This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft File: vVxqtrwgalTEq7N0FYWMstU9NJ4.mft (raw, json) Hash identifier: I4/+afXcuYhwu+YI2/X2VDb7mKKsiKl/46EHwe2eIHI= Subject key identifier: A1:6C:BC:F4:77:19:95:22:40:D8:10:2C:9D:6E:F8:60:35:28:85:2B Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E Certificate issuer: /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e Certificate serial: 019BFF1D45907CA5F383E56DC927DE7DA755 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft Manifest number: B1 Signing time: Tue 27 Jan 2026 11:01:06 +0000 Manifest this update: Tue 27 Jan 2026 11:01:06 +0000 Manifest next update: Wed 28 Jan 2026 11:01:06 +0000 Files and hashes: 1: HVqsO0SEaw9-mt8SnzIkfdy49ec.roa (hash: dW2BrZognOp9PSojHUwspZ6qNfssSUD6yjA//f4n5ro=) 2: vVxqtrwgalTEq7N0FYWMstU9NJ4.crl (hash: ceGZmI4NZsqp48ToqYtGSF2DeCp7Wyqs2AjMU+GfnK4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:1d:45:90:7c:a5:f3:83:e5:6d:c9:27:de:7d:a7:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e Validity Not Before: Jan 27 11:01:06 2026 GMT Not After : Jan 28 11:01:06 2026 GMT Subject: CN=a16cbcf47719952240d8102c9d6ef8603528852b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1f:de:b8:05:61:f4:5d:07:0f:16:1e:e4:b2: 3a:ca:e5:29:db:4f:ca:3f:e8:fe:5d:47:c0:f7:86: 2e:8b:3d:e2:99:36:40:c8:07:db:3d:ca:79:d4:a5: 56:4b:51:4e:b1:f6:fc:32:98:99:a2:c2:5c:60:da: 62:08:06:20:9b:8d:05:55:69:16:8b:59:6f:ea:56: 04:c2:5e:ac:14:d0:44:24:67:29:f4:5e:e5:49:1c: 6b:5b:b9:9a:c2:68:20:db:c0:0d:01:b6:59:d3:c4: a2:da:78:db:61:1a:95:3f:05:77:49:b5:c1:24:03: 99:7e:5a:ae:79:4d:1d:c5:35:fe:fe:ad:2a:3e:58: 6b:ae:20:70:18:69:59:39:0a:ae:45:e8:0a:5f:78: 3d:d7:93:94:cb:89:f9:27:59:49:8c:6c:37:d0:f1: 50:82:83:cf:76:1e:d3:68:67:0d:3d:3b:40:7b:63: b4:1b:89:11:61:b0:5d:20:56:57:54:12:b6:d8:3e: 9e:03:c8:1f:60:4b:ee:a9:38:4e:13:d7:4a:f5:34: 26:85:80:39:6c:f0:68:4b:8c:16:c6:25:2a:ab:a9: 54:02:11:37:68:14:52:75:7a:ea:c8:bf:12:de:0e: 61:42:08:b6:3c:26:6c:2b:95:6e:9a:88:a2:0a:b7: f3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6C:BC:F4:77:19:95:22:40:D8:10:2C:9D:6E:F8:60:35:28:85:2B X509v3 Authority Key Identifier: keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:37:78:ab:19:29:7e:c5:49:1c:63:2a:49:da:eb:f3:ad:16: af:3b:cc:00:c6:00:b6:5c:19:5e:14:f0:f6:54:76:f9:6d:50: 57:b7:48:20:b3:1e:d6:f1:6b:9e:eb:f8:71:a6:d9:d0:33:7d: 4e:f4:d3:c6:3d:f7:98:a3:71:32:98:77:06:a0:f3:c1:1e:f9: 92:0d:8e:b6:13:1c:4a:59:3a:62:b2:72:c8:4d:d2:55:3d:75: 0a:d7:92:63:49:aa:a9:2e:9f:c5:88:75:01:53:01:0e:12:32: 30:47:0d:55:bd:4f:a0:d5:64:f8:15:e4:9b:1a:0f:74:d1:8e: ea:76:1c:3f:3d:f5:79:0d:9e:eb:94:4f:90:16:13:9d:17:08: 33:b9:4a:bb:bc:26:6f:3a:55:96:d5:11:9f:fc:a6:be:34:75: ee:13:eb:da:60:81:ac:01:11:04:cc:d6:72:70:33:b6:c3:24: 98:d1:a7:9a:31:d4:9d:e2:df:c3:3b:30:d5:1f:e1:d5:8a:24: a0:36:40:54:39:8c:0c:fa:90:29:72:20:7e:27:0b:3f:9f:0e: 3f:0b:11:f2:b4:81:ce:50:55:2c:25:a6:ad:93:3d:68:6f:8c: fd:f3:cd:6f:c9:e5:67:09:78:75:82:5b:21:52:bd:44:73:9a: 5e:75:b7:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv/HUWQfKXzg+VtySfefadVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkNWM2YWI2YmMyMDZhNTRjNGFiYjM3NDE1ODU4Y2IyZDUz ZDM0OWUwHhcNMjYwMTI3MTEwMTA2WhcNMjYwMTI4MTEwMTA2WjAzMTEwLwYDVQQD EyhhMTZjYmNmNDc3MTk5NTIyNDBkODEwMmM5ZDZlZjg2MDM1Mjg4NTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh/euAVh9F0HDxYe5LI6yuUp20/K P+j+XUfA94Yuiz3imTZAyAfbPcp51KVWS1FOsfb8MpiZosJcYNpiCAYgm40FVWkW i1lv6lYEwl6sFNBEJGcp9F7lSRxrW7mawmgg28ANAbZZ08Si2njbYRqVPwV3SbXB JAOZflqueU0dxTX+/q0qPlhrriBwGGlZOQquRegKX3g915OUy4n5J1lJjGw30PFQ goPPdh7TaGcNPTtAe2O0G4kRYbBdIFZXVBK22D6eA8gfYEvuqThOE9dK9TQmhYA5 bPBoS4wWxiUqq6lUAhE3aBRSdXrqyL8S3g5hQgi2PCZsK5VumoiiCrfz1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKFsvPR3GZUiQNgQLJ1u+GA1KIUrMB8GA1UdIwQY MBaAFL1cara8IGpUxKuzdBWFjLLVPTSeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMmY0ZTYtYWYxZC00ZWYxLWI3YWQt NDIzMjNiMjAwOWUzLzEvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8xMmY0ZTYtYWYxZC00ZWYxLWI3YWQtNDIzMjNiMjAwOWUz LzEvdlZ4cXRyd2dhbFRFcTdOMEZZV01zdFU5Tko0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzd4qxkp fsVJHGMqSdrr860WrzvMAMYAtlwZXhTw9lR2+W1QV7dIILMe1vFrnuv4cabZ0DN9 TvTTxj33mKNxMph3BqDzwR75kg2OthMcSlk6YrJyyE3SVT11CteSY0mqqS6fxYh1 AVMBDhIyMEcNVb1PoNVk+BXkmxoPdNGO6nYcPz31eQ2e65RPkBYTnRcIM7lKu7wm bzpVltURn/ymvjR17hPr2mCBrAERBMzWcnAztsMkmNGnmjHUneLfwzsw1R/h1Yok oDZAVDmMDPqQKXIgficLP58OPwsR8rSBzlBVLCWmrZM9aG+M/fPNb8nlZwl4dYJb IVK9RHOaXnW3sA== -----END CERTIFICATE-----Generated at Tue Jan 27 17:14:30 2026 by rpki-client