This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft File: v0nfV38O5EMYjAKTI0V7vFoOrTs.mft (raw, json) Hash identifier: qGVu6nvStphx8zXq3VwOMGOTp15yL/e0dzAgmx2CnHU= Subject key identifier: 4E:72:2D:B1:D4:17:07:29:0A:BC:44:1E:55:76:26:08:C1:2D:5B:3E Authority key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B Certificate issuer: /CN=bf49df577f0ee443188c029323457bbc5a0ead3b Certificate serial: 019BF8AD288F8F7710A9EBF73F7134F38AC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft Manifest number: 6B Signing time: Mon 26 Jan 2026 05:00:56 +0000 Manifest this update: Mon 26 Jan 2026 05:00:56 +0000 Manifest next update: Tue 27 Jan 2026 05:00:56 +0000 Files and hashes: 1: rANm87WqORmafEWHghrrK-0l72M.asa (hash: Fgz6vPciEn1J0Q0dP4IkhgZ0dZebnzwKhwY9olb/BWo=) 2: v0nfV38O5EMYjAKTI0V7vFoOrTs.crl (hash: dtT9HEmq2u99hcHZKz77rvBFgStGqW/rXA6VrvY3EGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:28:8f:8f:77:10:a9:eb:f7:3f:71:34:f3:8a:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf49df577f0ee443188c029323457bbc5a0ead3b Validity Not Before: Jan 26 05:00:56 2026 GMT Not After : Jan 27 05:00:56 2026 GMT Subject: CN=4e722db1d41707290abc441e55762608c12d5b3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:05:91:8f:93:0b:d6:64:c4:03:45:f3:15: f3:83:b3:b6:38:53:ee:6c:ae:a7:0d:cf:5b:20:b6: fc:3e:19:6c:aa:e8:e1:df:bf:e9:d8:cd:67:a9:a3: f1:04:8a:f7:5f:fd:f0:b1:b0:26:08:a7:c5:1a:06: c0:63:d5:a8:db:72:cc:95:ba:c0:09:84:fc:e5:71: 10:60:54:05:e1:ed:f0:64:7d:68:33:56:1d:99:e8: bf:db:d6:00:f5:40:28:80:35:40:b1:86:0c:10:9c: be:96:cc:71:7b:9e:15:2d:a9:1a:dc:e7:5e:84:02: a9:53:d5:6b:b3:e9:0a:33:08:d3:37:2b:ac:10:d2: 15:fd:c1:ac:b1:ec:86:94:80:d7:8a:46:ad:ad:74: 06:8e:0d:d9:95:63:29:e6:f1:41:f8:9e:4b:5c:e0: 29:84:aa:22:85:7a:6e:ff:71:3d:31:e7:20:50:28: 33:6b:b7:d9:24:36:5f:0d:6c:77:8d:e3:f9:91:be: 0b:ef:2a:58:3f:cd:11:d2:68:03:98:05:23:03:6f: 13:7f:02:3a:f3:76:a5:a5:1f:5d:a2:81:79:10:d5: 00:42:54:3f:75:8b:4e:b3:e8:bb:9f:c2:5d:a9:fd: a0:69:3d:15:da:82:fd:9e:ba:0d:28:e5:9d:2d:3e: 65:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:72:2D:B1:D4:17:07:29:0A:BC:44:1E:55:76:26:08:C1:2D:5B:3E X509v3 Authority Key Identifier: keyid:BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:e8:09:a5:ee:57:3f:9a:2b:ea:4c:46:f7:00:a7:67:72:ab: 47:52:70:f2:ed:45:62:50:1f:a3:81:d6:9e:a5:07:aa:71:10: 42:8c:a9:f5:d8:f2:28:d5:cb:9c:a7:b8:87:f8:35:72:0c:66: 15:5e:76:4b:d5:18:9e:12:27:89:fd:5b:42:f3:13:b4:48:62: 97:e0:45:d0:55:2b:07:35:4f:d7:c9:d2:e7:91:a0:f8:60:08: 44:0f:58:36:d2:08:45:39:17:0b:5e:1c:d7:13:5b:48:46:84: 27:a5:22:07:a5:e0:75:6a:76:32:0c:af:44:06:b6:1d:d5:88: 3b:de:d6:75:a3:23:3f:15:fe:9c:55:ec:54:7f:1b:d4:03:93: d4:e4:e9:e3:7f:bc:e6:a6:fa:4e:75:d9:99:4f:6c:a2:5a:f9: 52:b0:8c:a0:84:5c:79:69:10:dc:ea:e0:40:09:c8:c6:28:c7: 34:eb:7f:0d:35:5e:ae:77:f6:8d:80:89:08:63:c1:bb:d0:a0: 59:6c:fa:8e:45:c3:69:ae:48:74:a3:d5:68:6b:bb:f0:a8:74: 0c:3d:9c:7b:56:43:62:cc:fd:a2:a8:e9:eb:30:2f:9b:3b:84: 43:38:2b:17:64:0a:ee:b4:ef:ed:de:e5:e5:97:8b:1a:7b:69: 64:1f:2d:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rSiPj3cQqev3P3E084rCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNDlkZjU3N2YwZWU0NDMxODhjMDI5MzIzNDU3YmJjNWEw ZWFkM2IwHhcNMjYwMTI2MDUwMDU2WhcNMjYwMTI3MDUwMDU2WjAzMTEwLwYDVQQD Eyg0ZTcyMmRiMWQ0MTcwNzI5MGFiYzQ0MWU1NTc2MjYwOGMxMmQ1YjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYkFkY+TC9ZkxANF8xXzg7O2OFPu bK6nDc9bILb8Phlsqujh37/p2M1nqaPxBIr3X/3wsbAmCKfFGgbAY9Wo23LMlbrA CYT85XEQYFQF4e3wZH1oM1Ydmei/29YA9UAogDVAsYYMEJy+lsxxe54VLaka3Ode hAKpU9Vrs+kKMwjTNyusENIV/cGsseyGlIDXikatrXQGjg3ZlWMp5vFB+J5LXOAp hKoihXpu/3E9MecgUCgza7fZJDZfDWx3jeP5kb4L7ypYP80R0mgDmAUjA28TfwI6 83alpR9dooF5ENUAQlQ/dYtOs+i7n8Jdqf2gaT0V2oL9nroNKOWdLT5lWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5yLbHUFwcpCrxEHlV2JgjBLVs+MB8GA1UdIwQY MBaAFL9J31d/DuRDGIwCkyNFe7xaDq07MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBuZlYzOE81RU1ZakFLVEkwVjd2Rm9PclRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hNjcxMWEtMzcyOS00OTFiLThkYmMt OThjMmEzYzU3Yjg4LzEvdjBuZlYzOE81RU1ZakFLVEkwVjd2Rm9PclRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny9hNjcxMWEtMzcyOS00OTFiLThkYmMtOThjMmEzYzU3Yjg4 LzEvdjBuZlYzOE81RU1ZakFLVEkwVjd2Rm9PclRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUugJpe5X P5or6kxG9wCnZ3KrR1Jw8u1FYlAfo4HWnqUHqnEQQoyp9djyKNXLnKe4h/g1cgxm FV52S9UYnhInif1bQvMTtEhil+BF0FUrBzVP18nS55Gg+GAIRA9YNtIIRTkXC14c 1xNbSEaEJ6UiB6XgdWp2MgyvRAa2HdWIO97WdaMjPxX+nFXsVH8b1AOT1OTp43+8 5qb6TnXZmU9solr5UrCMoIRceWkQ3OrgQAnIxijHNOt/DTVernf2jYCJCGPBu9Cg WWz6jkXDaa5IdKPVaGu78Kh0DD2ce1ZDYsz9oqjp6zAvmzuEQzgrF2QK7rTv7d7l 5ZeLGntpZB8t3g== -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:38 2026 by rpki-client