This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft File: VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json) Hash identifier: 4tPwsQfmiGVGHwcBnRB/6CwNJGOBL3i+TT6NHp27zoc= Subject key identifier: C6:89:D3:9C:21:26:FE:2F:9B:95:3B:36:27:F0:BC:C3:36:A3:C1:49 Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25 Certificate issuer: /CN=54e610c2abd3664c11204580f748996555c22225 Certificate serial: 019BF808858242EE57C12A2F2DA9EE041BAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft Manifest number: 0635 Signing time: Mon 26 Jan 2026 02:01:06 +0000 Manifest this update: Mon 26 Jan 2026 02:01:06 +0000 Manifest next update: Tue 27 Jan 2026 02:01:06 +0000 Files and hashes: 1: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: tJIJgJt72CYpGahHYMHAgth89xbXNY6BoPpiZQ/XbOk=) 2: pQKPikBzd7Oz_I9lHHOOAo5keSk.roa (hash: yDnXs+sIyJdYXEuX7spiKfyy3V1/GMh526F5IcQattQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:85:82:42:ee:57:c1:2a:2f:2d:a9:ee:04:1b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54e610c2abd3664c11204580f748996555c22225 Validity Not Before: Jan 26 02:01:06 2026 GMT Not After : Jan 27 02:01:06 2026 GMT Subject: CN=c689d39c2126fe2f9b953b3627f0bcc336a3c149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:f3:f3:e6:e7:90:e5:da:48:c4:36:e6:b4: 0b:d7:f2:b6:94:07:ba:8b:83:33:16:01:0f:fe:83: fd:c2:0e:35:98:44:4c:29:18:79:8b:b8:19:b2:d9: 7a:cd:fd:16:c1:c2:91:5b:fa:9c:bf:e4:dc:42:33: ff:b7:a0:60:3d:f7:8a:48:9e:83:93:bb:60:cd:b1: 93:da:c9:eb:78:92:00:a7:15:b3:89:5d:45:23:68: ce:d8:1f:09:a8:45:98:e2:08:3d:0b:c4:32:56:06: 1a:19:4e:be:1e:b3:92:ae:51:94:71:cd:e2:e3:ca: cf:6f:34:b3:3f:86:61:22:06:ec:b9:8f:9c:88:a9: b2:43:d6:e1:b4:7c:91:b9:6b:d7:c1:19:85:42:7e: 3a:8a:62:71:bd:1f:93:ce:5b:71:56:7d:c4:2e:4a: 6b:81:4a:26:b5:90:37:e5:ad:61:58:80:84:ea:bd: 3c:da:8c:7e:1e:42:4a:66:46:7d:6e:08:38:a3:e8: 23:94:88:20:c2:2e:e1:fd:bc:21:ae:66:4e:e1:63: 04:91:bd:22:ef:f0:11:32:14:98:b9:00:ee:1a:f0: d8:07:ec:91:dd:85:c8:42:83:0f:32:fd:92:f1:8b: e6:18:fd:0e:c8:81:c4:f1:c6:85:2d:c8:5d:89:9c: 2e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:89:D3:9C:21:26:FE:2F:9B:95:3B:36:27:F0:BC:C3:36:A3:C1:49 X509v3 Authority Key Identifier: keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:f8:1c:25:05:39:bf:76:d9:18:5e:16:3f:30:92:43:08:4f: c4:1f:c0:97:5d:5d:be:e6:29:fe:3e:d3:b7:a6:45:93:6a:e4: 42:cb:d8:a4:20:82:fc:f8:3d:84:52:59:90:f5:2c:21:65:94: da:c3:5f:b4:d3:66:e6:f8:de:f4:d1:3d:4c:ce:e0:e8:ba:2e: 91:34:71:92:64:19:98:9a:44:57:d6:90:85:5f:fe:18:9b:7f: 19:08:b6:cf:11:ce:01:98:58:3d:1a:86:92:e8:5d:05:5a:65: 8f:48:b5:2f:f6:27:5d:e5:1e:14:70:6b:11:16:51:47:ab:28: 29:82:e7:3c:af:c1:a7:f6:a0:82:78:ce:ef:da:30:1d:d5:00: 81:6f:cc:40:c5:54:75:f6:cd:8f:39:8d:5f:de:1b:7b:6e:8a: 1a:f1:26:1d:3c:a2:00:93:9a:4e:58:67:c5:86:93:be:89:87: 5e:50:93:42:fc:39:3e:36:4d:1a:58:97:88:a8:a5:48:9c:8a: 43:f5:e7:4d:e4:52:d2:a0:a9:64:31:03:33:bf:28:15:a2:ab: a9:1d:b6:96:65:a7:36:47:bf:5c:93:99:ea:92:9a:dd:52:9f: 94:3c:c6:a0:84:58:25:39:b5:03:a1:36:ad:a3:8e:11:06:1c: ad:8b:e7:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CIWCQu5XwSovLanuBButMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZTYxMGMyYWJkMzY2NGMxMTIwNDU4MGY3NDg5OTY1NTVj MjIyMjUwHhcNMjYwMTI2MDIwMTA2WhcNMjYwMTI3MDIwMTA2WjAzMTEwLwYDVQQD EyhjNjg5ZDM5YzIxMjZmZTJmOWI5NTNiMzYyN2YwYmNjMzM2YTNjMTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QHz8+bnkOXaSMQ25rQL1/K2lAe6 i4MzFgEP/oP9wg41mERMKRh5i7gZstl6zf0WwcKRW/qcv+TcQjP/t6BgPfeKSJ6D k7tgzbGT2snreJIApxWziV1FI2jO2B8JqEWY4gg9C8QyVgYaGU6+HrOSrlGUcc3i 48rPbzSzP4ZhIgbsuY+ciKmyQ9bhtHyRuWvXwRmFQn46imJxvR+TzltxVn3ELkpr gUomtZA35a1hWICE6r082ox+HkJKZkZ9bgg4o+gjlIggwi7h/bwhrmZO4WMEkb0i 7/ARMhSYuQDuGvDYB+yR3YXIQoMPMv2S8YvmGP0OyIHE8caFLchdiZwu4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMaJ05whJv4vm5U7NifwvMM2o8FJMB8GA1UdIwQY MBaAFFTmEMKr02ZMESBFgPdImWVVwiIlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmIt NDg5ZWUwZjFlZTYzLzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mMjAzM2EtMjBlNy00NjFlLWE1NmItNDg5ZWUwZjFlZTYz LzEvVk9ZUXdxdlRaa3dSSUVXQTkwaVpaVlhDSWlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANvgcJQU5 v3bZGF4WPzCSQwhPxB/Al11dvuYp/j7Tt6ZFk2rkQsvYpCCC/Pg9hFJZkPUsIWWU 2sNftNNm5vje9NE9TM7g6LoukTRxkmQZmJpEV9aQhV/+GJt/GQi2zxHOAZhYPRqG kuhdBVplj0i1L/YnXeUeFHBrERZRR6soKYLnPK/Bp/aggnjO79owHdUAgW/MQMVU dfbNjzmNX94be26KGvEmHTyiAJOaTlhnxYaTvomHXlCTQvw5PjZNGliXiKilSJyK Q/XnTeRS0qCpZDEDM78oFaKrqR22lmWnNke/XJOZ6pKa3VKflDzGoIRYJTm1A6E2 raOOEQYcrYvnRQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:46:01 2026 by rpki-client