This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft File: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json) Hash identifier: xSbzkXkRb7WYWu7WCvZVyk4sahELkKK+GgvnwIlwvQw= Subject key identifier: B4:B6:49:AA:6E:4A:9B:B9:25:6D:AD:D0:4F:30:8B:62:CA:2D:CF:C8 Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1 Certificate issuer: /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1 Certificate serial: 019BF79A9D0A71A8C1D10C74A83D437C490F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft Manifest number: 1438 Signing time: Mon 26 Jan 2026 00:01:03 +0000 Manifest this update: Mon 26 Jan 2026 00:01:03 +0000 Manifest next update: Tue 27 Jan 2026 00:01:03 +0000 Files and hashes: 1: 1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa (hash: 6iVNvhe10i4KO9IhQfbWbvNH2WkwCCWrKbOYcXZWq7g=) 2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: F4XxYOevCb9t8lojRur3Y3gVx2hSclpUA5hy2EbW+Xs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:9d:0a:71:a8:c1:d1:0c:74:a8:3d:43:7c:49:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1 Validity Not Before: Jan 26 00:01:03 2026 GMT Not After : Jan 27 00:01:03 2026 GMT Subject: CN=b4b649aa6e4a9bb9256dadd04f308b62ca2dcfc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:72:70:67:03:c9:8d:ef:38:48:79:d4:35: b1:a7:c7:98:98:c4:b0:9a:3e:4b:e2:b7:7f:a3:12: ec:d1:ff:3e:c7:15:a9:cd:41:fa:95:fb:c2:c1:ba: aa:31:2d:3f:d8:e1:04:13:70:31:36:55:1a:72:1f: 9b:45:ed:66:76:17:3d:0e:6d:47:e2:81:fb:10:f5: 2b:c7:ae:0e:13:86:82:c3:fb:2d:f9:f0:88:6a:90: 10:4c:8b:9d:6e:54:e8:b3:a8:72:53:b5:cc:22:6c: 20:f9:c2:d6:70:b5:ad:2c:e2:e3:53:bd:42:90:77: bf:6f:52:53:c6:75:08:b7:47:29:d7:20:a1:b4:ce: 58:81:00:06:38:8a:8a:83:6e:46:d5:79:03:ff:5e: 49:36:37:6e:d4:f8:ed:46:9a:44:45:f8:76:59:40: 8f:f8:8f:ab:21:66:c4:01:d0:73:17:5c:a8:6d:71: 64:5d:b8:b7:53:3f:36:78:e5:ce:64:47:b4:18:ed: 24:9c:a2:89:49:ed:af:76:49:69:65:93:3d:96:fc: de:29:df:99:b0:a2:55:88:3e:42:d0:b9:3f:ad:3d: a3:6c:bd:a5:0a:1f:cd:de:f4:f5:85:f7:2c:98:d2: 0b:68:7a:9c:38:51:50:ca:0c:84:5c:be:b9:be:e5: 72:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B6:49:AA:6E:4A:9B:B9:25:6D:AD:D0:4F:30:8B:62:CA:2D:CF:C8 X509v3 Authority Key Identifier: keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:ea:20:e2:61:03:12:50:37:cf:05:f0:92:7b:ab:9d:96:ae: 87:5d:2c:06:ed:74:c9:63:0b:fa:c7:2b:e0:a3:2c:e2:5a:cc: 31:3e:e7:bf:34:d3:85:52:7d:9b:ef:7a:62:bf:3e:12:e0:52: a6:bd:bf:6f:fb:7d:e4:f9:63:4f:b7:f7:67:09:db:39:ac:c8: 06:7e:22:7d:7a:41:fd:d6:59:51:89:9b:f7:57:55:4d:85:46: cd:92:8e:10:de:8d:60:ca:34:50:7c:14:2e:17:f3:a9:27:90: 06:6c:0d:75:0a:57:72:0d:a0:1d:46:8e:45:11:34:38:0f:a1: a9:4b:96:87:23:61:92:0a:a4:cc:f5:39:dd:18:17:b5:a4:48: 40:3c:e4:f7:a8:61:d0:82:d3:29:b7:50:d9:6e:38:53:92:6d: ff:00:ae:cf:8e:ea:98:b8:a7:55:e3:3b:29:b0:51:79:4c:bf: 81:e4:78:41:9f:d3:04:0e:f7:f9:c6:aa:7a:5f:84:e8:df:5d: 48:92:4d:1b:89:11:54:c0:f0:f4:0f:ba:73:c8:ef:f3:5b:46: 25:4a:81:45:50:7a:9b:68:ab:04:78:ca:68:a0:7f:90:ac:b1: 8d:12:65:91:e2:ab:2b:e8:ad:08:62:b1:d4:1a:cd:34:f9:73: b4:ca:96:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mp0KcajB0Qx0qD1DfEkPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MGQ0YzU3MWQ4YmZiZmRkOGZhM2ExNzBmOTlmYjNhZmFi NDExZDEwHhcNMjYwMTI2MDAwMTAzWhcNMjYwMTI3MDAwMTAzWjAzMTEwLwYDVQQD EyhiNGI2NDlhYTZlNGE5YmI5MjU2ZGFkZDA0ZjMwOGI2MmNhMmRjZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRJycGcDyY3vOEh51DWxp8eYmMSw mj5L4rd/oxLs0f8+xxWpzUH6lfvCwbqqMS0/2OEEE3AxNlUach+bRe1mdhc9Dm1H 4oH7EPUrx64OE4aCw/st+fCIapAQTIudblTos6hyU7XMImwg+cLWcLWtLOLjU71C kHe/b1JTxnUIt0cp1yChtM5YgQAGOIqKg25G1XkD/15JNjdu1PjtRppERfh2WUCP +I+rIWbEAdBzF1yobXFkXbi3Uz82eOXOZEe0GO0knKKJSe2vdklpZZM9lvzeKd+Z sKJViD5C0Lk/rT2jbL2lCh/N3vT1hfcsmNILaHqcOFFQygyEXL65vuVyIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLS2SapuSpu5JW2t0E8wi2LKLc/IMB8GA1UdIwQY MBaAFFUNTFcdi/v92Po6Fw+Z+zr6tBHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzIt M2Q0NmNhZjU1NzM4LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzItM2Q0NmNhZjU1NzM4 LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqeog4mED ElA3zwXwknurnZauh10sBu10yWML+scr4KMs4lrMMT7nvzTThVJ9m+96Yr8+EuBS pr2/b/t95PljT7f3ZwnbOazIBn4ifXpB/dZZUYmb91dVTYVGzZKOEN6NYMo0UHwU LhfzqSeQBmwNdQpXcg2gHUaORRE0OA+hqUuWhyNhkgqkzPU53RgXtaRIQDzk96hh 0ILTKbdQ2W44U5Jt/wCuz47qmLinVeM7KbBReUy/geR4QZ/TBA73+caqel+E6N9d SJJNG4kRVMDw9A+6c8jv81tGJUqBRVB6m2irBHjKaKB/kKyxjRJlkeKrK+itCGKx 1BrNNPlztMqWkw== -----END CERTIFICATE-----Generated at Mon Jan 26 07:45:19 2026 by rpki-client