This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft File: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json) Hash identifier: Gw3WlpDkbF1hkmHJNMJwYz/fcD0UwoxrXhZzbYVHhfo= Subject key identifier: 99:A2:51:B3:F0:93:EC:C8:8A:8A:BC:94:2F:08:6D:EC:B6:2D:BA:F7 Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C Certificate issuer: /CN=5647798f253c724eb07f2e8ad8c2ed949436499c Certificate serial: 019BF619E9122B9DEB631369E58339F1D767 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft Manifest number: 02D6 Signing time: Sun 25 Jan 2026 17:00:51 +0000 Manifest this update: Sun 25 Jan 2026 17:00:51 +0000 Manifest next update: Mon 26 Jan 2026 17:00:51 +0000 Files and hashes: 1: 1MRUxxI-MJ5URuxEnbVPosa96BE.roa (hash: ybJfJTh+qledOSXFQ1Rpq1+qpwILYkG/vUQqmage5L0=) 2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: CntDPhwbXmhvsefsEiqpSD7S8hG7VCplwUCZJPH/2Xs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:e9:12:2b:9d:eb:63:13:69:e5:83:39:f1:d7:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c Validity Not Before: Jan 25 17:00:51 2026 GMT Not After : Jan 26 17:00:51 2026 GMT Subject: CN=99a251b3f093ecc88a8abc942f086decb62dbaf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:41:ee:78:29:ed:d1:44:a5:25:4a:6a:88: e9:44:a2:73:7b:bd:76:4b:f7:d6:3b:9c:07:de:e2: 90:89:fa:15:82:a4:09:7e:9a:3f:06:9e:77:5b:d0: a1:5d:28:96:7c:45:7d:da:12:6e:80:d4:e3:45:a5: 24:09:ea:8e:69:d4:04:28:60:46:2b:3f:a3:ef:6c: 38:9a:82:ce:a8:ec:c5:bf:41:96:b8:54:28:d6:1c: cf:14:37:bf:ae:2b:98:e3:0a:8c:73:c2:d2:1e:ea: 86:ab:bb:a2:31:49:94:17:37:6a:38:6d:b0:05:60: cf:7b:da:5c:0c:e4:85:28:78:d2:50:5d:53:cd:9c: 13:84:6a:7e:0a:15:29:ca:3f:5c:da:57:d8:e7:41: d5:6f:11:ce:54:63:8a:8c:4f:b1:5b:0f:48:1d:b0: b8:26:75:cc:f7:5a:b2:66:5f:b6:9f:4c:54:4b:ac: d6:23:ed:b7:ba:a3:b3:ce:07:5c:e9:a6:7b:ed:b4: 88:81:58:14:ab:8b:bc:37:65:ec:aa:ca:77:66:74: 2f:ac:a1:b0:64:47:a4:7b:37:40:9b:37:3b:21:c1: 21:f8:7f:28:01:35:e0:a2:61:c6:c1:97:d8:05:96: 6d:6b:4e:a5:5f:95:b9:50:6e:71:ec:1b:39:3a:0c: f3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A2:51:B3:F0:93:EC:C8:8A:8A:BC:94:2F:08:6D:EC:B6:2D:BA:F7 X509v3 Authority Key Identifier: keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:61:3e:d4:a3:52:3d:3b:9c:07:70:7b:e7:d2:ca:6f:88:5f: 32:83:91:47:8f:48:7e:e6:19:b2:2e:e3:19:2a:0a:13:c9:0b: 0b:e4:68:8c:2a:a0:c1:e8:4b:cc:77:08:1c:e9:10:1d:4c:89: b5:b3:64:74:b0:df:14:64:d8:fd:e0:01:fd:ea:00:0a:4c:a6: 42:99:f8:21:fc:84:28:89:9b:88:9f:8c:25:af:de:54:a4:ad: 4a:10:27:49:62:37:66:a0:d9:f1:e0:73:00:8c:f0:98:2f:ee: 51:2a:58:5f:d0:40:41:8e:f9:7d:8f:37:2c:f0:88:32:89:b8: dc:df:7a:9c:35:86:ba:a5:e2:27:6c:60:c6:9f:cc:97:db:5a: fb:c2:51:f5:89:8f:ee:87:3f:eb:a7:e4:34:1d:b1:a7:db:6e: d8:37:b6:2c:d4:79:e8:3d:9b:7c:16:fb:6c:85:3c:31:dc:22: 86:cc:f8:ea:df:bc:9a:99:ab:4b:52:4a:e4:50:c4:9a:bc:2f: e1:86:7a:81:57:68:56:7d:5c:da:b1:7a:2b:1d:44:e5:b6:90: ba:e6:84:90:ec:3e:1f:f9:c6:3a:60:d7:a3:86:33:37:5d:da: 5a:f5:ac:a2:72:fd:67:35:ac:90:4c:19:c9:02:a2:82:89:21: 10:24:00:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GekSK53rYxNp5YM58ddnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NDc3OThmMjUzYzcyNGViMDdmMmU4YWQ4YzJlZDk0OTQz NjQ5OWMwHhcNMjYwMTI1MTcwMDUxWhcNMjYwMTI2MTcwMDUxWjAzMTEwLwYDVQQD Eyg5OWEyNTFiM2YwOTNlY2M4OGE4YWJjOTQyZjA4NmRlY2I2MmRiYWY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrxB7ngp7dFEpSVKaojpRKJze712 S/fWO5wH3uKQifoVgqQJfpo/Bp53W9ChXSiWfEV92hJugNTjRaUkCeqOadQEKGBG Kz+j72w4moLOqOzFv0GWuFQo1hzPFDe/riuY4wqMc8LSHuqGq7uiMUmUFzdqOG2w BWDPe9pcDOSFKHjSUF1TzZwThGp+ChUpyj9c2lfY50HVbxHOVGOKjE+xWw9IHbC4 JnXM91qyZl+2n0xUS6zWI+23uqOzzgdc6aZ77bSIgVgUq4u8N2Xsqsp3ZnQvrKGw ZEekezdAmzc7IcEh+H8oATXgomHGwZfYBZZta06lX5W5UG5x7Bs5OgzzvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJmiUbPwk+zIioq8lC8Ibey2Lbr3MB8GA1UdIwQY MBaAFFZHeY8lPHJOsH8uitjC7ZSUNkmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDkt MWE0YjZlZGIwM2E3LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDktMWE0YjZlZGIwM2E3 LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJGE+1KNS PTucB3B759LKb4hfMoORR49IfuYZsi7jGSoKE8kLC+RojCqgwehLzHcIHOkQHUyJ tbNkdLDfFGTY/eAB/eoACkymQpn4IfyEKImbiJ+MJa/eVKStShAnSWI3ZqDZ8eBz AIzwmC/uUSpYX9BAQY75fY83LPCIMom43N96nDWGuqXiJ2xgxp/Ml9ta+8JR9YmP 7oc/66fkNB2xp9tu2De2LNR56D2bfBb7bIU8Mdwihsz46t+8mpmrS1JK5FDEmrwv 4YZ6gVdoVn1c2rF6Kx1E5baQuuaEkOw+H/nGOmDXo4YzN13aWvWsonL9ZzWskEwZ yQKigokhECQAuA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:32:58 2026 by rpki-client