This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft File: VSV3WnBqwAyC-ikzniLkMQgJnnk.mft (raw, json) Hash identifier: sQyq5oP/Vj19pVe6kz5su4/ydV8In6uTmtniN+wClOE= Subject key identifier: E8:C2:6D:A3:87:A2:9E:82:85:9B:0D:0D:63:54:23:69:A3:F7:F9:D9 Authority key identifier: 55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79 Certificate issuer: /CN=5525775a706ac00c82fa29339e22e43108099e79 Certificate serial: 019BF619C3E2112D52A12C353B176E08DCEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft Manifest number: 12BE Signing time: Sun 25 Jan 2026 17:00:42 +0000 Manifest this update: Sun 25 Jan 2026 17:00:42 +0000 Manifest next update: Mon 26 Jan 2026 17:00:42 +0000 Files and hashes: 1: IihrDiOMMogMysZiqLuZCTGW7ps.roa (hash: 27NO7W1ghNU5VtJT3vvPiTMqw3X03DbaQcQd4NemsmM=) 2: VSV3WnBqwAyC-ikzniLkMQgJnnk.crl (hash: zkwKTzZmF/6JR+y4uYSi5I37J/ZJEZE5SJmj+Y37t2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:c3:e2:11:2d:52:a1:2c:35:3b:17:6e:08:dc:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5525775a706ac00c82fa29339e22e43108099e79 Validity Not Before: Jan 25 17:00:42 2026 GMT Not After : Jan 26 17:00:42 2026 GMT Subject: CN=e8c26da387a29e82859b0d0d63542369a3f7f9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c1:63:aa:f2:0d:c7:92:2a:53:bb:91:35:9c: b5:1b:ef:b7:11:66:2c:4b:f3:ce:43:2e:63:31:27: 1b:d4:05:87:2f:6d:08:13:e4:9e:8b:b9:43:fe:e4: c5:2e:f1:56:30:cb:63:3c:25:05:1f:12:ef:7b:b2: 35:65:83:19:26:a5:22:70:a8:98:03:70:c4:fd:16: 52:2b:47:94:a1:2e:ef:ef:6f:9a:be:3f:ed:d3:57: 19:9c:95:04:38:27:72:ab:80:19:27:48:d1:7a:e2: 71:31:8c:c4:52:95:71:14:82:41:dc:24:b1:66:3b: 73:58:5e:0d:8d:0f:9e:fb:02:85:c1:6b:a1:8a:71: 75:b8:ad:df:f7:85:f3:f8:18:ca:04:65:8f:08:11: 0b:b6:a5:3c:5f:35:7b:87:1b:e1:46:d4:3c:40:98: 83:d5:df:b1:e1:22:2c:34:3a:e2:d5:29:cc:00:ea: fb:ec:a4:97:12:a2:28:66:11:4d:5b:ae:a4:6d:f3: 9f:e1:bd:b8:9a:a0:0e:7c:36:5c:b2:bc:6b:36:cb: 17:bb:34:38:a8:39:67:d0:f8:40:de:7d:96:9d:2b: c4:de:77:52:c5:09:98:d1:6b:ab:41:8a:0f:2c:94: 95:ee:96:b4:5f:d0:cb:23:cc:eb:b9:9a:13:12:2f: 0c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C2:6D:A3:87:A2:9E:82:85:9B:0D:0D:63:54:23:69:A3:F7:F9:D9 X509v3 Authority Key Identifier: keyid:55:25:77:5A:70:6A:C0:0C:82:FA:29:33:9E:22:E4:31:08:09:9E:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSV3WnBqwAyC-ikzniLkMQgJnnk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f46d4e-ac33-4fd1-9e69-7954ed38c8ba/1/VSV3WnBqwAyC-ikzniLkMQgJnnk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:08:22:b4:09:7b:be:ed:88:7d:79:92:bf:da:1c:d7:ea:bb: 93:92:4b:18:da:bd:6e:7d:59:74:3a:da:67:82:8d:9e:fd:78: c4:9d:ef:85:26:6b:4d:6a:0e:3a:fc:ff:0f:00:85:da:0f:6d: 9f:a2:5e:c6:44:64:a7:4c:42:64:c7:c4:35:98:d0:bb:64:25: 6f:41:1d:33:48:ed:8e:71:85:b2:33:75:48:e4:3c:d8:38:29: 59:3d:e9:76:43:99:38:65:39:11:b8:b3:78:91:65:d8:5f:bd: 4d:c7:1e:bd:77:7a:46:4a:0f:e4:fc:b1:a5:da:68:cf:7c:cb: 3f:c0:4a:45:2f:23:41:b9:d4:ce:fc:5f:c9:8f:e6:62:6d:c8: 46:65:2e:dc:e9:54:c8:71:26:68:0b:fe:1f:d3:4b:29:c6:10: 74:6d:ae:af:85:1e:65:a5:8a:3a:8b:4d:e3:6f:d1:28:93:d9: 53:64:b4:8c:aa:d7:2a:84:5d:c8:07:5a:ca:4a:58:12:ca:46: 09:23:b1:9a:7c:e9:2e:3b:c3:5e:21:23:18:8b:10:a5:36:e0: 7e:e2:3b:71:df:9d:4c:a1:42:91:a4:39:ee:b0:47:69:3e:3b: 3b:a6:07:7c:b9:d4:9d:70:9b:d5:9f:88:33:a1:1d:8b:ff:26: 9d:d4:cc:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GcPiES1SoSw1OxduCNzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MjU3NzVhNzA2YWMwMGM4MmZhMjkzMzllMjJlNDMxMDgw OTllNzkwHhcNMjYwMTI1MTcwMDQyWhcNMjYwMTI2MTcwMDQyWjAzMTEwLwYDVQQD EyhlOGMyNmRhMzg3YTI5ZTgyODU5YjBkMGQ2MzU0MjM2OWEzZjdmOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcFjqvINx5IqU7uRNZy1G++3EWYs S/POQy5jMScb1AWHL20IE+Sei7lD/uTFLvFWMMtjPCUFHxLve7I1ZYMZJqUicKiY A3DE/RZSK0eUoS7v72+avj/t01cZnJUEOCdyq4AZJ0jReuJxMYzEUpVxFIJB3CSx ZjtzWF4NjQ+e+wKFwWuhinF1uK3f94Xz+BjKBGWPCBELtqU8XzV7hxvhRtQ8QJiD 1d+x4SIsNDri1SnMAOr77KSXEqIoZhFNW66kbfOf4b24mqAOfDZcsrxrNssXuzQ4 qDln0PhA3n2WnSvE3ndSxQmY0WurQYoPLJSV7pa0X9DLI8zruZoTEi8MDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjCbaOHop6ChZsNDWNUI2mj9/nZMB8GA1UdIwQY MBaAFFUld1pwasAMgvopM54i5DEICZ55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9mNDZkNGUtYWMzMy00ZmQxLTllNjkt Nzk1NGVkMzhjOGJhLzEvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9mNDZkNGUtYWMzMy00ZmQxLTllNjktNzk1NGVkMzhjOGJh LzEvVlNWM1duQnF3QXlDLWlrem5pTGtNUWdKbm5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwgitAl7 vu2IfXmSv9oc1+q7k5JLGNq9bn1ZdDraZ4KNnv14xJ3vhSZrTWoOOvz/DwCF2g9t n6JexkRkp0xCZMfENZjQu2Qlb0EdM0jtjnGFsjN1SOQ82DgpWT3pdkOZOGU5Ebiz eJFl2F+9TccevXd6RkoP5Pyxpdpoz3zLP8BKRS8jQbnUzvxfyY/mYm3IRmUu3OlU yHEmaAv+H9NLKcYQdG2ur4UeZaWKOotN42/RKJPZU2S0jKrXKoRdyAdaykpYEspG CSOxmnzpLjvDXiEjGIsQpTbgfuI7cd+dTKFCkaQ57rBHaT47O6YHfLnUnXCb1Z+I M6Edi/8mndTMPA== -----END CERTIFICATE-----Generated at Mon Jan 26 01:20:45 2026 by rpki-client