This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft File: vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json) Hash identifier: VbZDAFEsxJZR2bLPKTWmcNmmAsWmv/9zbLjthCUldfs= Subject key identifier: 82:92:79:B7:9C:17:C3:D1:6B:BD:AC:3F:B1:7D:16:91:A0:35:3D:78 Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B Certificate issuer: /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b Certificate serial: 019BF4D0A96FD35EEE0B78D85CBD2B8CEB1D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft Manifest number: 14BA Signing time: Sun 25 Jan 2026 11:01:14 +0000 Manifest this update: Sun 25 Jan 2026 11:01:14 +0000 Manifest next update: Mon 26 Jan 2026 11:01:14 +0000 Files and hashes: 1: PD1WySNjlq_IY2uBIMnATsjVoRM.roa (hash: SZgZePDON35ElVyphahHJc8sNER6FBgFl6oM5awboYo=) 2: k8w0NUXD9JayBBvKF9ncDALdg78.roa (hash: lUbCLxx0DXi3nyWOu3iruTVHC0Q/jhFLMzT5toYmB6I=) 3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: zVG85ZeIT2oxkcr5uKp97IuFlqYUHTd5yHc/jXkfy+Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:a9:6f:d3:5e:ee:0b:78:d8:5c:bd:2b:8c:eb:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b Validity Not Before: Jan 25 11:01:14 2026 GMT Not After : Jan 26 11:01:14 2026 GMT Subject: CN=829279b79c17c3d16bbdac3fb17d1691a0353d78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:61:5f:f1:9d:00:1f:65:34:d8:ff:f0:49:63: 51:73:aa:b3:17:65:27:ee:1d:bb:4d:89:f5:74:f7: 5c:a6:13:9e:ae:a2:a8:f2:22:5e:9c:0f:e3:e9:58: 92:62:d3:32:1e:18:fd:00:c4:bd:5d:73:61:d4:48: 1d:25:c4:f2:bf:a9:a4:7b:2b:df:f1:68:11:43:18: 2a:f3:10:e6:ce:4b:40:db:50:7b:54:95:dd:8b:e5: bc:ae:f8:26:a8:31:82:81:78:b9:9c:70:da:4f:ec: f7:d3:93:d4:37:61:18:d0:aa:30:ed:2b:57:37:b2: 6e:32:71:ad:dd:64:e5:c5:e2:fc:a5:09:b0:c0:ff: 6d:9e:b5:4e:f4:c6:94:bb:0a:5c:02:6f:50:6d:68: 19:cd:ff:5c:33:ed:7a:0e:8b:d1:3c:b7:2f:e1:d3: 0c:52:ed:77:fd:40:1c:e2:27:71:63:71:9e:99:e4: 54:37:ef:b6:e7:82:01:af:63:ac:7c:92:36:b6:9b: b8:5c:e2:9c:04:23:fe:4b:41:82:b0:76:9c:31:7a: 79:9b:c6:06:0e:b8:b6:47:f4:49:c3:73:6d:2c:1d: 49:6d:d7:a0:19:a9:c1:97:b6:aa:32:d5:12:cd:c8: 78:0b:a3:ba:aa:d7:09:31:52:fd:4b:75:e6:4d:00: 22:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:92:79:B7:9C:17:C3:D1:6B:BD:AC:3F:B1:7D:16:91:A0:35:3D:78 X509v3 Authority Key Identifier: keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:9a:33:d1:62:ba:f4:2b:84:e9:c1:12:a3:b7:d1:74:59:e5: 71:33:b8:65:7e:86:57:b9:19:b5:9c:b7:59:40:53:09:61:dd: a1:39:1b:68:db:9e:5c:08:80:95:8e:ce:cb:06:dc:dc:c5:23: 2c:37:99:44:44:03:50:aa:ed:7f:23:5f:76:e2:20:d7:c9:1a: b6:ae:d1:ca:48:62:4e:b9:11:29:7b:d7:d1:27:dc:1e:a3:80: fd:91:70:2d:36:6b:68:23:3c:71:b7:c2:a3:f9:5a:28:c0:1d: 50:ff:6e:5a:1b:03:ef:1b:62:9f:d9:eb:c3:4a:21:13:f1:d6: 1b:7c:c5:38:92:6a:95:e2:90:f5:69:1d:eb:81:f8:7a:a0:90: 69:e5:29:29:65:20:3e:7e:9c:1d:04:a2:50:68:3b:ec:28:9e: 75:41:9d:9f:12:a4:2a:32:a5:ff:c0:69:0f:a0:a0:fb:01:c2: c8:59:61:5b:f4:35:a6:06:ad:70:57:0b:bf:a6:e8:da:a2:bc: 5a:fb:eb:4b:35:1e:7d:b6:28:4d:c0:bc:03:1a:14:4e:3f:67: 28:b2:42:53:99:ec:24:ca:bf:7f:47:b6:72:7e:f2:5b:78:ef: e0:08:52:87:14:8e:7a:bb:6b:7f:94:bd:9c:b8:c3:8d:2c:e3: eb:37:a0:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00Klv017uC3jYXL0rjOsdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMjVmNzFiYTQxMzE0ODNiYjliODIzZGQ4ODY1MWQzYWZk NDRlN2IwHhcNMjYwMTI1MTEwMTE0WhcNMjYwMTI2MTEwMTE0WjAzMTEwLwYDVQQD Eyg4MjkyNzliNzljMTdjM2QxNmJiZGFjM2ZiMTdkMTY5MWEwMzUzZDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mFf8Z0AH2U02P/wSWNRc6qzF2Un 7h27TYn1dPdcphOerqKo8iJenA/j6ViSYtMyHhj9AMS9XXNh1EgdJcTyv6mkeyvf 8WgRQxgq8xDmzktA21B7VJXdi+W8rvgmqDGCgXi5nHDaT+z305PUN2EY0Kow7StX N7JuMnGt3WTlxeL8pQmwwP9tnrVO9MaUuwpcAm9QbWgZzf9cM+16DovRPLcv4dMM Uu13/UAc4idxY3GemeRUN++254IBr2OsfJI2tpu4XOKcBCP+S0GCsHacMXp5m8YG Dri2R/RJw3NtLB1JbdegGanBl7aqMtUSzch4C6O6qtcJMVL9S3XmTQAiBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIKSebecF8PRa72sP7F9FpGgNT14MB8GA1UdIwQY MBaAFL0l9xukExSDu5uCPdiGUdOv1E57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAt YjVlMGU0YzMzMTVjLzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8yMDAzNjYtZDg4MS00MDMwLTgyODAtYjVlMGU0YzMzMTVj LzEvdlNYM0c2UVRGSU83bTRJOTJJWlIwNl9VVG5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa5oz0WK6 9CuE6cESo7fRdFnlcTO4ZX6GV7kZtZy3WUBTCWHdoTkbaNueXAiAlY7Oywbc3MUj LDeZREQDUKrtfyNfduIg18katq7RykhiTrkRKXvX0SfcHqOA/ZFwLTZraCM8cbfC o/laKMAdUP9uWhsD7xtin9nrw0ohE/HWG3zFOJJqleKQ9Wkd64H4eqCQaeUpKWUg Pn6cHQSiUGg77CiedUGdnxKkKjKl/8BpD6Cg+wHCyFlhW/Q1pgatcFcLv6bo2qK8 WvvrSzUefbYoTcC8AxoUTj9nKLJCU5nsJMq/f0e2cn7yW3jv4AhShxSOertrf5S9 nLjDjSzj6zegIg== -----END CERTIFICATE-----Generated at Sun Jan 25 18:36:13 2026 by rpki-client