This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json) Hash identifier: GZJl+UYPwXILKJk9wzivUGttiz9v9hjQdCzTfLtU5kw= Subject key identifier: 28:56:14:7E:C9:F0:45:BA:72:6D:29:7F:EE:4B:08:DB:FE:31:92:E3 Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb Certificate serial: 019C43FE32C7E5AA4C956F088A7C210D2260 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft Manifest number: 08F2 Signing time: Mon 09 Feb 2026 20:00:58 +0000 Manifest this update: Mon 09 Feb 2026 20:00:58 +0000 Manifest next update: Tue 10 Feb 2026 20:00:58 +0000 Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: /ia4s76PRp1sMFHIreEdxIfz4kUC9YQxC3FEJVz+2sU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:32:c7:e5:aa:4c:95:6f:08:8a:7c:21:0d:22:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb Validity Not Before: Feb 9 20:00:58 2026 GMT Not After : Feb 10 20:00:58 2026 GMT Subject: CN=2856147ec9f045ba726d297fee4b08dbfe3192e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:38:7e:c7:fb:73:4d:c7:a0:be:c0:cb:74:63: 33:ff:98:63:e4:02:63:70:e9:69:66:7e:6a:b4:5d: 8e:c4:46:ae:a7:d1:8f:d1:05:58:20:68:92:49:d4: f1:c3:81:12:4a:45:13:ee:3d:21:1d:a8:69:58:89: fe:0d:a0:9f:42:1c:3d:e3:c8:d9:b2:77:7c:b6:71: c8:d8:93:96:23:2b:5a:73:bb:83:33:f7:ff:09:84: 8a:b4:3d:5c:18:0a:d9:7b:93:5e:1b:d5:3a:00:46: 2f:8a:56:01:74:2a:f8:a2:a5:ba:20:b5:97:99:e4: 83:d3:a2:17:ed:a6:fe:13:ef:db:2e:77:cc:af:6b: 5b:ff:08:07:4d:b5:f4:1c:2c:c7:5f:79:36:61:13: c5:4d:20:70:05:16:5c:83:9a:e3:a1:c2:af:77:06: 59:d6:31:ac:8d:4e:45:c6:ec:62:3d:e8:9e:f7:cf: 4e:fd:b4:15:d6:c8:4f:6f:af:af:13:a9:45:f7:6b: a9:af:46:b7:80:a4:de:37:7d:d7:d1:78:0e:4c:3f: 43:1b:96:1b:63:9f:50:97:af:48:c9:83:ad:f8:7a: 40:7b:d1:c7:9d:a6:31:84:c2:d8:14:dc:d1:9a:1b: 8d:d5:a0:45:43:94:5a:7c:7d:79:98:df:cf:bd:ee: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:56:14:7E:C9:F0:45:BA:72:6D:29:7F:EE:4B:08:DB:FE:31:92:E3 X509v3 Authority Key Identifier: keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:59:dc:e3:3c:e3:19:a1:0d:a3:05:83:ef:6a:28:fb:48:dc: 8a:1a:50:28:00:67:e2:5b:c9:4d:f5:87:c6:9d:15:f3:c9:c4: 44:f6:f5:95:6e:78:c4:56:c6:99:32:8d:d7:d7:8c:ce:c6:78: 0f:82:48:95:3f:db:1f:91:d2:ad:2d:6d:a7:e5:fd:b1:8b:e1: 9a:9d:87:9f:ac:10:5e:5b:55:3e:74:f7:42:6c:85:70:80:47: f1:b1:fe:8f:a4:15:48:2d:86:92:62:7e:be:74:bb:9b:2e:b2: 7f:44:35:f5:5f:ff:f2:f4:e6:b1:05:b7:c8:77:e8:6d:68:88: 5c:e1:f1:9b:ef:de:50:01:ac:a6:58:d7:d7:4c:61:3b:0e:17: 22:56:2f:c7:0e:c2:16:62:03:7e:bf:ad:3a:b8:52:8b:08:7b: a6:f9:e8:e8:7a:ab:a6:19:16:55:5a:b0:a5:16:25:ef:b7:56: a9:6b:d5:7f:80:59:83:28:49:1e:c6:f9:32:8f:d6:8c:77:1e: ba:40:eb:29:3d:0c:4f:05:83:e3:2d:f1:79:24:bb:6a:1b:44: 6b:bf:f0:1d:97:50:3f:b8:2a:aa:93:66:d0:39:69:8f:5c:9d: fe:4d:72:83:4e:3d:8c:47:84:32:e8:05:99:7a:92:8a:3f:3d: 1d:01:8f:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/jLH5apMlW8IinwhDSJgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMDVlYWM3YzNhZjUzNTUxYzllNjIzNjUzZGQzYWQ3ZGYx NTU0YmIwHhcNMjYwMjA5MjAwMDU4WhcNMjYwMjEwMjAwMDU4WjAzMTEwLwYDVQQD EygyODU2MTQ3ZWM5ZjA0NWJhNzI2ZDI5N2ZlZTRiMDhkYmZlMzE5MmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Dh+x/tzTcegvsDLdGMz/5hj5AJj cOlpZn5qtF2OxEaup9GP0QVYIGiSSdTxw4ESSkUT7j0hHahpWIn+DaCfQhw948jZ snd8tnHI2JOWIytac7uDM/f/CYSKtD1cGArZe5NeG9U6AEYvilYBdCr4oqW6ILWX meSD06IX7ab+E+/bLnfMr2tb/wgHTbX0HCzHX3k2YRPFTSBwBRZcg5rjocKvdwZZ 1jGsjU5FxuxiPeie989O/bQV1shPb6+vE6lF92upr0a3gKTeN33X0XgOTD9DG5Yb Y59Ql69IyYOt+HpAe9HHnaYxhMLYFNzRmhuN1aBFQ5RafH15mN/Pve5MRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChWFH7J8EW6cm0pf+5LCNv+MZLjMB8GA1UdIwQY MBaAFL4F6sfDr1NVHJ5iNlPdOtffFVS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iMTkwMWItNWRlOC00NGU1LTlmOTkt Y2ZkYWFjMGE2MmRiLzEvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9iMTkwMWItNWRlOC00NGU1LTlmOTktY2ZkYWFjMGE2MmRi LzEvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVnc4zzj GaENowWD72oo+0jcihpQKABn4lvJTfWHxp0V88nERPb1lW54xFbGmTKN19eMzsZ4 D4JIlT/bH5HSrS1tp+X9sYvhmp2Hn6wQXltVPnT3QmyFcIBH8bH+j6QVSC2GkmJ+ vnS7my6yf0Q19V//8vTmsQW3yHfobWiIXOHxm+/eUAGspljX10xhOw4XIlYvxw7C FmIDfr+tOrhSiwh7pvno6HqrphkWVVqwpRYl77dWqWvVf4BZgyhJHsb5Mo/WjHce ukDrKT0MTwWD4y3xeSS7ahtEa7/wHZdQP7gqqpNm0Dlpj1yd/k1yg049jEeEMugF mXqSij89HQGPuQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:27 2026 by rpki-client