This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft File: RVfq3Q3asUagq5nAquV40njw9H4.mft (raw, json) Hash identifier: tC9clsAaYDNyeYu/T2arsACa/4tuXkYaa4cagzR8hGI= Subject key identifier: D5:20:36:42:59:59:A9:DF:E0:15:33:1D:A7:AE:B9:22:A3:12:4D:28 Authority key identifier: 45:57:EA:DD:0D:DA:B1:46:A0:AB:99:C0:AA:E5:78:D2:78:F0:F4:7E Certificate issuer: /CN=4557eadd0ddab146a0ab99c0aae578d278f0f47e Certificate serial: 019BF7D13FA6C45D1252DB3364442C236EA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft Manifest number: 2E Signing time: Mon 26 Jan 2026 01:00:44 +0000 Manifest this update: Mon 26 Jan 2026 01:00:44 +0000 Manifest next update: Tue 27 Jan 2026 01:00:44 +0000 Files and hashes: 1: RVfq3Q3asUagq5nAquV40njw9H4.crl (hash: L8XTiSDUH9pz/NNUia+jXbYkDrlRZfs77XrEv2ufqOU=) 2: ck2Hnx7YLqfCAwbXnmqrOBQQJXA.roa (hash: z68wCsgmx5LNuVEfhfzGMi/AVsIBR+cwgGs5Q7LfatQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:d1:3f:a6:c4:5d:12:52:db:33:64:44:2c:23:6e:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4557eadd0ddab146a0ab99c0aae578d278f0f47e Validity Not Before: Jan 26 01:00:44 2026 GMT Not After : Jan 27 01:00:44 2026 GMT Subject: CN=d52036425959a9dfe015331da7aeb922a3124d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:dc:2c:de:45:ef:cf:17:f6:1c:14:56:77:0c: 26:29:95:38:23:6f:30:23:73:64:10:5c:02:ef:da: 4d:25:40:79:a7:0b:83:08:fc:94:9c:48:88:fb:0b: 2a:66:b8:49:3b:cb:22:8b:f6:fc:af:0c:73:e0:6d: 62:0b:be:c5:66:8f:21:f7:90:b7:39:d1:54:8b:47: b6:bc:02:21:23:a7:2f:7c:f7:15:6f:53:c1:fb:af: 3b:56:cf:8d:bd:c0:5a:fc:92:9f:9e:07:66:50:75: 6b:1e:8e:5e:e9:6e:19:33:7f:af:96:c9:f6:bd:3d: 7b:96:9e:0c:0e:6b:4c:d5:d6:8a:bf:14:f8:62:35: 90:47:2e:1a:63:bd:ed:dd:6d:dd:7b:a0:6d:94:d7: 7c:9e:06:1f:8d:4e:ff:cb:7c:7f:ad:ba:10:6c:b3: 31:d3:23:82:a1:9d:7a:e3:9d:6a:8f:f5:63:93:74: 6d:57:0c:47:e0:98:81:a3:e9:4d:76:7e:d0:f7:95: ad:56:6c:6c:b5:d2:37:73:d6:6f:98:b2:4b:08:e1: 4e:a7:a6:ae:5d:e4:a7:18:6a:4a:99:44:db:f4:f8: 48:6d:4c:87:c1:25:3e:84:f6:31:83:79:2e:cc:8c: 16:c1:42:8c:09:ac:8b:27:9e:ed:b8:cc:26:c7:8a: 4b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:20:36:42:59:59:A9:DF:E0:15:33:1D:A7:AE:B9:22:A3:12:4D:28 X509v3 Authority Key Identifier: keyid:45:57:EA:DD:0D:DA:B1:46:A0:AB:99:C0:AA:E5:78:D2:78:F0:F4:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:33:12:80:57:42:c9:04:65:84:6d:db:a9:48:eb:03:6c:dd: ff:1a:88:72:9c:86:91:48:11:19:b3:89:49:af:d5:1f:1c:61: 5d:d7:86:77:26:27:cf:36:ac:94:c4:cd:54:82:33:c2:1e:c7: 71:40:43:cf:e9:96:60:b2:3d:f9:6d:32:b6:70:1c:c2:6c:db: c6:ad:68:91:f5:de:ea:6b:bc:a0:ae:6f:3b:68:47:13:d6:cd: 6d:b7:cc:ea:73:64:3e:be:b0:72:ba:e8:66:57:f6:e1:bb:6c: 42:e3:4b:45:d1:08:82:68:72:b7:8c:29:0f:c3:27:14:12:19: e8:0b:99:55:de:2a:d7:de:44:1f:2e:47:90:04:f8:33:d0:6e: 6a:f6:5d:42:f8:a9:91:31:a8:91:cd:7b:39:4d:c0:23:2c:e7: 4d:b3:e2:5e:88:45:9c:5b:24:2a:87:ac:3a:8a:8e:38:ed:64: e0:5f:6f:7c:e3:63:49:d5:82:e1:b1:f1:53:ce:c3:cf:ba:f7: cf:ba:76:4f:cf:30:64:59:d4:83:3e:90:5e:44:d6:81:47:4e: 39:4e:48:a5:3c:47:3e:78:c4:ef:03:0a:c8:8e:d5:6d:c9:8e: f2:76:23:ec:b7:7a:57:96:92:21:9f:c5:cc:8c:25:4f:bd:37: 20:8f:e8:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv30T+mxF0SUtszZEQsI26mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NTdlYWRkMGRkYWIxNDZhMGFiOTljMGFhZTU3OGQyNzhm MGY0N2UwHhcNMjYwMTI2MDEwMDQ0WhcNMjYwMTI3MDEwMDQ0WjAzMTEwLwYDVQQD EyhkNTIwMzY0MjU5NTlhOWRmZTAxNTMzMWRhN2FlYjkyMmEzMTI0ZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtws3kXvzxf2HBRWdwwmKZU4I28w I3NkEFwC79pNJUB5pwuDCPyUnEiI+wsqZrhJO8sii/b8rwxz4G1iC77FZo8h95C3 OdFUi0e2vAIhI6cvfPcVb1PB+687Vs+NvcBa/JKfngdmUHVrHo5e6W4ZM3+vlsn2 vT17lp4MDmtM1daKvxT4YjWQRy4aY73t3W3de6BtlNd8ngYfjU7/y3x/rboQbLMx 0yOCoZ16451qj/Vjk3RtVwxH4JiBo+lNdn7Q95WtVmxstdI3c9ZvmLJLCOFOp6au XeSnGGpKmUTb9PhIbUyHwSU+hPYxg3kuzIwWwUKMCayLJ57tuMwmx4pLmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUgNkJZWanf4BUzHaeuuSKjEk0oMB8GA1UdIwQY MBaAFEVX6t0N2rFGoKuZwKrleNJ48PR+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlZmcTNRM2FzVWFncTVuQXF1VjQwbmp3OUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iYzJkMjYtZGNmNy00Njk1LTg4ZWUt OTMyYmI0ODY3YzJiLzEvUlZmcTNRM2FzVWFncTVuQXF1VjQwbmp3OUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC9iYzJkMjYtZGNmNy00Njk1LTg4ZWUtOTMyYmI0ODY3YzJi LzEvUlZmcTNRM2FzVWFncTVuQXF1VjQwbmp3OUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDMSgFdC yQRlhG3bqUjrA2zd/xqIcpyGkUgRGbOJSa/VHxxhXdeGdyYnzzaslMTNVIIzwh7H cUBDz+mWYLI9+W0ytnAcwmzbxq1okfXe6mu8oK5vO2hHE9bNbbfM6nNkPr6wcrro Zlf24btsQuNLRdEIgmhyt4wpD8MnFBIZ6AuZVd4q195EHy5HkAT4M9BuavZdQvip kTGokc17OU3AIyznTbPiXohFnFskKoesOoqOOO1k4F9vfONjSdWC4bHxU87Dz7r3 z7p2T88wZFnUgz6QXkTWgUdOOU5IpTxHPnjE7wMKyI7VbcmO8nYj7Ld6V5aSIZ/F zIwlT703II/oPA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:40:27 2026 by rpki-client