This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft File: vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json) Hash identifier: 3yyRcLkkiTeffwvJw8rVQ9P3O/2TVubiJrH1oOPETJU= Subject key identifier: 4F:FA:D9:74:C1:56:DB:FC:A6:5C:7C:CC:28:27:01:C8:97:3A:72:19 Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9 Certificate issuer: /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9 Certificate serial: 019BFA2E0A95B4AF411736A93476790E08F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft Manifest number: 0A55 Signing time: Mon 26 Jan 2026 12:01:19 +0000 Manifest this update: Mon 26 Jan 2026 12:01:19 +0000 Manifest next update: Tue 27 Jan 2026 12:01:19 +0000 Files and hashes: 1: CMYGKasLmsjGblCK6IVsYcoAi1Y.roa (hash: 5I3la7dVRWMx/gZhUW1jrF5r1NdUNZ+7mT0gXM18zsQ=) 2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: sGuuVPlKWbohhRgMgMhruzRTDlCXYhNa5IDVJYuoDjA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2e:0a:95:b4:af:41:17:36:a9:34:76:79:0e:08:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9 Validity Not Before: Jan 26 12:01:19 2026 GMT Not After : Jan 27 12:01:19 2026 GMT Subject: CN=4ffad974c156dbfca65c7ccc282701c8973a7219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:32:7b:89:75:af:1f:e7:c4:a3:31:c4:28:6b: fa:1d:e8:d4:05:4a:1b:ba:3b:dc:67:e6:b7:bc:68: 37:04:7e:20:87:3c:e5:f9:08:ea:38:70:5a:e8:19: b9:41:07:b8:5b:6b:7c:da:bb:a5:e3:63:d8:bf:e2: cc:80:41:f9:de:95:67:71:7e:7c:8f:c3:0c:c4:b0: d2:fc:11:3c:db:76:57:5c:c0:db:35:3e:3d:f4:0d: dc:c1:74:cd:c0:63:b6:08:14:e0:2a:27:43:6b:86: a9:38:c7:4a:7c:73:b6:af:22:02:17:a6:fa:8c:39: 65:90:ab:14:8b:ac:4a:d7:be:18:50:51:22:26:3a: 43:f2:50:bc:1f:5d:18:d5:5e:ab:72:60:8a:26:37: 07:4b:c3:2e:e2:52:ec:84:03:e8:94:40:5f:22:8a: 10:b7:cd:7b:2e:9d:fc:65:79:a9:91:41:c9:4a:43: 5b:43:38:c7:27:4b:51:7e:17:64:9d:8f:21:03:a7: 03:d2:33:ac:75:3a:95:f8:df:14:4e:b4:5f:29:e6: 9b:68:49:8b:b0:3a:74:e7:58:b0:53:c7:8d:0e:c8: 60:3e:fc:80:af:2b:61:dd:06:1f:07:4c:b9:be:b3: f5:b1:b8:b8:6c:de:d0:5e:a9:6a:02:91:9b:b7:f4: a8:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:FA:D9:74:C1:56:DB:FC:A6:5C:7C:CC:28:27:01:C8:97:3A:72:19 X509v3 Authority Key Identifier: keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f4:42:e6:38:73:44:8a:cd:08:8a:64:94:53:af:01:6a:42: 94:a5:54:a7:7b:49:af:56:89:fb:34:79:50:0a:b0:55:2d:10: ff:db:d5:f4:e4:d7:4c:f4:94:a6:29:55:31:c5:94:5a:d9:ff: 30:d3:45:97:76:28:9d:33:7b:43:ac:1e:f0:19:fa:90:5b:bd: 65:8f:95:c6:8b:08:55:eb:f3:0d:a1:a8:8f:6b:63:b3:cf:04: 81:db:b6:f1:10:41:07:a8:74:bd:5c:f5:f1:1e:81:56:a6:2f: 4e:eb:d1:5f:11:dc:e8:a9:91:3f:42:0a:1d:69:07:8d:89:d2: 31:ae:cf:16:0e:e0:34:6d:dd:62:5a:c3:48:19:bd:a5:10:bf: 09:db:44:d9:cd:e1:c1:12:13:7c:3f:46:02:04:54:9d:85:d4: 50:69:7b:8e:05:b1:4c:50:e7:63:24:53:7a:51:2e:50:e7:ad: 33:c1:19:14:45:94:ca:83:51:95:8a:fe:97:42:00:e9:f5:ba: 36:4f:a1:27:2f:a1:2b:31:5e:c1:9d:7c:64:d4:7b:5e:3a:72: f2:4c:ce:a3:f8:f5:b3:a7:53:b0:b6:5d:5b:68:76:f5:d3:30: 91:24:f9:08:f8:70:18:12:7d:98:cd:d7:54:20:b0:ae:95:8c: 76:f9:52:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LgqVtK9BFzapNHZ5Dgj1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzhlZWIyNmMzOWRmMGYxOTRlNTBkNzY0MTk4ZDkwZTFm M2I1YzkwHhcNMjYwMTI2MTIwMTE5WhcNMjYwMTI3MTIwMTE5WjAzMTEwLwYDVQQD Eyg0ZmZhZDk3NGMxNTZkYmZjYTY1YzdjY2MyODI3MDFjODk3M2E3MjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zJ7iXWvH+fEozHEKGv6HejUBUob ujvcZ+a3vGg3BH4ghzzl+QjqOHBa6Bm5QQe4W2t82rul42PYv+LMgEH53pVncX58 j8MMxLDS/BE823ZXXMDbNT499A3cwXTNwGO2CBTgKidDa4apOMdKfHO2ryICF6b6 jDllkKsUi6xK174YUFEiJjpD8lC8H10Y1V6rcmCKJjcHS8Mu4lLshAPolEBfIooQ t817Lp38ZXmpkUHJSkNbQzjHJ0tRfhdknY8hA6cD0jOsdTqV+N8UTrRfKeabaEmL sDp051iwU8eNDshgPvyAryth3QYfB0y5vrP1sbi4bN7QXqlqApGbt/So1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/62XTBVtv8plx8zCgnAciXOnIZMB8GA1UdIwQY MBaAFLw47rJsOd8PGU5Q12QZjZDh87XJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRqdXNtdzUzdzhaVGxEWFpCbU5rT0h6dGNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy82MWIyM2MtYTU4Ni00MmMwLTlkZWQt MDUwZGExMTQ5MWU3LzEvdkRqdXNtdzUzdzhaVGxEWFpCbU5rT0h6dGNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy82MWIyM2MtYTU4Ni00MmMwLTlkZWQtMDUwZGExMTQ5MWU3 LzEvdkRqdXNtdzUzdzhaVGxEWFpCbU5rT0h6dGNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnPRC5jhz RIrNCIpklFOvAWpClKVUp3tJr1aJ+zR5UAqwVS0Q/9vV9OTXTPSUpilVMcWUWtn/ MNNFl3YonTN7Q6we8Bn6kFu9ZY+VxosIVevzDaGoj2tjs88Egdu28RBBB6h0vVz1 8R6BVqYvTuvRXxHc6KmRP0IKHWkHjYnSMa7PFg7gNG3dYlrDSBm9pRC/CdtE2c3h wRITfD9GAgRUnYXUUGl7jgWxTFDnYyRTelEuUOetM8EZFEWUyoNRlYr+l0IA6fW6 Nk+hJy+hKzFewZ18ZNR7Xjpy8kzOo/j1s6dTsLZdW2h29dMwkST5CPhwGBJ9mM3X VCCwrpWMdvlSYw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:18:06 2026 by rpki-client