This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json) Hash identifier: qDp5ives5YZDoCiOqZTGWfMsfV935I864QLUwDV37M4= Subject key identifier: FF:AF:5F:14:D5:F0:A8:19:DD:83:34:AA:28:8E:C6:DD:FA:0C:91:52 Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e Certificate serial: 019C42B3FED7C4F021D191D24FE741EF3902 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft Manifest number: 1815 Signing time: Mon 09 Feb 2026 14:00:18 +0000 Manifest this update: Mon 09 Feb 2026 14:00:18 +0000 Manifest next update: Tue 10 Feb 2026 14:00:18 +0000 Files and hashes: 1: V8PCFPrTValkKCiDtwNotmUAoXc.roa (hash: 3Er2ggdCtrhD3DqnQo2BCMQ9XdtanYYog/Rbw/HvLzg=) 2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: EoeUEWhA3u7zdcgp2t9ju3cCE4QLqTyKMxYb11bcsAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:fe:d7:c4:f0:21:d1:91:d2:4f:e7:41:ef:39:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e Validity Not Before: Feb 9 14:00:18 2026 GMT Not After : Feb 10 14:00:18 2026 GMT Subject: CN=ffaf5f14d5f0a819dd8334aa288ec6ddfa0c9152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cd:55:02:12:c3:d7:3d:d2:57:e9:dc:77:c6: 6f:5d:d2:69:a0:4c:b7:a9:11:83:d8:d6:dc:ee:20: c2:f1:bd:91:e4:65:d2:be:04:be:26:38:b6:47:b3: c6:69:5f:c4:4d:65:02:d4:4a:ee:91:84:78:55:c3: 48:f0:0b:f8:be:d8:65:32:0f:49:01:0c:97:07:d7: 56:3e:d4:62:20:fc:32:88:56:4e:5c:c6:23:b3:ae: fd:cc:a4:34:69:f9:35:54:3a:78:4c:46:e0:6c:3d: 94:c7:ee:a7:30:47:a1:76:e7:00:b3:39:6e:26:9d: 8b:91:aa:61:14:b4:5d:8e:af:b2:8a:84:85:3a:38: 20:6a:1f:6d:f3:d3:ee:e0:8f:1d:de:67:f2:87:a7: b4:31:35:1a:70:94:5d:9f:eb:47:4f:00:7c:64:35: dc:81:b9:5f:ec:55:e1:9f:5b:2b:8d:4f:25:a6:25: 88:94:05:a5:c9:9f:6a:32:97:65:d3:c4:ea:3b:bf: b7:9d:62:61:45:f7:1d:3f:98:0c:3f:35:d5:b3:8f: 86:82:dd:e4:68:40:0c:42:12:9b:ad:98:88:15:e3: 0c:89:56:3a:fa:af:bf:4d:20:da:15:40:44:9b:40: bd:cf:6f:db:22:cb:0e:26:7a:4a:c3:74:eb:0f:1f: 58:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AF:5F:14:D5:F0:A8:19:DD:83:34:AA:28:8E:C6:DD:FA:0C:91:52 X509v3 Authority Key Identifier: keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:17:ad:47:6f:94:13:bb:ae:31:cd:0b:6d:f0:92:2b:9f:56: 32:f6:dd:d6:0c:0a:e7:04:d6:a6:d4:20:e3:9c:09:02:e4:6b: aa:19:2e:62:0f:67:cb:59:aa:6f:5f:78:fd:3d:59:c4:0b:29: 54:62:75:82:8d:d3:b5:c4:96:41:e5:c7:5b:10:c7:e8:d4:6b: b3:cc:01:c2:aa:17:c5:2d:c4:10:1d:10:cc:3c:42:16:8e:5a: ff:18:5d:d5:42:38:4c:f9:33:ed:f3:c6:d8:c5:d5:3e:8f:93: 88:39:db:e4:a3:09:ae:f8:32:2f:8f:ba:31:e4:8d:c3:88:ac: 0a:09:ca:70:d3:0f:b2:cd:cd:3d:55:fc:c8:e6:a4:54:34:ab: 99:90:d9:f2:66:95:69:06:24:f4:f6:eb:a7:c1:11:44:7d:21: 6e:e3:cf:1a:08:c7:79:b8:b7:03:fc:ba:5a:cb:e9:74:99:e8: d5:e8:0d:63:e2:7a:9f:82:a2:d0:df:9f:db:5d:7c:7e:c3:bf: b0:9a:2c:eb:da:34:68:82:84:7a:ed:4b:3e:af:87:48:d8:36: 1b:3e:60:d0:c1:b5:fa:38:2a:bf:5e:03:cb:7b:a8:b3:02:bb: 38:35:a5:eb:26:0f:05:ea:03:a4:cc:00:6c:d6:0c:cf:bb:6f: 70:a4:a1:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/7XxPAh0ZHST+dB7zkCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMjBkNDFhZDM1NzBlZDg4OGMzYjlhMzk1ODQzZDI4YzRi ZGU3MGUwHhcNMjYwMjA5MTQwMDE4WhcNMjYwMjEwMTQwMDE4WjAzMTEwLwYDVQQD EyhmZmFmNWYxNGQ1ZjBhODE5ZGQ4MzM0YWEyODhlYzZkZGZhMGM5MTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c1VAhLD1z3SV+ncd8ZvXdJpoEy3 qRGD2Nbc7iDC8b2R5GXSvgS+Jji2R7PGaV/ETWUC1ErukYR4VcNI8Av4vthlMg9J AQyXB9dWPtRiIPwyiFZOXMYjs679zKQ0afk1VDp4TEbgbD2Ux+6nMEehducAszlu Jp2LkaphFLRdjq+yioSFOjggah9t89Pu4I8d3mfyh6e0MTUacJRdn+tHTwB8ZDXc gblf7FXhn1srjU8lpiWIlAWlyZ9qMpdl08TqO7+3nWJhRfcdP5gMPzXVs4+Ggt3k aEAMQhKbrZiIFeMMiVY6+q+/TSDaFUBEm0C9z2/bIssOJnpKw3TrDx9YhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+vXxTV8KgZ3YM0qiiOxt36DJFSMB8GA1UdIwQY MBaAFLwg1BrTVw7YiMO5o5WEPSjEvecOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQt MTM1YzQwMjE3Yjg2LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQtMTM1YzQwMjE3Yjg2 LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvBetR2+U E7uuMc0LbfCSK59WMvbd1gwK5wTWptQg45wJAuRrqhkuYg9ny1mqb194/T1ZxAsp VGJ1go3TtcSWQeXHWxDH6NRrs8wBwqoXxS3EEB0QzDxCFo5a/xhd1UI4TPkz7fPG 2MXVPo+TiDnb5KMJrvgyL4+6MeSNw4isCgnKcNMPss3NPVX8yOakVDSrmZDZ8maV aQYk9Pbrp8ERRH0hbuPPGgjHebi3A/y6WsvpdJno1egNY+J6n4Ki0N+f2118fsO/ sJos69o0aIKEeu1LPq+HSNg2Gz5g0MG1+jgqv14Dy3uoswK7ODWl6yYPBeoDpMwA bNYMz7tvcKShGg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:01 2026 by rpki-client