This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json) Hash identifier: BGFDNitq3mNpXE8kDQVXvhf0WVKeLh5S7aGr7p4EG5w= Subject key identifier: 79:63:09:0B:ED:AC:4C:8B:B0:C5:4A:5D:82:85:DA:A3:AE:06:9D:09 Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Certificate serial: 019BF34FDC5A863A13009E1E1E0979772D7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 04:00:55 +0000 Manifest this update: Sun 25 Jan 2026 04:00:55 +0000 Manifest next update: Mon 26 Jan 2026 04:00:55 +0000 Files and hashes: 1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=) 2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=) 3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=) 4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: 1NnqEPIEX/ttB/Pw83PybfWGkyyKlLVWO1atLs+s34A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:4f:dc:5a:86:3a:13:00:9e:1e:1e:09:79:77:2d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Validity Not Before: Jan 25 04:00:55 2026 GMT Not After : Jan 26 04:00:55 2026 GMT Subject: CN=7963090bedac4c8bb0c54a5d8285daa3ae069d09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c7:37:dd:75:e7:28:93:eb:aa:38:1a:c5:35: a8:46:19:bf:93:bf:d5:8a:1c:84:72:c4:94:62:28: a1:cd:d4:53:98:47:8d:54:11:2c:c2:1e:4c:4f:c6: 4e:54:bb:e4:86:e3:4a:8a:5a:dc:b6:c6:77:89:6f: e0:9d:8b:d6:1b:49:34:51:2a:9c:71:65:15:a6:03: 71:e8:cb:d4:4a:f1:77:1b:9e:78:20:0d:52:12:cb: 4d:0f:eb:2c:ba:ad:8a:34:bf:41:fd:ae:c0:c3:2c: b3:5a:00:ff:8c:08:a9:32:0a:8b:06:3a:b0:21:75: 24:4a:63:1d:9a:45:ac:24:8e:dd:9c:39:28:02:8f: 0f:96:85:74:5f:cb:8a:34:8b:0b:f4:c0:e4:6d:5a: 59:d1:6b:96:b1:ca:ae:48:ca:86:bb:8a:82:fa:89: d4:6a:b3:cf:9f:39:06:d0:43:99:2d:3f:d8:f9:13: 64:4b:ef:b3:a6:f4:34:60:86:98:a6:e5:7c:50:49: 94:03:6d:2f:9f:7d:67:f9:83:07:5b:5e:65:e6:63: 6e:fe:e0:b5:d5:b7:6a:3e:5d:07:fb:eb:a2:a2:68: 87:38:4d:c5:90:63:b1:bf:34:18:2a:58:d4:ad:5f: cf:b2:97:6d:96:a0:c1:10:4c:b1:a9:72:07:a5:62: 70:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:63:09:0B:ED:AC:4C:8B:B0:C5:4A:5D:82:85:DA:A3:AE:06:9D:09 X509v3 Authority Key Identifier: keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f5:f3:2e:d6:9c:f5:75:de:e0:b5:be:2f:be:82:d3:8a:28: 5e:f3:54:aa:67:23:e8:7a:2b:f6:a3:d3:08:24:ea:87:4f:0e: c8:c2:76:d9:15:ed:35:5a:c9:2b:3e:ee:9b:b8:ef:ed:69:f7: 11:0a:82:97:38:2c:3a:ab:88:62:d3:bd:5f:cc:00:dd:c7:6e: 98:83:87:5a:cc:6c:d1:bd:d6:74:1a:0f:c5:79:8d:ae:53:c8: 53:72:2b:74:03:ea:77:8d:00:68:72:48:e2:89:1b:8c:b1:c7: da:c3:e4:f3:5a:06:52:96:13:6f:ac:01:80:02:37:6d:7f:4a: f4:56:15:93:7d:f2:10:8d:70:11:97:18:64:9a:f0:60:fe:fb: e0:4d:ab:09:32:b8:b5:14:27:0d:75:79:50:ed:88:fb:55:9f: ec:72:a6:f1:ef:8c:a5:fa:33:33:3d:c4:71:4f:d8:cd:00:93: b0:89:ca:b6:4e:e6:7a:55:68:d1:42:95:49:40:6f:09:93:9e: ea:75:8a:c4:d7:0d:8e:76:7d:8c:82:93:9e:1f:95:10:fb:4a: 36:af:db:52:6c:d6:6e:f8:dd:87:8b:84:b2:a1:fd:58:70:76: 6e:ca:71:e6:6e:6f:25:2f:e7:b8:fc:95:85:14:26:63:b7:47: be:68:0a:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzT9xahjoTAJ4eHgl5dy1+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZjdhMGEwNDhiNjhlY2NmYTRkNDllYWI0ZjE2ZGM3OTJj MGQzMTgwHhcNMjYwMTI1MDQwMDU1WhcNMjYwMTI2MDQwMDU1WjAzMTEwLwYDVQQD Eyg3OTYzMDkwYmVkYWM0YzhiYjBjNTRhNWQ4Mjg1ZGFhM2FlMDY5ZDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Mc33XXnKJPrqjgaxTWoRhm/k7/V ihyEcsSUYiihzdRTmEeNVBEswh5MT8ZOVLvkhuNKilrctsZ3iW/gnYvWG0k0USqc cWUVpgNx6MvUSvF3G554IA1SEstND+ssuq2KNL9B/a7AwyyzWgD/jAipMgqLBjqw IXUkSmMdmkWsJI7dnDkoAo8PloV0X8uKNIsL9MDkbVpZ0WuWscquSMqGu4qC+onU arPPnzkG0EOZLT/Y+RNkS++zpvQ0YIaYpuV8UEmUA20vn31n+YMHW15l5mNu/uC1 1bdqPl0H++uiomiHOE3FkGOxvzQYKljUrV/PspdtlqDBEEyxqXIHpWJwtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHljCQvtrEyLsMVKXYKF2qOuBp0JMB8GA1UdIwQY MBaAFL33oKBIto7M+k1J6rTxbceSwNMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgt MzUxNjE5MWE5ZDY4LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgtMzUxNjE5MWE5ZDY4 LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfXzLtac 9XXe4LW+L76C04ooXvNUqmcj6Hor9qPTCCTqh08OyMJ22RXtNVrJKz7um7jv7Wn3 EQqClzgsOquIYtO9X8wA3cdumIOHWsxs0b3WdBoPxXmNrlPIU3IrdAPqd40AaHJI 4okbjLHH2sPk81oGUpYTb6wBgAI3bX9K9FYVk33yEI1wEZcYZJrwYP774E2rCTK4 tRQnDXV5UO2I+1Wf7HKm8e+MpfozMz3EcU/YzQCTsInKtk7melVo0UKVSUBvCZOe 6nWKxNcNjnZ9jIKTnh+VEPtKNq/bUmzWbvjdh4uEsqH9WHB2bspx5m5vJS/nuPyV hRQmY7dHvmgKfw== -----END CERTIFICATE-----Generated at Sun Jan 25 15:33:03 2026 by rpki-client