This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft File: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft (raw, json) Hash identifier: 5rBcyrL6tLfnn/Rw1xuY16IJ1D7cWchvvKlv/+6IylA= Subject key identifier: 76:99:60:E0:85:7C:49:67:E1:C8:A5:4C:EC:D3:76:FE:FA:A0:67:4B Authority key identifier: BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45 Certificate issuer: /CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945 Certificate serial: 019C4246B62DAD73426FD053F1DC01C5A498 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft Manifest number: 0A39 Signing time: Mon 09 Feb 2026 12:00:56 +0000 Manifest this update: Mon 09 Feb 2026 12:00:56 +0000 Manifest next update: Tue 10 Feb 2026 12:00:56 +0000 Files and hashes: 1: p9RxkxEDg3zhOEBmGSkuGg-Qp1g.roa (hash: Pzg3LR/Kx5u+U4xpCocEsCBgxEMmX7bZWZgvVSP3EX8=) 2: va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl (hash: sk/V5I4B8cSm243nyUnz/CZSGlQINjgdVuzRAUTfAIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b6:2d:ad:73:42:6f:d0:53:f1:dc:01:c5:a4:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdaee4a81ff360fe00c3a1f0dae30e26e1280945 Validity Not Before: Feb 9 12:00:56 2026 GMT Not After : Feb 10 12:00:56 2026 GMT Subject: CN=769960e0857c4967e1c8a54cecd376fefaa0674b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8f:bf:44:0e:99:d3:a2:f6:dc:4f:89:36:cb: d3:90:b1:10:8c:bc:88:99:26:59:43:2f:32:8a:56: a6:53:9e:55:74:98:58:84:d6:64:cd:34:f6:b1:7b: 0b:75:fd:f5:11:e0:0d:a7:c1:01:2d:19:44:cc:7b: 01:52:b6:b4:a7:59:9a:ab:88:77:d2:2d:fc:41:99: ba:91:c5:09:41:dd:46:01:bc:06:27:12:1a:5a:45: d7:ae:dd:64:8f:0d:e5:83:26:32:13:29:2d:52:91: 88:63:20:25:54:5c:0b:d5:2e:38:a2:85:77:26:a5: 08:7f:27:80:04:8e:79:24:fe:82:ce:46:bf:79:eb: 3f:e4:18:9c:db:29:9e:79:70:70:5b:d6:46:7e:3a: 10:51:0f:00:2c:08:95:76:1f:de:a0:ae:5a:a7:3e: 4a:93:b4:ec:ae:bc:de:14:85:5a:b6:13:7d:ed:ec: e7:05:de:6b:2c:56:84:0a:aa:c5:00:c1:47:c0:89: f5:ae:fe:d8:27:58:a0:b6:eb:77:72:87:85:2c:88: 2e:df:60:85:c0:ca:cd:e2:84:ed:80:82:d2:a9:e5: f6:9c:44:fc:73:61:15:c5:de:c6:64:16:b7:da:ba: 1e:75:14:e6:f4:7b:1c:cf:19:c1:db:53:70:e3:d5: 96:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:99:60:E0:85:7C:49:67:E1:C8:A5:4C:EC:D3:76:FE:FA:A0:67:4B X509v3 Authority Key Identifier: keyid:BD:AE:E4:A8:1F:F3:60:FE:00:C3:A1:F0:DA:E3:0E:26:E1:28:09:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b321be-6000-4baa-92dc-270c8b5a0923/1/va7kqB_zYP4Aw6Hw2uMOJuEoCUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:3e:ed:7a:f2:9b:99:0e:ae:13:59:2b:66:47:83:f7:ce:ed: 48:01:37:1e:bc:d1:7e:e7:39:97:d2:f5:a0:a1:20:23:a8:46: 99:f3:2a:8e:63:3e:73:2b:89:12:65:f3:cd:f6:32:87:fe:b3: 0f:90:65:bf:ae:59:61:ac:f1:da:60:79:5c:dc:a3:83:98:12: 83:48:34:06:88:61:4a:3a:3c:aa:1f:ed:b4:da:e4:70:db:2f: e5:3a:c7:f0:d1:94:eb:0e:9d:b6:ce:36:6f:0d:2a:3c:ec:b9: 3f:64:67:31:2d:9c:73:f6:d1:8b:8b:b3:1b:6e:8e:4a:a8:1f: 66:86:af:42:f9:92:79:df:39:9b:98:a1:58:82:2f:83:eb:6e: bc:6c:82:4d:f2:14:ed:aa:ae:6f:91:a9:13:47:37:ea:13:e5: 27:74:90:75:34:c4:2c:1f:6c:3c:b5:bc:3b:aa:fa:dc:b5:e1: 67:99:ae:76:cf:d1:83:11:72:3c:ea:eb:f4:8a:5d:16:69:13: 86:4f:3e:80:c1:18:94:a0:83:96:ff:4a:5e:20:21:44:13:40: f3:ae:50:eb:72:9a:d5:c9:c1:2f:f6:3a:06:cf:65:4a:f6:e7: 4a:9a:32:53:04:11:7b:20:d1:b9:3e:05:95:33:5f:27:24:ad: 84:94:10:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrYtrXNCb9BT8dwBxaSYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYWVlNGE4MWZmMzYwZmUwMGMzYTFmMGRhZTMwZTI2ZTEy ODA5NDUwHhcNMjYwMjA5MTIwMDU2WhcNMjYwMjEwMTIwMDU2WjAzMTEwLwYDVQQD Eyg3Njk5NjBlMDg1N2M0OTY3ZTFjOGE1NGNlY2QzNzZmZWZhYTA2NzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY+/RA6Z06L23E+JNsvTkLEQjLyI mSZZQy8yilamU55VdJhYhNZkzTT2sXsLdf31EeANp8EBLRlEzHsBUra0p1maq4h3 0i38QZm6kcUJQd1GAbwGJxIaWkXXrt1kjw3lgyYyEyktUpGIYyAlVFwL1S44ooV3 JqUIfyeABI55JP6Czka/ees/5Bic2ymeeXBwW9ZGfjoQUQ8ALAiVdh/eoK5apz5K k7TsrrzeFIVathN97eznBd5rLFaECqrFAMFHwIn1rv7YJ1igtut3coeFLIgu32CF wMrN4oTtgILSqeX2nET8c2EVxd7GZBa32roedRTm9HsczxnB21Nw49WWrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHaZYOCFfEln4cilTOzTdv76oGdLMB8GA1UdIwQY MBaAFL2u5Kgf82D+AMOh8NrjDibhKAlFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmE3a3FCX3pZUDRBdzZIdzJ1TU9KdUVvQ1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iMzIxYmUtNjAwMC00YmFhLTkyZGMt MjcwYzhiNWEwOTIzLzEvdmE3a3FCX3pZUDRBdzZIdzJ1TU9KdUVvQ1VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iMzIxYmUtNjAwMC00YmFhLTkyZGMtMjcwYzhiNWEwOTIz LzEvdmE3a3FCX3pZUDRBdzZIdzJ1TU9KdUVvQ1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvz7tevKb mQ6uE1krZkeD987tSAE3HrzRfuc5l9L1oKEgI6hGmfMqjmM+cyuJEmXzzfYyh/6z D5Blv65ZYazx2mB5XNyjg5gSg0g0BohhSjo8qh/ttNrkcNsv5TrH8NGU6w6dts42 bw0qPOy5P2RnMS2cc/bRi4uzG26OSqgfZoavQvmSed85m5ihWIIvg+tuvGyCTfIU 7aqub5GpE0c36hPlJ3SQdTTELB9sPLW8O6r63LXhZ5muds/RgxFyPOrr9IpdFmkT hk8+gMEYlKCDlv9KXiAhRBNA865Q63Ka1cnBL/Y6Bs9lSvbnSpoyUwQReyDRuT4F lTNfJySthJQQZg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:35 2026 by rpki-client