This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft File: VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json) Hash identifier: hep+dCnYdbznLR8NBcg8/vI/Xv7OZc4mXdjJrOBubR4= Subject key identifier: DE:78:31:79:78:1C:D9:FD:3B:F3:37:4D:28:46:7E:04:82:39:7D:6C Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 Certificate issuer: /CN=547841eeff20c78b33d411dae51a692adb892e31 Certificate serial: 019BF7637076F67B06B33F785EAACB319E14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft Manifest number: 0CF9 Signing time: Sun 25 Jan 2026 23:00:47 +0000 Manifest this update: Sun 25 Jan 2026 23:00:47 +0000 Manifest next update: Mon 26 Jan 2026 23:00:47 +0000 Files and hashes: 1: M-FsfGOycf9jYfp9tqtSOE1tveg.roa (hash: KbWLzZCgilO6OBGCbfqwG+EF0N+c9KwghmXNtRevPUA=) 2: OC1nyRt0bfVZANX8lUlsmij_SRQ.roa (hash: Rdwkl90u1nSZHEd8rY7u8aTFZGWKHVXtuaJS4W++hPQ=) 3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: EIIDD8d717stBuAz9RI73U2LncOsptnAGzj3VUFSlgo=) 4: VdXuk6Srl_KiWlPIXVl9CuQOU5I.roa (hash: LHcWGrhhqmQEefD63qRAeICnBie6NA3TujUcOgPmo8Q=) 5: X8URGrQy5lQVgKZucRbyZdlIJ0A.roa (hash: v3GGPEKUSmn7q4SXBMTsOj2RRQGTLoKv6ZyqiXOL8do=) 6: tEALMFY5mRNnPeI1w2B4fh6s5fw.roa (hash: OpvOgmRGG0JJ9f1GQilIMwIzyL+4wnLk8rAzuKjlbwM=) 7: tM3rrLe-_dhZ0LqNTWbRHwcH0a0.roa (hash: mCMHaaXhfT9VeDu9M4tgELO+5HgeDqSNi4Gr5v6WmTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:70:76:f6:7b:06:b3:3f:78:5e:aa:cb:31:9e:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31 Validity Not Before: Jan 25 23:00:47 2026 GMT Not After : Jan 26 23:00:47 2026 GMT Subject: CN=de783179781cd9fd3bf3374d28467e0482397d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:62:c2:9a:a7:ca:e9:ac:6d:34:44:3f:47:f9: 35:be:d2:c2:c7:ea:e0:3a:e0:8e:7b:dc:cf:f9:ad: 2a:69:9f:7f:54:e3:70:cc:e2:83:4b:ac:f9:44:9a: 08:0a:bf:cd:67:2b:bd:2e:4d:34:a3:4f:69:15:7c: bf:43:6f:43:b8:86:8f:58:92:26:91:0b:9b:85:dd: 97:e3:8f:ac:42:c4:f8:b6:13:30:8b:1f:a9:9d:63: 16:99:7f:64:1f:0a:b3:e4:c2:9c:b0:fd:cc:54:48: 1f:f8:40:81:34:c3:b0:fb:88:59:07:cf:b4:bf:b2: 78:a4:df:29:de:1b:33:be:c5:bf:07:bd:a3:7f:43: 46:84:f4:72:e5:20:31:26:94:c9:06:41:dd:44:88: 71:fb:dd:13:32:57:ea:13:ff:01:d3:e3:03:83:68: 2a:f5:da:0b:2f:4c:1d:4a:42:02:a8:7d:98:ce:7c: de:dc:f8:53:12:a5:c6:13:17:30:b8:4b:08:87:8d: 9b:55:31:88:0d:d2:f3:8e:8e:de:dc:f7:eb:22:97: 2c:5c:65:16:10:b8:e6:e9:d4:10:0e:de:d2:5f:3c: fb:1d:ca:2d:7d:e1:eb:4a:7a:86:27:07:c8:c4:12: e7:e5:f3:40:aa:34:06:50:37:78:8f:15:7e:31:2b: d3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:78:31:79:78:1C:D9:FD:3B:F3:37:4D:28:46:7E:04:82:39:7D:6C X509v3 Authority Key Identifier: keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7d:c0:61:25:e7:70:1d:91:d0:a2:87:2a:22:64:fe:8f:b4: 06:3b:77:b8:05:9f:43:13:d3:92:20:6a:af:b9:92:e8:67:dc: 5c:ac:26:75:6c:7d:72:26:f9:8e:5c:a4:49:28:42:2f:3c:68: cd:d0:a0:dc:f9:59:53:0d:6a:97:0a:ba:7c:51:ad:ae:67:b9: 0f:20:e8:0d:23:a3:33:5c:a6:23:b1:8b:dc:41:56:b9:70:16: 19:37:b5:e2:dc:90:b7:7d:90:a8:cf:bd:ae:a2:ef:33:10:7f: 7e:0b:13:de:7e:8c:34:bd:d7:b8:2c:f0:f7:ab:7a:d3:64:09: 75:1f:b4:e1:c1:4f:1c:34:13:d7:ee:55:90:cf:38:00:a5:13: 13:44:64:70:69:4f:81:91:39:35:70:5c:d1:ea:11:59:f6:84: e7:f9:0f:ee:96:13:d6:85:f3:61:47:e6:d7:3b:ae:14:b9:72: 5e:68:a2:7c:88:9f:73:c9:8c:12:6b:58:14:12:15:c1:77:ec: 88:1d:a8:f0:64:2d:88:dc:e9:23:bf:e4:98:1f:14:f9:4b:f0: 42:e3:5b:a5:41:e5:8b:7b:1e:56:40:68:08:1b:4a:38:dc:22: 15:c6:0f:25:05:ee:4e:74:ab:fd:f4:dc:1a:41:6a:4b:11:1d: fe:46:21:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y3B29nsGsz94XqrLMZ4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4 OTJlMzEwHhcNMjYwMTI1MjMwMDQ3WhcNMjYwMTI2MjMwMDQ3WjAzMTEwLwYDVQQD EyhkZTc4MzE3OTc4MWNkOWZkM2JmMzM3NGQyODQ2N2UwNDgyMzk3ZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mLCmqfK6axtNEQ/R/k1vtLCx+rg OuCOe9zP+a0qaZ9/VONwzOKDS6z5RJoICr/NZyu9Lk00o09pFXy/Q29DuIaPWJIm kQubhd2X44+sQsT4thMwix+pnWMWmX9kHwqz5MKcsP3MVEgf+ECBNMOw+4hZB8+0 v7J4pN8p3hszvsW/B72jf0NGhPRy5SAxJpTJBkHdRIhx+90TMlfqE/8B0+MDg2gq 9doLL0wdSkICqH2Yznze3PhTEqXGExcwuEsIh42bVTGIDdLzjo7e3PfrIpcsXGUW ELjm6dQQDt7SXzz7HcotfeHrSnqGJwfIxBLn5fNAqjQGUDd4jxV+MSvT7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN54MXl4HNn9O/M3TShGfgSCOX1sMB8GA1UdIwQY MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt MzY2YmExNzAwZmUwLzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMn3AYSXn cB2R0KKHKiJk/o+0Bjt3uAWfQxPTkiBqr7mS6GfcXKwmdWx9cib5jlykSShCLzxo zdCg3PlZUw1qlwq6fFGtrme5DyDoDSOjM1ymI7GL3EFWuXAWGTe14tyQt32QqM+9 rqLvMxB/fgsT3n6MNL3XuCzw96t602QJdR+04cFPHDQT1+5VkM84AKUTE0RkcGlP gZE5NXBc0eoRWfaE5/kP7pYT1oXzYUfm1zuuFLlyXmiifIifc8mMEmtYFBIVwXfs iB2o8GQtiNzpI7/kmB8U+UvwQuNbpUHli3seVkBoCBtKONwiFcYPJQXuTnSr/fTc GkFqSxEd/kYhZw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:28 2026 by rpki-client