This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json) Hash identifier: TaWOUyVipTraTe2MTbMxDOJJETKXxIKm0HIsS3LRISk= Subject key identifier: 04:DC:B3:C3:36:6A:29:D0:87:35:61:27:C6:CD:36:38:7F:1C:FC:81 Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa Certificate serial: 019BF5750B35DD54FD29D5478A7EB9C13974 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft Manifest number: 097F Signing time: Sun 25 Jan 2026 14:00:47 +0000 Manifest this update: Sun 25 Jan 2026 14:00:47 +0000 Manifest next update: Mon 26 Jan 2026 14:00:47 +0000 Files and hashes: 1: gOX8D8p806A5CJ7mpndk-EXr948.roa (hash: 2sz6qMSJk6TSCV4AbeeKZkEdeqE+n55SbpZkpDDbX6E=) 2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: m2eQWz/jR7/cHVg7dZUwWqty9VAG2W3FP4b3gwwzd8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 14:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:0b:35:dd:54:fd:29:d5:47:8a:7e:b9:c1:39:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa Validity Not Before: Jan 25 14:00:47 2026 GMT Not After : Jan 26 14:00:47 2026 GMT Subject: CN=04dcb3c3366a29d087356127c6cd36387f1cfc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:05:7c:9b:dd:b4:04:f7:18:7f:b1:09:56:1e: 81:fc:33:e2:72:75:04:21:20:0e:6a:d8:4c:48:e4: 84:9e:bd:b9:0f:dc:2d:1f:7e:9f:6d:ea:51:d8:75: bc:cc:e5:87:20:33:a5:97:e2:3e:93:21:a0:ec:80: 58:40:30:84:8a:c3:c1:53:65:39:18:8a:75:a6:0b: d9:57:08:91:40:f4:4f:7c:e1:2a:d6:cf:4e:56:e7: ca:d5:7a:3c:d3:24:43:f2:39:a6:3b:98:13:1b:39: b3:2e:97:38:61:06:d5:5d:8c:5f:60:9f:9a:f5:7b: fc:a3:78:d2:83:eb:5c:8e:e2:44:11:bd:40:33:14: 62:c5:5c:76:c7:ae:6e:4f:85:e9:3f:39:48:f8:a9: e8:cd:a3:e6:9b:70:24:07:7c:0c:8f:0e:22:72:e2: ca:53:4f:44:24:f5:75:21:3e:da:1f:8c:ef:75:53: f8:ac:cf:39:f1:fd:8c:82:4a:5f:d2:d9:19:e3:ba: 9d:22:c1:52:51:72:ca:fe:ff:8c:3c:cb:4d:60:06: e6:9a:10:f7:b7:5b:b9:df:27:de:5c:e0:13:a3:b8: ec:e2:a0:af:2a:ae:20:9b:fb:c8:bb:76:62:89:07: a2:e0:62:c3:c1:2c:87:46:6e:be:7e:79:4b:8e:52: b7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:DC:B3:C3:36:6A:29:D0:87:35:61:27:C6:CD:36:38:7F:1C:FC:81 X509v3 Authority Key Identifier: keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:27:da:15:57:38:49:00:63:66:08:ed:6e:fa:03:d6:07:86: 3e:67:83:ea:e2:76:1b:67:c4:ea:44:88:a1:7e:41:28:99:ae: 17:6c:2b:f4:a3:6e:7d:79:fd:f4:6e:fe:98:14:76:fb:fa:bb: c1:b8:ca:19:7c:27:25:14:f4:ad:8e:5d:13:38:79:34:f2:c0: 1d:54:08:a5:06:aa:a3:ba:57:9c:dc:26:d0:08:31:d3:74:1b: 58:57:fc:ad:2f:7d:12:52:63:51:d3:d2:ff:e8:9e:dd:c1:1c: 8d:87:5a:ad:d4:30:3e:a3:02:d2:9b:bd:4c:66:a3:5c:f0:24: 91:aa:61:f3:99:ad:78:cf:17:f4:1e:61:be:bf:ed:0f:6d:8e: 4d:f2:e0:13:55:2e:78:f9:ef:fc:ff:55:1c:e5:99:24:6e:d9: d9:e6:d8:9b:86:3a:d8:5f:67:ed:e6:38:d0:a6:15:bb:e1:1f: 7a:e1:d3:27:55:d2:6d:be:d9:bc:4c:ca:a2:c5:bc:51:30:cf: 90:47:ad:26:0e:e6:14:28:bb:5a:fb:62:38:7d:d9:e0:8c:6a: 2f:43:51:49:e0:42:58:ca:a7:28:e7:4b:23:bb:5c:e8:20:f5: a7:d8:9a:d5:59:f8:01:a8:4c:c8:7b:c7:0a:0c:a8:88:0e:a4: 79:58:1f:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dQs13VT9KdVHin65wTl0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOTBiYzNlMzcxMTQwYjQyYTIxZDY5N2Q4MzAwZDk0MTBh MjQ5YWEwHhcNMjYwMTI1MTQwMDQ3WhcNMjYwMTI2MTQwMDQ3WjAzMTEwLwYDVQQD EygwNGRjYjNjMzM2NmEyOWQwODczNTYxMjdjNmNkMzYzODdmMWNmYzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAV8m920BPcYf7EJVh6B/DPicnUE ISAOathMSOSEnr25D9wtH36fbepR2HW8zOWHIDOll+I+kyGg7IBYQDCEisPBU2U5 GIp1pgvZVwiRQPRPfOEq1s9OVufK1Xo80yRD8jmmO5gTGzmzLpc4YQbVXYxfYJ+a 9Xv8o3jSg+tcjuJEEb1AMxRixVx2x65uT4XpPzlI+KnozaPmm3AkB3wMjw4icuLK U09EJPV1IT7aH4zvdVP4rM858f2Mgkpf0tkZ47qdIsFSUXLK/v+MPMtNYAbmmhD3 t1u53yfeXOATo7js4qCvKq4gm/vIu3ZiiQei4GLDwSyHRm6+fnlLjlK3XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATcs8M2ainQhzVhJ8bNNjh/HPyBMB8GA1UdIwQY MBaAFL2QvD43EUC0KiHWl9gwDZQQokmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODct ZmViMGU1MTVjMDJjLzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODctZmViMGU1MTVjMDJj LzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyfaFVc4 SQBjZgjtbvoD1geGPmeD6uJ2G2fE6kSIoX5BKJmuF2wr9KNufXn99G7+mBR2+/q7 wbjKGXwnJRT0rY5dEzh5NPLAHVQIpQaqo7pXnNwm0Agx03QbWFf8rS99ElJjUdPS /+ie3cEcjYdardQwPqMC0pu9TGajXPAkkaph85mteM8X9B5hvr/tD22OTfLgE1Uu ePnv/P9VHOWZJG7Z2ebYm4Y62F9n7eY40KYVu+EfeuHTJ1XSbb7ZvEzKosW8UTDP kEetJg7mFCi7WvtiOH3Z4IxqL0NRSeBCWMqnKOdLI7tc6CD1p9ia1Vn4AahMyHvH CgyoiA6keVgfdw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:27:04 2026 by rpki-client