This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: 0lRnR7bRNJmiLdc+DlWyC17CqEENnys+FO9Z/Q/ngCY= Subject key identifier: 0F:9B:38:6E:31:1A:AD:C6:F7:46:98:6A:45:84:3A:EB:03:D8:8F:88 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 019BF4D04C87430BCE5A31A6FB24409A5F41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 12C1 Signing time: Sun 25 Jan 2026 11:00:50 +0000 Manifest this update: Sun 25 Jan 2026 11:00:50 +0000 Manifest next update: Mon 26 Jan 2026 11:00:50 +0000 Files and hashes: 1: 1so34E8eiJbU3SBH98Un9cOyxZA.roa (hash: 1ldGTGYNQmiwKAKpaJZD0c4cvg8xFAkpG1EIpaEahUw=) 2: 5elWeBxLAe6yYejdEv5iOxl2wpY.roa (hash: cXPMx2p9BOBuSf+gbtxIhaiMUrpE5QpYWOZwherOPxc=) 3: NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa (hash: hBgheJjYW2NTuQX0GMNpUdScgOBs91Gnhme3LbGhhOA=) 4: ODMDEGyVLTmd47TMfFo6JexY6HQ.roa (hash: zruo3XY1xsZ3gUUyKc7wrw3okSMA8oCjUH3Rw6OmsMw=) 5: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: 9M0kAvEY8k2cgetTDRMugl5N0MU/4V2YZ80h8XTQFb4=) 6: Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa (hash: HxZPcDMVde46E0YraYcux12OmT61HV19peqYpruy8ck=) 7: ff1Fa-kOqddev469q_q9QwdHNOQ.roa (hash: w2PaSCsne5WpEMiMwnCdvo+2V64rmEO1ylIDUMBUfOM=) 8: kWCTgWZt28p39DxdSCAtv_HwK2c.roa (hash: 6Pr8hVCpj9ARKpg6hJBVs5kjCmMHYsPhDj8rNCbBx5s=) 9: kZfuHKDAiQJXBvJliXqrjaU0XIg.roa (hash: DHMZVeLexmvq1Vc8FbkkKH/pRR44r4WIYoKUwGuSUU0=) 10: lnT80rw_Ryd-z_u4DO17nxl0A5w.roa (hash: wdCITiVG5nvublaggiVZXX2U+oaT1yDZ4/O9JgAyQzQ=) 11: n0qUh9R2qSn_FGDUGu4NzWw85oA.roa (hash: VouJP45N/Qz78cWxNlxzcacwk9tugDuBJxf1M6WkcOE=) 12: na40Ok_i5qXlAc5-oaWGzhjqYgo.roa (hash: fwFOgCfZSKadLjWHLtjDEi/Ibt41w2vO2VBSuz+dD5w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:4c:87:43:0b:ce:5a:31:a6:fb:24:40:9a:5f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: Jan 25 11:00:50 2026 GMT Not After : Jan 26 11:00:50 2026 GMT Subject: CN=0f9b386e311aadc6f746986a45843aeb03d88f88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8b:10:3c:27:1b:5e:cc:29:6c:65:d0:71:4f: a0:c2:53:34:55:9a:3a:f9:e1:e7:d2:c9:45:b7:14: 1e:da:77:72:67:96:e3:a2:23:86:f7:42:33:ed:9e: 92:4a:3d:be:8c:b9:b5:16:cf:52:77:98:e9:a1:b6: 2f:1d:30:6b:03:7f:90:5d:e2:f7:74:01:5c:7b:f3: 4a:a0:68:8d:3a:0b:47:1d:2a:32:38:b9:a4:a2:dc: 61:22:30:9f:47:1b:40:69:8f:31:46:19:cb:4a:ce: b3:d4:6a:1b:f7:9d:95:cf:ec:75:c1:bd:cb:f5:0f: dd:5a:76:90:5d:c3:71:a5:f7:44:43:8f:3d:b3:3d: b4:b3:8f:e3:f8:94:87:32:79:d1:88:83:b1:89:f7: 1b:b0:8f:b3:a9:c8:a9:0e:e5:70:19:65:70:df:ca: 36:b3:7d:5b:8e:0c:71:a5:d7:24:64:31:cf:de:70: 84:a8:a2:e4:1f:3b:67:0a:44:10:d2:0f:cf:41:56: ab:a3:4d:a4:02:1f:31:f4:1e:03:cd:75:b9:59:39: e5:82:48:b7:64:83:05:6a:13:fd:cf:0e:0b:88:7c: 6d:81:5a:23:af:83:2a:fc:4b:a1:1f:c3:47:55:b3: 5a:ec:f2:f0:be:08:bc:bd:19:29:2a:f5:03:21:07: 2c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9B:38:6E:31:1A:AD:C6:F7:46:98:6A:45:84:3A:EB:03:D8:8F:88 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:8a:43:37:a0:9c:10:cb:6a:d4:66:09:20:c1:c2:84:11:7d: 79:cc:0c:7e:5c:6d:d9:6f:42:47:5a:ed:29:7b:8e:49:96:80: 05:b8:7e:26:0d:88:e0:ba:31:f9:9c:29:01:9b:33:b4:45:05: db:4d:f7:2f:04:3f:3b:16:53:fc:55:b2:d4:bb:fa:b8:58:59: 36:69:4f:1e:ac:1f:4f:0a:62:7a:59:ea:bc:3a:2e:86:28:a2: 3e:5a:3d:5b:91:c3:39:45:f9:e5:18:8d:4d:ca:f9:43:ce:3a: 05:91:5e:2b:66:46:c3:55:73:13:6f:fc:c8:cf:d7:41:b9:8d: 92:4d:fc:e8:c7:6b:af:f3:55:59:f9:c9:6f:ec:ea:20:4f:46: 5d:bb:aa:10:46:dd:b2:fe:c4:30:3f:79:d4:7e:01:7f:54:0a: 9a:5b:87:99:57:e3:ab:53:c7:27:84:36:ff:54:33:22:d0:50: 57:bd:13:8a:58:57:24:0b:2e:2f:01:cd:d9:2d:53:8f:ad:92: 84:ca:5b:ff:98:19:ef:98:8e:a4:f3:90:e4:6f:7b:14:03:b4: 87:65:e6:2f:8b:ef:35:c1:8d:f2:4c:87:94:12:df:d2:61:4a: 09:5f:9e:35:60:e5:ac:82:3b:b4:4c:03:c3:bb:dc:cf:e4:ec: 10:8b:b5:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00EyHQwvOWjGm+yRAml9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjYwMTI1MTEwMDUwWhcNMjYwMTI2MTEwMDUwWjAzMTEwLwYDVQQD EygwZjliMzg2ZTMxMWFhZGM2Zjc0Njk4NmE0NTg0M2FlYjAzZDg4Zjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIsQPCcbXswpbGXQcU+gwlM0VZo6 +eHn0slFtxQe2ndyZ5bjoiOG90Iz7Z6SSj2+jLm1Fs9Sd5jpobYvHTBrA3+QXeL3 dAFce/NKoGiNOgtHHSoyOLmkotxhIjCfRxtAaY8xRhnLSs6z1Gob952Vz+x1wb3L 9Q/dWnaQXcNxpfdEQ489sz20s4/j+JSHMnnRiIOxifcbsI+zqcipDuVwGWVw38o2 s31bjgxxpdckZDHP3nCEqKLkHztnCkQQ0g/PQVaro02kAh8x9B4DzXW5WTnlgki3 ZIMFahP9zw4LiHxtgVojr4Mq/EuhH8NHVbNa7PLwvgi8vRkpKvUDIQcseQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+bOG4xGq3G90aYakWEOusD2I+IMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqopDN6Cc EMtq1GYJIMHChBF9ecwMflxt2W9CR1rtKXuOSZaABbh+Jg2I4Lox+ZwpAZsztEUF 2033LwQ/OxZT/FWy1Lv6uFhZNmlPHqwfTwpielnqvDouhiiiPlo9W5HDOUX55RiN Tcr5Q846BZFeK2ZGw1VzE2/8yM/XQbmNkk386Mdrr/NVWfnJb+zqIE9GXbuqEEbd sv7EMD951H4Bf1QKmluHmVfjq1PHJ4Q2/1QzItBQV70TilhXJAsuLwHN2S1Tj62S hMpb/5gZ75iOpPOQ5G97FAO0h2XmL4vvNcGN8kyHlBLf0mFKCV+eNWDlrII7tEwD w7vcz+TsEIu1/w== -----END CERTIFICATE-----Generated at Sun Jan 25 13:07:38 2026 by rpki-client