This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json) Hash identifier: hlQV3o2Ot032jWANmz1cbq2Ea4dRf6sRZKReJRSpWZU= Subject key identifier: 8A:6D:FB:D8:03:5A:E9:50:37:D8:FB:AC:36:FC:2C:5C:47:2B:AB:49 Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6 Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6 Certificate serial: 019BF4D07A11EDAD7C6F2EB00590A331D1B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft Manifest number: 01BE Signing time: Sun 25 Jan 2026 11:01:01 +0000 Manifest this update: Sun 25 Jan 2026 11:01:01 +0000 Manifest next update: Mon 26 Jan 2026 11:01:01 +0000 Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: dJGe6qyE8n4Z1+VPp8qTo3fHi+FQ8ek5Q6rjRjuHoAA=) 2: xnX10RwznEnmTe1E1E5B2rhOTnA.roa (hash: feg+CLsY1TCQ8UES6e5qZUfIKp0hLMvvn81xyTCKGRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:7a:11:ed:ad:7c:6f:2e:b0:05:90:a3:31:d1:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6 Validity Not Before: Jan 25 11:01:01 2026 GMT Not After : Jan 26 11:01:01 2026 GMT Subject: CN=8a6dfbd8035ae95037d8fbac36fc2c5c472bab49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f3:80:9c:59:4b:a7:88:05:bb:b4:03:00:2f: 72:27:b8:34:e1:d1:0b:f3:90:39:05:d7:32:88:19: ce:91:28:c9:c4:2a:04:52:3e:8e:5e:c5:f8:de:17: d4:3c:c7:b9:0c:ed:d2:81:83:d1:b8:10:23:5e:4b: 59:7e:74:9e:7a:65:0d:98:f7:68:86:00:49:e4:45: 4f:6b:7a:2c:69:16:e9:82:0a:12:be:bc:6c:19:a5: 3c:6d:24:83:9a:03:e0:90:cc:16:ec:33:9d:c6:64: 11:f6:14:4e:42:ad:61:59:e4:f0:34:26:b4:68:30: 0e:98:10:4b:fe:3d:21:ed:d2:f5:39:a3:f5:f7:6d: 94:1c:03:74:54:bb:0d:0e:c5:bd:2f:93:70:0f:c9: a6:59:b5:cb:98:68:16:b5:cb:79:d6:d3:fd:3c:99: 13:91:25:11:cc:27:e2:e2:7d:8c:0f:dc:96:60:ed: 2e:43:d8:b4:66:07:7c:7b:8e:56:d8:63:24:49:a8: 95:08:78:7e:ab:87:fd:58:35:8b:b9:a7:3b:15:a4: 0d:00:5c:2d:3d:ed:fe:d3:d4:07:8c:95:f7:96:ed: 98:31:9d:91:7f:bb:3c:bf:fc:87:d1:21:a1:cc:48: 6e:88:e7:fa:3f:73:fb:73:ea:77:40:bd:c9:5c:8d: 35:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6D:FB:D8:03:5A:E9:50:37:D8:FB:AC:36:FC:2C:5C:47:2B:AB:49 X509v3 Authority Key Identifier: keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:08:c9:29:9a:84:71:8f:fc:d6:c5:4e:17:08:4d:52:8c:f3: 1d:14:cf:0b:4b:e2:42:cc:32:d7:16:8c:a7:9c:75:90:ae:02: 0f:ae:c2:66:95:14:cb:d5:e7:e0:0b:b2:0b:4a:0e:68:b9:6d: cb:35:0a:3b:40:40:70:ad:7b:3e:2b:be:6a:22:af:51:40:21: a2:71:01:86:ef:1c:e9:90:7e:3e:81:6a:b2:ce:ae:d2:dc:17: 11:36:1a:f1:52:c9:eb:82:40:e5:d9:45:ee:89:d4:a9:27:01: c4:f0:a8:c8:6a:24:eb:87:96:cf:02:1f:3d:95:3f:af:ee:30: 9e:a1:fd:87:15:c9:0a:d0:93:59:18:eb:40:37:b4:bf:2b:0f: 45:cb:57:29:ff:aa:ef:89:78:41:8a:ac:53:44:4e:c6:98:0f: ec:8f:db:49:56:01:4d:41:d8:c4:36:f1:2a:62:6c:1c:6b:bf: 76:a3:2b:4e:d8:fb:79:9e:f5:e4:d6:1a:a7:ee:7f:d0:60:de: 4e:85:6e:24:92:fc:46:09:d6:81:c5:e6:7a:47:11:b4:09:1e: 88:22:93:af:f7:fa:e3:b6:22:aa:f8:2f:ac:46:bb:a0:6e:2c: a4:1b:8a:b8:22:76:97:8d:b9:90:4c:35:93:3c:6d:74:21:86: 8c:4e:43:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00HoR7a18by6wBZCjMdGxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjg5MmU5OWM4NGExYzVkYzliMTJlMTE0ZDY3YWYxNmMy NGE5ZDYwHhcNMjYwMTI1MTEwMTAxWhcNMjYwMTI2MTEwMTAxWjAzMTEwLwYDVQQD Eyg4YTZkZmJkODAzNWFlOTUwMzdkOGZiYWMzNmZjMmM1YzQ3MmJhYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vOAnFlLp4gFu7QDAC9yJ7g04dEL 85A5BdcyiBnOkSjJxCoEUj6OXsX43hfUPMe5DO3SgYPRuBAjXktZfnSeemUNmPdo hgBJ5EVPa3osaRbpggoSvrxsGaU8bSSDmgPgkMwW7DOdxmQR9hROQq1hWeTwNCa0 aDAOmBBL/j0h7dL1OaP1922UHAN0VLsNDsW9L5NwD8mmWbXLmGgWtct51tP9PJkT kSURzCfi4n2MD9yWYO0uQ9i0Zgd8e45W2GMkSaiVCHh+q4f9WDWLuac7FaQNAFwt Pe3+09QHjJX3lu2YMZ2Rf7s8v/yH0SGhzEhuiOf6P3P7c+p3QL3JXI01ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpt+9gDWulQN9j7rDb8LFxHK6tJMB8GA1UdIwQY MBaAFLxokumchKHF3JsS4RTWevFsJKnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MmQ5ZGQtNzJmMi00MmE3LTk5ODIt YjY0ZTBmNmEwOWNhLzEvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82MmQ5ZGQtNzJmMi00MmE3LTk5ODItYjY0ZTBmNmEwOWNh LzEvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAjJKZqE cY/81sVOFwhNUozzHRTPC0viQswy1xaMp5x1kK4CD67CZpUUy9Xn4AuyC0oOaLlt yzUKO0BAcK17Piu+aiKvUUAhonEBhu8c6ZB+PoFqss6u0twXETYa8VLJ64JA5dlF 7onUqScBxPCoyGok64eWzwIfPZU/r+4wnqH9hxXJCtCTWRjrQDe0vysPRctXKf+q 74l4QYqsU0ROxpgP7I/bSVYBTUHYxDbxKmJsHGu/dqMrTtj7eZ715NYap+5/0GDe ToVuJJL8RgnWgcXmekcRtAkeiCKTr/f647YiqvgvrEa7oG4spBuKuCJ2l425kEw1 kzxtdCGGjE5DDw== -----END CERTIFICATE-----Generated at Sun Jan 25 13:40:29 2026 by rpki-client