This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json) Hash identifier: oEz2I59Khxc7ob3nbuugoE7A4f558nL3fqEsYlex19Y= Subject key identifier: 18:56:0A:3B:B2:78:E0:E6:01:44:A2:75:19:9A:D9:B5:9E:62:E6:8E Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a Certificate serial: 019BF2E235E75BE2F4D2FDF83A24505462C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft Manifest number: 0A32 Signing time: Sun 25 Jan 2026 02:01:09 +0000 Manifest this update: Sun 25 Jan 2026 02:01:09 +0000 Manifest next update: Mon 26 Jan 2026 02:01:09 +0000 Files and hashes: 1: WhNnG7RGoKzd13ukyLrTiCjdCGU.roa (hash: xIXQvTfLd53mh36/jnGCyL3HlmPNklCfsGo5gTXyrIc=) 2: XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa (hash: dAImuk+Q6V1EJ1OrpsgP2U2fzTi2XwHAPHF4flZhKc0=) 3: bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa (hash: FzZuYRsHytP8CktVJKuMoVGRaDw+yRywVAIuiA5WiBU=) 4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: RxlhoI+9SotJd8Nb98N0AgXmhfuLKUA2cJy53IpPTW0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:e2:35:e7:5b:e2:f4:d2:fd:f8:3a:24:50:54:62:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a Validity Not Before: Jan 25 02:01:09 2026 GMT Not After : Jan 26 02:01:09 2026 GMT Subject: CN=18560a3bb278e0e60144a275199ad9b59e62e68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:6a:af:72:e0:4d:67:8e:c7:55:9a:21:9b:a4: b2:bc:bf:51:d5:13:62:25:1c:c2:9a:9b:2f:83:02: 4f:3b:e0:d6:1d:82:66:29:ac:b1:c1:b9:5e:6b:eb: c3:ee:6e:df:ca:d2:3e:4f:6a:9d:70:0a:49:25:eb: 74:d7:45:f2:2f:04:da:b6:59:39:86:96:ec:cd:27: 52:43:bc:7b:25:66:81:42:1c:3a:20:bd:3a:7a:b1: 7a:bb:43:ff:3c:cf:d7:9f:7c:13:f9:ca:05:c6:8a: d9:1f:0d:fd:2d:40:ab:e3:1b:ad:bf:12:ca:bd:e2: dd:8c:bd:e3:41:f4:53:03:d4:a5:c8:b4:c8:ce:b5: 0f:69:6e:23:8a:65:40:f2:d8:d1:a2:81:76:ae:fb: 41:38:67:83:51:89:58:ab:ee:f1:c9:88:69:6c:9f: e6:c8:de:77:a0:d3:81:72:ac:11:48:fc:28:7f:b5: f7:0c:65:23:1b:3f:ce:8d:4f:0f:fb:7e:ae:27:e9: eb:2d:8c:ab:07:cb:13:39:27:90:f4:62:b9:91:26: dc:79:fc:c5:cd:51:53:67:5d:d2:52:92:f6:45:b0: 50:96:30:c4:56:7b:59:7b:f8:12:0c:8f:a2:ab:f6: 28:1e:e3:15:50:b2:3f:51:1b:0a:1b:09:0e:e7:a6: 16:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:56:0A:3B:B2:78:E0:E6:01:44:A2:75:19:9A:D9:B5:9E:62:E6:8E X509v3 Authority Key Identifier: keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:97:40:f3:cf:9a:cd:19:f3:b5:15:0a:34:e0:f1:c8:a1:56: c8:8d:4d:d4:50:a2:1e:32:44:39:ec:5d:d7:e7:f6:8d:73:b8: 34:7c:f8:ff:b3:f4:7c:cb:b5:20:f7:28:aa:12:5b:56:92:84: 9a:f9:a0:91:f3:00:ce:d7:bd:0d:2f:63:f7:31:ea:2c:ef:e9: a0:c4:db:72:95:1e:16:18:21:74:79:98:2b:61:8d:2f:ec:e5: 3f:6c:72:7b:11:17:88:8e:d2:a2:4c:34:81:8f:83:48:2c:6a: a6:3d:f3:a3:ed:f9:9b:3b:14:c8:21:34:93:18:5c:44:85:b3: 50:a3:b4:a3:7b:b2:32:54:64:ac:8e:ce:06:d3:47:c1:e8:e6: 9c:5a:c4:dd:74:06:5d:24:b6:7c:0c:85:f2:18:6f:e7:55:c7: 58:4b:96:93:0d:2a:f9:5a:c4:90:e8:1b:1f:b4:93:69:fb:3a: 74:c4:b6:37:7c:40:f8:c1:bf:1d:c0:48:6a:5d:17:72:a6:7f: 9f:ab:d3:f8:c2:d2:6b:60:b1:98:12:a4:7d:9b:8e:e9:46:b3: 29:8e:2f:13:89:c9:37:b4:4d:e4:1f:ce:08:45:69:72:6b:92: b0:0a:38:9e:77:47:9d:63:43:b7:a4:47:d9:4e:e1:54:5c:b7: 09:2c:33:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvy4jXnW+L00v34OiRQVGLGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjOWM0MDNhZDAwN2UyYTI0MmE2YjA5MDYxYTNjMWEzNjBh NjRkNWEwHhcNMjYwMTI1MDIwMTA5WhcNMjYwMTI2MDIwMTA5WjAzMTEwLwYDVQQD EygxODU2MGEzYmIyNzhlMGU2MDE0NGEyNzUxOTlhZDliNTllNjJlNjhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmqvcuBNZ47HVZohm6SyvL9R1RNi JRzCmpsvgwJPO+DWHYJmKayxwblea+vD7m7fytI+T2qdcApJJet010XyLwTatlk5 hpbszSdSQ7x7JWaBQhw6IL06erF6u0P/PM/Xn3wT+coFxorZHw39LUCr4xutvxLK veLdjL3jQfRTA9SlyLTIzrUPaW4jimVA8tjRooF2rvtBOGeDUYlYq+7xyYhpbJ/m yN53oNOBcqwRSPwof7X3DGUjGz/OjU8P+36uJ+nrLYyrB8sTOSeQ9GK5kSbcefzF zVFTZ13SUpL2RbBQljDEVntZe/gSDI+iq/YoHuMVULI/URsKGwkO56YW4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhWCjuyeODmAUSidRma2bWeYuaOMB8GA1UdIwQY MBaAFLycQDrQB+KiQqawkGGjwaNgpk1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQt ODhlNjgxNjI3MWY3LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQtODhlNjgxNjI3MWY3 LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeZdA88+a zRnztRUKNODxyKFWyI1N1FCiHjJEOexd1+f2jXO4NHz4/7P0fMu1IPcoqhJbVpKE mvmgkfMAzte9DS9j9zHqLO/poMTbcpUeFhghdHmYK2GNL+zlP2xyexEXiI7Sokw0 gY+DSCxqpj3zo+35mzsUyCE0kxhcRIWzUKO0o3uyMlRkrI7OBtNHwejmnFrE3XQG XSS2fAyF8hhv51XHWEuWkw0q+VrEkOgbH7STafs6dMS2N3xA+MG/HcBIal0XcqZ/ n6vT+MLSa2CxmBKkfZuO6UazKY4vE4nJN7RN5B/OCEVpcmuSsAo4nndHnWNDt6RH 2U7hVFy3CSwzmQ== -----END CERTIFICATE-----Generated at Sun Jan 25 12:42:47 2026 by rpki-client