This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft File: vedQeWGGkbrh9HvL7VIxRJaWOJE.mft (raw, json) Hash identifier: jt2QQg/963MU0Thu1vzwA81fwIOqXkVk0pCf6jNB4Xc= Subject key identifier: B6:9A:43:78:1A:E7:5E:AD:70:31:A3:89:95:55:A0:3C:B7:5A:66:03 Authority key identifier: BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91 Certificate issuer: /CN=bde75079618691bae1f47bcbed52314496963891 Certificate serial: 019BF6512578CB94E3E82B1CA1EFFC32B36D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft Manifest number: 13CC Signing time: Sun 25 Jan 2026 18:01:11 +0000 Manifest this update: Sun 25 Jan 2026 18:01:11 +0000 Manifest next update: Mon 26 Jan 2026 18:01:11 +0000 Files and hashes: 1: hPe8eshvkB9CcQkG466tfDmPzW0.roa (hash: vm7322s/xXBB8o77sKczMItdIgs7QKT2eaju3uxvZVc=) 2: vedQeWGGkbrh9HvL7VIxRJaWOJE.crl (hash: bWLDJPK3E4o4i/y4pPqK4kBvM40PS4lEb3dO9QdXP7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:25:78:cb:94:e3:e8:2b:1c:a1:ef:fc:32:b3:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde75079618691bae1f47bcbed52314496963891 Validity Not Before: Jan 25 18:01:11 2026 GMT Not After : Jan 26 18:01:11 2026 GMT Subject: CN=b69a43781ae75ead7031a3899555a03cb75a6603 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ff:c6:a0:32:52:21:08:8a:9e:45:90:89:e1: a1:7a:1f:e9:98:98:8c:e0:a7:48:1c:7f:2f:51:77: 3d:50:19:a9:21:e4:97:67:48:2b:60:8e:d8:12:c3: e4:c2:dd:da:3d:8c:9b:84:58:80:46:78:e2:7b:fd: 47:f6:da:ee:61:b5:8b:6f:62:d9:60:99:9b:be:ef: 41:26:2f:8f:1a:eb:c9:20:22:aa:53:5c:07:a9:bd: fb:e6:cf:68:b9:49:d1:dc:a7:c3:80:f6:75:7d:2a: 7d:ce:5c:c4:34:7b:51:ee:73:85:6e:f5:af:de:18: 4d:2f:cf:bf:a3:2c:2f:9b:be:c5:13:07:5b:ff:17: 83:f8:17:e2:26:ba:fc:b8:50:aa:d6:a9:23:d5:90: 07:a1:c3:6b:41:7d:a3:4d:05:7b:d9:b2:f6:b9:65: 51:e0:57:22:1b:ec:23:7b:a3:27:49:94:58:0c:86: a1:c3:7f:57:e2:b0:5d:14:39:cf:94:74:ae:49:f6: 9f:43:6e:31:9a:5b:1b:7b:d9:98:63:bf:09:cb:43: 18:03:82:f1:8a:2e:fc:30:06:69:55:a8:e0:b6:70: ed:8c:e9:0c:ba:84:ff:f8:44:19:4e:f4:9d:03:d9: f7:ad:43:9a:b7:02:2c:f9:6d:56:f9:93:62:f1:a9: b0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:9A:43:78:1A:E7:5E:AD:70:31:A3:89:95:55:A0:3C:B7:5A:66:03 X509v3 Authority Key Identifier: keyid:BD:E7:50:79:61:86:91:BA:E1:F4:7B:CB:ED:52:31:44:96:96:38:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vedQeWGGkbrh9HvL7VIxRJaWOJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/8f2093-0318-476c-9e9c-53fc4905629b/1/vedQeWGGkbrh9HvL7VIxRJaWOJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:6e:0e:b8:8d:f0:e3:8d:53:8a:e4:be:ff:73:52:61:5e:d5: 0c:b5:89:29:ba:59:46:b1:0c:b2:55:0e:7a:0f:c9:91:91:cf: 6c:cb:05:da:31:2c:bd:7a:92:ee:b0:55:07:66:b3:77:1b:5f: e0:80:c2:9b:59:27:55:69:1b:08:ca:a1:a2:b1:5e:51:58:21: 9b:1a:02:2b:b2:38:73:6b:2a:a7:9a:67:52:3f:23:68:65:91: cb:d2:c7:c8:df:c8:15:15:ce:c1:db:77:3a:21:a7:2b:46:e5: 55:82:b3:64:67:27:6d:f6:eb:be:ec:c2:b2:fc:ad:18:9d:5d: 7b:9c:1f:c0:45:3a:43:ef:2a:81:a6:da:aa:d2:0b:18:62:d8: 08:45:4e:df:fd:12:64:d2:0f:c7:84:dc:5e:e4:02:30:70:92: cd:da:51:10:1c:8c:43:4b:7e:9e:63:d5:22:40:ec:99:c2:c1: 35:da:f1:66:f8:b0:42:bf:c8:83:99:46:d4:9d:0a:86:c3:17: 90:6d:d4:80:f9:b2:61:85:d6:6f:09:ac:ec:f6:0f:62:97:d0: 53:5d:dc:3c:b2:c8:06:fe:ab:89:ff:ea:d9:d9:be:4f:b3:ec: 2e:39:76:85:65:5f:fe:32:73:de:3f:6f:67:c3:54:14:ee:6b: f7:be:ac:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2USV4y5Tj6Cscoe/8MrNtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTc1MDc5NjE4NjkxYmFlMWY0N2JjYmVkNTIzMTQ0OTY5 NjM4OTEwHhcNMjYwMTI1MTgwMTExWhcNMjYwMTI2MTgwMTExWjAzMTEwLwYDVQQD EyhiNjlhNDM3ODFhZTc1ZWFkNzAzMWEzODk5NTU1YTAzY2I3NWE2NjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2//GoDJSIQiKnkWQieGheh/pmJiM 4KdIHH8vUXc9UBmpIeSXZ0grYI7YEsPkwt3aPYybhFiARnjie/1H9truYbWLb2LZ YJmbvu9BJi+PGuvJICKqU1wHqb375s9ouUnR3KfDgPZ1fSp9zlzENHtR7nOFbvWv 3hhNL8+/oywvm77FEwdb/xeD+BfiJrr8uFCq1qkj1ZAHocNrQX2jTQV72bL2uWVR 4FciG+wje6MnSZRYDIahw39X4rBdFDnPlHSuSfafQ24xmlsbe9mYY78Jy0MYA4Lx ii78MAZpVajgtnDtjOkMuoT/+EQZTvSdA9n3rUOatwIs+W1W+ZNi8amwsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaaQ3ga516tcDGjiZVVoDy3WmYDMB8GA1UdIwQY MBaAFL3nUHlhhpG64fR7y+1SMUSWljiRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVkUWVXR0drYnJoOUh2TDdWSXhSSmFXT0pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84ZjIwOTMtMDMxOC00NzZjLTllOWMt NTNmYzQ5MDU2MjliLzEvdmVkUWVXR0drYnJoOUh2TDdWSXhSSmFXT0pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84ZjIwOTMtMDMxOC00NzZjLTllOWMtNTNmYzQ5MDU2Mjli LzEvdmVkUWVXR0drYnJoOUh2TDdWSXhSSmFXT0pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgm4OuI3w 441TiuS+/3NSYV7VDLWJKbpZRrEMslUOeg/JkZHPbMsF2jEsvXqS7rBVB2azdxtf 4IDCm1knVWkbCMqhorFeUVghmxoCK7I4c2sqp5pnUj8jaGWRy9LHyN/IFRXOwdt3 OiGnK0blVYKzZGcnbfbrvuzCsvytGJ1de5wfwEU6Q+8qgabaqtILGGLYCEVO3/0S ZNIPx4TcXuQCMHCSzdpREByMQ0t+nmPVIkDsmcLBNdrxZviwQr/Ig5lG1J0KhsMX kG3UgPmyYYXWbwms7PYPYpfQU13cPLLIBv6rif/q2dm+T7PsLjl2hWVf/jJz3j9v Z8NUFO5r976spw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:22:35 2026 by rpki-client