This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json) Hash identifier: bAOaf04yvS5jLpJ0dpCWZ2IkJUmrwJc56qsc/lv0dSk= Subject key identifier: DC:D0:01:1D:EC:FE:49:B7:91:36:1D:F8:9F:49:51:36:6D:1C:F7:84 Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2 Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2 Certificate serial: 019BF8400E88D6032CC1CB7A2D5F20A536A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 03:01:46 +0000 Manifest this update: Mon 26 Jan 2026 03:01:46 +0000 Manifest next update: Tue 27 Jan 2026 03:01:46 +0000 Files and hashes: 1: 00NnGOjb0Kliq8h03PUkoF2V-mQ.roa (hash: VSJr4YxEOTSjkg/Ic9pjW8DLPur6HW+mqH3Z3+8+mfg=) 2: 7b8ozyWTjDv0dhZ7ua-y_cjPuyI.roa (hash: 38AuHkgBMFf7/nuVWCNssWlQtSQh16b1R73OJQ2+6XU=) 3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: so2NzBylZYc0FnCWZLjr64ypOX4pKVs+bzZVtLTOL2g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:40:0e:88:d6:03:2c:c1:cb:7a:2d:5f:20:a5:36:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2 Validity Not Before: Jan 26 03:01:46 2026 GMT Not After : Jan 27 03:01:46 2026 GMT Subject: CN=dcd0011decfe49b791361df89f4951366d1cf784 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:d2:b4:54:53:05:fd:c8:32:95:5b:3e:ca: f0:c8:01:df:4d:e8:89:09:b5:1d:aa:9e:ab:68:7b: 75:62:2a:a7:dc:35:14:84:fe:1b:95:14:cd:43:b8: 5d:11:28:9d:e0:f2:af:5a:02:ae:90:4d:42:9a:ca: d8:6c:e1:fb:b5:d8:56:06:c0:ca:50:9c:ec:6e:20: ab:42:1b:5c:70:d2:57:51:89:7f:24:fd:34:3e:ed: af:bd:97:4e:d7:e7:64:14:b4:b0:c6:5d:9a:78:1a: 49:21:5f:49:20:9e:99:36:4d:7d:a0:51:dd:61:a1: dc:38:03:55:b9:39:e6:d0:46:7e:43:aa:26:fd:54: ef:de:87:53:a1:d4:8d:8c:b2:23:95:d0:81:77:55: b9:4e:34:16:e5:76:63:8c:85:0b:aa:ac:4b:8b:68: cd:22:ec:7f:df:0c:8d:fd:c1:7a:16:3b:0f:c0:2a: 77:aa:8b:af:41:f8:db:e7:c0:06:a1:c9:06:ef:b0: 5b:fa:52:0b:16:0b:03:8e:97:47:5a:fd:be:01:79: 0c:e4:9f:fb:4a:bf:4c:f1:1e:89:13:76:06:d9:dc: 5a:13:40:1a:7c:bd:3e:4d:5b:7a:bb:7f:e0:d3:13: a6:5a:cd:15:7d:df:87:19:ef:f4:7a:c3:f8:56:88: 15:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D0:01:1D:EC:FE:49:B7:91:36:1D:F8:9F:49:51:36:6D:1C:F7:84 X509v3 Authority Key Identifier: keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:9c:87:13:33:16:3f:56:f0:df:e7:11:23:23:d9:14:77:41: 46:b2:ef:a6:bc:d2:a1:cb:3e:a6:20:7a:ed:ad:cc:ac:05:3d: 2e:9d:e3:1b:af:47:49:a2:26:1b:93:66:8e:ee:63:c8:77:7c: a9:7f:9f:b6:40:5c:f8:df:3b:2b:ac:8c:3c:82:01:19:b6:26: 17:36:f2:e2:db:02:36:c9:71:bf:68:03:cd:aa:51:d7:15:22: 92:0e:9e:37:94:70:07:c4:f8:d4:57:75:e0:a1:8a:41:86:1c: 53:13:63:05:2f:1b:41:11:49:9f:20:d0:74:13:bc:7b:4a:d6: 04:63:c1:37:08:9c:20:9a:ab:c1:fd:80:a9:98:99:c3:4b:67: 8d:01:17:3a:6f:7e:88:88:cb:12:82:1f:c7:dc:4e:cf:39:a8: c3:43:06:9c:f9:3d:f2:eb:c0:0e:f0:ef:f6:a8:5d:35:72:a3: 12:f5:79:95:48:ba:99:18:aa:39:65:e4:ab:c9:87:2a:95:7d: 31:f2:d1:55:0a:ee:93:39:af:74:66:a9:3a:8e:2c:67:ab:14: 8a:b5:54:45:47:81:95:0c:81:20:09:f7:b2:4f:3c:3f:80:b1: 47:db:10:24:8d:15:1a:04:e5:3d:d1:96:7e:db:70:fc:b1:e9: 71:d8:ea:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4QA6I1gMswct6LV8gpTahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNzQxMGY0ZTYyYzc3NzJjNzhkNTc1MGIyMWZjMjE0MzM5 ZTk0YTIwHhcNMjYwMTI2MDMwMTQ2WhcNMjYwMTI3MDMwMTQ2WjAzMTEwLwYDVQQD EyhkY2QwMDExZGVjZmU0OWI3OTEzNjFkZjg5ZjQ5NTEzNjZkMWNmNzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoHStFRTBf3IMpVbPsrwyAHfTeiJ CbUdqp6raHt1Yiqn3DUUhP4blRTNQ7hdESid4PKvWgKukE1CmsrYbOH7tdhWBsDK UJzsbiCrQhtccNJXUYl/JP00Pu2vvZdO1+dkFLSwxl2aeBpJIV9JIJ6ZNk19oFHd YaHcOANVuTnm0EZ+Q6om/VTv3odTodSNjLIjldCBd1W5TjQW5XZjjIULqqxLi2jN Iux/3wyN/cF6FjsPwCp3qouvQfjb58AGockG77Bb+lILFgsDjpdHWv2+AXkM5J/7 Sr9M8R6JE3YG2dxaE0AafL0+TVt6u3/g0xOmWs0Vfd+HGe/0esP4VogVuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNzQAR3s/km3kTYd+J9JUTZtHPeEMB8GA1UdIwQY MBaAFL10EPTmLHdyx41XULIfwhQznpSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMt MjY4NDhmZmVlNzY1LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMtMjY4NDhmZmVlNzY1 LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5yHEzMW P1bw3+cRIyPZFHdBRrLvprzSocs+piB67a3MrAU9Lp3jG69HSaImG5Nmju5jyHd8 qX+ftkBc+N87K6yMPIIBGbYmFzby4tsCNslxv2gDzapR1xUikg6eN5RwB8T41Fd1 4KGKQYYcUxNjBS8bQRFJnyDQdBO8e0rWBGPBNwicIJqrwf2AqZiZw0tnjQEXOm9+ iIjLEoIfx9xOzzmow0MGnPk98uvADvDv9qhdNXKjEvV5lUi6mRiqOWXkq8mHKpV9 MfLRVQrukzmvdGapOo4sZ6sUirVURUeBlQyBIAn3sk88P4CxR9sQJI0VGgTlPdGW fttw/LHpcdjqKw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:06 2026 by rpki-client