This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json) Hash identifier: xrAiky1beXUjewSUnPrcjYsZcr+F7QyvrIf5lXjwxPA= Subject key identifier: 0C:47:36:53:FB:85:92:E9:01:C0:EC:B7:61:24:94:92:74:CD:65:E9 Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48 Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148 Certificate serial: 019BF91B7B9C399C41748281CAF1A409C87B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft Manifest number: 0DBD Signing time: Mon 26 Jan 2026 07:01:26 +0000 Manifest this update: Mon 26 Jan 2026 07:01:26 +0000 Manifest next update: Tue 27 Jan 2026 07:01:26 +0000 Files and hashes: 1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=) 2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: 5ztpQJwK8NbdpYMnCnZavcP+kUMq0MyVJm1YMzPKBXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:7b:9c:39:9c:41:74:82:81:ca:f1:a4:09:c8:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148 Validity Not Before: Jan 26 07:01:26 2026 GMT Not After : Jan 27 07:01:26 2026 GMT Subject: CN=0c473653fb8592e901c0ecb76124949274cd65e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:e2:0f:67:78:0b:0f:16:c9:5f:51:9f:11: c1:c6:82:68:7e:2d:1e:33:c7:2e:18:c5:ff:e8:a8: ff:67:11:62:e5:f4:46:6d:85:68:dc:a7:ae:bc:35: a1:f9:ee:42:b5:e9:f8:81:ce:83:c5:6c:4b:bc:20: 46:f7:40:ce:67:a2:45:d8:3d:cc:3e:f3:4e:91:fc: 62:58:8b:30:64:97:d8:7e:08:40:59:a0:51:93:9a: af:4c:46:98:82:33:77:6f:0c:22:ad:50:50:75:91: 89:35:88:54:14:fd:56:fb:d5:8f:4d:de:c7:9b:74: 2a:f9:ea:9f:44:21:91:15:de:31:60:b7:4b:16:ff: 73:fa:28:d5:4a:f1:1b:1c:6f:0c:c8:30:f0:8e:5f: 83:73:ba:7a:35:03:c2:23:39:c3:5f:25:7a:f5:2f: 5b:e7:96:9e:b4:ec:78:80:5b:f3:3a:61:60:04:dc: 96:db:9c:fa:9b:38:50:58:e6:f8:a0:b7:cd:24:bd: 3d:07:fa:b0:02:1b:30:e4:10:ab:6d:2a:9b:99:5b: bb:e1:14:11:1d:f6:cd:30:98:21:2a:6b:14:d0:42: 4a:f1:95:56:ef:03:be:8f:0e:5a:b9:19:a0:a8:f4: b3:59:a5:99:5d:b9:27:8d:b6:72:c9:6e:69:86:d4: ee:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:47:36:53:FB:85:92:E9:01:C0:EC:B7:61:24:94:92:74:CD:65:E9 X509v3 Authority Key Identifier: keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:82:f6:94:60:9c:dc:1f:e0:dc:18:50:be:23:68:5c:de:aa: c5:0f:cc:7e:af:f1:fa:73:c7:c2:72:12:2f:7c:b1:93:6e:8f: a6:1e:5c:02:4a:ef:9e:cb:be:1e:10:d2:92:c8:66:c1:0f:6f: b4:db:7c:c5:08:31:80:ca:a8:9a:79:e4:a6:42:bc:a3:5c:f8: 26:f3:98:b7:c9:0d:a3:71:7a:48:ca:cb:8b:e9:41:4b:df:f0: d0:fe:6d:60:7f:94:df:69:7e:2a:f5:b5:ae:63:33:03:af:ee: dc:a4:ad:d5:d6:cc:54:b4:eb:de:cc:0b:84:4e:4d:64:80:7f: 00:b1:40:fc:90:2e:9a:e8:9d:4c:f8:cd:aa:44:3f:ff:6c:6a: a2:a8:fa:c9:ab:e7:e1:61:d2:e4:3c:df:3a:be:68:d6:4d:36: 7c:21:e3:6b:68:cb:9a:de:ea:2f:82:68:35:bf:cd:a9:be:e2: ca:00:1f:a6:55:74:f6:77:95:6d:9f:61:43:ca:aa:94:dc:a5: ca:23:e6:2e:3f:39:73:92:67:a4:7e:5e:19:c5:fa:d6:fd:5f: 53:dc:a0:48:61:8b:5e:ed:ea:8d:f9:df:38:d4:c7:23:ac:ca: 7f:8a:be:0f:87:5f:8d:71:05:87:2f:b8:0f:5d:8a:d5:3f:34: ad:6d:37:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G3ucOZxBdIKByvGkCch7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOGIxNWMyMzdmMzRjNWM1YzUzNDRiNDA3OWViYjNhNTg5 ZDAxNDgwHhcNMjYwMTI2MDcwMTI2WhcNMjYwMTI3MDcwMTI2WjAzMTEwLwYDVQQD EygwYzQ3MzY1M2ZiODU5MmU5MDFjMGVjYjc2MTI0OTQ5Mjc0Y2Q2NWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqXiD2d4Cw8WyV9RnxHBxoJofi0e M8cuGMX/6Kj/ZxFi5fRGbYVo3KeuvDWh+e5Cten4gc6DxWxLvCBG90DOZ6JF2D3M PvNOkfxiWIswZJfYfghAWaBRk5qvTEaYgjN3bwwirVBQdZGJNYhUFP1W+9WPTd7H m3Qq+eqfRCGRFd4xYLdLFv9z+ijVSvEbHG8MyDDwjl+Dc7p6NQPCIznDXyV69S9b 55aetOx4gFvzOmFgBNyW25z6mzhQWOb4oLfNJL09B/qwAhsw5BCrbSqbmVu74RQR HfbNMJghKmsU0EJK8ZVW7wO+jw5auRmgqPSzWaWZXbknjbZyyW5phtTu2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxHNlP7hZLpAcDst2EklJJ0zWXpMB8GA1UdIwQY MBaAFL6LFcI380xcXFNEtAeeuzpYnQFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQt MzFkZTE3NjlmZDhhLzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQtMzFkZTE3NjlmZDhh LzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT4L2lGCc 3B/g3BhQviNoXN6qxQ/Mfq/x+nPHwnISL3yxk26Pph5cAkrvnsu+HhDSkshmwQ9v tNt8xQgxgMqomnnkpkK8o1z4JvOYt8kNo3F6SMrLi+lBS9/w0P5tYH+U32l+KvW1 rmMzA6/u3KSt1dbMVLTr3swLhE5NZIB/ALFA/JAumuidTPjNqkQ//2xqoqj6yavn 4WHS5DzfOr5o1k02fCHja2jLmt7qL4JoNb/Nqb7iygAfplV09neVbZ9hQ8qqlNyl yiPmLj85c5JnpH5eGcX61v1fU9ygSGGLXu3qjfnfONTHI6zKf4q+D4dfjXEFhy+4 D12K1T80rW03aw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:45:58 2026 by rpki-client