This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft File: VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json) Hash identifier: TndCmDYrF7Syo4CwgX5ShTtRU1gNTyd5rdcpnS8oOGE= Subject key identifier: BC:E8:CF:E8:26:FD:F5:94:8D:93:5C:69:A5:5A:52:F2:70:51:69:01 Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 Certificate issuer: /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Certificate serial: 019BF619E35869D409B5C2D2AD1A351F03E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft Manifest number: 06A1 Signing time: Sun 25 Jan 2026 17:00:50 +0000 Manifest this update: Sun 25 Jan 2026 17:00:50 +0000 Manifest next update: Mon 26 Jan 2026 17:00:50 +0000 Files and hashes: 1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=) 2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: 4GGbGcajJfgM8pyHRcFzHBF/aaRcx9n1/Mxikx4C61Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:e3:58:69:d4:09:b5:c2:d2:ad:1a:35:1f:03:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206 Validity Not Before: Jan 25 17:00:50 2026 GMT Not After : Jan 26 17:00:50 2026 GMT Subject: CN=bce8cfe826fdf5948d935c69a55a52f270516901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:35:4c:69:1b:4a:1f:70:c2:15:f2:c8:bb:99: 44:69:fe:a8:fe:ff:08:15:0f:4c:fc:58:c0:16:4c: 75:76:9f:34:29:50:eb:ee:89:1b:e3:3b:41:bc:dd: 57:8d:6b:81:f2:82:c2:83:cb:1e:25:00:42:6d:3b: db:c5:0d:7f:78:ac:84:38:ac:d6:69:d3:66:bd:0e: e7:09:76:5e:ca:4f:85:f7:a6:79:09:bf:1f:22:27: 64:90:39:1d:58:ca:e8:37:d4:95:de:59:09:6a:ed: a5:86:8b:49:fe:e5:1e:cb:16:f1:41:4f:3e:28:ed: d4:9a:35:2c:86:1c:8a:1d:41:1d:25:e2:18:b8:88: 11:11:0b:e0:2b:0d:08:de:0b:3c:9d:37:04:4e:3a: 49:16:29:93:d2:e4:f3:45:7f:fa:bf:f8:a0:62:18: 54:7c:b0:e0:c8:22:70:ef:c1:a7:6e:5f:c9:5b:ab: f3:97:21:ed:9a:6e:29:74:ff:79:88:1d:f0:3e:2f: 23:6e:9a:37:de:2d:4e:d3:9d:20:62:2d:f6:de:20: bd:76:6d:e4:cf:b6:f3:89:f0:8a:1b:c6:24:d8:46: f8:56:29:c6:29:5d:a5:ce:c7:64:3f:26:7c:36:35: b6:b7:00:ab:95:ee:36:c6:c7:f1:34:5c:3b:35:c4: 02:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E8:CF:E8:26:FD:F5:94:8D:93:5C:69:A5:5A:52:F2:70:51:69:01 X509v3 Authority Key Identifier: keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:2d:cc:e1:9c:e0:54:03:b2:71:6f:3e:60:1d:65:6b:26:2f: ba:46:1c:f2:bb:30:d7:f6:ea:cd:58:29:d9:57:a8:23:80:de: 57:fd:48:b2:fb:1e:8c:a5:0a:7b:13:41:52:8f:db:e5:28:c6: 82:88:53:3c:5e:38:9b:8c:08:4b:f7:b3:9c:eb:8f:66:9e:80: 2d:7c:18:ba:f9:46:d1:73:82:8f:a3:e8:c5:54:0a:fc:17:a7: eb:d3:91:0b:a6:6f:8b:92:ef:38:d4:55:cd:e5:0e:12:32:d7: ac:75:b7:c9:8c:d2:d1:fb:e2:6d:fc:42:e1:86:c0:f7:4f:b8: c1:a6:33:7c:a5:c1:fe:46:b3:7e:d1:ad:5b:d4:92:bb:46:11: 98:9b:6b:5a:8b:d5:37:9e:36:32:23:9c:cf:07:92:a6:20:0c: 8a:f3:f4:bf:8b:05:65:05:aa:9d:d5:c1:7a:c4:76:c3:68:53: 4d:16:f7:14:75:e1:b7:3b:58:1c:eb:8e:5e:46:2b:f9:17:fb: 17:ab:20:ab:e6:1e:ca:83:a5:b9:35:c3:75:d3:b2:01:55:fd: 8a:d7:b2:0f:47:f8:43:62:da:2e:43:f3:71:8e:4b:c9:27:3f: 4e:cc:15:09:4b:68:51:20:8a:58:7f:36:b9:29:66:21:4a:9f: 48:6d:3c:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GeNYadQJtcLSrRo1HwPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NDJiNzY2ZWY1N2Q2OWNmNGZiZGU0YmNiNmYwYWYwNmEz YjIyMDYwHhcNMjYwMTI1MTcwMDUwWhcNMjYwMTI2MTcwMDUwWjAzMTEwLwYDVQQD EyhiY2U4Y2ZlODI2ZmRmNTk0OGQ5MzVjNjlhNTVhNTJmMjcwNTE2OTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTVMaRtKH3DCFfLIu5lEaf6o/v8I FQ9M/FjAFkx1dp80KVDr7okb4ztBvN1XjWuB8oLCg8seJQBCbTvbxQ1/eKyEOKzW adNmvQ7nCXZeyk+F96Z5Cb8fIidkkDkdWMroN9SV3lkJau2lhotJ/uUeyxbxQU8+ KO3UmjUshhyKHUEdJeIYuIgREQvgKw0I3gs8nTcETjpJFimT0uTzRX/6v/igYhhU fLDgyCJw78Gnbl/JW6vzlyHtmm4pdP95iB3wPi8jbpo33i1O050gYi323iC9dm3k z7bzifCKG8Yk2Eb4VinGKV2lzsdkPyZ8NjW2twCrle42xsfxNFw7NcQCkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzoz+gm/fWUjZNcaaVaUvJwUWkBMB8GA1UdIwQY MBaAFFVCt2bvV9ac9PveS8tvCvBqOyIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMt NzgzMDhiMmY1MjM0LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMtNzgzMDhiMmY1MjM0 LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqS3M4Zzg VAOycW8+YB1layYvukYc8rsw1/bqzVgp2VeoI4DeV/1IsvsejKUKexNBUo/b5SjG gohTPF44m4wIS/eznOuPZp6ALXwYuvlG0XOCj6PoxVQK/Ben69ORC6Zvi5LvONRV zeUOEjLXrHW3yYzS0fvibfxC4YbA90+4waYzfKXB/kazftGtW9SSu0YRmJtrWovV N542MiOczweSpiAMivP0v4sFZQWqndXBesR2w2hTTRb3FHXhtztYHOuOXkYr+Rf7 F6sgq+YeyoOluTXDddOyAVX9iteyD0f4Q2LaLkPzcY5LySc/TswVCUtoUSCKWH82 uSlmIUqfSG08vg== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:44 2026 by rpki-client