This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json) Hash identifier: n5YKGETkDx6mpwFHxSsfdHbtD5g2AHPKO8n2zSbVeGE= Subject key identifier: 07:E7:00:10:47:49:74:A5:39:1A:32:1D:9B:35:0C:67:D7:F8:32:BC Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25 Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925 Certificate serial: 019BF763D3D142203E6BD1D71AC6F320A460 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft Manifest number: 120C Signing time: Sun 25 Jan 2026 23:01:13 +0000 Manifest this update: Sun 25 Jan 2026 23:01:13 +0000 Manifest next update: Mon 26 Jan 2026 23:01:13 +0000 Files and hashes: 1: 57GlcaGY8t0-JNPIK_ZNj3qb4xk.roa (hash: kEdl9HoBzbXYtbynMGANu3aJP2xP3zxifNgIx1WuYN8=) 2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: q6robWvBxSueWZ+MCuo755I/OUIV6bYETA6DecghgMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:d3:d1:42:20:3e:6b:d1:d7:1a:c6:f3:20:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925 Validity Not Before: Jan 25 23:01:13 2026 GMT Not After : Jan 26 23:01:13 2026 GMT Subject: CN=07e70010474974a5391a321d9b350c67d7f832bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:95:f2:3b:46:2d:6b:f0:c0:73:89:50:8d: 2d:7d:63:1c:3d:82:e8:d8:c1:bf:8f:d5:a2:c7:5f: 26:36:9b:5f:08:3c:90:bd:ff:6d:54:3e:ed:6d:9c: 41:8a:c3:5c:de:34:2c:a7:2f:88:8b:d1:c8:ec:db: 1a:0f:d4:2f:fa:64:09:0c:07:bf:bf:5a:d6:bd:07: 98:1d:c8:2b:b7:d5:8e:0a:2d:19:9f:26:f7:88:4b: ff:c5:e7:e0:4e:f9:93:40:e6:9f:5a:a1:12:b8:b5: 78:07:fe:e5:1a:eb:98:2a:10:2a:86:0d:60:f8:89: 6e:6e:91:fc:2f:a6:d9:02:e2:92:2b:44:e5:ef:99: 2b:74:47:58:ff:8a:88:e3:3b:f1:5d:b8:19:8b:ca: 75:b5:0b:2a:0d:fc:31:73:63:8f:29:48:77:16:45: 24:85:f8:69:ab:d4:d1:7e:62:9f:5a:87:15:69:9d: 67:aa:1e:f3:2d:35:40:34:64:94:b1:4a:bd:6e:23: 5e:0b:b8:3b:06:41:cc:ea:7a:b1:e8:e6:d5:dd:7a: 81:85:07:91:5e:1d:32:ba:88:4d:e0:3e:4f:85:51: b6:c7:d2:dc:a6:7e:e6:46:10:58:03:e9:07:71:2a: ba:a7:01:4a:1a:7d:7b:ff:f7:c3:db:40:7d:15:30: 1f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:E7:00:10:47:49:74:A5:39:1A:32:1D:9B:35:0C:67:D7:F8:32:BC X509v3 Authority Key Identifier: keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ac:73:77:5d:fe:56:a0:53:95:0c:ac:77:83:b4:8e:9a:92: 0b:d7:53:ec:f0:14:1e:cd:ba:24:ed:1f:c5:be:e5:5f:89:33: 83:7f:55:95:ba:86:ba:ce:bd:6e:c2:30:c0:52:f9:43:b7:3b: ab:e6:31:e8:88:79:36:7b:35:e2:a5:f8:58:de:99:20:ad:bb: be:22:7d:6e:1c:67:9f:1f:ee:fc:b1:89:69:ca:49:b7:16:f7: 6a:b3:71:ce:4f:2e:29:46:48:ef:78:d4:c1:f5:46:23:cd:f9: de:1a:36:3d:fc:c7:38:19:b9:f7:72:6e:e9:e4:2b:50:6d:49: 3e:2f:35:4b:ce:0e:61:f9:e5:ee:e5:f0:37:f8:29:4b:9a:c6: fa:41:83:06:ac:05:fc:f1:d5:36:ae:53:91:f9:f8:79:58:79: 21:2c:91:f4:c5:69:4e:ad:f1:54:bc:fc:fb:4f:03:9a:28:ae: 70:63:46:e6:2d:9d:50:53:35:37:a0:0d:4c:e1:6b:86:df:10: ca:56:4d:99:b1:04:ad:45:c7:c7:ed:3c:fd:a6:2b:27:6a:ed: a2:ac:fc:fa:3b:98:52:af:92:b8:e1:0b:ae:53:c0:d7:e8:48: 28:55:95:6e:bf:f4:98:a3:e5:8c:0d:97:51:1e:78:31:a1:93: cc:80:ce:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y9PRQiA+a9HXGsbzIKRgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjY2NjOGY0YjM3ZDg5MjI4Y2QwMjNkMjUyMWQyOTk2OGRl MGI5MjUwHhcNMjYwMTI1MjMwMTEzWhcNMjYwMTI2MjMwMTEzWjAzMTEwLwYDVQQD EygwN2U3MDAxMDQ3NDk3NGE1MzkxYTMyMWQ5YjM1MGM2N2Q3ZjgzMmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHSV8jtGLWvwwHOJUI0tfWMcPYLo 2MG/j9Wix18mNptfCDyQvf9tVD7tbZxBisNc3jQspy+Ii9HI7NsaD9Qv+mQJDAe/ v1rWvQeYHcgrt9WOCi0Znyb3iEv/xefgTvmTQOafWqESuLV4B/7lGuuYKhAqhg1g +IlubpH8L6bZAuKSK0Tl75krdEdY/4qI4zvxXbgZi8p1tQsqDfwxc2OPKUh3FkUk hfhpq9TRfmKfWocVaZ1nqh7zLTVANGSUsUq9biNeC7g7BkHM6nqx6ObV3XqBhQeR Xh0yuohN4D5PhVG2x9Lcpn7mRhBYA+kHcSq6pwFKGn17//fD20B9FTAfvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAfnABBHSXSlORoyHZs1DGfX+DK8MB8GA1UdIwQY MBaAFLzMyPSzfYkijNAj0lIdKZaN4LklMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYt MDIxNWM0ZWFhN2MzLzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi84MThmMmMtY2U3YS00YjYxLWFhMGYtMDIxNWM0ZWFhN2Mz LzEvdk16STlMTjlpU0tNMENQU1VoMHBsbzNndVNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaxzd13+ VqBTlQysd4O0jpqSC9dT7PAUHs26JO0fxb7lX4kzg39VlbqGus69bsIwwFL5Q7c7 q+Yx6Ih5Nns14qX4WN6ZIK27viJ9bhxnnx/u/LGJacpJtxb3arNxzk8uKUZI73jU wfVGI8353ho2PfzHOBm593Ju6eQrUG1JPi81S84OYfnl7uXwN/gpS5rG+kGDBqwF /PHVNq5Tkfn4eVh5ISyR9MVpTq3xVLz8+08DmiiucGNG5i2dUFM1N6ANTOFrht8Q ylZNmbEErUXHx+08/aYrJ2rtoqz8+juYUq+SuOELrlPA1+hIKFWVbr/0mKPljA2X UR54MaGTzIDO/g== -----END CERTIFICATE-----Generated at Mon Jan 26 09:45:32 2026 by rpki-client