This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft File: riVa_-CEMRtuoC--Roa3lFNZhhw.mft (raw, json) Hash identifier: dJRSEFOOnbJFpVhuUfQZGL6ksnx53gUmR/uF+9vcasY= Subject key identifier: 94:C7:0F:6A:84:55:F3:E7:3E:F7:64:4D:EA:23:50:2F:AD:79:85:C8 Authority key identifier: AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C Certificate issuer: /CN=ae255affe084311b6ea02fbe4686b7945359861c Certificate serial: 019BF8089B00D6F309A8A2435B1285C5A4FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft Manifest number: 05E7 Signing time: Mon 26 Jan 2026 02:01:12 +0000 Manifest this update: Mon 26 Jan 2026 02:01:12 +0000 Manifest next update: Tue 27 Jan 2026 02:01:12 +0000 Files and hashes: 1: i8H3aU5bgW18uYHhOOBfWZ7EJh8.roa (hash: R7V99BPh2gSY158u1xq56jjcC0ccD7ZBtCrVoXgm5mE=) 2: riVa_-CEMRtuoC--Roa3lFNZhhw.crl (hash: FuTnjPPnf1QSpzEHClLw1EXcgCgPHLaAqCCscrZWNL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:9b:00:d6:f3:09:a8:a2:43:5b:12:85:c5:a4:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae255affe084311b6ea02fbe4686b7945359861c Validity Not Before: Jan 26 02:01:12 2026 GMT Not After : Jan 27 02:01:12 2026 GMT Subject: CN=94c70f6a8455f3e73ef7644dea23502fad7985c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b8:71:5b:e9:94:31:52:a9:c2:00:f9:64:fc: be:71:91:1a:5b:e3:d9:48:39:f6:d8:cb:19:26:6c: e3:5d:d1:2d:b0:c2:ae:3c:6d:65:dd:ab:06:aa:96: 34:4d:b2:31:9c:9b:8e:41:b0:7b:45:f3:5d:6d:2d: bc:d7:17:30:7d:44:27:69:3d:fe:95:8f:75:ce:a1: 74:7a:14:67:b2:fc:72:44:6c:a2:0d:1f:97:4c:78: dc:5f:c0:cc:61:9e:a5:f9:0a:da:de:74:16:14:01: 01:38:b4:f9:84:ae:34:18:0f:ef:c1:a8:f8:20:0d: 49:b9:3f:be:36:3a:d3:a3:ad:fa:31:ea:07:e2:d5: 3a:1d:47:3c:67:8e:da:93:7e:ba:b6:2d:d9:eb:d6: ef:f4:8a:4a:b7:60:1a:f7:4f:9f:1d:89:45:aa:2a: b7:9f:f4:9e:c1:74:0d:25:07:40:0b:5d:55:1b:ab: 96:81:c2:99:ed:8f:59:3d:11:41:17:6b:90:25:28: 30:54:c0:0f:4c:c7:16:1d:c5:39:ae:6f:41:5f:e8: 9c:d9:44:b4:00:14:f6:09:c3:10:3c:a1:af:4b:fd: 79:aa:45:e6:d1:61:5b:30:f7:17:d3:ce:64:9c:66: 76:d8:35:7d:ae:99:3c:9d:4e:fb:35:32:6b:41:30: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C7:0F:6A:84:55:F3:E7:3E:F7:64:4D:EA:23:50:2F:AD:79:85:C8 X509v3 Authority Key Identifier: keyid:AE:25:5A:FF:E0:84:31:1B:6E:A0:2F:BE:46:86:B7:94:53:59:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/riVa_-CEMRtuoC--Roa3lFNZhhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c3ffdd-b376-4dcb-9841-1415f8c7038e/1/riVa_-CEMRtuoC--Roa3lFNZhhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:b7:bd:61:b8:1e:f1:2a:de:33:dd:1d:3a:0c:9b:f2:5c:54: d8:83:fe:e6:f4:f5:e5:0f:11:84:e4:56:ba:c5:60:c6:64:a6: e3:9c:07:72:24:e4:09:f9:28:c2:87:2d:1a:b8:e5:58:db:08: 17:0a:89:7e:df:e4:a2:32:50:38:ca:ec:ca:d8:18:57:10:01: 92:b3:17:10:da:3b:44:29:c4:31:79:e0:2c:74:d6:64:fe:3c: cb:7e:1f:d9:c7:cd:2c:0a:c1:72:80:e5:fa:b5:d2:24:db:59: be:69:5e:90:f2:fa:e3:03:84:03:aa:1e:a0:32:85:27:0e:70: 3f:8c:02:47:b5:9f:12:95:2c:c1:82:6c:22:94:ef:31:a3:60: 54:60:31:a4:ad:e0:b3:89:a5:d9:4c:c9:41:0f:ae:d4:ac:09: db:b5:51:8d:4b:51:46:4e:6d:59:1b:12:a8:49:5d:18:bc:73: 45:96:20:7e:3f:30:19:14:3e:4d:bd:66:ea:be:e3:38:90:66: be:bc:da:52:1f:64:d0:3d:f7:1c:f5:8f:e4:6c:ac:a3:69:2b: 25:4a:c7:8b:12:63:b9:76:20:c5:38:84:63:48:e3:e3:5c:1b: 34:a0:c5:62:99:ba:22:6a:9c:3d:01:d5:c9:82:5a:1a:cc:da: e6:1a:3c:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CJsA1vMJqKJDWxKFxaT9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMjU1YWZmZTA4NDMxMWI2ZWEwMmZiZTQ2ODZiNzk0NTM1 OTg2MWMwHhcNMjYwMTI2MDIwMTEyWhcNMjYwMTI3MDIwMTEyWjAzMTEwLwYDVQQD Eyg5NGM3MGY2YTg0NTVmM2U3M2VmNzY0NGRlYTIzNTAyZmFkNzk4NWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLhxW+mUMVKpwgD5ZPy+cZEaW+PZ SDn22MsZJmzjXdEtsMKuPG1l3asGqpY0TbIxnJuOQbB7RfNdbS281xcwfUQnaT3+ lY91zqF0ehRnsvxyRGyiDR+XTHjcX8DMYZ6l+Qra3nQWFAEBOLT5hK40GA/vwaj4 IA1JuT++NjrTo636MeoH4tU6HUc8Z47ak366ti3Z69bv9IpKt2Aa90+fHYlFqiq3 n/SewXQNJQdAC11VG6uWgcKZ7Y9ZPRFBF2uQJSgwVMAPTMcWHcU5rm9BX+ic2US0 ABT2CcMQPKGvS/15qkXm0WFbMPcX085knGZ22DV9rpk8nU77NTJrQTBzSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTHD2qEVfPnPvdkTeojUC+teYXIMB8GA1UdIwQY MBaAFK4lWv/ghDEbbqAvvkaGt5RTWYYcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmlWYV8tQ0VNUnR1b0MtLVJvYTNsRk5aaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9jM2ZmZGQtYjM3Ni00ZGNiLTk4NDEt MTQxNWY4YzcwMzhlLzEvcmlWYV8tQ0VNUnR1b0MtLVJvYTNsRk5aaGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9jM2ZmZGQtYjM3Ni00ZGNiLTk4NDEtMTQxNWY4YzcwMzhl LzEvcmlWYV8tQ0VNUnR1b0MtLVJvYTNsRk5aaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqre9Ybge 8SreM90dOgyb8lxU2IP+5vT15Q8RhORWusVgxmSm45wHciTkCfkowoctGrjlWNsI FwqJft/kojJQOMrsytgYVxABkrMXENo7RCnEMXngLHTWZP48y34f2cfNLArBcoDl +rXSJNtZvmlekPL64wOEA6oeoDKFJw5wP4wCR7WfEpUswYJsIpTvMaNgVGAxpK3g s4ml2UzJQQ+u1KwJ27VRjUtRRk5tWRsSqEldGLxzRZYgfj8wGRQ+Tb1m6r7jOJBm vrzaUh9k0D33HPWP5Gyso2krJUrHixJjuXYgxTiEY0jj41wbNKDFYpm6ImqcPQHV yYJaGsza5ho8Uw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:05 2026 by rpki-client