This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft File: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft (raw, json) Hash identifier: ryKpCSOu9OafxpCoFRjYtjMb5Q9CrRpkUUj/mBe4HBI= Subject key identifier: 32:D5:7C:D5:38:1B:7F:4A:D2:F6:2A:6A:42:48:3A:8F:42:35:AA:A3 Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E Certificate issuer: /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e Certificate serial: 019BF7635AE146CB04A8CE00969B6DE31DC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft Manifest number: 177B Signing time: Sun 25 Jan 2026 23:00:42 +0000 Manifest this update: Sun 25 Jan 2026 23:00:42 +0000 Manifest next update: Mon 26 Jan 2026 23:00:42 +0000 Files and hashes: 1: _qrU1bCSPRoOOveg6cKRbdBRuMk.roa (hash: EuanKU6jP53XoKKJyuThtthL9JW99aO6nJOSR8TpqPE=) 2: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl (hash: 9vYNHGHYXZW0pFYmuFitSKCgu8xxElrMGCfO2CDuSyE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:5a:e1:46:cb:04:a8:ce:00:96:9b:6d:e3:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e Validity Not Before: Jan 25 23:00:42 2026 GMT Not After : Jan 26 23:00:42 2026 GMT Subject: CN=32d57cd5381b7f4ad2f62a6a42483a8f4235aaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e3:65:6c:68:e5:30:a3:3a:93:1f:cc:57:18: e1:d6:df:61:bb:fd:45:05:e1:e7:a0:b3:ef:a8:27: 41:18:69:b8:d2:85:b3:5d:33:fe:28:fd:41:44:b3: 41:10:3a:f3:f2:40:cd:5f:f4:2a:6f:a6:05:21:43: 7a:9d:f7:00:7c:c1:d6:37:27:ce:ee:59:76:05:a7: 1e:9d:e6:6f:54:5e:ee:67:e3:1e:60:d6:7a:b3:9a: b3:94:f9:40:d2:97:ac:e6:f5:d3:84:ae:d7:ca:e4: 03:f2:1d:b8:d6:49:74:10:ee:ff:cb:28:ca:77:66: cb:f9:e3:c6:b4:85:71:79:25:33:b4:57:54:fd:f2: f2:6d:e2:ab:02:ca:9c:da:8c:0b:d0:8f:64:e1:19: ea:fb:95:61:66:3b:cc:9e:ff:f2:16:ad:ba:3d:af: 78:4b:eb:21:7f:30:ee:ea:da:6d:9f:2c:aa:9c:c7: b3:39:cc:00:d1:81:95:02:6a:4b:34:e0:e1:4f:1a: 56:58:92:91:68:f9:ce:92:c5:e7:27:11:ff:af:1f: 65:4c:3c:84:be:eb:a2:03:9d:8e:a1:c5:70:47:2f: 70:fa:14:3b:4e:ac:d3:af:0d:34:63:7b:ac:32:3b: 6a:3b:73:e3:f5:50:87:17:05:e4:a7:74:72:ce:3f: 85:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:D5:7C:D5:38:1B:7F:4A:D2:F6:2A:6A:42:48:3A:8F:42:35:AA:A3 X509v3 Authority Key Identifier: keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:20:78:4f:26:fb:2c:de:e7:58:6f:66:82:5c:b8:b7:ae:a9: 8c:2a:67:06:44:3a:4d:30:a6:b9:e5:c6:d1:c6:19:3b:b4:05: 0d:d6:95:5d:2c:62:d4:5e:8f:09:dd:42:b6:17:27:ba:7f:da: 3c:7d:cb:08:83:be:8e:c6:ac:52:78:f6:cd:20:f7:d8:93:44: fd:28:04:85:85:2e:64:27:42:d7:f3:ca:ef:3c:8d:f4:01:c9: 8a:1a:84:74:fb:7b:62:01:a3:a0:3b:e4:4f:af:00:3a:db:a8: 75:41:3f:d6:1f:01:bd:aa:72:23:77:48:b5:6a:1a:05:2b:a9: 93:28:c3:d8:32:55:e6:cb:1c:05:4a:83:31:e7:ac:b1:18:10: 4e:f6:ed:72:43:98:4b:36:ab:6e:fa:12:26:f7:94:cc:96:45: 53:c4:0d:79:d3:3e:e8:be:25:d1:62:83:65:a4:29:93:d1:ec: 00:2a:85:5f:9c:fe:53:ab:c6:e6:11:8f:67:ee:5c:00:e3:2b: 62:6f:d0:f5:5b:b0:96:ad:41:74:ef:03:53:a0:5e:de:97:a7: 52:c7:f4:c4:9c:6e:75:70:0d:ab:e8:9e:47:41:eb:30:f9:f6: d5:e3:27:61:d1:f5:21:b8:4a:1f:52:bc:7d:50:fa:71:85:29: 0e:f1:e3:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y1rhRssEqM4Alptt4x3AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTg0ZDMwZDFmZDJmZGU1MGJlYTZmNzBmZTJkYmUyMDUx OGEwM2UwHhcNMjYwMTI1MjMwMDQyWhcNMjYwMTI2MjMwMDQyWjAzMTEwLwYDVQQD EygzMmQ1N2NkNTM4MWI3ZjRhZDJmNjJhNmE0MjQ4M2E4ZjQyMzVhYWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeNlbGjlMKM6kx/MVxjh1t9hu/1F BeHnoLPvqCdBGGm40oWzXTP+KP1BRLNBEDrz8kDNX/Qqb6YFIUN6nfcAfMHWNyfO 7ll2BaceneZvVF7uZ+MeYNZ6s5qzlPlA0pes5vXThK7XyuQD8h241kl0EO7/yyjK d2bL+ePGtIVxeSUztFdU/fLybeKrAsqc2owL0I9k4Rnq+5VhZjvMnv/yFq26Pa94 S+shfzDu6tptnyyqnMezOcwA0YGVAmpLNODhTxpWWJKRaPnOksXnJxH/rx9lTDyE vuuiA52OocVwRy9w+hQ7TqzTrw00Y3usMjtqO3Pj9VCHFwXkp3Ryzj+F7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDLVfNU4G39K0vYqakJIOo9CNaqjMB8GA1UdIwQY MBaAFLwYTTDR/S/eUL6m9w/i2+IFGKA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUt MDVkN2JkNGE3NDFkLzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUtMDVkN2JkNGE3NDFk LzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSB4Tyb7 LN7nWG9mgly4t66pjCpnBkQ6TTCmueXG0cYZO7QFDdaVXSxi1F6PCd1Cthcnun/a PH3LCIO+jsasUnj2zSD32JNE/SgEhYUuZCdC1/PK7zyN9AHJihqEdPt7YgGjoDvk T68AOtuodUE/1h8BvapyI3dItWoaBSupkyjD2DJV5sscBUqDMeessRgQTvbtckOY SzarbvoSJveUzJZFU8QNedM+6L4l0WKDZaQpk9HsACqFX5z+U6vG5hGPZ+5cAOMr Ym/Q9Vuwlq1BdO8DU6Be3penUsf0xJxudXANq+ieR0HrMPn21eMnYdH1IbhKH1K8 fVD6cYUpDvHjow== -----END CERTIFICATE-----Generated at Mon Jan 26 09:01:59 2026 by rpki-client