This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json) Hash identifier: gkLIxYYU4ilLa3SlbmG11Mfo5Y5VqtE6kemmnKsl3uo= Subject key identifier: B4:B5:E1:56:51:A0:5B:50:F5:52:E7:A4:07:E0:DA:BB:B6:9F:AD:56 Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51 Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251 Certificate serial: 019BF574FCBD52B9BEE00B9831509062C64E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft Manifest number: 08CF Signing time: Sun 25 Jan 2026 14:00:43 +0000 Manifest this update: Sun 25 Jan 2026 14:00:43 +0000 Manifest next update: Mon 26 Jan 2026 14:00:43 +0000 Files and hashes: 1: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: A5pxXjM7DypStZOD3V4XWR3OKXSKGZycFtGDZisWetQ=) 2: avSOkO1vns5GxCktjUNPLihkmzc.roa (hash: K/+JeDys4FSY3Upe8AiLhWL3ov51q9PhObuk4WjvD24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:74:fc:bd:52:b9:be:e0:0b:98:31:50:90:62:c6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251 Validity Not Before: Jan 25 14:00:43 2026 GMT Not After : Jan 26 14:00:43 2026 GMT Subject: CN=b4b5e15651a05b50f552e7a407e0dabbb69fad56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f2:f3:89:9b:63:2c:30:23:5e:c8:ea:e4:bf: 48:ea:fc:a0:f7:be:b2:03:a1:52:03:3f:61:71:1e: 2c:a5:99:47:45:15:16:31:b9:99:6d:81:06:63:1c: f8:f2:52:ec:87:39:08:13:07:54:5e:17:8c:76:7b: 3a:64:81:bb:35:e7:14:cc:61:f2:c3:89:39:df:91: 1b:da:ea:80:36:e9:63:e8:9f:5f:7f:8e:f5:df:e9: e9:e0:3e:80:f6:ea:aa:e1:73:7c:42:5f:fa:77:04: 03:6f:23:ea:df:49:ed:56:d4:c2:fa:51:e9:5c:5e: df:70:ac:9e:08:c0:28:44:f6:c4:4e:50:7d:60:c6: 30:d5:5f:76:98:9a:a2:93:4c:37:78:3c:e6:3b:2c: b1:1d:ee:c1:86:1b:d6:72:c9:a5:ad:0d:1c:19:22: 51:d5:f8:f0:c7:0a:0c:24:3a:0b:05:70:bb:c7:1b: b2:06:4e:65:0e:de:1b:dc:16:bb:a2:c4:b9:38:37: b4:61:8e:b8:28:5d:07:37:e2:bb:a3:dc:8c:8c:45: be:0e:d3:8f:b4:06:b1:29:15:58:18:5f:f4:71:58: cc:60:11:20:78:b2:f4:11:d1:3e:f1:73:f8:1f:76: 58:bc:a7:e3:7e:d2:01:00:16:4f:8f:e6:16:29:c7: 97:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B5:E1:56:51:A0:5B:50:F5:52:E7:A4:07:E0:DA:BB:B6:9F:AD:56 X509v3 Authority Key Identifier: keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:aa:46:1b:07:91:bc:0a:0d:5b:04:23:5c:a0:6f:ac:90:cb: 43:a5:ab:70:9c:ea:c0:79:2b:c2:4c:3e:7e:78:21:ab:8e:57: 59:1e:65:45:f1:27:a9:32:1b:96:05:b0:67:cd:06:0e:1e:28: 6c:02:1b:85:70:39:50:a4:95:ed:d7:91:08:6b:69:86:31:56: 7e:69:b8:fd:c4:99:7f:7a:6b:98:6c:10:ee:37:2c:4f:3e:a2: bd:fd:43:b0:c0:f1:c1:e7:67:00:0d:69:da:ad:6c:d9:a7:01: fd:d0:d5:96:56:05:8d:f0:07:f0:3f:1a:12:86:7d:ec:60:89: cc:f1:f8:a3:58:04:5e:a6:12:72:35:81:49:7e:c3:cd:46:15: 7b:92:0b:69:dc:af:fe:20:14:cf:12:d2:57:74:f2:ae:88:57: e0:77:65:38:b1:50:49:20:4b:d0:d8:1d:12:64:78:f7:e1:57: 8c:a4:69:ed:d9:37:38:7d:12:c8:ef:d0:05:85:a3:f3:14:b3: 90:0b:21:c8:90:57:e6:c4:7d:3c:47:a0:ea:18:14:39:c1:49: a2:47:ba:23:cf:dc:db:c1:32:11:f1:3e:7b:5f:65:c1:1c:49: 40:a6:29:2a:8c:1e:9e:80:5f:4f:79:52:c1:30:64:2a:c3:d6: f0:d3:c0:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dPy9Urm+4AuYMVCQYsZOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NTdkZjNlNTQ2ZDU2ZGJiNWQyMzBmNjExYzcyNGM1OTlh NzIyNTEwHhcNMjYwMTI1MTQwMDQzWhcNMjYwMTI2MTQwMDQzWjAzMTEwLwYDVQQD EyhiNGI1ZTE1NjUxYTA1YjUwZjU1MmU3YTQwN2UwZGFiYmI2OWZhZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PLziZtjLDAjXsjq5L9I6vyg976y A6FSAz9hcR4spZlHRRUWMbmZbYEGYxz48lLshzkIEwdUXheMdns6ZIG7NecUzGHy w4k535Eb2uqANulj6J9ff4713+np4D6A9uqq4XN8Ql/6dwQDbyPq30ntVtTC+lHp XF7fcKyeCMAoRPbETlB9YMYw1V92mJqik0w3eDzmOyyxHe7BhhvWcsmlrQ0cGSJR 1fjwxwoMJDoLBXC7xxuyBk5lDt4b3Ba7osS5ODe0YY64KF0HN+K7o9yMjEW+DtOP tAaxKRVYGF/0cVjMYBEgeLL0EdE+8XP4H3ZYvKfjftIBABZPj+YWKceXTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLS14VZRoFtQ9VLnpAfg2ru2n61WMB8GA1UdIwQY MBaAFEVX3z5UbVbbtdIw9hHHJMWZpyJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQt MGE4OTJhYjQ3ZGIzLzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQtMGE4OTJhYjQ3ZGIz LzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjKpGGweR vAoNWwQjXKBvrJDLQ6WrcJzqwHkrwkw+fnghq45XWR5lRfEnqTIblgWwZ80GDh4o bAIbhXA5UKSV7deRCGtphjFWfmm4/cSZf3prmGwQ7jcsTz6ivf1DsMDxwednAA1p 2q1s2acB/dDVllYFjfAH8D8aEoZ97GCJzPH4o1gEXqYScjWBSX7DzUYVe5ILadyv /iAUzxLSV3TyrohX4HdlOLFQSSBL0NgdEmR49+FXjKRp7dk3OH0SyO/QBYWj8xSz kAshyJBX5sR9PEeg6hgUOcFJoke6I8/c28EyEfE+e19lwRxJQKYpKowenoBfT3lS wTBkKsPW8NPAAg== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:41 2026 by rpki-client