This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft File: VRNzP1CmpEqRS5-Pjr941_pOqaA.mft (raw, json) Hash identifier: N+Mr61zLiGV0RLeJ+R2Szq7iCJVd44bDQGdnz3lYaiA= Subject key identifier: 27:FD:0B:25:9C:FE:B2:E9:9E:45:FE:59:88:6B:28:45:F6:79:3E:83 Authority key identifier: 55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0 Certificate issuer: /CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0 Certificate serial: 019C44A2B58C12BF5E658466C5EF134E92AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft Manifest number: 153C Signing time: Mon 09 Feb 2026 23:00:39 +0000 Manifest this update: Mon 09 Feb 2026 23:00:39 +0000 Manifest next update: Tue 10 Feb 2026 23:00:39 +0000 Files and hashes: 1: EbkxoK1QXwqI38zvOWRCOw9jxso.roa (hash: pmUSfoLfwZaf8O7+LH3+yh3+ipYKHNuavjj2SJ+pnpk=) 2: VRNzP1CmpEqRS5-Pjr941_pOqaA.crl (hash: Y2zMy/OyShKYaE1Pjj9Lf98PPFPRG7lCyImTTMrfyYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:b5:8c:12:bf:5e:65:84:66:c5:ef:13:4e:92:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5513733f50a6a44a914b9f8f8ebf78d7fa4ea9a0 Validity Not Before: Feb 9 23:00:39 2026 GMT Not After : Feb 10 23:00:39 2026 GMT Subject: CN=27fd0b259cfeb2e99e45fe59886b2845f6793e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e7:81:2a:c7:20:e1:29:33:53:c1:72:dc:e5: f3:31:96:c9:31:f5:54:bf:70:11:a8:5e:07:bd:1f: 40:95:20:b7:96:7c:d9:e9:94:0b:7f:be:53:8a:2b: 5f:5e:64:7e:99:6e:a1:ac:e2:a1:be:1f:4d:af:51: 8a:d9:d1:32:bc:2d:cb:1d:1c:7a:55:65:05:40:8f: c1:eb:ac:7c:f6:4b:0b:87:d5:66:f9:fc:91:8f:2a: 1d:4e:e7:67:02:b5:2d:bf:d0:38:0a:bf:b4:1f:43: 33:da:72:1c:df:45:06:d2:b4:dc:56:16:a0:ac:5f: e0:d9:1a:9d:75:73:c1:b5:e7:2f:a5:4d:d2:c3:5e: 7d:04:96:98:44:cc:bc:a4:13:4a:cf:35:f1:a4:35: ca:e3:15:cc:57:fc:de:84:d5:91:45:61:ff:cb:7e: 50:5f:3e:5f:b8:e4:33:14:f5:8e:99:4c:e6:74:2f: f7:e0:76:27:98:52:fb:13:d3:17:a9:44:73:71:ba: 27:a8:49:89:fc:42:51:31:5d:8c:ee:1b:90:13:9b: 6f:0d:c8:a1:1e:0a:7b:aa:83:9d:11:48:15:62:b1: ea:30:70:ce:e6:92:dd:d3:44:ea:e5:09:e3:d8:e7: dc:3c:8a:97:b7:8a:a4:e5:66:d5:3e:66:8c:08:03: 06:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FD:0B:25:9C:FE:B2:E9:9E:45:FE:59:88:6B:28:45:F6:79:3E:83 X509v3 Authority Key Identifier: keyid:55:13:73:3F:50:A6:A4:4A:91:4B:9F:8F:8E:BF:78:D7:FA:4E:A9:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRNzP1CmpEqRS5-Pjr941_pOqaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb6ba0-b873-4808-a22f-141b39a199d4/1/VRNzP1CmpEqRS5-Pjr941_pOqaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:cc:31:3a:51:0c:55:94:00:46:6c:da:fb:e9:8f:2e:e0:4b: 73:1d:5e:44:48:d4:fa:67:45:7b:ac:1c:65:b0:da:fd:42:b6: 87:3a:15:87:d8:86:2c:ac:40:72:2b:1c:23:42:51:81:64:3a: dc:bd:62:2a:57:b0:48:fc:03:99:80:fc:70:e3:d4:95:f8:2b: 47:e7:42:73:5e:1b:93:9a:dc:82:af:fa:5c:47:93:b5:8a:be: 99:ac:ea:e9:98:ee:d8:32:cf:51:8e:2b:f8:10:76:05:11:18: 98:05:12:7a:13:d0:26:ff:40:6b:a2:7e:07:45:08:f4:15:87: ec:7b:07:b3:8a:2a:cb:27:5d:e7:2f:58:d6:60:d7:d0:df:82: 3a:18:fa:a9:40:fb:42:ee:12:80:a1:83:76:9f:a0:25:eb:0c: d9:2e:32:f2:b4:82:45:4f:d6:90:c7:66:89:b9:36:c5:53:27: 4f:37:2c:28:e2:97:54:d4:5c:4e:8f:bd:3e:37:dd:b8:62:22: 43:ec:eb:9e:96:2c:ee:54:a9:2c:b5:10:7f:b5:b9:c6:86:9b: 0c:46:27:5f:46:f8:ff:22:26:77:2e:63:71:45:1c:c2:2f:f4: bf:7a:2f:73:ee:50:f7:60:f0:c4:fc:c0:ab:8a:44:29:bf:8a: 44:73:e9:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEorWMEr9eZYRmxe8TTpKuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MTM3MzNmNTBhNmE0NGE5MTRiOWY4ZjhlYmY3OGQ3ZmE0 ZWE5YTAwHhcNMjYwMjA5MjMwMDM5WhcNMjYwMjEwMjMwMDM5WjAzMTEwLwYDVQQD EygyN2ZkMGIyNTljZmViMmU5OWU0NWZlNTk4ODZiMjg0NWY2NzkzZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+eBKscg4SkzU8Fy3OXzMZbJMfVU v3ARqF4HvR9AlSC3lnzZ6ZQLf75TiitfXmR+mW6hrOKhvh9Nr1GK2dEyvC3LHRx6 VWUFQI/B66x89ksLh9Vm+fyRjyodTudnArUtv9A4Cr+0H0Mz2nIc30UG0rTcVhag rF/g2RqddXPBtecvpU3Sw159BJaYRMy8pBNKzzXxpDXK4xXMV/zehNWRRWH/y35Q Xz5fuOQzFPWOmUzmdC/34HYnmFL7E9MXqURzcbonqEmJ/EJRMV2M7huQE5tvDcih Hgp7qoOdEUgVYrHqMHDO5pLd00Tq5Qnj2OfcPIqXt4qk5WbVPmaMCAMGtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCf9CyWc/rLpnkX+WYhrKEX2eT6DMB8GA1UdIwQY MBaAFFUTcz9QpqRKkUufj46/eNf6TqmgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlJOelAxQ21wRXFSUzUtUGpyOTQxX3BPcWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYjZiYTAtYjg3My00ODA4LWEyMmYt MTQxYjM5YTE5OWQ0LzEvVlJOelAxQ21wRXFSUzUtUGpyOTQxX3BPcWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9lYjZiYTAtYjg3My00ODA4LWEyMmYtMTQxYjM5YTE5OWQ0 LzEvVlJOelAxQ21wRXFSUzUtUGpyOTQxX3BPcWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0swxOlEM VZQARmza++mPLuBLcx1eREjU+mdFe6wcZbDa/UK2hzoVh9iGLKxAciscI0JRgWQ6 3L1iKlewSPwDmYD8cOPUlfgrR+dCc14bk5rcgq/6XEeTtYq+mazq6Zju2DLPUY4r +BB2BREYmAUSehPQJv9Aa6J+B0UI9BWH7HsHs4oqyydd5y9Y1mDX0N+COhj6qUD7 Qu4SgKGDdp+gJesM2S4y8rSCRU/WkMdmibk2xVMnTzcsKOKXVNRcTo+9PjfduGIi Q+zrnpYs7lSpLLUQf7W5xoabDEYnX0b4/yImdy5jcUUcwi/0v3ovc+5Q92DwxPzA q4pEKb+KRHPpJQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:19 2026 by rpki-client