This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json) Hash identifier: 9atYm9o31jrrz/i+IcQfG0m77hCA2whzmUQHXEuAX4A= Subject key identifier: C6:1D:30:E5:E7:44:80:05:6D:8E:C5:3B:28:96:70:F0:25:77:F2:9B Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24 Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624 Certificate serial: 019BF4633265D01553BA63762D2AF6AF4062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft Manifest number: 061E Signing time: Sun 25 Jan 2026 09:01:40 +0000 Manifest this update: Sun 25 Jan 2026 09:01:40 +0000 Manifest next update: Mon 26 Jan 2026 09:01:40 +0000 Files and hashes: 1: oj97Ng3JgLvsyAIw1yTVTtpM69s.roa (hash: vIQENoGSkGXr7OaQKpDZcQK7eabU4UndqxZJRNZu8JU=) 2: r113hOesw4Xd_yEaqFZzRYfSE7Y.roa (hash: tedMkLnP1L9n55ZYcISog8S1/Qbay3SL1Z2VckbCsdI=) 3: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: Fak2iGMVqyXLEoIdXqercCdy8PMi1Vq35Ku+GBqIkfY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:63:32:65:d0:15:53:ba:63:76:2d:2a:f6:af:40:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624 Validity Not Before: Jan 25 09:01:40 2026 GMT Not After : Jan 26 09:01:40 2026 GMT Subject: CN=c61d30e5e74480056d8ec53b289670f02577f29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a1:76:ec:25:ec:6e:28:59:10:ec:bd:f9:1a: 14:8b:9b:65:78:56:b7:ce:76:22:e1:16:03:b0:3f: 76:32:81:05:c6:7a:6f:ed:9d:33:b1:76:6e:a9:f7: 22:10:d2:45:af:8a:f9:38:c2:17:bf:fe:8c:98:11: f8:4a:f4:ff:d3:5e:98:fa:33:70:a6:38:35:7e:bb: 54:97:99:0f:da:a9:2c:68:b5:d4:ab:69:f9:d0:d7: 24:3e:2d:49:0a:17:6a:49:ad:02:94:de:3b:a0:0e: 06:d7:a0:c9:d2:d2:fb:59:6f:42:62:ef:81:a6:d4: 9d:3a:b8:38:23:84:f9:22:00:44:e2:35:41:d5:fc: ba:7d:29:31:a5:f1:58:bf:ee:c6:fa:3e:3f:35:6e: 6e:75:96:67:43:73:2a:a0:4d:30:9c:a7:27:12:7c: 0d:25:79:da:62:37:ee:48:2d:9e:83:98:3c:66:10: 13:59:ce:78:7e:b1:78:73:c2:b8:e7:a8:e5:c2:79: 99:95:c1:e4:73:12:94:ed:dd:3e:c8:73:57:e5:7a: c5:9a:db:05:05:87:a0:56:ac:d2:d3:af:ae:26:bf: eb:8f:04:c9:18:d6:55:84:7f:b6:d7:49:f8:5f:83: 60:e1:9f:01:93:79:33:5f:ce:9a:d3:e9:e2:a1:81: 7a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:1D:30:E5:E7:44:80:05:6D:8E:C5:3B:28:96:70:F0:25:77:F2:9B X509v3 Authority Key Identifier: keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:32:2d:4e:07:43:a3:41:63:1a:8d:9f:5a:4f:19:80:b7:9c: b1:70:73:43:2e:e2:12:28:32:65:9b:af:83:d7:e8:86:06:7a: 22:e5:6d:eb:54:dd:f9:13:44:b2:97:38:66:8a:20:2a:22:27: 3c:db:cc:e9:87:51:69:4d:fc:9f:84:93:61:2d:95:bb:73:23: ec:18:5f:b3:b4:88:30:1c:6c:28:00:09:33:58:f9:43:7b:1d: a6:4d:d7:8c:04:a6:b3:ab:34:24:5c:7e:db:c5:f7:c4:26:57: b9:63:bf:63:03:3b:2c:70:81:d9:51:d6:dc:40:a1:c7:4f:31: 70:75:6d:4e:01:1b:03:39:04:f5:cb:d8:aa:a6:54:c1:8d:52: 5d:9b:be:0f:ca:54:ab:9e:8d:af:fb:e8:b2:7c:0e:b9:d5:3f: af:bf:53:7f:06:3f:56:38:82:1d:c4:fe:95:49:c3:e0:13:72: e3:53:2c:8d:d9:38:b5:ec:b0:6c:06:c9:be:67:ae:a6:a1:a6: 9b:a3:9f:4b:c9:c3:f3:e8:db:f2:c9:fe:fa:6b:56:18:b9:a0: 30:b5:1b:90:59:0a:13:d7:fd:2a:80:78:03:45:1e:63:70:bc: d0:bb:3f:f9:d0:5a:c8:99:0e:bc:72:52:26:7f:30:3e:c1:b9: 44:f2:e0:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YzJl0BVTumN2LSr2r0BiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkMDYzZDk0NGJiODFmYzMxY2JhMTE0OTlkZDAwNmViNGVj ZTk2MjQwHhcNMjYwMTI1MDkwMTQwWhcNMjYwMTI2MDkwMTQwWjAzMTEwLwYDVQQD EyhjNjFkMzBlNWU3NDQ4MDA1NmQ4ZWM1M2IyODk2NzBmMDI1NzdmMjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KF27CXsbihZEOy9+RoUi5tleFa3 znYi4RYDsD92MoEFxnpv7Z0zsXZuqfciENJFr4r5OMIXv/6MmBH4SvT/016Y+jNw pjg1frtUl5kP2qksaLXUq2n50NckPi1JChdqSa0ClN47oA4G16DJ0tL7WW9CYu+B ptSdOrg4I4T5IgBE4jVB1fy6fSkxpfFYv+7G+j4/NW5udZZnQ3MqoE0wnKcnEnwN JXnaYjfuSC2eg5g8ZhATWc54frF4c8K456jlwnmZlcHkcxKU7d0+yHNX5XrFmtsF BYegVqzS06+uJr/rjwTJGNZVhH+210n4X4Ng4Z8Bk3kzX86a0+nioYF6VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMYdMOXnRIAFbY7FOyiWcPAld/KbMB8GA1UdIwQY MBaAFL0GPZRLuB/DHLoRSZ3QButOzpYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lYmZjM2QtNTRmYy00NjQzLWJlNTYt ZWE3MGEyOWM3NmYwLzEvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZS9lYmZjM2QtNTRmYy00NjQzLWJlNTYtZWE3MGEyOWM3NmYw LzEvdlFZOWxFdTRIOE1jdWhGSm5kQUc2MDdPbGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojItTgdD o0FjGo2fWk8ZgLecsXBzQy7iEigyZZuvg9fohgZ6IuVt61Td+RNEspc4ZoogKiIn PNvM6YdRaU38n4STYS2Vu3Mj7Bhfs7SIMBxsKAAJM1j5Q3sdpk3XjASms6s0JFx+ 28X3xCZXuWO/YwM7LHCB2VHW3EChx08xcHVtTgEbAzkE9cvYqqZUwY1SXZu+D8pU q56Nr/vosnwOudU/r79TfwY/VjiCHcT+lUnD4BNy41Msjdk4teywbAbJvmeupqGm m6OfS8nD8+jb8sn++mtWGLmgMLUbkFkKE9f9KoB4A0UeY3C80Ls/+dBayJkOvHJS Jn8wPsG5RPLgpw== -----END CERTIFICATE-----Generated at Sun Jan 25 20:32:18 2026 by rpki-client