This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json) Hash identifier: SBWRWHibN5PjR/e/6iqdaDDltJOppEftSKzwocgUzmQ= Subject key identifier: 04:7B:3A:00:79:B2:76:9B:A1:E7:27:49:C6:45:09:CE:99:51:18:2F Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae Certificate serial: 019BF20712E17F51623BD813A9FD202BCA8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft Manifest number: 17E2 Signing time: Sat 24 Jan 2026 22:01:48 +0000 Manifest this update: Sat 24 Jan 2026 22:01:48 +0000 Manifest next update: Sun 25 Jan 2026 22:01:48 +0000 Files and hashes: 1: Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa (hash: +LvudqksRpkI5ThHyJo6o0SESZrwUB4lFuLcKBfvGGo=) 2: lb9dWd03BfnM72HsEUOqMfSXM5c.roa (hash: RJsPG6DuVrowjWLhY1jcZaBG3s9HD98PpDetQPQtNn0=) 3: n8D_NKCQjks2jeuzf-VmDEGhJy0.roa (hash: BxlSKmYiJSjve5WPsQ9b002bw4r8+dfXErMK1Yu3iW0=) 4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: gr/oy2jIBvi2eYoq9wRprLXKG3HTS+mvtnW5OK+KGsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:07:12:e1:7f:51:62:3b:d8:13:a9:fd:20:2b:ca:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae Validity Not Before: Jan 24 22:01:48 2026 GMT Not After : Jan 25 22:01:48 2026 GMT Subject: CN=047b3a0079b2769ba1e72749c64509ce9951182f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:84:f0:56:30:9a:d7:33:5e:1f:d4:90:37:19: c7:e5:a8:7a:95:fd:fe:ec:4f:2d:9d:87:77:4a:7c: 38:05:50:20:64:80:38:b4:a9:9d:dd:08:72:de:ba: 45:e5:c7:3c:d6:72:0a:b1:2e:c7:de:2b:c4:48:f0: 29:da:0e:1c:3c:e9:34:e5:23:fd:e7:fb:0d:e5:ac: 44:dc:b5:18:67:4c:2a:0a:ca:fb:76:06:71:ff:06: ca:3f:5d:1e:1c:f0:45:76:09:2a:91:fd:63:13:af: 8c:d4:80:bb:54:16:44:5c:73:01:e8:81:16:c8:1f: a3:ed:2a:80:14:4d:29:17:2b:63:48:b2:4d:7b:6b: cc:98:ea:f0:d3:93:08:93:ec:eb:6a:52:d1:6f:95: fe:a1:45:a8:44:37:23:40:3e:f6:01:11:88:1d:2b: 52:2c:f0:4a:e3:6c:5a:9f:f8:f5:66:36:67:e8:6a: 4f:2d:2f:fa:d1:29:d3:f0:bf:7b:0d:13:dc:15:a4: 8c:f8:06:8f:e0:18:de:a8:77:6d:e6:93:21:98:a4: 86:cb:54:ff:57:d7:5b:cd:be:0e:b5:2c:2b:3f:a4: a0:40:a5:68:06:0d:78:da:c5:5a:45:2e:b9:28:3b: 9d:35:57:50:84:8f:2a:c5:a8:9a:19:be:9a:5a:72: 7a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7B:3A:00:79:B2:76:9B:A1:E7:27:49:C6:45:09:CE:99:51:18:2F X509v3 Authority Key Identifier: keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:3b:6a:c4:78:90:f4:b5:58:35:cd:23:b3:1b:53:75:df:92: 53:c6:6b:ce:b3:d7:3a:8d:a6:69:1e:cc:8f:82:a8:68:c0:3b: a9:44:e7:96:94:6d:51:5a:2c:1d:e7:9f:ac:94:bb:17:d4:ee: f7:f3:5c:92:84:92:48:9c:2e:90:63:ea:e1:57:c2:22:65:52: e1:b8:72:88:4c:98:ec:0e:18:d3:6e:c3:b4:57:bc:90:a7:ef: 54:93:74:29:45:b5:20:21:2b:86:92:0b:c0:b7:46:89:06:ca: 9c:8b:ec:ec:53:7f:80:6c:9d:de:16:fe:3c:b0:cf:55:45:7f: dd:2f:34:85:90:3b:1f:f0:39:2e:c8:6a:c7:20:69:a6:88:c5: ea:fe:77:3c:07:57:2a:42:3d:99:43:75:2a:0c:1f:7e:d6:03: 56:ea:e4:0e:97:d1:1a:85:2b:75:4a:d9:78:ce:19:67:7f:03: 64:a2:9b:33:36:84:ad:68:20:65:44:0b:67:51:3c:b1:fc:a5: d7:d8:db:c8:bc:f3:aa:7b:dc:e6:07:f3:a1:ad:6d:95:1e:09: da:48:22:f2:c5:cb:4e:0e:66:6e:0f:fe:c0:db:13:c6:10:68: 55:dd:a9:9a:a7:58:d9:a6:de:70:62:42:0a:99:b4:6c:33:48: 77:a8:53:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyBxLhf1FiO9gTqf0gK8qKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMjM5Yzc3OTBmYzNkNTc3NjI2ZDViYmYxODYxZTU5Yzli NDcwYWUwHhcNMjYwMTI0MjIwMTQ4WhcNMjYwMTI1MjIwMTQ4WjAzMTEwLwYDVQQD EygwNDdiM2EwMDc5YjI3NjliYTFlNzI3NDljNjQ1MDljZTk5NTExODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYTwVjCa1zNeH9SQNxnH5ah6lf3+ 7E8tnYd3Snw4BVAgZIA4tKmd3Qhy3rpF5cc81nIKsS7H3ivESPAp2g4cPOk05SP9 5/sN5axE3LUYZ0wqCsr7dgZx/wbKP10eHPBFdgkqkf1jE6+M1IC7VBZEXHMB6IEW yB+j7SqAFE0pFytjSLJNe2vMmOrw05MIk+zralLRb5X+oUWoRDcjQD72ARGIHStS LPBK42xan/j1ZjZn6GpPLS/60SnT8L97DRPcFaSM+AaP4BjeqHdt5pMhmKSGy1T/ V9dbzb4OtSwrP6SgQKVoBg142sVaRS65KDudNVdQhI8qxaiaGb6aWnJ60wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAR7OgB5snaboecnScZFCc6ZURgvMB8GA1UdIwQY MBaAFL8jnHeQ/D1XdibVu/GGHlnJtHCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3Njct YjU1MDNhMzJlZGZlLzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3NjctYjU1MDNhMzJlZGZl LzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyjtqxHiQ 9LVYNc0jsxtTdd+SU8ZrzrPXOo2maR7Mj4KoaMA7qUTnlpRtUVosHeefrJS7F9Tu 9/NckoSSSJwukGPq4VfCImVS4bhyiEyY7A4Y027DtFe8kKfvVJN0KUW1ICErhpIL wLdGiQbKnIvs7FN/gGyd3hb+PLDPVUV/3S80hZA7H/A5LshqxyBppojF6v53PAdX KkI9mUN1KgwfftYDVurkDpfRGoUrdUrZeM4ZZ38DZKKbMzaErWggZUQLZ1E8sfyl 19jbyLzzqnvc5gfzoa1tlR4J2kgi8sXLTg5mbg/+wNsTxhBoVd2pmqdY2abecGJC Cpm0bDNId6hTkQ== -----END CERTIFICATE-----Generated at Sun Jan 25 06:07:35 2026 by rpki-client