This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft File: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json) Hash identifier: WQ4dM3+ECbk9r+b6t8gCBZ87OCNj6S2Ooiqe6s5qa60= Subject key identifier: D1:E0:07:80:AA:2E:69:60:54:5C:14:6F:BF:90:DF:0C:F0:51:91:F4 Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019BF9F6DAD4E40D9D7EA15EB2E7907A1DCD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft Manifest number: 14FA Signing time: Mon 26 Jan 2026 11:01:03 +0000 Manifest this update: Mon 26 Jan 2026 11:01:03 +0000 Manifest next update: Tue 27 Jan 2026 11:01:03 +0000 Files and hashes: 1: 0kY6OhYo0S_p-TBiI-10NgXfoNY.roa (hash: iP04yPh9hD6VA4QlzUY//5ykcFDzpWeK08TGnMp/HjE=) 2: 1-Be0qYmJvYKBUxk0IWyWJ9tviM0.roa (hash: tc+kUBwm2r2jABu8hBV/usYgfuja/aedEg4A7BKntHA=) 3: 1xpC17_15k9cuDY7Ih7Wgj0S9Ro.roa (hash: XKv+d2a7iEMY8sWanXfCdCcSCUwEPvHDN059QvO18Cw=) 4: 2C-X2uadj7WRXm8t5tJaxHqVG08.roa (hash: gQBfeyRFTlWRJ0NIJIiAdSoSCyYg2yZW/gURVO4/TQE=) 5: ILMdvMW_ucbbRxIWVM1lnkFSdus.roa (hash: u/PCttKjeIAvbeBnImGYH+I587LQsMk+S6mJXKbyOpQ=) 6: OCaG69L4oGw_KiLZLKBePPSp7CE.roa (hash: vtJ6sg+cCvGmbdxUocxZh93rGJH1rOZrPXnfYKxcVyQ=) 7: R5tQPzZZIZkEHxABLHLrU7SFsrM.roa (hash: lKQiJli3qPxi+zmIfwUnOVyI/PWON56dIb4pJxeLxAM=) 8: SSB8nChvF9M5SEjUm0HbeOBN31I.roa (hash: WGAc9tKQkiqsemqW1u4qV4GbNPs9MVItouZPC6JW3X8=) 9: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: 9kwKuT2d8dP/UgGPI7Gkx4C1JepqDS1l8vjFIfHHabI=) 10: w2-qYaghmoafRduGM784BXKEDOc.roa (hash: hsq/kaLWVFBw1VLdikb24btA8t/Mb4PbJLUevEVWF+U=) 11: yOnpLpdVWl0jXoYFDk87GuN8z4k.roa (hash: cwz0V2O5OmYd3M4lJ6axTmY7I9UVlCXySVV3pV4gm0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:da:d4:e4:0d:9d:7e:a1:5e:b2:e7:90:7a:1d:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jan 26 11:01:03 2026 GMT Not After : Jan 27 11:01:03 2026 GMT Subject: CN=d1e00780aa2e6960545c146fbf90df0cf05191f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a4:42:4d:32:97:77:a3:61:28:9f:48:0d:aa: 38:95:11:30:d9:0a:25:1b:56:df:f4:c1:0f:34:bc: 14:09:55:63:75:91:cc:58:57:3f:76:b7:70:c4:95: 37:e1:4a:cd:34:ae:af:e0:48:a8:86:40:ee:5c:5c: 22:43:d7:96:71:1e:90:99:1f:d8:53:e8:2d:df:3f: 6f:30:51:c8:0b:7a:34:e2:11:f0:bc:dc:3c:43:49: 10:18:30:db:18:70:25:00:8a:db:b5:1b:ae:ef:04: b5:89:59:08:cc:15:37:28:57:a6:a5:ff:cd:3f:cc: 68:3e:52:15:9c:86:e6:c1:8d:1a:91:5a:00:6a:ce: a9:e5:f7:d0:73:a5:bb:43:03:c1:37:8f:4b:65:58: 3c:3d:ac:6e:93:11:63:dc:a6:a2:dc:c8:ac:4f:e7: 94:90:37:39:24:85:81:15:d6:8c:03:bf:18:6b:16: 09:89:5f:b1:de:79:d5:08:cd:25:96:d2:77:23:09: f8:ad:c4:1c:1a:8c:a5:f6:6e:39:5d:5d:46:7a:2a: 61:b3:86:84:2d:9b:6f:8f:96:74:7c:53:49:e1:b7: de:d0:d1:0a:6d:34:be:83:3d:c8:e7:88:fd:4f:28: 15:a2:e1:60:03:e0:2b:e3:b2:69:09:9d:ca:ff:26: c7:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E0:07:80:AA:2E:69:60:54:5C:14:6F:BF:90:DF:0C:F0:51:91:F4 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:58:ee:2a:54:92:1f:a4:76:58:2d:c3:04:93:29:e2:d9:14: d0:01:23:6d:e1:a4:59:23:f7:d7:65:0f:09:66:cd:53:25:0a: 9e:b9:1e:61:0b:0c:f5:73:3c:68:47:2c:e1:84:47:99:98:20: 4a:89:71:c9:da:ef:ba:93:fb:15:98:4d:35:dc:95:b3:09:cf: 69:09:c7:7c:99:c8:4a:61:91:cd:25:ec:a2:0c:61:57:e0:13: 5c:53:70:9f:49:d3:f2:9a:b8:33:c4:9a:fc:e9:f1:ed:23:8e: e6:d8:68:d2:bf:3f:e2:f8:62:ea:1a:d8:0e:1e:84:e7:6e:cd: fe:9b:df:54:f8:ed:b7:84:81:6e:65:6f:5e:0d:d9:0b:c8:57: b5:c0:bb:c8:fa:74:5a:c7:7d:06:e4:32:c0:26:76:8b:81:0d: 14:d0:4b:74:dc:96:ba:87:6d:f3:d9:87:80:90:3e:d0:23:49: 8d:66:f5:b0:40:ae:22:58:e6:dd:39:7c:4b:67:79:89:40:bc: 08:00:1c:16:ef:b4:d2:9a:02:e2:f9:26:a4:20:ba:cb:8d:73: 40:26:d1:27:ac:07:e5:01:b2:e3:63:49:9f:3a:8f:26:67:11: 31:4e:cb:41:07:e0:ba:e7:27:79:3e:e5:81:a3:36:b8:5b:53: 75:0e:7b:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59trU5A2dfqFesueQeh3NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwMTI2MTEwMTAzWhcNMjYwMTI3MTEwMTAzWjAzMTEwLwYDVQQD EyhkMWUwMDc4MGFhMmU2OTYwNTQ1YzE0NmZiZjkwZGYwY2YwNTE5MWY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqRCTTKXd6NhKJ9IDao4lREw2Qol G1bf9MEPNLwUCVVjdZHMWFc/drdwxJU34UrNNK6v4EiohkDuXFwiQ9eWcR6QmR/Y U+gt3z9vMFHIC3o04hHwvNw8Q0kQGDDbGHAlAIrbtRuu7wS1iVkIzBU3KFempf/N P8xoPlIVnIbmwY0akVoAas6p5ffQc6W7QwPBN49LZVg8PaxukxFj3Kai3MisT+eU kDc5JIWBFdaMA78YaxYJiV+x3nnVCM0lltJ3Iwn4rcQcGoyl9m45XV1Geiphs4aE LZtvj5Z0fFNJ4bfe0NEKbTS+gz3I54j9TygVouFgA+Ar47JpCZ3K/ybHQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHgB4CqLmlgVFwUb7+Q3wzwUZH0MB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFjuKlSS H6R2WC3DBJMp4tkU0AEjbeGkWSP312UPCWbNUyUKnrkeYQsM9XM8aEcs4YRHmZgg SolxydrvupP7FZhNNdyVswnPaQnHfJnISmGRzSXsogxhV+ATXFNwn0nT8pq4M8Sa /Onx7SOO5tho0r8/4vhi6hrYDh6E527N/pvfVPjtt4SBbmVvXg3ZC8hXtcC7yPp0 Wsd9BuQywCZ2i4ENFNBLdNyWuodt89mHgJA+0CNJjWb1sECuIljm3Tl8S2d5iUC8 CAAcFu+00poC4vkmpCC6y41zQCbRJ6wH5QGy42NJnzqPJmcRMU7LQQfguucneT7l gaM2uFtTdQ57Kg== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:45 2026 by rpki-client