This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft File: vayPM9tKSgF12PjqfKdHUH5-geA.mft (raw, json) Hash identifier: aK1cdGkH2vFcSxOv2OU8LsTL/K2Z6aMm7p2aSBBPXZA= Subject key identifier: 57:C8:8B:35:89:27:8F:02:70:0B:24:1B:E8:EA:DC:05:4B:33:B6:A9 Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0 Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0 Certificate serial: 019BF574DE3D36AD7AC893650F4012F750C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft Manifest number: 06CA Signing time: Sun 25 Jan 2026 14:00:35 +0000 Manifest this update: Sun 25 Jan 2026 14:00:35 +0000 Manifest next update: Mon 26 Jan 2026 14:00:35 +0000 Files and hashes: 1: 7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa (hash: WcP/5CSeIlCcfDT5pjIYJTPyHW6MDY4O9J5J3oJHDm0=) 2: rvT9ixLVhFvZilaGHVrnKnKLHi0.roa (hash: VJqU7a8hWI0u33FjmdulQyVd+Hd013Ix5KpxqBb6mxk=) 3: vayPM9tKSgF12PjqfKdHUH5-geA.crl (hash: 5c0OiCrU3T9phuPL9jfav82pZmtTkakPoxDLlPEMYf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:de:3d:36:ad:7a:c8:93:65:0f:40:12:f7:50:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0 Validity Not Before: Jan 25 14:00:35 2026 GMT Not After : Jan 26 14:00:35 2026 GMT Subject: CN=57c88b3589278f02700b241be8eadc054b33b6a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:4b:eb:41:63:ed:f8:4a:a3:cf:6a:ab:e2: 0b:3b:4e:10:b0:10:d7:fe:bb:ba:a3:74:e1:45:34: 7b:09:a5:9a:8c:e5:38:6c:72:bd:89:08:88:6b:7b: 10:01:0e:f0:0e:02:34:c0:67:52:75:f1:21:dc:c1: ca:87:10:b3:04:52:ca:4f:d9:64:4e:32:d8:f6:4c: 20:f5:42:0a:57:93:26:26:24:56:b9:c9:53:6e:31: 5f:b0:0d:f5:cf:62:a8:2b:61:ab:99:35:0d:f5:cb: 6e:3d:24:16:33:31:90:86:c4:60:5d:79:45:59:ca: 34:1e:57:fb:76:4e:96:9b:94:61:fc:bb:89:8d:95: 14:43:05:6c:92:f7:77:d5:33:f9:4e:c0:51:0e:6d: 73:44:25:21:4d:16:a1:26:cb:92:6c:aa:53:c9:de: c3:f9:da:db:28:62:15:51:a5:54:65:4b:2b:c8:8d: eb:68:6f:8d:69:2d:d7:82:24:ea:98:ba:1d:07:64: 46:89:2e:94:7b:27:0e:9e:be:dd:b5:72:8d:10:47: dd:59:83:17:be:52:8c:83:1d:06:02:6a:f5:ff:6d: 66:a5:29:d6:4c:6c:00:ca:26:88:be:5c:5f:e1:45: 46:c8:3e:95:2b:8e:af:d0:96:a6:e0:66:e9:bc:df: 53:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C8:8B:35:89:27:8F:02:70:0B:24:1B:E8:EA:DC:05:4B:33:B6:A9 X509v3 Authority Key Identifier: keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:19:2f:5a:8d:45:2d:89:af:12:4b:33:de:ae:4c:b5:cb:98: 5a:af:98:b7:73:8c:f4:65:c4:f6:b2:56:af:2a:1f:01:47:37: 9e:a6:2b:20:e1:9a:b3:f3:0a:91:3d:95:b5:57:83:ef:ef:5a: 07:eb:14:eb:66:87:dc:3c:03:b0:12:07:4c:1f:c3:80:3e:5c: 2c:b4:72:0d:0c:42:06:d2:38:a8:2d:96:a8:44:b3:55:f8:a7: 2b:ac:44:2c:27:c1:47:8e:aa:3e:b5:4f:4f:09:47:ec:fa:44: 69:1c:a8:81:7d:b3:1d:40:ab:72:4e:6b:3e:fb:2f:0f:9a:92: a5:59:4d:17:ff:45:c6:86:3a:9d:ff:c9:58:50:b4:a6:14:c5: 04:8a:21:9a:20:30:19:1f:b9:23:90:95:81:6e:c5:ea:44:3d: e7:71:b2:82:a2:64:83:9c:b9:73:b6:e0:d8:5f:62:61:ce:17: f5:a5:56:eb:84:8a:1f:8c:3f:20:aa:f3:c7:11:cb:81:0a:64: 57:ab:7e:db:59:e2:43:eb:61:d3:e4:70:8e:1e:82:1f:1f:fc: 37:ce:73:1b:5d:e4:dd:af:63:e2:6c:f6:78:a8:0d:6e:f0:0c: b5:38:31:ef:01:d1:dd:3d:c5:6c:68:28:51:59:41:53:8f:be: 16:76:1b:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dN49Nq16yJNlD0AS91DAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYWM4ZjMzZGI0YTRhMDE3NWQ4ZjhlYTdjYTc0NzUwN2U3 ZTgxZTAwHhcNMjYwMTI1MTQwMDM1WhcNMjYwMTI2MTQwMDM1WjAzMTEwLwYDVQQD Eyg1N2M4OGIzNTg5Mjc4ZjAyNzAwYjI0MWJlOGVhZGMwNTRiMzNiNmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmodL60Fj7fhKo89qq+ILO04QsBDX /ru6o3ThRTR7CaWajOU4bHK9iQiIa3sQAQ7wDgI0wGdSdfEh3MHKhxCzBFLKT9lk TjLY9kwg9UIKV5MmJiRWuclTbjFfsA31z2KoK2GrmTUN9ctuPSQWMzGQhsRgXXlF Wco0Hlf7dk6Wm5Rh/LuJjZUUQwVskvd31TP5TsBRDm1zRCUhTRahJsuSbKpTyd7D +drbKGIVUaVUZUsryI3raG+NaS3XgiTqmLodB2RGiS6UeycOnr7dtXKNEEfdWYMX vlKMgx0GAmr1/21mpSnWTGwAyiaIvlxf4UVGyD6VK46v0Jam4GbpvN9TKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfIizWJJ48CcAskG+jq3AVLM7apMB8GA1UdIwQY MBaAFL2sjzPbSkoBddj46nynR1B+foHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTIt MjUwYmFmNzhlMzBlLzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTItMjUwYmFmNzhlMzBl LzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYxkvWo1F LYmvEksz3q5MtcuYWq+Yt3OM9GXE9rJWryofAUc3nqYrIOGas/MKkT2VtVeD7+9a B+sU62aH3DwDsBIHTB/DgD5cLLRyDQxCBtI4qC2WqESzVfinK6xELCfBR46qPrVP TwlH7PpEaRyogX2zHUCrck5rPvsvD5qSpVlNF/9FxoY6nf/JWFC0phTFBIohmiAw GR+5I5CVgW7F6kQ953GygqJkg5y5c7bg2F9iYc4X9aVW64SKH4w/IKrzxxHLgQpk V6t+21niQ+th0+Rwjh6CHx/8N85zG13k3a9j4mz2eKgNbvAMtTgx7wHR3T3FbGgo UVlBU4++FnYbRw== -----END CERTIFICATE-----Generated at Sun Jan 25 16:23:49 2026 by rpki-client