This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft File: vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft (raw, json) Hash identifier: /Hsnyu029eKy9WXH+uoa4NPvsWOUPxWqn36lhk/xN4k= Subject key identifier: 86:B9:C1:25:57:0B:27:F7:1C:A4:C7:C3:41:5B:8A:76:4D:F1:F4:C0 Authority key identifier: BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52 Certificate issuer: /CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752 Certificate serial: 019BF83EFBB203E14F7B0283549C66719682 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 03:00:35 +0000 Manifest this update: Mon 26 Jan 2026 03:00:35 +0000 Manifest next update: Tue 27 Jan 2026 03:00:35 +0000 Files and hashes: 1: 0M06EybESD0rwYWfwqrVRbpIyv4.roa (hash: vcttDWnGAt8CJjLo47y5yaYR7r334apl/y9yFk3ErkE=) 2: H8cTTnpAuLtew2tnTJcflZAFh6Y.roa (hash: 9lXDgfMHfweW9UIlba3eDwec/q7hxiQODfc3WbgSX8Y=) 3: SprpMmzkPsxt00vdDJYhOqLnJzE.roa (hash: Li4MY9HGqjTJUHnXsec/HTc2IoBGMD6duRWMuKpeAgc=) 4: uDoJkgFguikcxRpI0Sh5smoTvbo.roa (hash: fSPjqDFCQlE12J56viSWxC0b9IeSny9NSS4QGpXzPsc=) 5: vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl (hash: zed90SDjg0oKCPuj4kx0F0g7W12Dlv7YNVuI/4PU8Kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3e:fb:b2:03:e1:4f:7b:02:83:54:9c:66:71:96:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd4e6edd26ef1b16d848e98130e6fc4450b32752 Validity Not Before: Jan 26 03:00:35 2026 GMT Not After : Jan 27 03:00:35 2026 GMT Subject: CN=86b9c125570b27f71ca4c7c3415b8a764df1f4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:35:7a:06:e0:25:95:ce:78:8d:e0:30:f8:cf: 49:c0:86:ab:a9:8a:05:6e:6b:d3:27:f2:bb:ad:92: f1:0a:29:55:78:c7:f5:2c:44:76:e3:20:d5:85:0d: 07:9e:74:ec:e8:62:be:12:d0:55:2f:99:48:d0:44: cf:35:9a:39:51:0d:e3:ab:de:d1:29:f6:f8:88:d9: de:a1:d6:6f:e9:08:a1:a6:a5:bf:d7:25:b1:d2:83: 9f:f2:13:55:b1:ca:9b:4d:4a:d6:3e:7d:f8:4e:e9: a5:97:30:f6:69:d2:4d:ad:3b:4e:c0:ee:04:70:04: 35:3c:14:d0:4f:3e:67:cb:88:f5:fb:89:f3:51:7b: 8c:ff:af:3f:02:f5:14:85:37:87:62:05:14:59:da: 14:ae:17:47:dc:8c:84:87:32:b2:d9:50:d2:aa:03: 9e:91:0e:ac:45:c0:75:df:a8:98:af:4d:2a:7e:3b: 01:6e:08:68:e3:bf:42:5f:a6:ff:97:55:52:a8:f2: c8:00:a5:67:38:22:cf:93:74:c1:e0:c6:ff:e0:a0: 0a:e6:a3:0a:2e:b4:f1:e2:f5:0e:15:3c:f9:48:86: 89:4a:14:1f:d1:93:23:d3:f6:a6:d2:de:9f:7c:11: 57:3f:bc:06:3f:f0:2f:71:ef:a1:8c:85:f0:18:3a: 63:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B9:C1:25:57:0B:27:F7:1C:A4:C7:C3:41:5B:8A:76:4D:F1:F4:C0 X509v3 Authority Key Identifier: keyid:BD:4E:6E:DD:26:EF:1B:16:D8:48:E9:81:30:E6:FC:44:50:B3:27:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ace373-b81b-400c-845c-9628f5266542/1/vU5u3SbvGxbYSOmBMOb8RFCzJ1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e8:7b:f2:0e:21:d7:45:68:df:9b:24:d6:21:f9:1e:6f:9c: d8:fd:29:39:77:c3:f2:08:ee:fb:d7:88:98:5a:3b:9f:26:02: bf:13:1a:0b:b7:30:ea:63:66:85:78:33:ee:22:cd:d4:1e:79: 86:a6:e1:c7:47:a4:d5:c8:a7:07:8c:e6:84:00:7d:29:6d:22: 1b:f0:d5:19:d6:3c:bf:d3:3d:07:ab:9a:8f:75:fc:5d:2f:ab: 76:a8:ca:7e:09:1d:b2:0f:48:37:2c:0d:b7:1c:97:94:25:c5: ae:05:19:3a:39:b1:f3:f5:77:f4:2d:41:de:40:82:8c:a8:b3: 84:5b:ce:f7:1c:d2:00:e4:32:6f:00:df:a9:9d:89:99:89:d8: 59:a8:8e:c0:48:52:32:4d:2d:fc:b7:db:f7:a2:b0:3e:65:d5: ef:e1:d6:d6:27:2b:f6:90:e6:f2:2d:9b:42:30:7b:6a:f3:17: c2:1f:24:7c:21:bd:16:4d:fd:65:e1:c9:83:19:5a:40:1a:b6: c1:c6:30:11:f5:03:a8:8f:b8:d0:97:a7:6f:36:06:14:09:95: 96:b6:9f:b7:b4:4a:3d:b2:b2:f0:11:a6:1f:79:1a:89:9e:be: e5:d6:aa:9a:9b:49:a4:e5:b3:e5:d7:d4:ac:5a:d1:84:08:18: b5:c5:1d:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PvuyA+FPewKDVJxmcZaCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNGU2ZWRkMjZlZjFiMTZkODQ4ZTk4MTMwZTZmYzQ0NTBi MzI3NTIwHhcNMjYwMTI2MDMwMDM1WhcNMjYwMTI3MDMwMDM1WjAzMTEwLwYDVQQD Eyg4NmI5YzEyNTU3MGIyN2Y3MWNhNGM3YzM0MTViOGE3NjRkZjFmNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzV6BuAllc54jeAw+M9JwIarqYoF bmvTJ/K7rZLxCilVeMf1LER24yDVhQ0HnnTs6GK+EtBVL5lI0ETPNZo5UQ3jq97R Kfb4iNneodZv6QihpqW/1yWx0oOf8hNVscqbTUrWPn34TumllzD2adJNrTtOwO4E cAQ1PBTQTz5ny4j1+4nzUXuM/68/AvUUhTeHYgUUWdoUrhdH3IyEhzKy2VDSqgOe kQ6sRcB136iYr00qfjsBbgho479CX6b/l1VSqPLIAKVnOCLPk3TB4Mb/4KAK5qMK LrTx4vUOFTz5SIaJShQf0ZMj0/am0t6ffBFXP7wGP/Avce+hjIXwGDpjrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIa5wSVXCyf3HKTHw0FbinZN8fTAMB8GA1UdIwQY MBaAFL1Obt0m7xsW2EjpgTDm/ERQsydSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMt OTYyOGY1MjY2NTQyLzEvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9hY2UzNzMtYjgxYi00MDBjLTg0NWMtOTYyOGY1MjY2NTQy LzEvdlU1dTNTYnZHeGJZU09tQk1PYjhSRkN6SjFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHuh78g4h 10Vo35sk1iH5Hm+c2P0pOXfD8gju+9eImFo7nyYCvxMaC7cw6mNmhXgz7iLN1B55 hqbhx0ek1cinB4zmhAB9KW0iG/DVGdY8v9M9B6uaj3X8XS+rdqjKfgkdsg9INywN txyXlCXFrgUZOjmx8/V39C1B3kCCjKizhFvO9xzSAOQybwDfqZ2JmYnYWaiOwEhS Mk0t/Lfb96KwPmXV7+HW1icr9pDm8i2bQjB7avMXwh8kfCG9Fk39ZeHJgxlaQBq2 wcYwEfUDqI+40JenbzYGFAmVlraft7RKPbKy8BGmH3kaiZ6+5daqmptJpOWz5dfU rFrRhAgYtcUdDg== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:08 2026 by rpki-client