This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft File: vxtInm2bjH2Dyh5yelmE2-V3r7w.mft (raw, json) Hash identifier: swvwnq0MtNj+ditV7oNbcBfMWB6ZoxCl0+bt7GUARNA= Subject key identifier: E3:29:0C:3A:E9:87:97:9E:E0:9F:73:76:5D:F8:CA:5E:04:96:60:59 Authority key identifier: BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC Certificate issuer: /CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc Certificate serial: 019BF83F2F5D10901AB2632706EE1D4E78B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft Manifest number: F3 Signing time: Mon 26 Jan 2026 03:00:48 +0000 Manifest this update: Mon 26 Jan 2026 03:00:48 +0000 Manifest next update: Tue 27 Jan 2026 03:00:48 +0000 Files and hashes: 1: HQm537DA2Rt_gLXH5dIBcaR4gcY.roa (hash: A6esoRRzZBkkNQYtZos5wiiS1Mq3h7ghGv25Qr0rnQ0=) 2: vxtInm2bjH2Dyh5yelmE2-V3r7w.crl (hash: 6cYdQovyoQBm+x/7e57GY68BsTpzcrY1t8O/q4NyEG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:2f:5d:10:90:1a:b2:63:27:06:ee:1d:4e:78:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1b489e6d9b8c7d83ca1e727a5984dbe577afbc Validity Not Before: Jan 26 03:00:48 2026 GMT Not After : Jan 27 03:00:48 2026 GMT Subject: CN=e3290c3ae987979ee09f73765df8ca5e04966059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:11:e7:c5:e8:9c:bf:ce:59:e2:ff:6e:13:11: ed:41:e1:57:10:0c:46:41:b6:24:46:27:04:9e:fd: 45:48:49:db:fd:e6:24:ea:91:09:b7:a5:65:aa:95: dd:8e:db:51:65:23:67:cf:da:40:74:d4:5b:e0:49: 88:fb:f7:be:f6:8b:9b:54:2a:6d:c8:1b:48:9e:af: b1:09:1b:8f:de:f0:ce:10:0e:f3:be:bd:cd:80:69: a7:6d:ed:86:48:a7:51:5c:ff:6a:b8:84:30:ad:56: 6b:0b:47:03:94:fa:66:bd:31:61:ec:97:e3:02:db: 79:f7:10:cb:0e:4e:aa:83:6d:cd:75:b7:5a:80:bd: 1a:ea:de:be:d5:c8:93:54:90:f3:4e:0d:ca:bd:7f: ee:0d:77:b4:69:a2:5e:4e:ed:ff:c8:57:ad:2b:eb: 7b:b2:63:53:fa:65:17:c5:f6:f1:dd:f6:66:c3:4a: 20:ff:f4:5d:f8:ce:76:69:11:ce:11:ec:9c:32:e2: 61:77:3d:f8:2b:99:d6:2b:cf:25:91:05:2b:3b:c7: 3a:4c:34:df:91:45:a1:20:e0:8c:36:aa:5d:2f:5b: 5d:db:00:11:38:22:80:96:d0:32:a6:6f:4f:bd:02: b0:31:35:28:aa:6a:2c:2a:10:b4:16:7a:0b:24:53: 1c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:29:0C:3A:E9:87:97:9E:E0:9F:73:76:5D:F8:CA:5E:04:96:60:59 X509v3 Authority Key Identifier: keyid:BF:1B:48:9E:6D:9B:8C:7D:83:CA:1E:72:7A:59:84:DB:E5:77:AF:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxtInm2bjH2Dyh5yelmE2-V3r7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b441ca-e77c-4211-8712-182cd4aac436/1/vxtInm2bjH2Dyh5yelmE2-V3r7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:a2:59:86:bb:40:77:71:06:51:e8:b7:95:20:b1:60:5e:c4: 52:75:1d:2f:82:54:9a:fd:49:dc:30:be:2b:47:40:fd:54:5e: 2b:18:0e:44:b8:7f:94:34:4d:6e:40:0a:95:5e:4a:89:4e:f8: fe:5d:08:bf:4b:0f:3d:0f:67:b4:08:c7:41:20:95:3a:1f:bb: 7a:8e:37:1e:07:e2:01:3e:16:28:76:36:e7:a5:00:32:5b:02: ae:55:02:c5:64:92:21:b8:32:96:37:59:e3:37:84:2a:77:e6: 2c:15:dd:c7:28:01:61:3e:82:a8:78:a7:4f:10:48:a3:ec:0b: 07:7a:1d:74:5f:ba:ee:cc:1e:4b:03:bd:b5:d6:6f:01:2b:63: 99:21:8c:90:e0:80:ad:98:da:75:fc:ff:b0:dd:7a:3c:6f:a3: 50:16:21:4c:eb:74:71:58:af:67:45:3b:b1:0a:63:17:d9:3e: dc:1c:35:48:d8:03:cd:31:a6:8a:cd:71:c9:f9:62:d0:09:a6: 82:3d:e7:7e:d0:3f:4e:c1:f1:f8:61:89:d6:c2:12:6e:59:c4: a2:44:c9:48:d4:68:56:07:49:c2:ab:af:8b:59:14:50:e6:98: 97:29:45:53:1a:9a:21:3b:d9:24:ff:09:e4:fc:a4:8d:4d:6f: 8d:13:77:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4Py9dEJAasmMnBu4dTni2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMWI0ODllNmQ5YjhjN2Q4M2NhMWU3MjdhNTk4NGRiZTU3 N2FmYmMwHhcNMjYwMTI2MDMwMDQ4WhcNMjYwMTI3MDMwMDQ4WjAzMTEwLwYDVQQD EyhlMzI5MGMzYWU5ODc5NzllZTA5ZjczNzY1ZGY4Y2E1ZTA0OTY2MDU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhHnxeicv85Z4v9uExHtQeFXEAxG QbYkRicEnv1FSEnb/eYk6pEJt6VlqpXdjttRZSNnz9pAdNRb4EmI+/e+9oubVCpt yBtInq+xCRuP3vDOEA7zvr3NgGmnbe2GSKdRXP9quIQwrVZrC0cDlPpmvTFh7Jfj Att59xDLDk6qg23NdbdagL0a6t6+1ciTVJDzTg3KvX/uDXe0aaJeTu3/yFetK+t7 smNT+mUXxfbx3fZmw0og//Rd+M52aRHOEeycMuJhdz34K5nWK88lkQUrO8c6TDTf kUWhIOCMNqpdL1td2wAROCKAltAypm9PvQKwMTUoqmosKhC0FnoLJFMcEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOMpDDrph5ee4J9zdl34yl4ElmBZMB8GA1UdIwQY MBaAFL8bSJ5tm4x9g8oecnpZhNvld6+8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnh0SW5tMmJqSDJEeWg1eWVsbUUyLVYzcjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iNDQxY2EtZTc3Yy00MjExLTg3MTIt MTgyY2Q0YWFjNDM2LzEvdnh0SW5tMmJqSDJEeWg1eWVsbUUyLVYzcjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iNDQxY2EtZTc3Yy00MjExLTg3MTItMTgyY2Q0YWFjNDM2 LzEvdnh0SW5tMmJqSDJEeWg1eWVsbUUyLVYzcjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhaJZhrtA d3EGUei3lSCxYF7EUnUdL4JUmv1J3DC+K0dA/VReKxgORLh/lDRNbkAKlV5KiU74 /l0Iv0sPPQ9ntAjHQSCVOh+7eo43HgfiAT4WKHY256UAMlsCrlUCxWSSIbgyljdZ 4zeEKnfmLBXdxygBYT6CqHinTxBIo+wLB3oddF+67sweSwO9tdZvAStjmSGMkOCA rZjadfz/sN16PG+jUBYhTOt0cVivZ0U7sQpjF9k+3Bw1SNgDzTGmis1xyfli0Amm gj3nftA/TsHx+GGJ1sISblnEokTJSNRoVgdJwquvi1kUUOaYlylFUxqaITvZJP8J 5PykjU1vjRN3BQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:50 2026 by rpki-client