This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft File: VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json) Hash identifier: VHPLO0HsbU+QlJue48vqpDEOC8k6g2OntRJHXitmW0Q= Subject key identifier: B5:BF:AE:C9:33:76:9F:6E:9B:CD:47:D8:52:B5:BB:95:EE:73:87:AA Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40 Certificate issuer: /CN=56f722a885abeb9aaffb32da764ef091b5b20340 Certificate serial: 019BF9F6D24F6D11BD670011BA32F1A95603 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft Manifest number: 0B0C Signing time: Mon 26 Jan 2026 11:01:01 +0000 Manifest this update: Mon 26 Jan 2026 11:01:01 +0000 Manifest next update: Tue 27 Jan 2026 11:01:01 +0000 Files and hashes: 1: GIndhU8ELmsNHmG9wjRWuLwz2bs.roa (hash: PQMP13AMPNG5zd/gezY6JmA04bcuMNJCFye1nndg+RI=) 2: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: IZ+Tuj9PUianeA2GKQ+jtzq5o041Aa1Ua2nhektKGFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:d2:4f:6d:11:bd:67:00:11:ba:32:f1:a9:56:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340 Validity Not Before: Jan 26 11:01:01 2026 GMT Not After : Jan 27 11:01:01 2026 GMT Subject: CN=b5bfaec933769f6e9bcd47d852b5bb95ee7387aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:7e:ea:53:3f:cb:c6:ff:e3:ff:3c:05:7b:c3: 39:4f:9c:72:f8:87:92:66:76:85:02:30:e8:f3:da: 12:a8:66:54:62:e6:32:e4:51:78:17:cf:83:b7:64: 48:5b:7a:40:e9:ba:15:f5:4c:36:be:c3:4c:35:0f: bd:2d:8f:a2:d5:0e:91:de:91:d0:5e:32:b4:a7:3a: 9c:89:b9:be:27:e0:c4:75:f9:eb:8e:60:4d:7a:a2: 1c:03:18:fc:35:5f:de:c5:49:2a:b4:a3:f0:6b:43: ff:80:f0:91:1f:d7:5e:52:04:0a:93:29:20:57:3a: 40:fd:b1:ae:5d:ae:f7:e0:f2:43:18:e6:aa:c9:7a: 68:17:17:bf:b8:e9:da:24:7c:40:24:b3:7e:eb:35: ee:05:c8:84:13:97:c1:18:5d:06:c1:ff:c3:94:d8: 9f:4c:98:1f:46:de:6d:3d:c2:36:55:ec:d5:26:58: 11:01:b0:ff:ee:aa:2f:ab:ea:dc:2a:2d:16:d5:fc: 98:d2:c1:d6:f9:38:bd:6b:ff:bd:3d:65:32:87:c6: 01:10:a2:68:25:ea:c5:3b:f0:f3:63:a0:ca:66:8f: 3f:a9:92:69:da:5a:a3:45:b4:d4:78:99:2f:37:0c: 94:a3:09:b0:5b:0b:c8:64:c4:60:4f:10:db:11:12: dc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:BF:AE:C9:33:76:9F:6E:9B:CD:47:D8:52:B5:BB:95:EE:73:87:AA X509v3 Authority Key Identifier: keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:95:06:39:0b:cb:3f:62:e6:d0:33:32:54:a7:fa:aa:8e:c3: 06:bd:80:91:ce:fe:94:70:38:15:ba:ba:3d:04:ac:37:4c:e9: ef:57:31:fe:f1:35:48:d6:60:de:f1:78:6c:1d:8d:30:29:5a: 0f:5d:a1:aa:bf:5a:c5:47:48:15:7f:b6:df:61:ed:67:94:ad: a0:a9:0a:49:db:3b:8c:86:62:3c:95:58:1f:6a:41:81:7f:77: ee:57:d8:31:d2:3a:a1:6c:bd:b3:95:76:d3:77:a9:cd:1d:d4: 13:d6:06:3d:a3:2c:43:4a:1d:4c:eb:9a:03:b4:0e:19:bc:7e: 35:6e:5f:87:f9:96:7e:25:6f:0b:8b:ef:5c:9a:cd:f0:d7:83: 75:39:c1:c9:e5:5a:c7:e0:c2:de:58:75:0f:02:7e:93:bd:ee: 44:14:2d:67:73:f1:5e:17:40:1c:78:d0:87:0c:e9:dd:2f:6b: 2e:55:16:18:4c:18:c9:cc:97:64:b1:3f:f8:65:c0:ef:6d:66: 22:50:e1:c3:14:0a:8b:7e:c6:2a:f5:a3:87:ed:39:66:85:a5: 14:ec:42:39:cb:c2:41:0f:83:c4:50:63:1b:2a:fc:bc:dc:16: 0c:2a:2f:a2:10:03:d6:63:1d:07:c3:a2:ca:60:38:14:80:85: f2:60:87:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59tJPbRG9ZwARujLxqVYDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2ZjcyMmE4ODVhYmViOWFhZmZiMzJkYTc2NGVmMDkxYjVi MjAzNDAwHhcNMjYwMTI2MTEwMTAxWhcNMjYwMTI3MTEwMTAxWjAzMTEwLwYDVQQD EyhiNWJmYWVjOTMzNzY5ZjZlOWJjZDQ3ZDg1MmI1YmI5NWVlNzM4N2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA337qUz/Lxv/j/zwFe8M5T5xy+IeS ZnaFAjDo89oSqGZUYuYy5FF4F8+Dt2RIW3pA6boV9Uw2vsNMNQ+9LY+i1Q6R3pHQ XjK0pzqcibm+J+DEdfnrjmBNeqIcAxj8NV/exUkqtKPwa0P/gPCRH9deUgQKkykg VzpA/bGuXa734PJDGOaqyXpoFxe/uOnaJHxAJLN+6zXuBciEE5fBGF0Gwf/DlNif TJgfRt5tPcI2VezVJlgRAbD/7qovq+rcKi0W1fyY0sHW+Ti9a/+9PWUyh8YBEKJo JerFO/DzY6DKZo8/qZJp2lqjRbTUeJkvNwyUowmwWwvIZMRgTxDbERLcowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLW/rskzdp9um81H2FK1u5Xuc4eqMB8GA1UdIwQY MBaAFFb3IqiFq+uar/sy2nZO8JG1sgNAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTkyYjEtMTYwMC00YjkyLTk5YTUt ODE0MGMxMTZmMGM4LzEvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni84OTkyYjEtMTYwMC00YjkyLTk5YTUtODE0MGMxMTZmMGM4 LzEvVnZjaXFJV3I2NXF2LXpMYWRrN3drYld5QTBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJUGOQvL P2Lm0DMyVKf6qo7DBr2Akc7+lHA4Fbq6PQSsN0zp71cx/vE1SNZg3vF4bB2NMCla D12hqr9axUdIFX+232HtZ5StoKkKSds7jIZiPJVYH2pBgX937lfYMdI6oWy9s5V2 03epzR3UE9YGPaMsQ0odTOuaA7QOGbx+NW5fh/mWfiVvC4vvXJrN8NeDdTnByeVa x+DC3lh1DwJ+k73uRBQtZ3PxXhdAHHjQhwzp3S9rLlUWGEwYycyXZLE/+GXA721m IlDhwxQKi37GKvWjh+05ZoWlFOxCOcvCQQ+DxFBjGyr8vNwWDCovohAD1mMdB8Oi ymA4FICF8mCHiw== -----END CERTIFICATE-----Generated at Mon Jan 26 12:59:43 2026 by rpki-client