This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft File: VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json) Hash identifier: qEHwAbGGr0iDV9IWvFnjlDZOn9DPU/+z6If8L6IJzmc= Subject key identifier: 74:F9:91:CC:1E:AB:59:E6:D4:ED:98:C2:47:59:48:F4:B4:74:82:75 Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99 Certificate issuer: /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199 Certificate serial: 019BF5750DA7282CDA64F8BD92A79B9CFE00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft Manifest number: 17F0 Signing time: Sun 25 Jan 2026 14:00:47 +0000 Manifest this update: Sun 25 Jan 2026 14:00:47 +0000 Manifest next update: Mon 26 Jan 2026 14:00:47 +0000 Files and hashes: 1: 2p_MSB5aNHumaKfYN1tMK3QplXs.roa (hash: UN2v4qeX/yLlS8F+HWJDtro6RjRbrWRJJSxi6nWaH2s=) 2: BF-nL4uG2sSiQtOPU2cS1CI2KIs.roa (hash: xmeFaZONF0d3logp8Ko7Dq9BIdCJ2HzNVPvTRTT54tA=) 3: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: eKATXnqqtz/YeXTCS1iRCwod7P/6vN2cP4safPv2SpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:0d:a7:28:2c:da:64:f8:bd:92:a7:9b:9c:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199 Validity Not Before: Jan 25 14:00:47 2026 GMT Not After : Jan 26 14:00:47 2026 GMT Subject: CN=74f991cc1eab59e6d4ed98c2475948f4b4748275 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:10:f7:02:a2:cc:f2:76:9b:8e:b2:6f:a9:81: cf:98:1e:4c:fb:e4:88:23:5e:c3:67:bc:af:34:57: aa:d8:71:6c:7d:0c:05:cc:aa:b9:94:86:a7:be:9b: ed:ef:a3:0a:e1:73:c0:12:32:34:77:eb:5e:f2:5b: 80:f3:c1:b3:7c:eb:95:4f:0f:42:95:e3:99:64:6f: b0:11:bc:cb:b1:fb:50:ba:f2:17:50:6d:2a:00:3c: 35:dd:73:1e:b2:d9:8b:98:27:54:ec:89:1c:20:30: 7f:bd:84:de:c8:49:c2:c8:6b:1f:f7:a3:e8:03:77: 07:c4:5e:f0:72:0c:35:d7:e0:37:03:9f:e5:46:d0: 8e:2f:4e:35:8c:6c:5f:e5:29:36:54:25:87:a5:ab: f5:7d:80:c8:09:9b:04:de:67:b6:5a:ab:e1:13:61: c9:53:ae:6a:e5:ba:2c:73:d5:0f:26:f5:11:47:ce: b4:3a:88:ec:bd:00:91:fb:0d:7c:4d:5d:b1:4d:15: 39:bf:f5:de:2d:8b:d9:de:0d:4b:e6:6d:56:92:83: d4:31:61:68:4b:46:08:3d:0f:e2:4a:7e:90:ff:13: de:de:cd:9c:6c:fc:40:8c:6d:d2:aa:40:2f:2a:6c: 6a:45:96:9d:66:f5:6d:09:88:02:b1:62:b3:4b:0d: 88:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:F9:91:CC:1E:AB:59:E6:D4:ED:98:C2:47:59:48:F4:B4:74:82:75 X509v3 Authority Key Identifier: keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:93:ce:48:4c:d3:15:f0:a5:cd:4c:6a:ed:12:fa:cd:86:b5: 4d:db:af:8f:fa:25:6e:ff:fc:a6:00:4c:75:52:38:10:2d:43: 3b:5d:df:10:3f:68:22:f3:4f:4b:15:cf:a4:03:0c:cf:23:73: 96:ec:72:7f:58:19:83:2c:b4:55:c3:94:6a:76:a3:31:63:69: fd:95:8c:1a:50:ab:85:23:fd:32:2e:0a:67:ea:cf:6f:8e:74: 76:70:0d:fe:69:93:30:ee:50:aa:f4:9a:0f:a3:c2:33:9c:f5: 38:0a:b8:41:f9:91:25:cc:72:d6:c8:31:9a:a3:f2:f5:8f:36: 9b:1d:2c:7e:c8:59:cf:61:e6:3c:8e:c4:06:4e:aa:eb:c7:b8: 0b:78:ad:77:81:ea:0d:42:c5:66:07:de:58:1e:61:25:34:b1: a5:12:93:e2:21:76:2c:1d:cd:02:05:f6:80:10:2f:42:7f:a3: 2b:39:a0:84:4e:99:23:b2:ee:10:74:9d:79:ce:61:77:37:af: 23:15:6f:82:7b:4d:0b:67:45:f0:e8:17:aa:41:f7:00:2f:9e: 47:2a:30:b0:d1:69:57:e4:b1:aa:35:59:0b:bb:4c:8c:b4:75: a0:34:e4:3e:44:77:f4:a9:ea:19:cc:5a:9d:b5:d5:c6:4b:b7: e8:49:19:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dQ2nKCzaZPi9kqebnP4AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MDNlNWY4NDA1ZDYwODViOGRmNGJmY2UxZGQ5YmIzZTc4 YzIxOTkwHhcNMjYwMTI1MTQwMDQ3WhcNMjYwMTI2MTQwMDQ3WjAzMTEwLwYDVQQD Eyg3NGY5OTFjYzFlYWI1OWU2ZDRlZDk4YzI0NzU5NDhmNGI0NzQ4Mjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRD3AqLM8nabjrJvqYHPmB5M++SI I17DZ7yvNFeq2HFsfQwFzKq5lIanvpvt76MK4XPAEjI0d+te8luA88GzfOuVTw9C leOZZG+wEbzLsftQuvIXUG0qADw13XMestmLmCdU7IkcIDB/vYTeyEnCyGsf96Po A3cHxF7wcgw11+A3A5/lRtCOL041jGxf5Sk2VCWHpav1fYDICZsE3me2WqvhE2HJ U65q5bosc9UPJvURR860OojsvQCR+w18TV2xTRU5v/XeLYvZ3g1L5m1WkoPUMWFo S0YIPQ/iSn6Q/xPe3s2cbPxAjG3SqkAvKmxqRZadZvVtCYgCsWKzSw2IIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHT5kcweq1nm1O2YwkdZSPS0dIJ1MB8GA1UdIwQY MBaAFFQD5fhAXWCFuN9L/OHdm7PnjCGZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hZWU4ZDktMjFlZC00ZGI3LWJkNzAt MTVhNDJhYzllZmE4LzEvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9hZWU4ZDktMjFlZC00ZGI3LWJkNzAtMTVhNDJhYzllZmE4 LzEvVkFQbC1FQmRZSVc0MzB2ODRkMmJzLWVNSVprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZPOSEzT FfClzUxq7RL6zYa1Tduvj/olbv/8pgBMdVI4EC1DO13fED9oIvNPSxXPpAMMzyNz luxyf1gZgyy0VcOUanajMWNp/ZWMGlCrhSP9Mi4KZ+rPb450dnAN/mmTMO5QqvSa D6PCM5z1OAq4QfmRJcxy1sgxmqPy9Y82mx0sfshZz2HmPI7EBk6q68e4C3itd4Hq DULFZgfeWB5hJTSxpRKT4iF2LB3NAgX2gBAvQn+jKzmghE6ZI7LuEHSdec5hdzev IxVvgntNC2dF8OgXqkH3AC+eRyowsNFpV+SxqjVZC7tMjLR1oDTkPkR39KnqGcxa nbXVxku36EkZdA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:08:39 2026 by rpki-client