This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft File: Vzm709YFZftZWALsfGl-ohq9l-Q.mft (raw, json) Hash identifier: 4Qjhpv0g8ERlxUjJX/B9tdApd3Y+dAbLU4oJBYx7ckg= Subject key identifier: A0:3B:A8:E7:23:75:86:79:B3:18:F8:92:5A:F4:A1:E2:9B:20:14:C5 Authority key identifier: 57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 Certificate issuer: /CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Certificate serial: 019C42468983F9298CEC9917F62063A0312B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft Manifest number: 091E Signing time: Mon 09 Feb 2026 12:00:44 +0000 Manifest this update: Mon 09 Feb 2026 12:00:44 +0000 Manifest next update: Tue 10 Feb 2026 12:00:44 +0000 Files and hashes: 1: Vzm709YFZftZWALsfGl-ohq9l-Q.crl (hash: WthWyNGtqR7+M0aRLUJK4hrd4rMVzD5B6uVXeItbdks=) 2: gng50Ziqb6xrb3gKYd3mPMqKi20.roa (hash: Qgx/fSQr4uTOuIoJO8P5gUwe6l71dGbPdS6w5iyet3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:89:83:f9:29:8c:ec:99:17:f6:20:63:a0:31:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5739bbd3d60565fb595802ec7c697ea21abd97e4 Validity Not Before: Feb 9 12:00:44 2026 GMT Not After : Feb 10 12:00:44 2026 GMT Subject: CN=a03ba8e723758679b318f8925af4a1e29b2014c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:71:c3:4f:99:a0:00:87:d0:63:37:67:ae:94: 03:75:08:2a:a9:74:a2:7d:91:1c:7d:a0:a4:87:bf: af:d2:06:97:e5:58:25:7f:da:8e:3b:5e:58:80:d1: 98:a4:31:8c:63:27:df:10:75:0d:37:62:49:03:99: 97:7f:70:26:23:56:b9:4b:74:d8:a6:e5:e1:1e:fc: 8f:cb:5e:0d:6e:86:07:00:a0:f6:10:7e:5e:19:19: 56:cd:a9:f6:f0:19:cf:f5:93:ab:31:9e:30:1a:81: cc:c6:b4:23:48:78:2e:96:c2:f0:e5:02:e5:d9:d0: d9:a2:7c:fa:1c:8d:25:99:22:33:bb:89:db:3f:09: 92:b9:e0:a6:73:3c:be:0c:cb:36:df:7f:1d:59:9d: 66:1d:f7:d4:4e:e6:8e:2e:18:2d:8d:f9:c6:32:2b: 49:d0:66:8b:af:30:78:1e:da:da:38:46:42:e7:a1: 4f:83:ef:52:23:4d:91:44:29:43:7a:34:16:95:40: fa:a2:96:93:92:07:10:c6:84:cc:33:db:db:2b:4e: c9:14:f9:c1:3c:b8:f4:e3:ea:b2:2e:39:5d:28:d7: 31:fe:72:79:89:10:c3:cc:60:fe:fd:4e:0d:f8:51: 0f:ec:3c:6a:00:56:18:14:a7:33:9a:f4:2a:a5:58: c4:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:3B:A8:E7:23:75:86:79:B3:18:F8:92:5A:F4:A1:E2:9B:20:14:C5 X509v3 Authority Key Identifier: keyid:57:39:BB:D3:D6:05:65:FB:59:58:02:EC:7C:69:7E:A2:1A:BD:97:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vzm709YFZftZWALsfGl-ohq9l-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9a26f1-3ab5-49f6-bc57-5d62959d105b/1/Vzm709YFZftZWALsfGl-ohq9l-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:b0:84:b6:80:80:27:63:a9:bd:72:7d:e0:9a:9e:5d:d9:51: 32:15:10:fb:d8:6a:30:0f:97:b6:8c:15:01:db:2c:55:3a:46: 8b:9a:33:4b:6f:cc:07:47:67:5e:21:6a:d0:73:78:89:d7:21: ec:5a:4c:f3:21:18:44:e4:4b:f9:a3:e3:da:27:c9:10:3a:93: 2d:e5:4c:e9:be:d5:82:e0:b7:d5:04:ba:bd:97:b6:4f:f3:88: f4:d3:57:98:30:3b:73:53:59:e4:4b:2a:b1:9f:1b:cc:f3:66: 5e:6f:4d:07:00:1f:36:1e:6f:06:c5:63:9d:9a:39:01:32:a9: 6f:e7:cd:03:a4:de:22:e4:69:b5:24:aa:bc:e1:fc:9e:e9:f8: cb:04:02:d1:a0:99:10:5f:ab:d4:9a:e4:12:31:9b:47:60:d4: 6b:a1:f2:72:35:52:17:1a:4a:0a:09:2f:c9:9c:93:4d:1a:ff: 41:dc:d1:2b:88:fd:64:c5:df:8e:57:47:36:19:cf:82:c9:f3: 11:10:bc:b8:9e:dd:39:62:c5:53:95:bc:bf:17:b3:99:ba:31: d6:8b:cd:82:a2:d4:de:d3:6e:a1:4b:b3:bb:17:8a:39:37:58: 3c:c0:c4:49:f0:9f:5f:28:46:d0:94:37:6a:37:eb:4e:79:c4: 12:8f:ae:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRomD+SmM7JkX9iBjoDErMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzliYmQzZDYwNTY1ZmI1OTU4MDJlYzdjNjk3ZWEyMWFi ZDk3ZTQwHhcNMjYwMjA5MTIwMDQ0WhcNMjYwMjEwMTIwMDQ0WjAzMTEwLwYDVQQD EyhhMDNiYThlNzIzNzU4Njc5YjMxOGY4OTI1YWY0YTFlMjliMjAxNGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXHDT5mgAIfQYzdnrpQDdQgqqXSi fZEcfaCkh7+v0gaX5Vglf9qOO15YgNGYpDGMYyffEHUNN2JJA5mXf3AmI1a5S3TY puXhHvyPy14NboYHAKD2EH5eGRlWzan28BnP9ZOrMZ4wGoHMxrQjSHgulsLw5QLl 2dDZonz6HI0lmSIzu4nbPwmSueCmczy+DMs2338dWZ1mHffUTuaOLhgtjfnGMitJ 0GaLrzB4HtraOEZC56FPg+9SI02RRClDejQWlUD6opaTkgcQxoTMM9vbK07JFPnB PLj04+qyLjldKNcx/nJ5iRDDzGD+/U4N+FEP7DxqAFYYFKczmvQqpVjEtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKA7qOcjdYZ5sxj4klr0oeKbIBTFMB8GA1UdIwQY MBaAFFc5u9PWBWX7WVgC7HxpfqIavZfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTct NWQ2Mjk1OWQxMDViLzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS85YTI2ZjEtM2FiNS00OWY2LWJjNTctNWQ2Mjk1OWQxMDVi LzEvVnptNzA5WUZaZnRaV0FMc2ZHbC1vaHE5bC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbCEtoCA J2OpvXJ94JqeXdlRMhUQ+9hqMA+XtowVAdssVTpGi5ozS2/MB0dnXiFq0HN4idch 7FpM8yEYRORL+aPj2ifJEDqTLeVM6b7VguC31QS6vZe2T/OI9NNXmDA7c1NZ5Esq sZ8bzPNmXm9NBwAfNh5vBsVjnZo5ATKpb+fNA6TeIuRptSSqvOH8nun4ywQC0aCZ EF+r1JrkEjGbR2DUa6HycjVSFxpKCgkvyZyTTRr/QdzRK4j9ZMXfjldHNhnPgsnz ERC8uJ7dOWLFU5W8vxezmbox1ovNgqLU3tNuoUuzuxeKOTdYPMDESfCfXyhG0JQ3 ajfrTnnEEo+uhQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:05 2026 by rpki-client