This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json) Hash identifier: 9EP5psCrTq3dNXNTqxy+5gwqtmbWv+q0slVNeOAdjzo= Subject key identifier: F7:E1:18:37:A0:11:0E:9B:1D:39:75:86:E7:5B:54:72:04:3E:60:CC Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99 Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99 Certificate serial: 019BF8ADC5ACB58BAB73331398CBB7BD2524 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft Manifest number: 11DE Signing time: Mon 26 Jan 2026 05:01:36 +0000 Manifest this update: Mon 26 Jan 2026 05:01:36 +0000 Manifest next update: Tue 27 Jan 2026 05:01:36 +0000 Files and hashes: 1: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: dEEWqfMGCqfo9eeXmqRpEmYdIL7PzhCK6vKPe9FBfpA=) 2: i7eXSggzIa8jg89Jivwa78vJNEM.roa (hash: UXM3SC+hGfgrD/liPgCeamJJIYAqzLm8hy7hdC8Ta6o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:c5:ac:b5:8b:ab:73:33:13:98:cb:b7:bd:25:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99 Validity Not Before: Jan 26 05:01:36 2026 GMT Not After : Jan 27 05:01:36 2026 GMT Subject: CN=f7e11837a0110e9b1d397586e75b5472043e60cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:8a:a9:35:ef:7b:3d:aa:e9:a3:95:7e:9f:d7: e4:6f:6e:51:3b:ab:1d:7d:6c:2c:f5:31:4a:bc:3f: ee:a9:06:90:ff:25:c7:a0:74:24:c8:a5:39:a7:d9: 24:cb:88:5b:1f:60:fa:c9:15:62:8b:36:d1:7b:3c: a2:2c:a1:3e:2a:8f:cc:7f:e0:e0:d9:ed:8e:40:b6: 0a:4c:cc:1b:54:7e:56:bc:de:7f:85:f3:f8:15:fe: 96:e1:b6:aa:3d:0d:c7:e7:25:6f:73:a3:13:6e:64: d2:a2:67:3e:be:41:1d:71:10:be:e3:90:6f:f8:3b: 79:ef:88:00:09:22:e1:75:f6:d9:67:99:f7:82:2c: 0e:7e:5d:dd:cd:0c:cb:92:4d:14:d3:d8:d2:bf:4a: 14:28:5c:c3:14:37:d7:07:a8:8c:27:ed:21:17:a2: 8f:68:3d:1b:a4:40:83:3b:36:ae:91:fb:aa:5d:59: e6:95:d5:ee:9c:46:e5:f2:6a:6f:61:e5:91:c5:c1: a1:c3:dd:0b:88:80:af:6d:dd:ee:9e:ea:99:11:dc: d7:90:92:4a:ec:de:65:e4:43:1d:2c:ee:43:4c:6b: 5a:27:99:ca:1a:cb:65:cb:74:ff:ac:b9:a3:9f:83: 88:bd:ae:6b:96:bb:9b:95:97:0d:d9:a6:29:40:2a: 09:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E1:18:37:A0:11:0E:9B:1D:39:75:86:E7:5B:54:72:04:3E:60:CC X509v3 Authority Key Identifier: keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:0b:90:d1:60:3d:56:00:9b:70:c0:c7:a4:da:36:73:60:f1: 20:c1:b7:bb:76:6f:a4:6d:d8:56:83:f3:95:7e:4a:86:cd:09: 49:8d:b0:bb:ea:31:26:e6:f3:40:96:6c:e1:65:6b:63:9d:77: 92:7f:2a:83:65:b2:50:32:a9:8e:a0:89:7c:30:8f:30:44:dd: cf:7b:55:ba:ad:9c:4f:d8:65:c2:07:53:20:0a:28:26:02:7d: cc:b4:cb:0e:a8:fa:e9:12:e4:a6:3e:9a:e4:03:f6:f1:db:21: 2b:12:37:4b:13:d7:60:22:e9:76:ad:63:2a:6f:13:87:95:ff: f0:7c:f5:97:6a:f5:45:e5:94:36:c3:b2:77:95:70:88:36:b2: 35:d7:13:01:70:d9:6b:ed:50:36:ff:b9:bb:aa:64:46:ee:9a: e7:5c:57:94:6c:fb:f8:f4:dd:27:3f:80:4d:c2:88:48:42:76: 6e:e2:d8:fd:9e:51:e7:87:f0:fb:05:39:b5:6f:79:e0:08:4d: fe:c7:60:d9:da:84:2c:43:0a:f9:04:9d:ad:a2:d5:ed:2b:ed: 02:79:7f:ae:6d:8a:50:12:1d:50:a5:86:40:7e:8b:64:36:6e: d3:ce:ee:26:b8:f0:d0:52:ee:1b:cf:1e:c9:ff:ca:43:05:91: d4:10:47:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rcWstYurczMTmMu3vSUkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGM0Zjc0MmZkMzI5YTM2ZmNkMjljNGViOTg0ZTVmNDk1 MTVkOTkwHhcNMjYwMTI2MDUwMTM2WhcNMjYwMTI3MDUwMTM2WjAzMTEwLwYDVQQD EyhmN2UxMTgzN2EwMTEwZTliMWQzOTc1ODZlNzViNTQ3MjA0M2U2MGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoqpNe97Parpo5V+n9fkb25RO6sd fWws9TFKvD/uqQaQ/yXHoHQkyKU5p9kky4hbH2D6yRViizbRezyiLKE+Ko/Mf+Dg 2e2OQLYKTMwbVH5WvN5/hfP4Ff6W4baqPQ3H5yVvc6MTbmTSomc+vkEdcRC+45Bv +Dt574gACSLhdfbZZ5n3giwOfl3dzQzLkk0U09jSv0oUKFzDFDfXB6iMJ+0hF6KP aD0bpECDOzaukfuqXVnmldXunEbl8mpvYeWRxcGhw90LiICvbd3unuqZEdzXkJJK 7N5l5EMdLO5DTGtaJ5nKGstly3T/rLmjn4OIva5rlrublZcN2aYpQCoJ7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfhGDegEQ6bHTl1hudbVHIEPmDMMB8GA1UdIwQY MBaAFFQMT3Qv0ymjb80pxOuYTl9JUV2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQt Y2ZiMGQwNDkzYzNhLzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQtY2ZiMGQwNDkzYzNh LzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFguQ0WA9 VgCbcMDHpNo2c2DxIMG3u3ZvpG3YVoPzlX5Khs0JSY2wu+oxJubzQJZs4WVrY513 kn8qg2WyUDKpjqCJfDCPMETdz3tVuq2cT9hlwgdTIAooJgJ9zLTLDqj66RLkpj6a 5AP28dshKxI3SxPXYCLpdq1jKm8Th5X/8Hz1l2r1ReWUNsOyd5VwiDayNdcTAXDZ a+1QNv+5u6pkRu6a51xXlGz7+PTdJz+ATcKISEJ2buLY/Z5R54fw+wU5tW954AhN /sdg2dqELEMK+QSdraLV7SvtAnl/rm2KUBIdUKWGQH6LZDZu087uJrjw0FLuG88e yf/KQwWR1BBHAA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:46:28 2026 by rpki-client