This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft File: vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft (raw, json) Hash identifier: BBxSPWGZqrPyDrbgwqkXvakyLgXGjuy4p4C11Ba0mPY= Subject key identifier: 72:AA:BE:8F:68:35:DF:01:9E:DB:FE:4F:73:0F:82:84:47:27:ED:2A Authority key identifier: BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63 Certificate issuer: /CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63 Certificate serial: 019BF763B0AA4838D771788E7BDB434294AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft Manifest number: 0A65 Signing time: Sun 25 Jan 2026 23:01:04 +0000 Manifest this update: Sun 25 Jan 2026 23:01:04 +0000 Manifest next update: Mon 26 Jan 2026 23:01:04 +0000 Files and hashes: 1: SCwYEksLc5pIHj0oq0DzbDwyJAg.roa (hash: fOZQNI/tC5DxhiQsazq5IbDEzwvFrMwOKbJ6WnLNRTg=) 2: vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl (hash: eCV4mkHI/wjBwgsw/PVoQ21l+tdsieo8gyZMiZlLIIc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:b0:aa:48:38:d7:71:78:8e:7b:db:43:42:94:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf0dc1449316b6567c3e1e374b82ed892b5d0f63 Validity Not Before: Jan 25 23:01:04 2026 GMT Not After : Jan 26 23:01:04 2026 GMT Subject: CN=72aabe8f6835df019edbfe4f730f82844727ed2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:10:3e:0a:96:19:ff:07:92:5f:0d:15:2d:f4: 8d:d3:67:47:e7:c9:0c:00:0c:ee:b8:71:47:b7:9c: a2:44:13:8d:f6:31:65:26:5f:c0:2e:cb:10:d1:09: 54:3e:1d:b7:8e:39:27:7f:a0:1c:69:90:32:e7:99: 2d:30:96:98:57:dc:d0:5d:c1:68:73:84:4c:04:11: c3:65:29:b7:c6:ad:d4:38:1f:49:85:58:98:7c:42: 6a:a2:70:ca:64:33:d2:be:b9:d7:36:18:62:cf:a4: 52:cc:e5:51:08:2b:ec:5d:74:af:eb:39:9f:f4:83: 04:a3:27:98:4e:78:e7:04:16:99:24:0f:1b:a8:86: 8f:4b:3b:99:be:6e:84:0f:da:39:f5:d4:8b:0b:f9: 7d:ad:57:11:45:0b:4b:ff:5d:2b:ca:9e:8a:b3:5d: aa:88:a5:5a:9a:80:21:3d:7c:4f:7e:37:b8:9e:dd: 37:4b:39:aa:b1:77:9c:d9:db:e0:46:9c:e1:a5:02: f3:0b:9a:59:66:15:3f:4f:9f:e8:c1:5f:96:f6:15: 09:6a:f0:54:d3:15:65:fa:89:4a:e5:9a:4a:c7:39: ce:24:0b:d5:c6:4f:55:b1:6f:71:5b:23:f9:f4:09: 4b:b6:6f:88:f4:60:b8:c6:90:fe:fe:bb:70:89:ae: ca:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AA:BE:8F:68:35:DF:01:9E:DB:FE:4F:73:0F:82:84:47:27:ED:2A X509v3 Authority Key Identifier: keyid:BF:0D:C1:44:93:16:B6:56:7C:3E:1E:37:4B:82:ED:89:2B:5D:0F:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vw3BRJMWtlZ8Ph43S4LtiStdD2M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/vw3BRJMWtlZ8Ph43S4LtiStdD2M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:f7:99:b6:33:11:69:0c:21:9b:73:c0:7a:fc:c5:fa:bc:f2: 2e:28:54:4e:52:93:0e:a3:02:98:16:1b:a4:9b:ae:28:0b:82: b6:eb:b9:fe:0e:43:be:a2:26:b0:d9:d8:fa:f2:27:b5:97:2c: 77:c4:bc:f4:8b:60:e0:d2:f0:a3:7e:97:b8:b7:25:21:c0:f2: f7:d5:d3:93:99:0a:1a:bb:9c:ea:df:3d:fe:e3:5d:71:47:5a: 02:67:44:65:27:d3:d0:8b:1a:f1:7a:45:c3:3d:ee:bb:32:6f: 1e:29:64:b9:64:24:8d:64:13:27:c7:92:a8:8a:ae:80:d2:b0: e7:07:10:08:9c:e0:98:bf:fc:eb:9e:10:20:fc:49:2e:0e:ea: be:c7:8a:ce:c7:b9:12:30:ff:ef:f5:78:29:d3:46:00:37:97: 47:66:85:c8:84:cf:ea:ad:49:f1:f4:b8:81:9c:f4:07:db:26: 99:dc:c8:fb:94:7d:cf:53:30:f6:3c:27:88:98:c1:6d:44:2f: bd:10:9e:41:3a:6f:ae:f3:67:90:57:8f:6c:9c:0d:d3:ca:3f: cf:d1:65:d8:f4:42:7a:42:23:99:1f:82:f0:6c:c6:83:61:de: fc:07:e9:65:6a:f6:31:7c:6e:30:35:b1:9e:f9:a1:9e:02:a5: 92:c5:6a:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y7CqSDjXcXiOe9tDQpStMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMGRjMTQ0OTMxNmI2NTY3YzNlMWUzNzRiODJlZDg5MmI1 ZDBmNjMwHhcNMjYwMTI1MjMwMTA0WhcNMjYwMTI2MjMwMTA0WjAzMTEwLwYDVQQD Eyg3MmFhYmU4ZjY4MzVkZjAxOWVkYmZlNGY3MzBmODI4NDQ3MjdlZDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xA+CpYZ/weSXw0VLfSN02dH58kM AAzuuHFHt5yiRBON9jFlJl/ALssQ0QlUPh23jjknf6AcaZAy55ktMJaYV9zQXcFo c4RMBBHDZSm3xq3UOB9JhViYfEJqonDKZDPSvrnXNhhiz6RSzOVRCCvsXXSv6zmf 9IMEoyeYTnjnBBaZJA8bqIaPSzuZvm6ED9o59dSLC/l9rVcRRQtL/10ryp6Ks12q iKVamoAhPXxPfje4nt03SzmqsXec2dvgRpzhpQLzC5pZZhU/T5/owV+W9hUJavBU 0xVl+olK5ZpKxznOJAvVxk9VsW9xWyP59AlLtm+I9GC4xpD+/rtwia7KVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHKqvo9oNd8Bntv+T3MPgoRHJ+0qMB8GA1UdIwQY MBaAFL8NwUSTFrZWfD4eN0uC7YkrXQ9jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnczQlJKTVd0bFo4UGg0M1M0THRpU3RkRDJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yNjZlNjItOTQ5OC00NmUwLWExNGMt NTc1NWIyZjEwNDE4LzEvdnczQlJKTVd0bFo4UGg0M1M0THRpU3RkRDJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi8yNjZlNjItOTQ5OC00NmUwLWExNGMtNTc1NWIyZjEwNDE4 LzEvdnczQlJKTVd0bFo4UGg0M1M0THRpU3RkRDJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVveZtjMR aQwhm3PAevzF+rzyLihUTlKTDqMCmBYbpJuuKAuCtuu5/g5DvqImsNnY+vIntZcs d8S89Itg4NLwo36XuLclIcDy99XTk5kKGruc6t89/uNdcUdaAmdEZSfT0Isa8XpF wz3uuzJvHilkuWQkjWQTJ8eSqIqugNKw5wcQCJzgmL/8654QIPxJLg7qvseKzse5 EjD/7/V4KdNGADeXR2aFyITP6q1J8fS4gZz0B9smmdzI+5R9z1Mw9jwniJjBbUQv vRCeQTpvrvNnkFePbJwN08o/z9Fl2PRCekIjmR+C8GzGg2He/AfpZWr2MXxuMDWx nvmhngKlksVqJg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:11:11 2026 by rpki-client