This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft File: vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json) Hash identifier: yjJ9mmLDMfAOE4+W8ZIjKBauuBoStycCYeQW9JIPZ0A= Subject key identifier: 1F:87:06:74:A3:DC:6F:13:76:B4:AF:A2:9B:5A:DE:8A:E6:67:2C:BA Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd Certificate serial: 019BF952065847F3EF018D348BC759F71E13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 08:01:00 +0000 Manifest this update: Mon 26 Jan 2026 08:01:00 +0000 Manifest next update: Tue 27 Jan 2026 08:01:00 +0000 Files and hashes: 1: RP8MgkKEHlqeBOnUZe0z_Y0SQKk.roa (hash: Ptm5tesi9injee8NYFqMkun/MxMMcArohdb5avPOa5I=) 2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: IGT5nROtMlR89/7a05kSvlvf60VFU61ef5beMtXQylg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:52:06:58:47:f3:ef:01:8d:34:8b:c7:59:f7:1e:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd Validity Not Before: Jan 26 08:01:00 2026 GMT Not After : Jan 27 08:01:00 2026 GMT Subject: CN=1f870674a3dc6f1376b4afa29b5ade8ae6672cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2e:e2:b0:0d:3f:94:5f:34:b1:f7:12:5d:e3: 20:c9:07:eb:a0:b6:27:88:49:c3:6e:0d:a2:70:e3: dd:97:5e:66:71:32:86:c3:27:9b:2d:94:cc:9a:1e: f0:78:6e:1d:a3:63:f5:f5:29:d8:c7:d5:61:77:72: 80:94:bd:cf:09:74:21:f6:6e:21:38:0c:a7:29:ec: d1:d1:60:da:92:ff:71:14:4d:ff:b7:0d:14:99:1d: d8:f4:79:d1:73:8b:e5:5f:d4:de:b9:de:98:0a:6e: 3e:59:29:b0:c0:e2:27:08:48:cd:d5:62:64:8d:39: 57:89:7a:51:02:48:99:1c:29:ef:13:31:d6:fe:8c: 28:65:ba:06:f6:14:bf:aa:64:1e:a9:40:6b:fb:1a: ea:14:69:57:3a:2e:a2:ed:56:85:19:df:d1:94:86: 63:75:9d:0e:8e:3d:93:69:b9:1b:87:9e:88:93:08: 87:e1:8d:c6:94:d1:1e:7b:8a:86:40:e0:a1:5d:b6: 5e:eb:4f:49:1e:24:1c:f8:9a:0e:8a:c8:c9:d9:85: b9:7d:07:07:5f:f5:2f:01:1a:5d:ce:10:a3:78:d7: 49:4e:4f:20:32:f8:36:b8:a1:44:af:95:3d:c4:18: 63:ca:1e:8d:36:22:67:2c:68:26:23:55:b2:09:c8: 46:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:87:06:74:A3:DC:6F:13:76:B4:AF:A2:9B:5A:DE:8A:E6:67:2C:BA X509v3 Authority Key Identifier: keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d4:38:a2:c5:98:b6:c7:9f:47:1b:7b:54:d2:39:35:df:7f: c1:75:cc:ab:47:9f:2c:eb:cb:e8:a8:ec:b2:7f:90:6c:84:c2: c2:cb:31:8b:d1:65:5c:14:07:d6:b9:27:a3:8d:99:9f:08:98: 62:68:69:57:7d:62:23:d7:b2:83:02:75:b0:76:db:9c:cf:e1: 20:38:3b:a9:e8:4e:34:13:c1:60:4f:78:ae:66:89:d4:cd:e9: 51:5a:72:16:69:58:71:62:5a:12:cf:f1:0f:f5:54:9a:d8:dd: 86:6f:81:81:ed:94:cc:c8:4d:63:c8:2a:2d:65:bc:c3:bd:55: 3a:24:a6:58:2b:54:0c:d2:ca:38:da:32:42:58:72:b9:d3:3c: 1a:29:6b:2c:3b:20:41:cb:c1:a6:24:05:15:e0:70:09:b9:9a: d6:36:c2:35:dd:bd:d3:1e:df:cd:5c:38:13:95:3e:69:9c:da: 4b:1f:0e:3f:c7:17:6f:63:11:b8:e1:08:22:cb:c0:71:48:07: 64:96:ed:53:01:03:83:28:20:f5:b2:30:1c:83:8b:e9:21:e0: 28:56:6a:29:b8:ce:3f:75:6f:04:5e:6e:81:0d:aa:7f:0e:ec: 76:d6:69:e9:2c:bb:56:3a:6c:bf:64:d4:04:db:26:90:4e:84: 0d:39:b1:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UgZYR/PvAY00i8dZ9x4TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYTYxMDQzNTQyNDg1MDk2YjBkZjQzNTFjYzBkYTk3N2Yz NzcwZGQwHhcNMjYwMTI2MDgwMTAwWhcNMjYwMTI3MDgwMTAwWjAzMTEwLwYDVQQD EygxZjg3MDY3NGEzZGM2ZjEzNzZiNGFmYTI5YjVhZGU4YWU2NjcyY2JhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy7isA0/lF80sfcSXeMgyQfroLYn iEnDbg2icOPdl15mcTKGwyebLZTMmh7weG4do2P19SnYx9Vhd3KAlL3PCXQh9m4h OAynKezR0WDakv9xFE3/tw0UmR3Y9HnRc4vlX9Teud6YCm4+WSmwwOInCEjN1WJk jTlXiXpRAkiZHCnvEzHW/owoZboG9hS/qmQeqUBr+xrqFGlXOi6i7VaFGd/RlIZj dZ0Ojj2Tabkbh56IkwiH4Y3GlNEee4qGQOChXbZe609JHiQc+JoOisjJ2YW5fQcH X/UvARpdzhCjeNdJTk8gMvg2uKFEr5U9xBhjyh6NNiJnLGgmI1WyCchG3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+HBnSj3G8TdrSvopta3ormZyy6MB8GA1UdIwQY MBaAFL2mEENUJIUJaw30NRzA2pd/N3DdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmFZUVExUWtoUWxyRGZRMUhNRGFsMzgzY04wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xOTY2ODktMmRiNy00ZTgwLWI5MmMt M2EyYWQ4OGRlYWRlLzEvdmFZUVExUWtoUWxyRGZRMUhNRGFsMzgzY04wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS8xOTY2ODktMmRiNy00ZTgwLWI5MmMtM2EyYWQ4OGRlYWRl LzEvdmFZUVExUWtoUWxyRGZRMUhNRGFsMzgzY04wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYNQ4osWY tsefRxt7VNI5Nd9/wXXMq0efLOvL6Kjssn+QbITCwssxi9FlXBQH1rkno42ZnwiY YmhpV31iI9eygwJ1sHbbnM/hIDg7qehONBPBYE94rmaJ1M3pUVpyFmlYcWJaEs/x D/VUmtjdhm+Bge2UzMhNY8gqLWW8w71VOiSmWCtUDNLKONoyQlhyudM8GilrLDsg QcvBpiQFFeBwCbma1jbCNd290x7fzVw4E5U+aZzaSx8OP8cXb2MRuOEIIsvAcUgH ZJbtUwEDgygg9bIwHIOL6SHgKFZqKbjOP3VvBF5ugQ2qfw7sdtZp6Sy7Vjpsv2TU BNsmkE6EDTmxXg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:51:36 2026 by rpki-client