This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json) Hash identifier: q8Q3zRXEVYADX66E6opVCzqBTKknRaBQ0k6q0Y8KWuE= Subject key identifier: A3:F3:17:E6:A7:97:2A:18:2D:AC:26:1F:66:84:B2:BA:38:53:25:86 Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9 Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9 Certificate serial: 019BF4997EEE37C726CD15F0A728F9075FFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 10:00:58 +0000 Manifest this update: Sun 25 Jan 2026 10:00:58 +0000 Manifest next update: Mon 26 Jan 2026 10:00:58 +0000 Files and hashes: 1: DnP6GcDKWF77PKsQ6HasKB8i_K0.roa (hash: 5rS9bW+Cd7FZhz3igcUd9hkUorfrY7/8Znu4PQmJGxs=) 2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: UWlmBvL6gCA19+xXpQ4+8/uKWQNcBPNOHM7TvyG5tf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:7e:ee:37:c7:26:cd:15:f0:a7:28:f9:07:5f:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9 Validity Not Before: Jan 25 10:00:58 2026 GMT Not After : Jan 26 10:00:58 2026 GMT Subject: CN=a3f317e6a7972a182dac261f6684b2ba38532586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0e:fd:f5:7d:b8:52:e2:5e:e7:26:e3:c2:72: 99:fb:22:5f:e3:33:e3:45:77:c5:83:90:e0:8b:76: 81:62:61:53:18:39:6d:42:59:23:25:68:32:a1:00: a9:07:fc:be:6c:b4:55:a3:28:4d:66:ce:e8:73:79: ef:2d:8d:33:32:05:6a:79:80:d4:ca:69:c6:e9:08: f0:4a:32:b1:12:35:b9:be:43:76:9d:44:ca:17:b8: fa:4c:38:d7:95:2d:06:9b:81:21:40:f6:3f:2f:ab: d1:73:c6:79:95:69:2e:33:9e:38:c5:53:0a:55:bb: de:8c:2e:3f:e9:1e:43:d0:94:73:29:40:ad:13:64: 42:a0:c5:10:06:67:11:cd:2d:4f:14:85:7f:a2:1f: 70:32:5a:89:56:da:26:89:52:c8:0d:be:c8:d9:31: 5d:86:2e:14:f3:bb:d8:a8:d1:ec:90:21:31:60:3b: 20:e1:8c:17:36:2d:2b:08:60:db:93:f5:8d:89:36: 70:06:bc:fc:56:44:7d:00:fd:85:60:6e:98:4f:4f: c4:1d:37:59:68:da:0b:8a:8e:d7:d9:4b:51:69:27: df:22:8b:b9:77:94:91:0b:a3:a3:45:db:10:b3:81: 81:9d:ce:dc:b9:02:c1:d6:7a:74:b3:7d:ab:5f:14: 88:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F3:17:E6:A7:97:2A:18:2D:AC:26:1F:66:84:B2:BA:38:53:25:86 X509v3 Authority Key Identifier: keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:c4:5e:37:6d:1e:4d:a8:b8:74:a0:7c:5e:31:60:1d:c9:28: f5:78:93:de:b0:ea:ad:04:6b:5d:bf:a5:a2:32:cf:f3:e3:f9: 19:a7:35:5a:fc:c6:42:74:61:24:4d:ff:b3:c4:e1:e3:9f:36: 2d:46:e6:0b:e1:66:6f:c8:d2:65:fa:21:a5:c4:49:83:c4:29: 93:2c:6d:90:36:49:8c:6a:60:5e:74:b9:73:d3:ca:20:f3:19: b3:44:01:b6:03:4b:2f:b7:70:94:88:ec:9e:ee:46:b0:bf:4d: 41:14:dd:ba:f6:fc:82:06:59:2a:eb:cd:cf:fa:51:3a:21:1f: f8:cc:6e:34:6c:e4:35:ae:89:5a:91:12:fa:9e:26:27:2e:1a: 2e:e6:c8:f8:30:00:1c:a7:3c:b9:eb:1d:a3:f4:ae:dc:f2:c0: 7d:87:ad:cb:ab:9e:56:77:07:91:6e:77:f6:4a:35:42:f2:0e: 04:5c:b0:c6:c3:d0:fd:cd:15:6c:c8:42:81:e6:fe:9f:f8:dc: d0:a4:72:f1:e5:fd:a1:eb:54:d5:b2:01:36:ef:89:c1:60:40: e0:da:78:e1:e9:16:96:81:ff:96:f5:03:fa:9b:16:19:66:07: 39:a6:51:87:40:9d:ae:35:86:e9:f6:b0:98:1a:b1:4e:86:5c: fc:f1:49:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mX7uN8cmzRXwpyj5B1//MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNmQyZWQ3Nzk0ZDMyMTdjZmFhZmUxY2FkNTNmNzU1Yjgy Y2UzYTkwHhcNMjYwMTI1MTAwMDU4WhcNMjYwMTI2MTAwMDU4WjAzMTEwLwYDVQQD EyhhM2YzMTdlNmE3OTcyYTE4MmRhYzI2MWY2Njg0YjJiYTM4NTMyNTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQ799X24UuJe5ybjwnKZ+yJf4zPj RXfFg5Dgi3aBYmFTGDltQlkjJWgyoQCpB/y+bLRVoyhNZs7oc3nvLY0zMgVqeYDU ymnG6QjwSjKxEjW5vkN2nUTKF7j6TDjXlS0Gm4EhQPY/L6vRc8Z5lWkuM544xVMK VbvejC4/6R5D0JRzKUCtE2RCoMUQBmcRzS1PFIV/oh9wMlqJVtomiVLIDb7I2TFd hi4U87vYqNHskCExYDsg4YwXNi0rCGDbk/WNiTZwBrz8VkR9AP2FYG6YT0/EHTdZ aNoLio7X2UtRaSffIou5d5SRC6OjRdsQs4GBnc7cuQLB1np0s32rXxSIgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPzF+anlyoYLawmH2aEsro4UyWGMB8GA1UdIwQY MBaAFLxtLtd5TTIXz6r+HK1T91W4LOOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMt NzdiNGJiZTM1YTllLzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMtNzdiNGJiZTM1YTll LzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnsReN20e Tai4dKB8XjFgHcko9XiT3rDqrQRrXb+lojLP8+P5Gac1WvzGQnRhJE3/s8Th4582 LUbmC+Fmb8jSZfohpcRJg8QpkyxtkDZJjGpgXnS5c9PKIPMZs0QBtgNLL7dwlIjs nu5GsL9NQRTduvb8ggZZKuvNz/pROiEf+MxuNGzkNa6JWpES+p4mJy4aLubI+DAA HKc8uesdo/Su3PLAfYety6ueVncHkW539ko1QvIOBFywxsPQ/c0VbMhCgeb+n/jc 0KRy8eX9oetU1bIBNu+JwWBA4Np44ekWloH/lvUD+psWGWYHOaZRh0CdrjWG6faw mBqxToZc/PFJWg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:37:42 2026 by rpki-client