This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft File: VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json) Hash identifier: 7l80y1MXyPk/HexHcbRuazWoO2IxTQuBE9ltzwZAiF0= Subject key identifier: 0A:39:0D:78:D8:3B:54:E4:2B:24:26:01:A0:83:64:92:BF:5D:24:67 Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C Certificate issuer: /CN=54ba45608c008224ff23268abe03e04cd318009c Certificate serial: 019C4246466B0B6BFD26EBA7458C5759CC70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft Manifest number: 066B Signing time: Mon 09 Feb 2026 12:00:27 +0000 Manifest this update: Mon 09 Feb 2026 12:00:27 +0000 Manifest next update: Tue 10 Feb 2026 12:00:27 +0000 Files and hashes: 1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: ECtMPVMqqg2CgkPSQ6BipTI4388upqVCqPZPPoxDFDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:46:6b:0b:6b:fd:26:eb:a7:45:8c:57:59:cc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c Validity Not Before: Feb 9 12:00:27 2026 GMT Not After : Feb 10 12:00:27 2026 GMT Subject: CN=0a390d78d83b54e42b242601a0836492bf5d2467 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:38:d7:6e:9c:ba:e8:f1:59:7e:2b:fa:39:ee: 4c:37:5f:ca:ca:82:ae:0f:74:50:df:a9:50:86:b3: 76:70:d6:07:79:de:cd:d0:2c:c1:8d:e3:6a:87:0c: 53:5e:e1:fe:fc:38:7b:d3:7c:28:0e:a1:d5:e0:63: 3c:4b:a7:14:c2:eb:51:de:5d:d9:a9:95:ee:7b:15: fd:b6:4c:e6:4d:26:8c:ad:db:75:b1:bd:8d:75:82: a5:e8:f7:77:1f:b4:19:84:16:fb:ff:b6:bc:e5:ea: 6d:fe:a8:9d:03:f4:8b:8b:b8:02:7f:da:74:25:19: 4f:57:4e:3a:73:27:a7:2f:f7:2a:1a:bd:8f:ca:dd: 81:3b:0d:8c:df:6f:82:24:c1:a6:2b:ea:21:0c:7e: d3:ca:50:8c:c9:a7:82:59:1a:3d:c4:ba:62:34:6a: ba:e9:a4:0a:7e:db:7d:f6:ae:14:47:88:4a:e3:fd: e2:57:e5:7a:83:b9:49:ac:e8:e9:6a:17:d4:a2:00: f3:c5:e6:7c:72:89:78:ff:2c:29:9b:3f:73:b3:b7: f0:65:cf:24:19:54:8d:a6:6f:25:cb:65:db:eb:35: 53:d2:39:b1:68:50:1a:38:61:d6:a6:91:43:5f:75: 5c:d8:88:34:31:23:fb:64:8f:7b:e9:11:14:7a:5f: 69:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:39:0D:78:D8:3B:54:E4:2B:24:26:01:A0:83:64:92:BF:5D:24:67 X509v3 Authority Key Identifier: keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:0d:8f:c8:19:4e:8c:40:38:cf:30:ee:c3:ff:71:66:16:ed: 75:c8:8e:17:07:15:ef:e4:bc:22:94:d7:37:cf:5b:91:b2:f6: a2:d1:1a:c5:a6:f3:65:4c:cb:df:67:60:5b:ee:20:c0:ca:83: 09:a0:59:36:b5:56:ca:38:40:bd:c1:74:24:9c:c5:6a:55:30: 58:41:04:cf:49:fa:ba:de:93:30:f5:a4:ce:08:f8:08:b0:0e: 57:6e:e6:12:4c:76:8f:d7:00:0e:fb:48:37:90:c9:9e:e1:9e: f6:96:60:9e:3f:96:eb:61:b7:ec:e7:2c:b0:b2:1e:3c:42:7f: 09:0e:3a:59:42:ce:2f:fe:5a:13:14:f7:3b:4c:cd:aa:00:6d: d3:04:df:fa:ae:e7:de:51:33:80:7c:da:32:08:cb:b9:9e:d9: 9b:f0:82:26:b2:19:c4:7e:f9:9a:45:18:ec:34:e0:9f:9b:a6: 21:81:11:be:8c:36:2f:78:ab:e3:53:a9:49:64:90:38:2b:a4: e4:e8:40:e2:17:65:a3:ae:84:7f:16:50:ca:c1:52:f3:ad:32: eb:9f:54:d1:59:ca:36:82:e6:83:74:f5:d5:16:3e:5d:f4:c8: 96:ca:a1:f3:a0:35:68:3c:2b:3f:df:7e:b4:f7:2a:89:25:3c: 9b:10:41:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkZrC2v9JuunRYxXWcxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YmE0NTYwOGMwMDgyMjRmZjIzMjY4YWJlMDNlMDRjZDMx ODAwOWMwHhcNMjYwMjA5MTIwMDI3WhcNMjYwMjEwMTIwMDI3WjAzMTEwLwYDVQQD EygwYTM5MGQ3OGQ4M2I1NGU0MmIyNDI2MDFhMDgzNjQ5MmJmNWQyNDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjjXbpy66PFZfiv6Oe5MN1/KyoKu D3RQ36lQhrN2cNYHed7N0CzBjeNqhwxTXuH+/Dh703woDqHV4GM8S6cUwutR3l3Z qZXuexX9tkzmTSaMrdt1sb2NdYKl6Pd3H7QZhBb7/7a85ept/qidA/SLi7gCf9p0 JRlPV046cyenL/cqGr2Pyt2BOw2M32+CJMGmK+ohDH7TylCMyaeCWRo9xLpiNGq6 6aQKftt99q4UR4hK4/3iV+V6g7lJrOjpahfUogDzxeZ8col4/ywpmz9zs7fwZc8k GVSNpm8ly2Xb6zVT0jmxaFAaOGHWppFDX3Vc2Ig0MSP7ZI976REUel9pNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAo5DXjYO1TkKyQmAaCDZJK/XSRnMB8GA1UdIwQY MBaAFFS6RWCMAIIk/yMmir4D4EzTGACcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkxwRllJd0FnaVRfSXlhS3ZnUGdUTk1ZQUp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kYjZlZmMtMzg4YS00OTliLWFmYzMt NjA4NDZkZjg4OTQ1LzEvVkxwRllJd0FnaVRfSXlhS3ZnUGdUTk1ZQUp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kYjZlZmMtMzg4YS00OTliLWFmYzMtNjA4NDZkZjg4OTQ1 LzEvVkxwRllJd0FnaVRfSXlhS3ZnUGdUTk1ZQUp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQ2PyBlO jEA4zzDuw/9xZhbtdciOFwcV7+S8IpTXN89bkbL2otEaxabzZUzL32dgW+4gwMqD CaBZNrVWyjhAvcF0JJzFalUwWEEEz0n6ut6TMPWkzgj4CLAOV27mEkx2j9cADvtI N5DJnuGe9pZgnj+W62G37OcssLIePEJ/CQ46WULOL/5aExT3O0zNqgBt0wTf+q7n 3lEzgHzaMgjLuZ7Zm/CCJrIZxH75mkUY7DTgn5umIYERvow2L3ir41OpSWSQOCuk 5OhA4hdlo66EfxZQysFS860y659U0VnKNoLmg3T11RY+XfTIlsqh86A1aDwrP99+ tPcqiSU8mxBB6w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:55 2026 by rpki-client