0f:16:2c:05:5b:e1:c3:2d:c9:75:fb:e8:e9:59:cc: 84:fe:d4:f4:fd:00:b2:30:11:e2:b7:2f:32:7e:ea:96:e4:0c: 8e:d8:ef:c3:08:7b:1a:b8:8c:fd:76:ac:6c:1b:11:c0:7e:79: 5f:65:1a:20:78:41:cf:28:dd:d8:93:68:b2:d6:14:0f:11:1d: 92:d5:51:36:6d:49:9c:40:1f:47:7e:05:87:17:29:50:33:26: 25:c9:8f:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj9YEN96gtN504nOQcQ9QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZWFhNTE2NDAyMjZlODgzY2MwODkyOGE0ZTAyNjFhODAz MzdmZTIwHhcNMjYwMjA5MTgwMDI1WhcNMjYwMjEwMTgwMDI1WjAzMTEwLwYDVQQD Eyg0M2ZlYTg2MzlhMWE4NzY2M2RlMGNkY2FlZDVmZDZkZmMzNmMzMGU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTxxQc5G8V/BbTSIOaX1BqR03Jrk LyYok0SkHcBXCGEUK/UElYba029TNXnAjWam4jrCyaWZgph11DagsqfHpfQAFlDM GSXkUhb4vz5m4hi/OdFVrL6aIcxfqdTRJivmAqPN0uqRIaQvqAK7rVlBa2c4Bnhp rIrNys+q1hjLmdgx1YTl+CenBbDS7gAub+3yMfJn3paZyMiulnKerTgTzHSvgD8r ej3BfUxd/mDx+ndmx6TvNf5CThuyvQkft456482FwjYhZkk7EsOKYt08jmZ0PMOk ykox2dvmLThzEFoYT9WJjwi8noz5Xd3etZEQDGc1RXjpJybmo9XH9edtLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEP+qGOaGodmPeDNyu1f1t/DbDDlMB8GA1UdIwQY MBaAFFbqpRZAIm6IPMCJKKTgJhqAM3/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnVxbEZrQWlib2c4d0lrb3BPQW1Hb0F6Zi1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83MDg4NmEtOGQ3Ni00OTU2LWFkOWMt ZTlhZDNjMzY5ZWM1LzEvVnVxbEZrQWlib2c4d0lrb3BPQW1Hb0F6Zi1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83MDg4NmEtOGQ3Ni00OTU2LWFkOWMtZTlhZDNjMzY5ZWM1 LzEvVnVxbEZrQWlib2c4d0lrb3BPQW1Hb0F6Zi1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnIdncZAg DGedmOFRxCUVMKnkQziahg4wCqIv8TBr/9fdzE2MEh+zPF6eTzS5fGE5rP24GWfH axAvbWl96FosQDDgmTRGtyLJKdK+fxobw/IzqB+Kwu+x0mFK0H3Ob6GVSxhTAlzI ofohcpRXOgXqwY0Db/XhULfZnlZCIvlglwlx+lndDM5jaVBva/Nmrrxz99NHXmWQ +zmsZ0vXu1DdeamQZLvsDxYsBVvhwy3Jdfvo6VnMhP7U9P0AsjAR4rcvMn7qluQM jtjvwwh7GriM/XasbBsRwH55X2UaIHhBzyjd2JNostYUDxEdktVRNm1JnEAfR34F hxcpUDMmJcmPcw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:35 2026 by rpki-client