This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft File: vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft (raw, json) Hash identifier: NpQotBQHwkqGCWG2ucJ1CjALMHuYZp2cvtKFdJr+VOA= Subject key identifier: 40:57:44:80:35:F4:E2:6E:E6:9E:CA:EB:E4:C6:F2:B4:74:A0:A8:88 Authority key identifier: BC:40:38:04:A8:8B:D1:9D:ED:A0:4F:B9:35:41:BF:D0:D0:C6:54:47 Certificate issuer: /CN=bc403804a88bd19deda04fb93541bfd0d0c65447 Certificate serial: 019C4359124112FAEB9D0A6610E4C0B93A69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEA4BKiL0Z3toE-5NUG_0NDGVEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft Manifest number: 27 Signing time: Mon 09 Feb 2026 17:00:36 +0000 Manifest this update: Mon 09 Feb 2026 17:00:36 +0000 Manifest next update: Tue 10 Feb 2026 17:00:36 +0000 Files and hashes: 1: vEA4BKiL0Z3toE-5NUG_0NDGVEc.crl (hash: V9FkEV6Nrw+jqjC89/TqRcj/AoSSTsoE1vNQVXNg/Eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft rsync://rpki.ripe.net/repository/DEFAULT/vEA4BKiL0Z3toE-5NUG_0NDGVEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:12:41:12:fa:eb:9d:0a:66:10:e4:c0:b9:3a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc403804a88bd19deda04fb93541bfd0d0c65447 Validity Not Before: Feb 9 17:00:36 2026 GMT Not After : Feb 10 17:00:36 2026 GMT Subject: CN=4057448035f4e26ee69ecaebe4c6f2b474a0a888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ce:f5:90:95:aa:b3:a7:c9:d7:07:b1:c2:73: 4a:97:54:b4:67:a1:04:6d:2e:a0:d1:a0:4e:e4:4a: 5b:45:ed:f7:c3:2d:d6:9d:0e:84:44:4c:0c:c7:f9: 75:29:0e:21:55:1a:a0:2b:72:76:f9:9f:57:b8:b7: ca:d7:75:38:5c:e8:a5:33:8e:b0:49:59:fd:03:df: ea:ac:f9:80:18:9d:15:ad:db:bf:da:3c:2d:08:1e: e6:5b:ef:3a:f1:26:16:6f:e1:5b:d4:65:0c:86:35: 8b:9a:ab:02:85:5d:06:f3:41:4e:ab:f9:56:75:a0: 47:3c:b1:10:7c:0f:c3:39:a3:df:df:a5:c2:62:e4: 4d:30:b9:46:3c:22:bf:bf:c1:d5:70:63:9c:06:76: fd:d2:33:67:64:17:e0:ab:63:90:4f:8e:57:01:df: c6:49:3b:22:9d:48:16:e9:e5:0b:76:ee:46:86:6e: 61:bc:97:7c:47:11:6d:bf:6e:5f:45:ed:75:82:17: ee:a6:c1:3a:96:bf:66:6f:b0:00:97:cb:7f:00:4d: 82:0a:da:bc:7d:41:2e:0f:3a:8d:08:20:ed:8b:e9: 16:c7:55:30:28:37:f7:7b:27:25:db:8b:df:3e:71: 9e:e9:59:ba:a0:75:ff:c7:7e:f1:d0:09:b9:19:55: ea:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:57:44:80:35:F4:E2:6E:E6:9E:CA:EB:E4:C6:F2:B4:74:A0:A8:88 X509v3 Authority Key Identifier: keyid:BC:40:38:04:A8:8B:D1:9D:ED:A0:4F:B9:35:41:BF:D0:D0:C6:54:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEA4BKiL0Z3toE-5NUG_0NDGVEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8ddbf5-f04a-462e-ae69-b62d6520a237/1/vEA4BKiL0Z3toE-5NUG_0NDGVEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ce:b8:5d:15:78:5c:52:67:52:2b:36:bf:7f:06:42:55:d0: 1e:3e:f9:21:85:dc:83:bc:24:51:f3:8f:af:6a:11:21:28:f1: ad:74:ab:63:61:c7:a5:a2:17:0a:2e:6d:9a:20:1b:eb:64:e4: 10:c0:c7:8d:5a:ee:f8:90:b4:52:b5:1e:86:ea:a6:b5:ee:7c: ba:d0:6c:85:e6:12:d2:a9:c8:fa:7d:f6:1e:09:9f:d9:6c:78: 98:aa:32:b9:69:e2:fa:16:21:5a:10:83:19:07:e9:c5:d6:d8: 44:5e:bd:39:77:07:69:ff:67:25:9e:e5:2a:ce:6f:85:c3:2b: 5a:fd:91:70:6e:ac:79:14:82:26:d8:0e:1f:3f:51:ed:97:39: 1b:9c:4d:52:cb:f7:3b:2d:0f:f5:18:1a:53:06:40:8a:53:6f: 13:1a:2a:08:51:d2:8b:f6:78:98:9a:02:40:5e:57:9b:68:b2: 2c:28:12:a3:40:72:b2:66:28:79:3f:c1:b4:6a:74:54:2b:4b: 8b:cd:5e:33:de:4b:12:71:7b:ef:6c:22:99:0f:2d:91:e0:fb: cb:15:90:f6:a2:91:8a:fc:b0:c9:3f:b4:8e:43:29:e3:f8:20: 9a:f9:61:44:9c:4d:06:44:39:14:54:b5:bc:7a:3e:05:29:df: ce:d7:8c:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWRJBEvrrnQpmEOTAuTppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDAzODA0YTg4YmQxOWRlZGEwNGZiOTM1NDFiZmQwZDBj NjU0NDcwHhcNMjYwMjA5MTcwMDM2WhcNMjYwMjEwMTcwMDM2WjAzMTEwLwYDVQQD Eyg0MDU3NDQ4MDM1ZjRlMjZlZTY5ZWNhZWJlNGM2ZjJiNDc0YTBhODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt871kJWqs6fJ1wexwnNKl1S0Z6EE bS6g0aBO5EpbRe33wy3WnQ6EREwMx/l1KQ4hVRqgK3J2+Z9XuLfK13U4XOilM46w SVn9A9/qrPmAGJ0Vrdu/2jwtCB7mW+868SYWb+Fb1GUMhjWLmqsChV0G80FOq/lW daBHPLEQfA/DOaPf36XCYuRNMLlGPCK/v8HVcGOcBnb90jNnZBfgq2OQT45XAd/G STsinUgW6eULdu5Ghm5hvJd8RxFtv25fRe11ghfupsE6lr9mb7AAl8t/AE2CCtq8 fUEuDzqNCCDti+kWx1UwKDf3eycl24vfPnGe6Vm6oHX/x37x0Am5GVXqTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBXRIA19OJu5p7K6+TG8rR0oKiIMB8GA1UdIwQY MBaAFLxAOASoi9Gd7aBPuTVBv9DQxlRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVBNEJLaUwwWjN0b0UtNU5VR18wTkRHVkVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84ZGRiZjUtZjA0YS00NjJlLWFlNjkt YjYyZDY1MjBhMjM3LzEvdkVBNEJLaUwwWjN0b0UtNU5VR18wTkRHVkVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84ZGRiZjUtZjA0YS00NjJlLWFlNjktYjYyZDY1MjBhMjM3 LzEvdkVBNEJLaUwwWjN0b0UtNU5VR18wTkRHVkVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQM64XRV4 XFJnUis2v38GQlXQHj75IYXcg7wkUfOPr2oRISjxrXSrY2HHpaIXCi5tmiAb62Tk EMDHjVru+JC0UrUehuqmte58utBsheYS0qnI+n32Hgmf2Wx4mKoyuWni+hYhWhCD GQfpxdbYRF69OXcHaf9nJZ7lKs5vhcMrWv2RcG6seRSCJtgOHz9R7Zc5G5xNUsv3 Oy0P9RgaUwZAilNvExoqCFHSi/Z4mJoCQF5Xm2iyLCgSo0BysmYoeT/BtGp0VCtL i81eM95LEnF772wimQ8tkeD7yxWQ9qKRivywyT+0jkMp4/ggmvlhRJxNBkQ5FFS1 vHo+BSnfzteMGA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:34 2026 by rpki-client