This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json) Hash identifier: /V2j9BX/ennXR83OmLJUeK+5RKvip8bPMqoPhTMaFjA= Subject key identifier: 97:44:AE:12:73:53:62:CA:07:32:32:8A:22:A8:DE:DD:CE:EC:8B:D4 Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5 Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5 Certificate serial: 019BF575177BB12C72DEA9AC26F7B361A146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 14:00:50 +0000 Manifest this update: Sun 25 Jan 2026 14:00:50 +0000 Manifest next update: Mon 26 Jan 2026 14:00:50 +0000 Files and hashes: 1: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: fOWYpdx67rzFZGnUDg9IJooB5sCeE+luVAg7dSqKPS0=) 2: zzDkvJaiRpsmi6O7kaXorv8G2lo.roa (hash: U4Wz/U8KhaG7QlShrJHjPRkbJ49L12u0oJF2UhXulFI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:17:7b:b1:2c:72:de:a9:ac:26:f7:b3:61:a1:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5 Validity Not Before: Jan 25 14:00:50 2026 GMT Not After : Jan 26 14:00:50 2026 GMT Subject: CN=9744ae12735362ca0732328a22a8deddceec8bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:59:59:e5:74:8a:30:e0:7e:51:a5:7d:26:f1: ee:e2:3f:17:b4:71:b5:f8:1b:c7:1d:f4:c6:1d:57: a5:4b:e4:9d:c0:98:aa:76:4c:25:ff:1a:2b:2d:23: 47:32:e6:0b:a3:40:55:c6:62:76:5a:47:c1:97:c1: a3:90:70:ac:e5:29:ad:95:88:3c:b8:e6:26:f5:d5: 5e:99:71:bb:eb:3b:45:21:f0:50:fb:ee:8c:44:a9: 27:e9:c9:10:67:a0:31:6c:9b:57:10:ba:7a:20:6f: e6:17:07:df:fb:2d:04:cd:eb:7e:26:89:5b:34:1e: c8:53:28:ee:3b:e9:1a:88:f9:c9:b6:9f:b8:bf:60: 7d:37:e0:c6:f4:57:9f:83:a1:6b:30:ef:79:00:9a: e4:96:73:35:b2:c5:88:8b:a5:75:df:94:1f:b1:48: ab:34:d5:bc:be:0f:7f:4c:23:c2:53:73:63:02:b3: 89:97:33:69:70:b1:f5:d0:cd:25:b3:92:dc:24:4a: 37:f2:d7:f9:d1:3f:39:e7:da:ca:5a:00:28:c8:90: a2:d1:bc:1b:b5:f5:b5:0d:f3:33:fe:21:4f:48:63: f9:aa:26:7c:32:f0:5f:39:32:64:36:66:37:76:54: a5:1a:e8:e4:44:9f:01:d9:3e:15:9e:53:ae:a6:bf: 36:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:44:AE:12:73:53:62:CA:07:32:32:8A:22:A8:DE:DD:CE:EC:8B:D4 X509v3 Authority Key Identifier: keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:e2:00:a6:ea:9a:fd:3c:3f:b5:09:34:09:e4:28:3c:ad:86: 31:cf:0a:c4:6e:93:a5:71:1d:32:4a:d9:c6:db:b9:76:7f:06: 08:6f:ba:d5:f5:17:d5:04:59:10:d6:c8:0a:36:74:2d:53:87: 3b:aa:d7:27:10:97:23:d5:f0:15:c1:9f:d3:b5:66:19:19:47: ab:b0:ca:62:c7:fb:f6:cd:37:01:21:6c:34:20:f1:7b:44:96: 91:fb:e8:04:01:f6:f3:85:57:4f:25:c6:9b:32:d1:05:55:61: 21:d2:5f:24:ff:cd:69:9f:e2:cf:79:85:2d:e6:a0:7f:94:f1: e1:44:b6:ac:53:30:b4:c1:e4:f3:65:58:19:8e:e1:26:06:66: 2c:d5:ea:ea:d8:60:1c:51:de:05:f4:3f:f0:0a:8d:38:85:fe: f9:fa:f6:0f:4a:aa:b0:ee:c1:ba:6c:d1:24:54:1b:98:24:92: f1:c0:1c:30:86:e0:68:45:c9:22:73:38:82:a5:68:25:b8:68: af:26:29:82:bc:48:5c:39:f9:90:2c:ec:2c:24:de:cc:be:a6: 3a:16:92:4d:3d:9d:8c:78:5f:e5:76:55:ed:0a:c1:d9:f1:da: dc:23:a7:ad:8e:12:6d:92:1c:bc:9d:83:06:35:a3:53:25:8f: 4a:dd:d0:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dRd7sSxy3qmsJvezYaFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWQ3YzQyZTkxNzg0NGNiYzJkZTRhOTFjNmMxNzAxZGU1 OTcxYjUwHhcNMjYwMTI1MTQwMDUwWhcNMjYwMTI2MTQwMDUwWjAzMTEwLwYDVQQD Eyg5NzQ0YWUxMjczNTM2MmNhMDczMjMyOGEyMmE4ZGVkZGNlZWM4YmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0llZ5XSKMOB+UaV9JvHu4j8XtHG1 +BvHHfTGHVelS+SdwJiqdkwl/xorLSNHMuYLo0BVxmJ2WkfBl8GjkHCs5SmtlYg8 uOYm9dVemXG76ztFIfBQ++6MRKkn6ckQZ6AxbJtXELp6IG/mFwff+y0Ezet+Jolb NB7IUyjuO+kaiPnJtp+4v2B9N+DG9Fefg6FrMO95AJrklnM1ssWIi6V135QfsUir NNW8vg9/TCPCU3NjArOJlzNpcLH10M0ls5LcJEo38tf50T8559rKWgAoyJCi0bwb tfW1DfMz/iFPSGP5qiZ8MvBfOTJkNmY3dlSlGujkRJ8B2T4VnlOupr82owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdErhJzU2LKBzIyiiKo3t3O7IvUMB8GA1UdIwQY MBaAFLydfELpF4RMvC3kqRxsFwHeWXG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQt MDNmYjU0MTg3ZWUyLzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8yOWFlYTItYjZjOC00YWY5LWFkODQtMDNmYjU0MTg3ZWUy LzEvdkoxOFF1a1hoRXk4TGVTcEhHd1hBZDVaY2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0uIApuqa /Tw/tQk0CeQoPK2GMc8KxG6TpXEdMkrZxtu5dn8GCG+61fUX1QRZENbICjZ0LVOH O6rXJxCXI9XwFcGf07VmGRlHq7DKYsf79s03ASFsNCDxe0SWkfvoBAH284VXTyXG mzLRBVVhIdJfJP/NaZ/iz3mFLeagf5Tx4US2rFMwtMHk82VYGY7hJgZmLNXq6thg HFHeBfQ/8AqNOIX++fr2D0qqsO7BumzRJFQbmCSS8cAcMIbgaEXJInM4gqVoJbho ryYpgrxIXDn5kCzsLCTezL6mOhaSTT2djHhf5XZV7QrB2fHa3COnrY4SbZIcvJ2D BjWjUyWPSt3QfA== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:06 2026 by rpki-client