This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft File: VKMasDPP0t7mhS-p2L9aSg41JBQ.mft (raw, json) Hash identifier: wPQq2GvDVK0txDXM/JWBzMzFuuZI9LSzZBuVLc41Bsw= Subject key identifier: FC:E9:44:40:0E:3F:49:72:16:D7:DA:A3:4C:E4:89:00:83:98:4E:7C Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14 Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414 Certificate serial: 019BF3BD5621F3550991C93BF5CA2173CE19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft Manifest number: 168D Signing time: Sun 25 Jan 2026 06:00:30 +0000 Manifest this update: Sun 25 Jan 2026 06:00:30 +0000 Manifest next update: Mon 26 Jan 2026 06:00:30 +0000 Files and hashes: 1: 2e1cz0qQm98XsgOLRW_MtsZatHo.roa (hash: s7uLnF7oXLpb3y50Cb2KADpe3RUMwrdqTlQV52zh+8g=) 2: GyEClr1YQ4_DWaldbIWVGzirKrM.roa (hash: Hf1oKmBrTqtefmUDpN3mwcJ/zJ6TmhTAUewS81ncFOM=) 3: VKMasDPP0t7mhS-p2L9aSg41JBQ.crl (hash: +E6qiETbUHfhkU+jl9aT+AO3Mz1XyTPSJqwLWvl1h80=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:56:21:f3:55:09:91:c9:3b:f5:ca:21:73:ce:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414 Validity Not Before: Jan 25 06:00:30 2026 GMT Not After : Jan 26 06:00:30 2026 GMT Subject: CN=fce944400e3f497216d7daa34ce4890083984e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:41:34:a0:8d:fc:c0:6c:92:93:a9:48:b6:79: ae:f2:1c:97:62:90:f3:9a:2f:16:e9:5c:5f:b6:12: 43:13:4f:a6:eb:65:9d:05:b9:e3:9c:bc:9a:e8:09: ca:47:09:d1:4f:3f:fb:31:8c:6e:a1:4d:7f:7b:92: 5a:97:02:b3:0c:dd:aa:1b:88:16:bd:4a:f7:52:fd: cd:14:a5:29:75:ab:4f:67:05:7e:86:64:40:0b:b8: eb:ac:f4:7e:2f:62:66:7c:87:bf:ce:ff:50:d5:ec: 87:f9:3e:a8:f7:74:cb:e1:c4:37:82:e5:7b:17:06: 25:f9:a7:dc:55:50:8a:1c:db:e6:ec:15:d6:49:16: b6:16:12:d5:63:88:3f:7c:a2:4b:df:9f:31:fd:ab: 35:f3:75:3b:2b:40:38:17:18:25:5a:a6:78:9c:9d: 9c:d2:d3:fe:36:39:57:2c:4c:13:5f:f1:c6:2a:96: dd:00:16:2a:18:35:34:fb:14:d5:93:90:26:b2:f9: a5:3d:50:db:1e:11:86:e9:4e:b5:cf:b0:9d:8d:cd: b9:eb:fa:d9:b4:aa:e7:6c:22:c9:e4:1c:df:ef:b4: 5f:1c:17:1d:63:68:72:f9:63:2a:4d:cc:43:ff:be: f1:9d:c6:21:0b:1b:41:c3:16:1b:66:df:61:d0:52: 91:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E9:44:40:0E:3F:49:72:16:D7:DA:A3:4C:E4:89:00:83:98:4E:7C X509v3 Authority Key Identifier: keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:ec:27:c6:72:a1:00:e6:d2:5c:34:4e:1e:d9:ab:90:58:f3: 22:56:b4:e2:2f:01:6c:c7:1b:dd:d7:e4:fa:37:19:ad:52:60: 3e:98:aa:5d:6b:4a:cb:7c:24:4d:22:78:92:dc:7d:32:97:7f: b0:f5:9d:a5:79:b8:8b:ee:f4:26:50:8d:b1:0f:62:60:5a:97: 23:3c:fb:a3:65:d4:87:d8:d6:62:a8:dd:02:5e:55:fb:7e:22: d5:75:68:09:1f:56:44:c9:3c:49:4b:e4:e7:d5:25:34:34:1e: f3:9c:f1:0a:e0:a7:86:58:8d:71:49:a0:dc:1a:f1:10:49:df: a4:1c:49:4d:a3:b5:0d:5d:4b:bb:a7:0f:b7:90:9c:85:30:11: 40:34:77:f8:a0:3e:57:33:57:68:4d:dd:94:7c:2c:9f:62:87: e8:a1:33:65:4a:f8:99:df:a8:85:72:06:42:a7:39:26:25:f9: 6c:5d:ac:9e:1c:3a:c0:cc:59:d2:69:32:4e:c5:b7:0e:1f:d5: 95:bf:b8:dd:1c:6a:5f:a3:f4:ac:31:6e:62:e0:70:b4:37:56: 84:89:82:fb:02:ed:0c:90:80:4b:19:55:cc:cd:aa:a4:af:b7: 1e:08:c1:3b:9f:f3:00:66:8a:6e:82:d6:e0:64:42:d9:90:2c: 06:de:71:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvVYh81UJkck79cohc84ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz NTI0MTQwHhcNMjYwMTI1MDYwMDMwWhcNMjYwMTI2MDYwMDMwWjAzMTEwLwYDVQQD EyhmY2U5NDQ0MDBlM2Y0OTcyMTZkN2RhYTM0Y2U0ODkwMDgzOTg0ZTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkE0oI38wGySk6lItnmu8hyXYpDz mi8W6VxfthJDE0+m62WdBbnjnLya6AnKRwnRTz/7MYxuoU1/e5JalwKzDN2qG4gW vUr3Uv3NFKUpdatPZwV+hmRAC7jrrPR+L2JmfIe/zv9Q1eyH+T6o93TL4cQ3guV7 FwYl+afcVVCKHNvm7BXWSRa2FhLVY4g/fKJL358x/as183U7K0A4FxglWqZ4nJ2c 0tP+NjlXLEwTX/HGKpbdABYqGDU0+xTVk5AmsvmlPVDbHhGG6U61z7Cdjc256/rZ tKrnbCLJ5Bzf77RfHBcdY2hy+WMqTcxD/77xncYhCxtBwxYbZt9h0FKRCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzpREAOP0lyFtfao0zkiQCDmE58MB8GA1UdIwQY MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt NjE5YzI2MTk0MTY4LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4 LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg+wnxnKh AObSXDROHtmrkFjzIla04i8BbMcb3dfk+jcZrVJgPpiqXWtKy3wkTSJ4ktx9Mpd/ sPWdpXm4i+70JlCNsQ9iYFqXIzz7o2XUh9jWYqjdAl5V+34i1XVoCR9WRMk8SUvk 59UlNDQe85zxCuCnhliNcUmg3BrxEEnfpBxJTaO1DV1Lu6cPt5CchTARQDR3+KA+ VzNXaE3dlHwsn2KH6KEzZUr4md+ohXIGQqc5JiX5bF2snhw6wMxZ0mkyTsW3Dh/V lb+43RxqX6P0rDFuYuBwtDdWhImC+wLtDJCASxlVzM2qpK+3HgjBO5/zAGaKboLW 4GRC2ZAsBt5xhQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:41:11 2026 by rpki-client