This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft File: vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json) Hash identifier: Uw+Q3df6Rn4zV/jtccz66r10tW6sngqDBnXchULdFls= Subject key identifier: 1D:38:90:E9:D3:D7:22:89:2E:16:EC:63:AF:D3:67:5F:DB:E2:33:E3 Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8 Certificate issuer: /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8 Certificate serial: 019BF574E1E7651C54113F702063009992BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 14:00:36 +0000 Manifest this update: Sun 25 Jan 2026 14:00:36 +0000 Manifest next update: Mon 26 Jan 2026 14:00:36 +0000 Files and hashes: 1: owpSV77jbxZ9VhY5GoPY3SzakH4.roa (hash: bIn4GPl6r1y0htBGN921xbLzQeP4Y7NtdCfbY0WeOD8=) 2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: D4yzqwxJ9DAGX1x+d3ixtEJtnLw/LZHIPVdYybRUWRo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:e1:e7:65:1c:54:11:3f:70:20:63:00:99:92:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8 Validity Not Before: Jan 25 14:00:36 2026 GMT Not After : Jan 26 14:00:36 2026 GMT Subject: CN=1d3890e9d3d722892e16ec63afd3675fdbe233e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:cf:0e:c7:f2:12:ce:ef:1e:0a:6e:a6:c2:e6: c2:1c:a4:ad:52:f3:2b:27:81:8d:5c:ad:e2:8d:a5: 31:d7:e2:69:29:0c:64:64:80:2e:f4:a9:0b:5d:b9: aa:0a:4e:10:14:56:8d:7f:10:56:f7:a5:68:14:aa: a2:ad:0b:36:6b:23:7d:4a:7e:e1:54:4b:95:a4:15: 75:8c:69:c0:dd:8b:88:7e:7e:dd:da:fe:d1:5a:e9: 46:b6:5d:e1:df:27:e3:52:8e:63:00:8c:74:43:5a: 2f:1a:10:f5:cf:df:60:3f:72:87:5c:bf:b4:77:58: 10:e7:02:cf:6c:2e:be:f5:ee:1e:62:bb:cb:54:32: a7:1c:20:eb:02:a4:da:db:64:b2:00:a2:aa:9e:da: fa:a5:f2:d1:7c:2d:bf:a1:d7:64:39:15:1d:ce:e3: 3f:e9:ca:d2:23:4e:4a:aa:9e:fa:95:b4:26:a0:05: 97:b3:66:6b:54:aa:bb:df:1e:e3:f3:70:9d:70:a9: 3e:5b:a5:b1:d1:c6:e7:7c:17:40:09:14:78:fe:3a: b6:d6:f5:12:a5:dc:5a:69:10:d7:6b:21:bb:43:04: 36:e0:7a:b6:db:30:9d:24:ed:8c:dd:58:70:fb:94: 17:39:b8:e8:8e:8d:b3:ac:7d:01:96:98:33:63:47: e8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:38:90:E9:D3:D7:22:89:2E:16:EC:63:AF:D3:67:5F:DB:E2:33:E3 X509v3 Authority Key Identifier: keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:7e:e1:3a:2d:5e:04:99:c3:4d:e4:74:aa:9c:d3:76:cf:82: d4:09:b6:63:ea:c3:f3:c6:c1:98:21:3e:c2:0e:92:c5:fe:06: 03:eb:aa:d0:5a:26:4f:11:a8:05:45:ef:64:ae:a1:ca:d4:66: ca:60:2d:b8:4f:ef:2e:45:28:d8:73:96:38:ef:29:12:ed:40: be:1f:4c:3d:7f:8b:34:e9:13:2b:f3:89:d8:9d:c6:10:d7:ac: 00:10:f3:d1:2a:d3:3c:64:f2:5d:e3:a0:c2:b9:a4:89:fd:31: 31:ca:cf:46:7f:2e:54:e8:d9:0e:72:f0:0b:95:25:7d:f3:94: c9:75:75:a0:d5:5a:97:d3:8e:fe:d2:5a:53:22:10:18:5b:44: 32:0f:48:6b:64:89:7b:96:df:95:9e:2e:1e:cf:2a:e3:31:5d: 88:d6:db:ed:3c:1c:34:92:a4:03:98:02:b8:c0:de:c2:9c:f1: 73:cc:36:ab:c9:99:69:42:9c:de:d2:25:6a:2c:45:57:4e:e9: 81:a0:02:63:94:6f:54:b8:2a:94:6e:91:5a:19:72:03:99:44: 46:f2:7b:d2:49:6c:b6:8c:4f:ab:7f:f6:65:5d:db:ea:68:32: 75:5e:95:e2:56:80:87:6b:91:0b:d9:91:15:61:50:14:a2:ce: dd:b4:d0:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dOHnZRxUET9wIGMAmZK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYjdhYWM3YzQ5M2JjOGFhN2VjNzA1OWQzZWM3NmJiZmMy ZjIzZDgwHhcNMjYwMTI1MTQwMDM2WhcNMjYwMTI2MTQwMDM2WjAzMTEwLwYDVQQD EygxZDM4OTBlOWQzZDcyMjg5MmUxNmVjNjNhZmQzNjc1ZmRiZTIzM2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c8Ox/ISzu8eCm6mwubCHKStUvMr J4GNXK3ijaUx1+JpKQxkZIAu9KkLXbmqCk4QFFaNfxBW96VoFKqirQs2ayN9Sn7h VEuVpBV1jGnA3YuIfn7d2v7RWulGtl3h3yfjUo5jAIx0Q1ovGhD1z99gP3KHXL+0 d1gQ5wLPbC6+9e4eYrvLVDKnHCDrAqTa22SyAKKqntr6pfLRfC2/oddkORUdzuM/ 6crSI05Kqp76lbQmoAWXs2ZrVKq73x7j83CdcKk+W6Wx0cbnfBdACRR4/jq21vUS pdxaaRDXayG7QwQ24Hq22zCdJO2M3Vhw+5QXObjojo2zrH0BlpgzY0foyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB04kOnT1yKJLhbsY6/TZ1/b4jPjMB8GA1UdIwQY MBaAFL23qsfEk7yKp+xwWdPsdrv8LyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDkt Njk3YzBlMmMzZDM1LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9jMDA5ODktZjY1NC00N2M0LWJiMDktNjk3YzBlMmMzZDM1 LzEvdmJlcXg4U1R2SXFuN0hCWjAteDJ1X3d2STlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIX7hOi1e BJnDTeR0qpzTds+C1Am2Y+rD88bBmCE+wg6Sxf4GA+uq0FomTxGoBUXvZK6hytRm ymAtuE/vLkUo2HOWOO8pEu1Avh9MPX+LNOkTK/OJ2J3GENesABDz0SrTPGTyXeOg wrmkif0xMcrPRn8uVOjZDnLwC5UlffOUyXV1oNVal9OO/tJaUyIQGFtEMg9Ia2SJ e5bflZ4uHs8q4zFdiNbb7TwcNJKkA5gCuMDewpzxc8w2q8mZaUKc3tIlaixFV07p gaACY5RvVLgqlG6RWhlyA5lERvJ70klstoxPq3/2ZV3b6mgydV6V4laAh2uRC9mR FWFQFKLO3bTQBg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:25:13 2026 by rpki-client