This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json) Hash identifier: NP2zAik9Bwsd7jR+NvkP2bA5UKRT9KJmRvqjvdRFCD4= Subject key identifier: EC:F1:A3:E5:65:68:8D:50:02:9E:6F:38:37:81:7A:61:7D:56:55:F8 Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb Certificate serial: 019C1D5EF1CC639F39B63C66D643ECC9D67B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft Manifest number: 17FF Signing time: Mon 02 Feb 2026 08:01:27 +0000 Manifest this update: Mon 02 Feb 2026 08:01:27 +0000 Manifest next update: Tue 03 Feb 2026 08:01:27 +0000 Files and hashes: 1: n7K--VygPD5bxJ2Nh4nbk7uTznw.roa (hash: fTr5X92PZm2YQIc6I3zwmHgOyHHHYgDg02uY9i85scE=) 2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: bMCCCOvfp+ImiwkPvpQxF+BV+3SxnKutLTUaufrsg10=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:5e:f1:cc:63:9f:39:b6:3c:66:d6:43:ec:c9:d6:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb Validity Not Before: Feb 2 08:01:27 2026 GMT Not After : Feb 3 08:01:27 2026 GMT Subject: CN=ecf1a3e565688d50029e6f3837817a617d5655f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:cf:80:e8:e7:a6:81:49:b8:53:ca:e8:d3:d9: 7a:c1:81:a2:66:e4:68:ae:50:b6:46:a4:76:e1:b4: 66:c0:03:2f:bb:0d:b5:43:75:f8:f7:63:e3:7f:64: 78:c9:32:f4:2d:fa:24:35:ee:21:f0:d0:0d:2f:d9: b5:94:59:eb:f2:59:b2:cf:e9:0c:ae:a0:a2:fc:ee: 54:a1:0b:d6:2c:1c:a0:18:17:e5:60:bb:0d:74:44: 53:ad:24:bb:88:8e:2f:bc:45:72:fb:0e:c0:35:b7: 74:1e:0b:36:67:96:d5:84:81:fa:3a:a3:09:0d:b7: bd:fe:84:da:7f:6c:95:b2:be:26:3b:bb:59:9d:62: 6b:38:e4:11:3e:92:62:e8:d8:d4:30:cf:01:62:cb: c1:e5:cf:4c:88:81:83:32:ce:27:43:8e:00:55:27: cb:94:41:32:99:c0:11:71:82:6d:3e:7e:de:ce:5b: a8:53:f5:47:84:b3:56:76:ad:f2:09:72:04:9e:e8: 9d:f1:e5:79:c4:86:b7:0e:38:5d:ba:6b:fb:55:4b: 76:64:65:91:d9:22:36:c6:b4:64:d9:db:02:c1:5d: ee:b7:da:88:79:07:54:77:ff:a7:98:49:c1:36:cb: 67:e6:5c:25:2d:a7:86:ca:e3:b6:de:6b:40:da:ca: 77:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F1:A3:E5:65:68:8D:50:02:9E:6F:38:37:81:7A:61:7D:56:55:F8 X509v3 Authority Key Identifier: keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e4:b2:f3:d2:5a:75:3e:69:b6:ac:4c:61:e4:b7:9d:65:1c: e7:70:96:b3:bf:9c:7c:80:13:e1:51:77:32:6b:9d:0b:bd:48: 82:d4:11:44:03:c5:01:5b:d1:1e:9f:67:6b:f9:08:62:17:58: 5b:f1:a2:d0:0a:f5:2a:50:11:10:cf:1a:f5:d1:69:fa:06:7c: 89:53:d4:c9:4b:7a:0b:08:fa:a8:e6:44:17:5f:85:e2:b1:f3: 0c:6f:db:6d:fe:0d:49:c0:c7:ec:3f:37:b4:e6:b5:83:5b:2a: 08:a0:fc:db:85:f0:ee:75:62:f4:f0:a0:51:f9:51:b9:cf:6e: 53:6a:69:42:cc:37:14:bf:f4:6a:c2:e0:08:ca:aa:b9:7a:e4: 40:75:18:c9:ad:5c:e5:38:2a:59:ac:57:50:68:20:79:1a:89: 4e:99:e5:ef:ec:07:a9:25:5f:d4:23:4b:25:23:e0:49:0d:bc: ef:7b:99:a5:4e:56:ee:4f:94:97:30:bc:82:41:38:67:92:69: f7:19:f6:51:1a:02:4f:34:0e:11:bf:37:38:26:d9:85:27:d8: 8c:ca:76:a0:27:1d:5c:38:d1:6e:ae:3e:0d:ac:04:ae:69:55: fe:e0:c8:06:68:58:4a:f4:69:7f:08:86:64:b7:2b:a1:7f:24: 3b:31:b9:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdXvHMY585tjxm1kPsydZ7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMmVlZmE3YzYwNDhlNmEwYTVhNjVjMDdlM2UyNTUzNDFl MTQzYmIwHhcNMjYwMjAyMDgwMTI3WhcNMjYwMjAzMDgwMTI3WjAzMTEwLwYDVQQD EyhlY2YxYTNlNTY1Njg4ZDUwMDI5ZTZmMzgzNzgxN2E2MTdkNTY1NWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6c+A6OemgUm4U8ro09l6wYGiZuRo rlC2RqR24bRmwAMvuw21Q3X492Pjf2R4yTL0LfokNe4h8NANL9m1lFnr8lmyz+kM rqCi/O5UoQvWLBygGBflYLsNdERTrSS7iI4vvEVy+w7ANbd0Hgs2Z5bVhIH6OqMJ Dbe9/oTaf2yVsr4mO7tZnWJrOOQRPpJi6NjUMM8BYsvB5c9MiIGDMs4nQ44AVSfL lEEymcARcYJtPn7ezluoU/VHhLNWdq3yCXIEnuid8eV5xIa3Djhdumv7VUt2ZGWR 2SI2xrRk2dsCwV3ut9qIeQdUd/+nmEnBNstn5lwlLaeGyuO23mtA2sp3KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOzxo+VlaI1QAp5vODeBemF9VlX4MB8GA1UdIwQY MBaAFL8u76fGBI5qClplwH4+JVNB4UO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt MjFlYzY1NjVjOWJlLzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl LzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuSy89Ja dT5ptqxMYeS3nWUc53CWs7+cfIAT4VF3MmudC71IgtQRRAPFAVvRHp9na/kIYhdY W/Gi0Ar1KlAREM8a9dFp+gZ8iVPUyUt6Cwj6qOZEF1+F4rHzDG/bbf4NScDH7D83 tOa1g1sqCKD824Xw7nVi9PCgUflRuc9uU2ppQsw3FL/0asLgCMqquXrkQHUYya1c 5TgqWaxXUGggeRqJTpnl7+wHqSVf1CNLJSPgSQ2873uZpU5W7k+UlzC8gkE4Z5Jp 9xn2URoCTzQOEb83OCbZhSfYjMp2oCcdXDjRbq4+DawErmlV/uDIBmhYSvRpfwiG ZLcroX8kOzG5HA== -----END CERTIFICATE-----Generated at Mon Feb 2 15:48:35 2026 by rpki-client