This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft File: VVvz0dRYglh_O_uidLL4uaRbyJk.mft (raw, json) Hash identifier: 25K5kf9RfyRC60sTf+s5+NYqp8wLtTk6gO7VdmjSlgU= Subject key identifier: D4:0F:43:57:FD:73:2E:35:4F:41:B2:C0:30:23:A1:90:AF:58:74:A9 Authority key identifier: 55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99 Certificate issuer: /CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899 Certificate serial: 019BF8761F7CD18D37BD2DB309A1FBE36DE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft Manifest number: 02E7 Signing time: Mon 26 Jan 2026 04:00:49 +0000 Manifest this update: Mon 26 Jan 2026 04:00:49 +0000 Manifest next update: Tue 27 Jan 2026 04:00:49 +0000 Files and hashes: 1: 7ovLPyCR5ut7hFIeX8yhOKcgGZo.roa (hash: kDW/D2+IDkqljXXSh0ESXvcR+Pz06Mimm2yJyZtpkGA=) 2: VVvz0dRYglh_O_uidLL4uaRbyJk.crl (hash: qH/CgMacQq+sZKPAMlvTR4+WoUSLy9TF6P1nyqJlkRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:1f:7c:d1:8d:37:bd:2d:b3:09:a1:fb:e3:6d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=555bf3d1d45882587f3bfba274b2f8b9a45bc899 Validity Not Before: Jan 26 04:00:49 2026 GMT Not After : Jan 27 04:00:49 2026 GMT Subject: CN=d40f4357fd732e354f41b2c03023a190af5874a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a7:56:ec:20:4e:c8:e1:76:c7:10:8c:8f:43: ce:52:b2:c6:4d:3a:b2:65:99:7c:4a:55:af:ff:fb: f7:1c:ce:1c:6d:64:4b:17:c2:85:5a:22:6b:52:4d: d4:ef:66:99:15:20:11:55:dc:42:46:63:2a:84:fc: 98:d8:50:de:67:e0:7f:7c:13:52:3c:8c:a0:6b:82: a2:a8:15:21:12:f0:60:53:f8:f3:a0:d7:9d:a0:e9: 58:de:e6:04:59:3e:ff:e7:bb:ce:a1:d7:dc:1a:87: c9:05:69:c8:0d:77:e9:0c:e2:23:34:16:4f:62:5e: c8:a4:23:00:b4:e7:d0:fa:c1:1f:01:8e:68:ca:c1: 53:2b:77:5f:fe:19:9a:80:9c:29:bd:9a:c6:e8:da: 2a:37:23:60:9a:72:b4:01:41:10:8b:45:43:30:3c: 6e:dc:3d:2a:b7:6a:1c:1e:08:45:ee:05:a5:22:86: d2:cf:4f:e7:a1:4a:c6:4c:35:ad:7b:13:23:23:b9: 02:63:98:14:dc:da:d5:44:68:69:7c:91:c0:5e:7f: 61:34:fe:85:33:34:90:96:dc:27:b2:4f:0e:cb:bb: aa:52:70:da:77:8d:73:de:24:ea:fd:80:e7:0e:b1: 10:09:b6:61:35:20:15:c2:61:78:6f:1b:13:53:c2: 91:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:0F:43:57:FD:73:2E:35:4F:41:B2:C0:30:23:A1:90:AF:58:74:A9 X509v3 Authority Key Identifier: keyid:55:5B:F3:D1:D4:58:82:58:7F:3B:FB:A2:74:B2:F8:B9:A4:5B:C8:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVvz0dRYglh_O_uidLL4uaRbyJk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/911b43-7fc7-44e7-9dea-e20bb60a2793/1/VVvz0dRYglh_O_uidLL4uaRbyJk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a5:2e:3c:d8:12:88:90:ee:fc:85:18:5b:53:83:31:be:21: 3d:0d:e1:aa:d6:eb:25:e3:ff:18:21:93:78:bf:37:c8:46:0e: 1a:ac:5b:1c:49:22:06:84:b8:e3:eb:41:8a:48:1a:a2:93:1f: e8:01:63:50:66:e9:39:6f:20:16:6d:d5:0f:d6:e2:bf:8f:58: 4c:2e:61:dd:ab:c4:33:d1:ae:75:f8:1b:d9:86:ef:0b:d7:dd: 78:8b:38:d6:2a:b8:1a:38:a5:71:b2:79:47:6d:a9:c1:e7:81: ff:23:d4:23:43:09:1d:96:a4:90:d1:ea:07:f7:1d:e2:d4:4f: a6:44:56:4e:ae:48:e6:ff:8c:c8:0f:a3:f1:3b:9b:ab:d9:a8: 36:1d:e5:d7:23:f7:1b:65:e0:db:31:77:ef:ad:70:2b:53:eb: 9b:1a:d6:42:52:57:b3:5d:46:1d:3e:5d:77:81:ae:22:90:32: 31:3a:a5:ee:f2:b9:cd:70:1e:64:ac:3f:44:4c:55:a1:8e:4c: b9:f3:35:88:3d:1d:0d:24:18:12:b7:8c:cb:08:39:7c:c9:36: af:ed:72:29:bf:38:fd:c9:81:7d:3b:0b:72:1f:01:89:28:4a: 6e:08:95:34:74:b2:0d:d9:38:86:47:72:c9:5e:4e:a3:6d:a1: dc:31:8d:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dh980Y03vS2zCaH7423hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NWJmM2QxZDQ1ODgyNTg3ZjNiZmJhMjc0YjJmOGI5YTQ1 YmM4OTkwHhcNMjYwMTI2MDQwMDQ5WhcNMjYwMTI3MDQwMDQ5WjAzMTEwLwYDVQQD EyhkNDBmNDM1N2ZkNzMyZTM1NGY0MWIyYzAzMDIzYTE5MGFmNTg3NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApadW7CBOyOF2xxCMj0POUrLGTTqy ZZl8SlWv//v3HM4cbWRLF8KFWiJrUk3U72aZFSARVdxCRmMqhPyY2FDeZ+B/fBNS PIyga4KiqBUhEvBgU/jzoNedoOlY3uYEWT7/57vOodfcGofJBWnIDXfpDOIjNBZP Yl7IpCMAtOfQ+sEfAY5oysFTK3df/hmagJwpvZrG6NoqNyNgmnK0AUEQi0VDMDxu 3D0qt2ocHghF7gWlIobSz0/noUrGTDWtexMjI7kCY5gU3NrVRGhpfJHAXn9hNP6F MzSQltwnsk8Oy7uqUnDad41z3iTq/YDnDrEQCbZhNSAVwmF4bxsTU8KRpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQPQ1f9cy41T0GywDAjoZCvWHSpMB8GA1UdIwQY MBaAFFVb89HUWIJYfzv7onSy+LmkW8iZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85MTFiNDMtN2ZjNy00NGU3LTlkZWEt ZTIwYmI2MGEyNzkzLzEvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85MTFiNDMtN2ZjNy00NGU3LTlkZWEtZTIwYmI2MGEyNzkz LzEvVlZ2ejBkUllnbGhfT191aWRMTDR1YVJieUprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqUuPNgS iJDu/IUYW1ODMb4hPQ3hqtbrJeP/GCGTeL83yEYOGqxbHEkiBoS44+tBikgaopMf 6AFjUGbpOW8gFm3VD9biv49YTC5h3avEM9Gudfgb2YbvC9fdeIs41iq4GjilcbJ5 R22pweeB/yPUI0MJHZakkNHqB/cd4tRPpkRWTq5I5v+MyA+j8Tubq9moNh3l1yP3 G2Xg2zF3761wK1PrmxrWQlJXs11GHT5dd4GuIpAyMTql7vK5zXAeZKw/RExVoY5M ufM1iD0dDSQYEreMywg5fMk2r+1yKb84/cmBfTsLch8BiShKbgiVNHSyDdk4hkdy yV5Oo22h3DGNAg== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:10 2026 by rpki-client