This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json) Hash identifier: nKxQc0V5ge2J7YMwCvcPvdpnhboqcwG/7lx97sMLu+A= Subject key identifier: 3A:2D:FB:B3:95:76:2B:26:56:67:75:44:04:2B:8C:77:92:15:82:77 Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64 Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964 Certificate serial: 019BF4D05EEE67B66B2EBDF263FE5CC01FA5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft Manifest number: 061D Signing time: Sun 25 Jan 2026 11:00:54 +0000 Manifest this update: Sun 25 Jan 2026 11:00:54 +0000 Manifest next update: Mon 26 Jan 2026 11:00:54 +0000 Files and hashes: 1: UXXtGi4oxNDjahgVbsQFfeZIwU4.roa (hash: jdBHO4Fwd2CUANgRDo6QBZVoktY70KNazlVK3AC+4zE=) 2: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: XczWkfq2OM0rNbRerhq1w23JG67UBl5GFRORlapX7iM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:d0:5e:ee:67:b6:6b:2e:bd:f2:63:fe:5c:c0:1f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964 Validity Not Before: Jan 25 11:00:54 2026 GMT Not After : Jan 26 11:00:54 2026 GMT Subject: CN=3a2dfbb395762b2656677544042b8c7792158277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:a6:06:bf:ac:ab:9f:83:fc:c1:34:0f:ac: 08:1f:0e:93:63:35:02:6a:e9:4a:30:4b:07:ed:47: 60:62:16:d7:08:c6:c2:af:2c:e3:df:4c:62:6d:10: 08:78:6e:41:cd:01:aa:e8:d4:94:94:10:a4:8c:9a: 8e:88:42:83:b5:c3:35:a9:ef:67:38:33:c3:29:64: 64:b7:d2:ac:07:7a:b8:4b:02:1b:5b:d8:f3:b0:3f: 19:b6:12:46:e2:20:7e:d7:67:5b:aa:bb:cf:b8:05: 02:17:ce:4b:66:cc:99:3f:d4:9b:3d:50:af:76:3a: e8:64:c8:d9:95:bb:6d:6f:31:55:09:b6:87:9f:ba: 4e:81:5a:ad:d3:88:48:3b:6b:46:ee:68:b8:b4:b3: 67:83:e5:0c:4e:6f:5e:83:73:37:47:76:52:dd:0e: f6:5d:b5:fd:51:dc:a3:15:4e:25:50:b5:92:42:39: a1:d3:61:c9:3e:30:f4:75:07:07:62:94:6e:de:3d: 9d:04:8d:52:c5:ca:62:6c:ce:e6:92:22:2e:45:f9: 98:da:16:81:41:c4:92:c0:93:de:f2:b3:6e:4f:0c: 54:cb:e1:7c:47:14:9e:55:09:7f:30:b3:45:4e:ce: 50:79:9d:91:fd:2e:64:01:bb:f7:68:43:5e:58:58: 95:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:2D:FB:B3:95:76:2B:26:56:67:75:44:04:2B:8C:77:92:15:82:77 X509v3 Authority Key Identifier: keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:a9:07:b1:33:07:d6:3a:d3:fe:64:a5:e9:2e:48:73:96:13: 76:3f:3d:5a:78:57:3e:df:b2:d4:45:10:6a:58:2d:cc:6b:77: 4d:b6:42:7a:98:22:e4:f5:59:d8:31:ed:f1:af:90:28:8b:e2: fa:2f:da:83:e2:9b:55:13:34:4a:fa:fb:e1:9c:5e:7a:20:44: ed:30:9a:69:23:43:7b:b4:11:1a:95:a3:81:28:53:29:ed:41: 3b:c7:c2:ea:37:3e:4d:73:b8:b9:51:34:1e:47:67:44:7e:75: 29:c7:95:04:b6:3e:bd:35:3e:85:09:c4:aa:60:86:10:56:33: 10:7c:cc:a4:de:75:4b:9e:30:87:99:04:13:6c:07:69:a7:b6: 28:89:44:8b:18:b7:a6:af:e2:96:cc:2e:60:ef:24:95:cc:54: 8b:cc:16:89:bf:02:18:e2:5a:83:ca:72:ec:d0:c8:3e:0e:99: 6a:28:91:e4:d0:e4:f1:95:97:db:b8:f4:cd:bf:f0:d6:d6:2a: 92:1a:0f:55:25:c8:d2:7c:71:d5:5f:d0:7d:16:46:4a:e4:14: 94:fb:a4:fa:62:ec:e1:53:03:d3:55:f6:18:5c:57:95:9f:99: bf:2b:2f:52:f3:c0:21:4f:33:82:80:92:ad:90:0c:92:70:94: f9:ac:78:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv00F7uZ7ZrLr3yY/5cwB+lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGY0YTFiOTIzMzhiNDljYTYzMDIxMjE5MDU5Y2U1NzBm ZjU5NjQwHhcNMjYwMTI1MTEwMDU0WhcNMjYwMTI2MTEwMDU0WjAzMTEwLwYDVQQD EygzYTJkZmJiMzk1NzYyYjI2NTY2Nzc1NDQwNDJiOGM3NzkyMTU4Mjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHGmBr+sq5+D/ME0D6wIHw6TYzUC aulKMEsH7UdgYhbXCMbCryzj30xibRAIeG5BzQGq6NSUlBCkjJqOiEKDtcM1qe9n ODPDKWRkt9KsB3q4SwIbW9jzsD8ZthJG4iB+12dbqrvPuAUCF85LZsyZP9SbPVCv djroZMjZlbttbzFVCbaHn7pOgVqt04hIO2tG7mi4tLNng+UMTm9eg3M3R3ZS3Q72 XbX9UdyjFU4lULWSQjmh02HJPjD0dQcHYpRu3j2dBI1SxcpibM7mkiIuRfmY2haB QcSSwJPe8rNuTwxUy+F8RxSeVQl/MLNFTs5QeZ2R/S5kAbv3aENeWFiVsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDot+7OVdismVmd1RAQrjHeSFYJ3MB8GA1UdIwQY MBaAFFQPShuSM4tJymMCEhkFnOVw/1lkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAt ZTA1MjkwMTZjYmEwLzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAtZTA1MjkwMTZjYmEw LzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqakHsTMH 1jrT/mSl6S5Ic5YTdj89WnhXPt+y1EUQalgtzGt3TbZCepgi5PVZ2DHt8a+QKIvi +i/ag+KbVRM0Svr74ZxeeiBE7TCaaSNDe7QRGpWjgShTKe1BO8fC6jc+TXO4uVE0 HkdnRH51KceVBLY+vTU+hQnEqmCGEFYzEHzMpN51S54wh5kEE2wHaae2KIlEixi3 pq/ilswuYO8klcxUi8wWib8CGOJag8py7NDIPg6ZaiiR5NDk8ZWX27j0zb/w1tYq khoPVSXI0nxx1V/QfRZGSuQUlPuk+mLs4VMD01X2GFxXlZ+ZvysvUvPAIU8zgoCS rZAMknCU+ax4zA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:19:06 2026 by rpki-client