This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json) Hash identifier: MRB6SrBCcPTj05OYezb29ykhhbBwlOMlyVrqEGcd2lk= Subject key identifier: 11:D5:21:19:2B:30:7D:4B:B3:F4:8C:63:B2:7D:7B:FF:BE:07:E0:F5 Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29 Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29 Certificate serial: 019BF876379BB0531A715CE9D8659E92F203 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft Manifest number: 17F2 Signing time: Mon 26 Jan 2026 04:00:55 +0000 Manifest this update: Mon 26 Jan 2026 04:00:55 +0000 Manifest next update: Tue 27 Jan 2026 04:00:55 +0000 Files and hashes: 1: BaCjj0GLJaGkCIJ_iiWKcu73XDI.roa (hash: VP6Vr4TzbvdauH2ppsPw/bcyRKYsvp9ZnrBor6tuGNU=) 2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: YMkoxZSNqGyXrZF7dOut/9VsGYxj2AXTk+L9P8HeHpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:37:9b:b0:53:1a:71:5c:e9:d8:65:9e:92:f2:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29 Validity Not Before: Jan 26 04:00:55 2026 GMT Not After : Jan 27 04:00:55 2026 GMT Subject: CN=11d521192b307d4bb3f48c63b27d7bffbe07e0f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ac:53:eb:5c:bf:4f:7a:01:c5:c3:4f:cc:c6: 41:5b:09:0f:94:cd:d3:6c:21:5b:88:fc:19:57:f5: b5:b5:c2:c8:01:5e:ad:f0:b8:e0:ae:78:cc:39:b5: 02:99:75:7d:49:59:65:cb:7e:4a:32:41:ea:c2:c5: 0b:49:43:10:1c:b5:c4:0c:73:87:aa:e9:32:d3:73: c3:e2:bd:22:72:a0:50:4a:2a:76:38:54:7f:7b:9f: 9a:1a:a8:40:6b:4c:36:d8:13:9c:17:91:89:2b:9b: 29:55:ec:8a:bf:6c:d0:bb:1a:11:97:9c:f1:58:47: 8f:5c:cf:ea:7c:b0:0c:43:46:ad:59:c8:bb:30:a2: 25:02:43:52:f7:2b:86:ae:6a:e4:52:8f:28:d9:dc: d0:f6:f4:62:43:ab:33:8f:10:37:bd:12:a8:c4:5a: 7a:da:87:56:07:92:eb:9e:73:50:bf:7d:e7:af:de: 83:cb:ae:5e:14:01:4a:bd:bc:45:d0:c3:5e:d9:40: f0:be:6a:e6:4a:4a:db:0e:f3:a7:12:4d:0d:20:ac: a9:3d:80:e7:f6:47:c5:b1:19:91:89:4a:26:4f:a5: ae:81:8f:4a:02:bb:3d:ae:08:f4:71:33:48:ad:26: 0b:77:08:9f:d6:c6:35:5c:69:82:da:a9:c4:e7:2d: ca:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D5:21:19:2B:30:7D:4B:B3:F4:8C:63:B2:7D:7B:FF:BE:07:E0:F5 X509v3 Authority Key Identifier: keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:73:ec:df:da:40:39:9b:07:23:6b:72:72:43:1a:31:f1:7a: fb:96:8d:f7:0b:e6:f3:a9:76:77:f2:51:8b:17:96:f5:3a:9d: 09:41:66:d9:a6:19:cd:12:d4:c9:b1:d7:5d:d6:22:b1:50:31: e2:6b:59:fe:d5:33:3c:8c:59:74:0e:bf:e1:bf:6e:45:bc:4d: 70:19:42:11:f2:87:cc:13:83:4c:7f:43:e0:82:4f:14:d3:88: b2:0c:61:c3:42:af:0d:71:7f:9f:ca:f4:c5:08:dd:d4:1d:6b: 2c:b2:af:b8:21:66:35:6f:69:ac:37:7f:47:79:96:bd:78:b0: e7:63:dc:27:05:3a:b1:dc:0f:20:47:28:91:6f:23:29:bb:ff: 60:84:9e:55:ce:60:de:bc:05:6d:da:20:18:03:ff:e7:e9:cb: f4:bf:5c:dc:05:23:e4:59:bb:f6:92:0f:8b:ca:ea:14:9d:ee: 6c:9f:67:cb:8f:16:b6:5e:49:06:19:20:9f:d1:9c:5c:ec:2e: 86:aa:ca:82:1a:04:08:8b:6e:df:a3:ea:63:6a:ab:b7:b5:3f: de:1d:9f:46:33:a2:71:8b:50:03:3f:5d:b1:df:2d:38:26:34: fe:62:fd:35:e1:26:49:17:35:53:04:b9:d7:4d:91:3b:ee:62: 39:78:e2:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4djebsFMacVzp2GWekvIDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYzYzZjAxMGM1NDBiY2Q0NTU0MzQ0YmZiOWE1OWEyZWRi YWJjMjkwHhcNMjYwMTI2MDQwMDU1WhcNMjYwMTI3MDQwMDU1WjAzMTEwLwYDVQQD EygxMWQ1MjExOTJiMzA3ZDRiYjNmNDhjNjNiMjdkN2JmZmJlMDdlMGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaxT61y/T3oBxcNPzMZBWwkPlM3T bCFbiPwZV/W1tcLIAV6t8LjgrnjMObUCmXV9SVlly35KMkHqwsULSUMQHLXEDHOH quky03PD4r0icqBQSip2OFR/e5+aGqhAa0w22BOcF5GJK5spVeyKv2zQuxoRl5zx WEePXM/qfLAMQ0atWci7MKIlAkNS9yuGrmrkUo8o2dzQ9vRiQ6szjxA3vRKoxFp6 2odWB5LrnnNQv33nr96Dy65eFAFKvbxF0MNe2UDwvmrmSkrbDvOnEk0NIKypPYDn 9kfFsRmRiUomT6WugY9KArs9rgj0cTNIrSYLdwif1sY1XGmC2qnE5y3KBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHVIRkrMH1Ls/SMY7J9e/++B+D1MB8GA1UdIwQY MBaAFLzGPwEMVAvNRVQ0S/uaWaLturwpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYt Y2M0MWM0YTMxOThkLzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYtY2M0MWM0YTMxOThk LzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdXPs39pA OZsHI2tyckMaMfF6+5aN9wvm86l2d/JRixeW9TqdCUFm2aYZzRLUybHXXdYisVAx 4mtZ/tUzPIxZdA6/4b9uRbxNcBlCEfKHzBODTH9D4IJPFNOIsgxhw0KvDXF/n8r0 xQjd1B1rLLKvuCFmNW9prDd/R3mWvXiw52PcJwU6sdwPIEcokW8jKbv/YISeVc5g 3rwFbdogGAP/5+nL9L9c3AUj5Fm79pIPi8rqFJ3ubJ9ny48Wtl5JBhkgn9GcXOwu hqrKghoECItu36PqY2qrt7U/3h2fRjOicYtQAz9dsd8tOCY0/mL9NeEmSRc1UwS5 102RO+5iOXjiHw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:49:27 2026 by rpki-client