This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft File: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft (raw, json) Hash identifier: l+ecmdLiFIFGOrAIviGteri4HcLxKHniQzVdFXj4dMY= Subject key identifier: 8A:65:43:AA:F9:0C:7E:0D:84:52:B1:A1:2C:E5:57:24:97:BA:90:68 Authority key identifier: 54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07 Certificate issuer: /CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707 Certificate serial: 019C42B453DAD3905D9198B30FDB01435CAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft Manifest number: 030E Signing time: Mon 09 Feb 2026 14:00:39 +0000 Manifest this update: Mon 09 Feb 2026 14:00:39 +0000 Manifest next update: Tue 10 Feb 2026 14:00:39 +0000 Files and hashes: 1: IBGO-I7f-Bxf5flZlSUpyiUE_zA.roa (hash: MEvjGUC5VTgMRrOy7YLZDcVgLghn/454RnFu57ROP3Y=) 2: VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl (hash: OCyoC+NxM/bjS99mcUFnsQJfEZYefZdhAz2TVVnsz8k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:53:da:d3:90:5d:91:98:b3:0f:db:01:43:5c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54f9d5819d440adcecda1eeeb7c98ae99c4d0707 Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : Feb 10 14:00:39 2026 GMT Subject: CN=8a6543aaf90c7e0d8452b1a12ce5572497ba9068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b3:ec:7c:21:90:ab:2f:c5:d1:79:b2:03:50: 2d:27:0c:73:01:fa:4a:9d:2e:c9:ce:43:7a:cc:54: fa:82:9a:0b:48:2a:3b:dc:61:b9:1f:86:d2:34:7d: 5a:b6:a7:90:57:70:6e:53:00:40:0e:ad:b7:ea:06: ae:5d:1f:2e:6c:75:d6:4a:f3:cb:25:7b:d0:74:91: d3:8a:f5:73:1d:87:71:4e:9e:1b:d1:61:28:ac:61: d7:78:cf:3f:91:04:4b:33:b7:a2:6c:79:a8:d0:c9: 8f:92:d4:03:f0:29:30:0c:5d:13:c1:be:5d:00:bf: ac:9d:79:45:19:5c:c4:d2:a7:0d:90:ea:d9:19:55: d3:70:09:18:32:7c:63:df:38:6c:78:18:90:2c:a7: f8:75:bc:a9:56:e1:01:e4:ab:b5:ba:1b:60:b0:c4: 4a:39:24:ee:30:52:82:2c:75:43:4f:6f:a5:8e:ad: 62:bd:da:9b:9e:fc:a2:fe:5b:46:36:0e:c4:9d:47: 79:a0:9b:18:f8:e2:30:b2:37:4c:7d:66:14:f6:e0: b0:8b:3f:91:2e:97:95:96:41:ee:6b:da:cd:75:20: 45:63:de:80:3a:1b:33:33:9d:ea:16:66:1e:2a:a6: 82:aa:b0:29:d7:dc:24:42:64:01:7a:e0:2d:cc:0c: cc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:65:43:AA:F9:0C:7E:0D:84:52:B1:A1:2C:E5:57:24:97:BA:90:68 X509v3 Authority Key Identifier: keyid:54:F9:D5:81:9D:44:0A:DC:EC:DA:1E:EE:B7:C9:8A:E9:9C:4D:07:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/130bf4-f192-4ef9-b852-9d315d115cbb/1/VPnVgZ1ECtzs2h7ut8mK6ZxNBwc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:b3:68:56:ab:e4:57:0d:3f:35:ec:bd:a9:8f:d8:0c:08:83: 8b:1d:de:ba:57:35:c1:47:52:53:0d:1c:09:7e:e0:87:50:c0: 22:ba:0c:c3:08:d4:79:9f:30:18:32:d4:d4:b5:fb:ef:0d:9c: ad:a2:94:56:5f:9f:1e:5b:0d:4f:61:b1:06:40:c2:c7:4e:51: 5c:ec:41:ab:e6:b2:4b:5f:c1:76:40:10:c8:92:92:37:c1:ce: 30:aa:1f:bf:16:25:be:5e:33:e3:0e:55:b3:14:01:c0:1e:93: 85:21:04:1a:35:4d:ba:5a:02:85:51:00:ab:d3:49:67:9b:7e: 81:0e:f4:9e:4b:ff:7f:8c:ae:11:c0:b0:66:78:7f:3e:4d:7a: 53:2b:97:1e:f3:7b:8a:91:3e:85:45:2f:cc:70:f8:81:12:a9: bf:eb:7a:94:d7:2f:48:83:e1:66:10:64:46:34:fb:19:fa:57: 4b:96:bd:ac:89:aa:1f:d4:59:d8:9c:3b:f3:73:63:ad:1d:31: d9:fe:e7:9e:19:6d:ab:5f:ab:6f:26:6c:99:e1:17:71:c0:5e: ae:2c:ac:2d:c9:86:9f:f9:c1:78:3f:b1:5a:7c:93:b5:90:ae: cd:3f:3d:73:c2:4d:71:f5:ff:48:89:ea:ba:2c:e5:1e:2d:e8: a4:5c:fc:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtFPa05BdkZizD9sBQ1ytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZjlkNTgxOWQ0NDBhZGNlY2RhMWVlZWI3Yzk4YWU5OWM0 ZDA3MDcwHhcNMjYwMjA5MTQwMDM5WhcNMjYwMjEwMTQwMDM5WjAzMTEwLwYDVQQD Eyg4YTY1NDNhYWY5MGM3ZTBkODQ1MmIxYTEyY2U1NTcyNDk3YmE5MDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rPsfCGQqy/F0XmyA1AtJwxzAfpK nS7JzkN6zFT6gpoLSCo73GG5H4bSNH1atqeQV3BuUwBADq236gauXR8ubHXWSvPL JXvQdJHTivVzHYdxTp4b0WEorGHXeM8/kQRLM7eibHmo0MmPktQD8CkwDF0Twb5d AL+snXlFGVzE0qcNkOrZGVXTcAkYMnxj3zhseBiQLKf4dbypVuEB5Ku1uhtgsMRK OSTuMFKCLHVDT2+ljq1ivdqbnvyi/ltGNg7EnUd5oJsY+OIwsjdMfWYU9uCwiz+R LpeVlkHua9rNdSBFY96AOhszM53qFmYeKqaCqrAp19wkQmQBeuAtzAzMjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIplQ6r5DH4NhFKxoSzlVySXupBoMB8GA1UdIwQY MBaAFFT51YGdRArc7Noe7rfJiumcTQcHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlBuVmdaMUVDdHpzMmg3dXQ4bUs2WnhOQndjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xMzBiZjQtZjE5Mi00ZWY5LWI4NTIt OWQzMTVkMTE1Y2JiLzEvVlBuVmdaMUVDdHpzMmg3dXQ4bUs2WnhOQndjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8xMzBiZjQtZjE5Mi00ZWY5LWI4NTItOWQzMTVkMTE1Y2Ji LzEvVlBuVmdaMUVDdHpzMmg3dXQ4bUs2WnhOQndjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv7NoVqvk Vw0/Ney9qY/YDAiDix3eulc1wUdSUw0cCX7gh1DAIroMwwjUeZ8wGDLU1LX77w2c raKUVl+fHlsNT2GxBkDCx05RXOxBq+ayS1/BdkAQyJKSN8HOMKofvxYlvl4z4w5V sxQBwB6ThSEEGjVNuloChVEAq9NJZ5t+gQ70nkv/f4yuEcCwZnh/Pk16UyuXHvN7 ipE+hUUvzHD4gRKpv+t6lNcvSIPhZhBkRjT7GfpXS5a9rImqH9RZ2Jw783NjrR0x 2f7nnhltq1+rbyZsmeEXccBeriysLcmGn/nBeD+xWnyTtZCuzT89c8JNcfX/SInq uizlHi3opFz8iQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:28 2026 by rpki-client