This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft File: VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json) Hash identifier: 3wcj2isiTuTqgIwvxdyOuTG882FFpFJsUlVQxi5U/TQ= Subject key identifier: A4:D0:B4:77:8E:86:36:76:A3:07:91:3C:4A:F5:AD:78:41:C7:37:BA Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E Certificate issuer: /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e Certificate serial: 019BF6F58CD4717D25C08F61F1C39DEB0EC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft Manifest number: 0C4A Signing time: Sun 25 Jan 2026 21:00:46 +0000 Manifest this update: Sun 25 Jan 2026 21:00:46 +0000 Manifest next update: Mon 26 Jan 2026 21:00:46 +0000 Files and hashes: 1: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: qj0w2XYb6kyPFpGNByopX9DzLHknRLXfW2ev22jFBi4=) 2: saX-4zWOH4EUS7-f-fRnPdejWXs.asa (hash: 7UdBDPMIJnC3A+b+O76GKd1Ogi2PwesKFjwNMkDRIyU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:8c:d4:71:7d:25:c0:8f:61:f1:c3:9d:eb:0e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e Validity Not Before: Jan 25 21:00:46 2026 GMT Not After : Jan 26 21:00:46 2026 GMT Subject: CN=a4d0b4778e863676a307913c4af5ad7841c737ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:a2:78:88:cb:b7:9f:24:a8:99:87:6c:72: 60:d0:db:cc:de:ca:2f:e5:d9:26:f0:1d:dd:78:26: 42:80:ac:0a:d5:3c:97:43:21:91:f5:12:cc:5b:7e: 06:c4:5c:8f:b8:9e:5e:c7:ce:5f:75:0a:24:a7:1c: 7b:3c:87:e6:87:b0:63:9c:3f:32:c4:5c:7c:43:c9: 9a:ca:d0:93:6a:ae:03:77:60:db:2e:e4:2f:8c:48: e1:6f:36:02:da:6f:22:b2:e9:be:5b:24:25:12:c0: 2f:ee:6f:ba:ed:2e:67:b7:b4:25:f6:71:1c:12:af: e6:ea:f5:98:6b:ce:c6:c2:d2:56:39:ef:26:b2:95: 29:8d:fd:4d:8d:ec:bf:3f:e7:c9:ab:fb:76:c9:bc: 7f:48:cc:0f:e1:fc:7f:8a:06:af:5d:15:ce:d9:1d: c6:29:2d:dd:fd:cc:0c:7a:4c:30:bf:37:a5:cd:66: 58:31:83:4e:13:c6:aa:ad:ae:40:d9:e0:4b:86:74: 77:d5:d9:a6:04:dc:45:b3:9f:00:d8:fc:18:98:02: e2:7d:e4:74:41:4d:e1:10:58:e6:14:19:72:12:fb: 76:29:ea:4f:d4:6b:44:0c:62:af:27:ab:03:ec:dd: 87:14:e1:ad:ae:12:5b:52:50:8b:e3:30:7a:b2:49: be:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D0:B4:77:8E:86:36:76:A3:07:91:3C:4A:F5:AD:78:41:C7:37:BA X509v3 Authority Key Identifier: keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:72:d0:4b:47:e1:04:d0:3b:6a:80:a7:0e:44:9b:c6:d0:95: 2f:0a:68:21:2b:93:8b:44:00:2f:2c:3c:82:42:45:99:3e:ed: b9:ea:5c:86:31:c5:f8:f6:cc:d7:22:b6:34:04:08:61:6e:c9: bf:1d:0a:7c:81:9a:e2:28:ac:93:a1:44:6f:57:14:90:d5:44: f9:bb:49:81:3b:61:94:73:a7:d0:9e:e2:fa:85:57:60:dc:bb: bc:a8:d3:16:68:25:86:a7:b1:dd:59:21:45:a5:ee:bd:95:5e: b2:a7:3d:00:a4:79:99:88:7e:e3:9a:cf:2b:23:3f:63:82:7b: 5a:a5:99:14:96:70:d0:d8:39:e9:7b:d7:f1:b7:b0:61:51:07: 00:24:a7:fa:10:6f:c4:cd:cf:30:f4:e7:f9:29:cb:8c:29:87: 37:92:5b:db:91:02:15:e8:60:f2:96:2e:6f:df:63:e4:ab:b4: e7:3e:1b:db:8e:6a:87:95:5d:8c:7e:21:77:e6:21:70:6d:6c: fe:c1:93:9b:45:b5:db:18:69:10:e6:dd:97:cc:a9:bf:f2:05: bb:1b:57:fe:f6:31:16:b2:71:30:b1:66:48:62:4c:cd:31:4d: 20:d6:9d:87:88:7f:f9:df:6e:b9:6d:bb:c5:87:55:d5:63:a7: d4:b1:07:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29YzUcX0lwI9h8cOd6w7IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MzBjNTBjOGZkNDRhZDE5NmJmMTA1N2VlMmE2ZmE0MDQx YzdlNGUwHhcNMjYwMTI1MjEwMDQ2WhcNMjYwMTI2MjEwMDQ2WjAzMTEwLwYDVQQD EyhhNGQwYjQ3NzhlODYzNjc2YTMwNzkxM2M0YWY1YWQ3ODQxYzczN2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFiieIjLt58kqJmHbHJg0NvM3sov 5dkm8B3deCZCgKwK1TyXQyGR9RLMW34GxFyPuJ5ex85fdQokpxx7PIfmh7BjnD8y xFx8Q8maytCTaq4Dd2DbLuQvjEjhbzYC2m8isum+WyQlEsAv7m+67S5nt7Ql9nEc Eq/m6vWYa87GwtJWOe8mspUpjf1Njey/P+fJq/t2ybx/SMwP4fx/igavXRXO2R3G KS3d/cwMekwwvzelzWZYMYNOE8aqra5A2eBLhnR31dmmBNxFs58A2PwYmALifeR0 QU3hEFjmFBlyEvt2KepP1GtEDGKvJ6sD7N2HFOGtrhJbUlCL4zB6skm+JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTQtHeOhjZ2oweRPEr1rXhBxze6MB8GA1UdIwQY MBaAFFcwxQyP1ErRlr8QV+4qb6QEHH5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQt Zjc1YzExNjNmYjFlLzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQtZjc1YzExNjNmYjFl LzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnLQS0fh BNA7aoCnDkSbxtCVLwpoISuTi0QALyw8gkJFmT7tuepchjHF+PbM1yK2NAQIYW7J vx0KfIGa4iisk6FEb1cUkNVE+btJgTthlHOn0J7i+oVXYNy7vKjTFmglhqex3Vkh RaXuvZVesqc9AKR5mYh+45rPKyM/Y4J7WqWZFJZw0Ng56XvX8bewYVEHACSn+hBv xM3PMPTn+SnLjCmHN5Jb25ECFehg8pYub99j5Ku05z4b245qh5VdjH4hd+YhcG1s /sGTm0W12xhpEObdl8ypv/IFuxtX/vYxFrJxMLFmSGJMzTFNINadh4h/+d9uuW27 xYdV1WOn1LEHdw== -----END CERTIFICATE-----Generated at Mon Jan 26 04:54:19 2026 by rpki-client