This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json) Hash identifier: i0Lu96JAsnIcHSSF2qXpIY0aYWxMYe1QlufvRLEZFuo= Subject key identifier: A5:DD:D8:79:34:3F:1D:77:D6:BE:88:DB:56:11:02:61:D9:30:71:E1 Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27 Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427 Certificate serial: 019BF72D9F2BE7CADE6C88F84F93C5CE753E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft Manifest number: 047C Signing time: Sun 25 Jan 2026 22:02:00 +0000 Manifest this update: Sun 25 Jan 2026 22:02:00 +0000 Manifest next update: Mon 26 Jan 2026 22:02:00 +0000 Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: RwVAivMciwniY5q7pUXzFrBzkLveeEVV12SPVa3MU7A=) 2: Yuo4raHbuV1AupPWdNm1jMw95T8.roa (hash: lmnKCE9fJdmr7z73updpBxSnhRCLKa9yvUVY95GYbw8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:9f:2b:e7:ca:de:6c:88:f8:4f:93:c5:ce:75:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427 Validity Not Before: Jan 25 22:02:00 2026 GMT Not After : Jan 26 22:02:00 2026 GMT Subject: CN=a5ddd879343f1d77d6be88db56110261d93071e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:02:9f:b2:3f:c1:0a:fe:14:e7:8b:32:04:a2: 1e:3c:e4:ac:a7:12:02:58:7b:ca:9b:47:0c:26:f6: d6:45:b1:a7:d9:b9:34:de:fc:2c:bc:91:0b:34:46: 3e:96:17:a7:db:b8:69:a7:4d:7d:fc:80:bc:92:2f: 6d:02:a5:14:d3:ac:dc:7f:0d:d0:3c:f1:8c:2e:5f: 68:19:d9:c8:6a:4f:fe:33:3a:50:75:cb:8a:e4:28: 07:62:a0:51:03:85:db:93:a8:57:39:5f:f2:db:5b: f6:a3:ee:4b:27:2a:4a:b2:77:2a:cb:e4:91:d5:67: 92:f4:bf:75:27:24:1d:71:9c:f3:90:22:1f:7e:53: 1e:1f:9a:dd:bf:54:77:4f:5d:fe:bf:0a:44:41:de: 06:14:4f:0d:83:85:96:cd:bd:ae:7e:78:7a:8a:31: 60:27:0c:36:16:78:0d:db:5c:2c:2d:e6:72:77:47: 3e:80:8a:0a:6b:e2:c6:78:ab:4a:4b:09:d1:58:ae: b5:0a:c7:e3:41:56:da:3b:f6:40:65:e1:23:88:1b: f3:e2:b8:38:b8:8c:74:cb:4c:8b:8b:fc:e9:4f:2c: 85:ec:a6:4b:a5:51:88:11:d3:55:82:ab:5b:b1:76: a9:c7:ba:8a:d6:65:22:b0:83:57:ff:8c:41:87:00: 3a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DD:D8:79:34:3F:1D:77:D6:BE:88:DB:56:11:02:61:D9:30:71:E1 X509v3 Authority Key Identifier: keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:fe:64:f7:47:d2:63:6e:05:ae:3d:ed:b6:d2:40:ca:7b:05: 2b:9a:c6:ca:fa:2c:c2:c8:a6:10:c1:68:ed:fd:42:0d:1f:d3: fc:73:08:a4:b2:4d:74:77:f9:0f:02:c9:37:61:ae:1e:96:f7: ff:0d:54:8b:f9:12:2f:6a:b8:41:cf:13:ef:9a:d8:18:57:8b: a7:38:17:74:df:37:f8:fa:12:49:49:7f:bc:4a:44:59:a0:e1: 54:9a:40:86:fd:48:1f:20:7c:ce:d0:77:27:28:58:58:bf:eb: a3:ba:08:64:b2:59:85:c3:b1:0c:48:95:d3:d5:9c:77:8c:ec: ee:be:1f:76:7b:41:e7:96:5b:2a:df:5b:bb:47:35:7a:4b:1e: cc:cc:33:46:1b:31:df:8a:59:1e:66:1a:af:98:3c:fe:2c:74: 59:dd:13:72:0c:1b:94:61:a4:31:14:ad:0f:af:e8:2f:43:77: 6f:f0:c9:2b:bd:f0:97:fc:0a:4d:d7:76:fd:91:64:0a:5a:9c: e3:44:66:57:0d:99:3f:a3:cf:35:ee:29:a9:77:a3:3e:8a:4d: a4:80:4a:1d:9a:28:68:b5:b6:19:f9:15:d2:86:e5:73:24:c2: 37:1d:a4:aa:8e:6e:f7:3c:21:4b:92:d3:f1:65:5a:c6:47:5f: d7:11:e8:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LZ8r58rebIj4T5PFznU+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZjAxYTFlOTllYTVkNGYzOTk0ZDMzMzA5ZDA5NDMxMmRj ODU0MjcwHhcNMjYwMTI1MjIwMjAwWhcNMjYwMTI2MjIwMjAwWjAzMTEwLwYDVQQD EyhhNWRkZDg3OTM0M2YxZDc3ZDZiZTg4ZGI1NjExMDI2MWQ5MzA3MWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgKfsj/BCv4U54syBKIePOSspxIC WHvKm0cMJvbWRbGn2bk03vwsvJELNEY+lhen27hpp019/IC8ki9tAqUU06zcfw3Q PPGMLl9oGdnIak/+MzpQdcuK5CgHYqBRA4Xbk6hXOV/y21v2o+5LJypKsncqy+SR 1WeS9L91JyQdcZzzkCIfflMeH5rdv1R3T13+vwpEQd4GFE8Ng4WWzb2ufnh6ijFg Jww2FngN21wsLeZyd0c+gIoKa+LGeKtKSwnRWK61CsfjQVbaO/ZAZeEjiBvz4rg4 uIx0y0yLi/zpTyyF7KZLpVGIEdNVgqtbsXapx7qK1mUisINX/4xBhwA6vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXd2Hk0Px131r6I21YRAmHZMHHhMB8GA1UdIwQY MBaAFFbwGh6Z6l1POZTTMwnQlDEtyFQnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85YjUwYmYtNGZiZi00NjgwLTgzMjgt MTMwZjdmMzhmNTM3LzEvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My85YjUwYmYtNGZiZi00NjgwLTgzMjgtMTMwZjdmMzhmNTM3 LzEvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAov5k90fS Y24Frj3tttJAynsFK5rGyvoswsimEMFo7f1CDR/T/HMIpLJNdHf5DwLJN2GuHpb3 /w1Ui/kSL2q4Qc8T75rYGFeLpzgXdN83+PoSSUl/vEpEWaDhVJpAhv1IHyB8ztB3 JyhYWL/ro7oIZLJZhcOxDEiV09Wcd4zs7r4fdntB55ZbKt9bu0c1eksezMwzRhsx 34pZHmYar5g8/ix0Wd0TcgwblGGkMRStD6/oL0N3b/DJK73wl/wKTdd2/ZFkClqc 40RmVw2ZP6PPNe4pqXejPopNpIBKHZooaLW2GfkV0oblcyTCNx2kqo5u9zwhS5LT 8WVaxkdf1xHozA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:22 2026 by rpki-client