This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft File: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json) Hash identifier: SjyKXxS2uTX8gZor48wLtAdfrj0NDm45ViCednRxVT0= Subject key identifier: 8D:64:A9:C0:5C:8E:5F:27:6B:FF:9B:6B:31:A0:DF:9D:98:05:82:11 Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7 Certificate issuer: /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7 Certificate serial: 019BF8088457F846385B1411C6B60E6CC142 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 02:01:06 +0000 Manifest this update: Mon 26 Jan 2026 02:01:06 +0000 Manifest next update: Tue 27 Jan 2026 02:01:06 +0000 Files and hashes: 1: Zhqy7g8lJUOishUdKqXaWCvxzx4.roa (hash: UN8EUtXHVUb/yxu+HKPvBFBWS56nPQFqhJoUEVPPqMY=) 2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: QLQR65Aq3FCCIhNJzMrUpsOY7AN9yJBWGyXwWpcE5oU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:84:57:f8:46:38:5b:14:11:c6:b6:0e:6c:c1:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7 Validity Not Before: Jan 26 02:01:06 2026 GMT Not After : Jan 27 02:01:06 2026 GMT Subject: CN=8d64a9c05c8e5f276bff9b6b31a0df9d98058211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:33:8e:81:65:0f:5e:0f:94:38:72:6f:fa: 29:0a:ea:72:ed:37:5b:f2:b5:7e:e4:60:c0:5a:c0: 1c:8f:77:2a:f4:b7:57:15:f1:b3:13:ff:73:63:3c: 21:55:26:4b:97:7b:a0:0b:dc:2a:4a:80:ad:14:2f: df:a1:5c:f1:8b:0a:37:5a:76:1e:c2:dc:f2:04:38: 08:9c:07:61:0d:3f:8d:df:9b:b6:9c:c1:7b:bf:1a: 0b:c6:56:90:83:95:6a:50:ac:34:1a:1b:ba:60:30: b2:37:db:c1:a9:17:61:d9:31:c4:77:7f:aa:44:bd: ac:92:16:c4:23:9d:44:a1:f3:1b:bc:ef:81:21:b8: 90:03:d2:6e:58:5b:d3:cf:f3:d1:0e:03:ed:8d:5c: b5:d4:aa:2c:b1:34:10:64:c9:3c:bd:05:50:cc:31: 98:08:b4:03:78:70:39:6f:ac:27:46:77:96:d0:f7: 5d:5c:4e:5f:3f:8b:47:25:3d:11:db:ed:73:69:ce: 39:ff:1b:ed:97:e6:72:d1:2c:1a:8a:f4:0c:10:f7: a3:9a:c1:ef:02:13:a1:1b:81:8b:2b:6b:11:7a:a1: 32:8a:95:e8:2d:77:ac:2c:13:01:cd:46:9b:7e:e1: 25:26:f4:14:5e:5c:0e:0c:d6:28:92:9e:84:47:6c: 26:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:64:A9:C0:5C:8E:5F:27:6B:FF:9B:6B:31:A0:DF:9D:98:05:82:11 X509v3 Authority Key Identifier: keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:10:3e:8f:c9:16:ea:5b:81:04:1c:5a:70:a6:cc:2c:3a:d8: b1:1d:ef:b0:44:23:d8:8c:9d:97:42:85:9b:10:7d:bd:4a:e6: e0:f7:fd:5b:ff:b9:d7:74:f8:41:b3:19:bd:25:81:d4:fd:e8: bc:c8:1d:6b:db:8c:6f:8e:c6:17:3c:76:7e:18:57:95:e3:d2: 9b:aa:46:65:e5:13:a8:17:e9:78:a4:cb:a6:0d:6e:4e:df:0b: 87:10:f8:7e:5b:bb:86:f7:bb:a2:84:e8:28:e8:62:62:fc:f3: 59:08:e4:24:97:2a:71:f8:de:3d:67:72:44:ce:dc:de:91:ea: 77:58:75:7a:4a:26:7f:37:87:19:a7:00:48:fd:5a:97:cf:ef: 68:ec:06:5d:7e:13:d9:89:7f:95:29:65:34:e9:53:6f:6f:64: f1:64:96:98:97:82:08:26:7b:67:7d:f7:f6:6d:ae:b2:46:3d: de:91:56:0f:d6:04:bd:5b:c8:12:8a:c6:00:58:9f:1d:94:53: 51:2c:b9:03:bf:4c:7a:c1:60:25:e7:73:fa:eb:a8:9b:36:c5: 07:87:a7:85:e3:24:3d:27:fc:42:a8:76:36:83:c8:6f:ae:a3: 3a:8b:8c:b9:86:06:dd:40:91:1c:52:27:59:27:98:27:e6:df: a5:2d:ea:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CIRX+EY4WxQRxrYObMFCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMTVhMDI3YjVlZTRiMGU4NTM3YThmNzE5OGNmYTllYTA5 NDVhZTcwHhcNMjYwMTI2MDIwMTA2WhcNMjYwMTI3MDIwMTA2WjAzMTEwLwYDVQQD Eyg4ZDY0YTljMDVjOGU1ZjI3NmJmZjliNmIzMWEwZGY5ZDk4MDU4MjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUczjoFlD14PlDhyb/opCupy7Tdb 8rV+5GDAWsAcj3cq9LdXFfGzE/9zYzwhVSZLl3ugC9wqSoCtFC/foVzxiwo3WnYe wtzyBDgInAdhDT+N35u2nMF7vxoLxlaQg5VqUKw0Ghu6YDCyN9vBqRdh2THEd3+q RL2skhbEI51EofMbvO+BIbiQA9JuWFvTz/PRDgPtjVy11KossTQQZMk8vQVQzDGY CLQDeHA5b6wnRneW0PddXE5fP4tHJT0R2+1zac45/xvtl+Zy0SwaivQMEPejmsHv AhOhG4GLK2sReqEyipXoLXesLBMBzUabfuElJvQUXlwODNYokp6ER2wmAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI1kqcBcjl8na/+bazGg352YBYIRMB8GA1UdIwQY MBaAFLwVoCe17ksOhTeo9xmM+p6glFrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEt NmRmZTIzOWFlNTQxLzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEtNmRmZTIzOWFlNTQx LzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRA+j8kW 6luBBBxacKbMLDrYsR3vsEQj2Iydl0KFmxB9vUrm4Pf9W/+513T4QbMZvSWB1P3o vMgda9uMb47GFzx2fhhXlePSm6pGZeUTqBfpeKTLpg1uTt8LhxD4flu7hve7ooTo KOhiYvzzWQjkJJcqcfjePWdyRM7c3pHqd1h1ekomfzeHGacASP1al8/vaOwGXX4T 2Yl/lSllNOlTb29k8WSWmJeCCCZ7Z3339m2uskY93pFWD9YEvVvIEorGAFifHZRT USy5A79MesFgJedz+uuomzbFB4enheMkPSf8Qqh2NoPIb66jOouMuYYG3UCRHFIn WSeYJ+bfpS3q2A== -----END CERTIFICATE-----Generated at Mon Jan 26 07:13:01 2026 by rpki-client