This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json) Hash identifier: bKYoyU4zbB1m4Yn7p5/9CxN/aucgXcb+VIX7e6T+BMA= Subject key identifier: 24:0F:CD:72:67:DA:A2:A5:5F:CA:CE:48:C7:62:A9:BD:8C:C1:42:AD Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9 Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9 Certificate serial: 019BF687AF0CD7BDD85AF1E51E07A0586F33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 19:00:45 +0000 Manifest this update: Sun 25 Jan 2026 19:00:45 +0000 Manifest next update: Mon 26 Jan 2026 19:00:45 +0000 Files and hashes: 1: DnP6GcDKWF77PKsQ6HasKB8i_K0.roa (hash: 5rS9bW+Cd7FZhz3igcUd9hkUorfrY7/8Znu4PQmJGxs=) 2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: iOT0ALZGRSV+bNh4A4up9qSCNgVk9lF024xupNslLx0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:af:0c:d7:bd:d8:5a:f1:e5:1e:07:a0:58:6f:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9 Validity Not Before: Jan 25 19:00:45 2026 GMT Not After : Jan 26 19:00:45 2026 GMT Subject: CN=240fcd7267daa2a55fcace48c762a9bd8cc142ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:80:46:e6:ea:05:d5:14:09:9c:9f:5d:74:5f: 13:1f:a2:29:9d:b5:be:93:f6:4b:77:12:a8:e4:e1: 41:b9:2a:81:07:7a:32:fa:16:55:46:a7:d8:d0:ea: e4:03:f5:52:a1:43:af:6f:b6:09:c5:e6:d7:00:ce: 6e:49:58:ae:46:3f:00:92:08:ad:10:f1:8b:91:ff: 14:71:e9:f1:35:0d:d0:f7:c3:1a:f9:e4:1b:ad:f9: c2:40:8a:5f:ea:46:9e:8a:45:62:35:85:1b:5b:f7: 04:b3:f8:4e:45:c4:55:59:7e:d6:38:ed:31:fb:69: 56:38:18:b7:31:81:6b:0a:26:2f:0f:99:a9:86:74: cb:1b:c9:d3:15:2d:2e:1d:61:70:52:bc:bd:45:6a: 6d:5f:0c:b5:f3:ee:7b:b3:61:72:9a:2d:84:c9:da: b8:41:66:76:90:bc:5e:57:08:c1:78:12:a8:c2:76: 34:a5:6f:b4:60:67:f9:de:b0:b9:93:57:b8:a9:78: ec:7a:bb:d2:34:3b:57:2d:0b:ab:18:5e:72:2a:cb: 6a:ac:ee:73:8d:a1:0e:02:67:c0:3f:08:80:4d:49: 22:5c:7f:a3:8f:7a:77:ae:35:cd:56:d0:65:26:9d: 5d:58:e1:00:c9:1b:01:f4:c8:4e:fb:e6:61:e1:3a: 5e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:0F:CD:72:67:DA:A2:A5:5F:CA:CE:48:C7:62:A9:BD:8C:C1:42:AD X509v3 Authority Key Identifier: keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:14:e9:b2:37:7b:b1:a8:30:28:08:9e:4c:ae:68:15:d5:76: e6:88:8f:e2:c6:62:ab:dc:4a:da:73:c6:5b:ee:73:32:5b:1d: 41:b7:25:4f:b6:4c:7c:70:36:ee:c3:99:28:c8:71:73:86:a2: b9:ab:4c:97:8b:b4:80:7f:19:6b:9e:2a:2e:f4:94:32:06:71: 8d:fc:78:5d:58:cb:67:65:13:e1:91:f9:a0:df:f2:52:16:e8: b9:13:3d:e6:44:5d:20:c6:2a:0e:f2:ca:d2:b3:63:2c:b8:d5: a9:c2:96:43:11:a7:05:5c:6c:9d:38:f4:ab:0c:10:d4:61:5f: 2b:8f:12:bd:3e:f6:ea:db:2a:ea:75:80:97:a5:8e:fe:16:3b: 5b:1b:51:47:7a:25:b8:79:33:a7:d4:91:1d:7d:3f:9f:cb:e2: 64:59:6a:5f:56:5d:2e:9a:1d:1e:94:2b:13:c9:22:4f:4f:a2: 1d:e4:33:ba:55:94:bf:09:8d:86:11:ad:73:d6:1a:d8:e4:fc: 23:83:d8:34:3a:4c:99:b0:05:17:c9:3b:4d:80:89:3e:97:b9: fe:68:43:0a:5c:80:7e:96:d0:ff:df:c1:14:1c:98:59:06:14: b7:20:ec:7c:9f:08:c9:17:c2:e0:32:6b:8c:2e:8f:96:79:73: 85:21:50:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h68M173YWvHlHgegWG8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNmQyZWQ3Nzk0ZDMyMTdjZmFhZmUxY2FkNTNmNzU1Yjgy Y2UzYTkwHhcNMjYwMTI1MTkwMDQ1WhcNMjYwMTI2MTkwMDQ1WjAzMTEwLwYDVQQD EygyNDBmY2Q3MjY3ZGFhMmE1NWZjYWNlNDhjNzYyYTliZDhjYzE0MmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YBG5uoF1RQJnJ9ddF8TH6IpnbW+ k/ZLdxKo5OFBuSqBB3oy+hZVRqfY0OrkA/VSoUOvb7YJxebXAM5uSViuRj8Akgit EPGLkf8UcenxNQ3Q98Ma+eQbrfnCQIpf6kaeikViNYUbW/cEs/hORcRVWX7WOO0x +2lWOBi3MYFrCiYvD5mphnTLG8nTFS0uHWFwUry9RWptXwy18+57s2Fymi2Eydq4 QWZ2kLxeVwjBeBKownY0pW+0YGf53rC5k1e4qXjservSNDtXLQurGF5yKstqrO5z jaEOAmfAPwiATUkiXH+jj3p3rjXNVtBlJp1dWOEAyRsB9MhO++Zh4Tpe/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCQPzXJn2qKlX8rOSMdiqb2MwUKtMB8GA1UdIwQY MBaAFLxtLtd5TTIXz6r+HK1T91W4LOOpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMt NzdiNGJiZTM1YTllLzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC83ZDI5NDQtMWVkNi00ZmNkLThjNWMtNzdiNGJiZTM1YTll LzEvdkcwdTEzbE5NaGZQcXY0Y3JWUDNWYmdzNDZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRTpsjd7 sagwKAieTK5oFdV25oiP4sZiq9xK2nPGW+5zMlsdQbclT7ZMfHA27sOZKMhxc4ai uatMl4u0gH8Za54qLvSUMgZxjfx4XVjLZ2UT4ZH5oN/yUhbouRM95kRdIMYqDvLK 0rNjLLjVqcKWQxGnBVxsnTj0qwwQ1GFfK48SvT726tsq6nWAl6WO/hY7WxtRR3ol uHkzp9SRHX0/n8viZFlqX1ZdLpodHpQrE8kiT0+iHeQzulWUvwmNhhGtc9Ya2OT8 I4PYNDpMmbAFF8k7TYCJPpe5/mhDClyAfpbQ/9/BFByYWQYUtyDsfJ8IyRfC4DJr jC6PlnlzhSFQ1g== -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:29 2026 by rpki-client