This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft File: vLlVQVUcebjNWYhuTRK4sTklWsQ.mft (raw, json) Hash identifier: S46ERuMInJYpVDhG7Niov2ba9TaBZotdQEk70+bggfA= Subject key identifier: B9:3A:04:28:47:9F:65:98:E5:E0:CE:04:84:5E:98:1C:5E:91:A2:8C Authority key identifier: BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4 Certificate issuer: /CN=bcb95541551c79b8cd59886e4d12b8b139255ac4 Certificate serial: 019C427D583537297C7604AA3C5C2E8270B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft Manifest number: 15CB Signing time: Mon 09 Feb 2026 13:00:36 +0000 Manifest this update: Mon 09 Feb 2026 13:00:36 +0000 Manifest next update: Tue 10 Feb 2026 13:00:36 +0000 Files and hashes: 1: vLlVQVUcebjNWYhuTRK4sTklWsQ.crl (hash: OlhPpx1EZZAcw3g4aJrJa+y8sfbR5BcAMQjtm3jT/1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:58:35:37:29:7c:76:04:aa:3c:5c:2e:82:70:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb95541551c79b8cd59886e4d12b8b139255ac4 Validity Not Before: Feb 9 13:00:36 2026 GMT Not After : Feb 10 13:00:36 2026 GMT Subject: CN=b93a0428479f6598e5e0ce04845e981c5e91a28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9e:27:8f:71:b9:51:f5:7d:67:86:39:c1:76: 46:89:3a:50:8d:54:5c:a8:1d:36:5f:be:fc:5e:2d: 94:e4:a0:0c:ea:f3:75:35:d9:b3:89:3a:e6:df:91: 4d:d8:16:11:b2:73:dd:a9:7e:c7:81:8d:88:73:eb: c2:f5:27:19:0f:70:e8:b8:3b:80:3c:ce:ab:1e:9e: d8:b5:6b:33:47:ec:82:b2:69:77:93:14:e8:a7:b2: d9:35:5d:1c:3a:33:b5:1e:7b:42:fb:a8:9d:fa:2c: 6e:16:a7:c1:12:23:50:c7:cb:02:c5:9d:d1:31:a9: 9f:00:db:f2:b3:f7:01:0e:9a:d3:1a:f4:5f:1c:c0: a8:10:3d:52:00:2d:6c:95:8a:03:58:61:4e:08:ae: ef:46:bb:94:2a:36:6a:95:0b:9d:4f:a7:21:fe:bd: 64:18:da:96:2e:dc:dc:7b:b4:1d:e1:5c:7a:a6:a6: a6:da:18:d9:79:bc:cb:e5:ea:94:71:32:fe:8d:e5: 32:c2:7d:36:b8:62:30:02:04:5b:45:76:cd:35:7b: dc:08:3a:b0:fa:a2:bd:dc:f3:0b:14:84:45:57:6f: 9a:e8:f1:76:69:68:ab:68:ea:81:c3:ad:7d:54:64: c8:03:85:3a:1c:f6:76:05:e0:9e:8d:a5:1f:40:2e: d7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:3A:04:28:47:9F:65:98:E5:E0:CE:04:84:5E:98:1C:5E:91:A2:8C X509v3 Authority Key Identifier: keyid:BC:B9:55:41:55:1C:79:B8:CD:59:88:6E:4D:12:B8:B1:39:25:5A:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLlVQVUcebjNWYhuTRK4sTklWsQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6694a-28d6-4e16-9d11-6109c738ebf6/1/vLlVQVUcebjNWYhuTRK4sTklWsQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:75:3a:0e:74:74:54:69:21:23:b2:81:f3:fe:f7:f2:82:71: 62:63:2e:5e:65:c5:60:1d:00:22:49:b5:4e:b1:99:b5:82:82: d8:8d:18:94:ac:7d:d8:ff:7f:5c:0b:5d:a3:5f:6e:ff:da:01: 46:c7:0d:71:27:bc:17:11:92:44:10:43:af:10:7f:a2:b3:a8: 11:74:7f:fd:99:0b:c2:bd:79:5f:be:68:da:52:d8:38:2d:8a: ef:e2:50:39:8a:60:44:bc:9e:0a:6e:1e:f0:87:a9:c9:80:0a: 28:75:21:97:40:a8:e7:9d:df:5d:d8:da:56:1f:ec:d1:70:32: 11:21:a0:9b:c2:44:50:c1:92:85:96:5b:47:ea:ea:f1:fb:ee: b9:a7:d1:fa:9e:7e:2a:bc:8c:c0:4f:89:d0:b6:5f:b4:1d:4e: af:14:f5:ca:22:c1:55:76:7b:33:1d:7c:7c:48:59:db:70:59: 5f:2b:ae:de:f1:d3:20:e1:44:1f:37:97:b9:34:73:a2:4e:67: cb:36:80:5f:91:fc:ca:75:fd:c6:a9:51:5b:19:99:b5:01:49: 3a:7c:9f:ee:88:9c:d0:1d:0c:2a:a5:fd:c1:48:3f:08:6e:e5: cc:d8:ac:6c:79:37:e2:8a:0b:1f:a6:85:94:5a:33:71:f4:a8: cc:28:cb:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVg1Nyl8dgSqPFwugnCzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYjk1NTQxNTUxYzc5YjhjZDU5ODg2ZTRkMTJiOGIxMzky NTVhYzQwHhcNMjYwMjA5MTMwMDM2WhcNMjYwMjEwMTMwMDM2WjAzMTEwLwYDVQQD EyhiOTNhMDQyODQ3OWY2NTk4ZTVlMGNlMDQ4NDVlOTgxYzVlOTFhMjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZ4nj3G5UfV9Z4Y5wXZGiTpQjVRc qB02X778Xi2U5KAM6vN1NdmziTrm35FN2BYRsnPdqX7HgY2Ic+vC9ScZD3DouDuA PM6rHp7YtWszR+yCsml3kxTop7LZNV0cOjO1HntC+6id+ixuFqfBEiNQx8sCxZ3R MamfANvys/cBDprTGvRfHMCoED1SAC1slYoDWGFOCK7vRruUKjZqlQudT6ch/r1k GNqWLtzce7Qd4Vx6pqam2hjZebzL5eqUcTL+jeUywn02uGIwAgRbRXbNNXvcCDqw +qK93PMLFIRFV2+a6PF2aWiraOqBw619VGTIA4U6HPZ2BeCejaUfQC7XLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLk6BChHn2WY5eDOBIRemBxekaKMMB8GA1UdIwQY MBaAFLy5VUFVHHm4zVmIbk0SuLE5JVrEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkxsVlFWVWNlYmpOV1lodVRSSzRzVGtsV3NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9kNjY5NGEtMjhkNi00ZTE2LTlkMTEt NjEwOWM3MzhlYmY2LzEvdkxsVlFWVWNlYmpOV1lodVRSSzRzVGtsV3NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9kNjY5NGEtMjhkNi00ZTE2LTlkMTEtNjEwOWM3MzhlYmY2 LzEvdkxsVlFWVWNlYmpOV1lodVRSSzRzVGtsV3NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUnU6DnR0 VGkhI7KB8/738oJxYmMuXmXFYB0AIkm1TrGZtYKC2I0YlKx92P9/XAtdo19u/9oB RscNcSe8FxGSRBBDrxB/orOoEXR//ZkLwr15X75o2lLYOC2K7+JQOYpgRLyeCm4e 8IepyYAKKHUhl0Co553fXdjaVh/s0XAyESGgm8JEUMGShZZbR+rq8fvuuafR+p5+ KryMwE+J0LZftB1OrxT1yiLBVXZ7Mx18fEhZ23BZXyuu3vHTIOFEHzeXuTRzok5n yzaAX5H8ynX9xqlRWxmZtQFJOnyf7oic0B0MKqX9wUg/CG7lzNisbHk34ooLH6aF lFozcfSozCjLGg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:58 2026 by rpki-client