This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json) Hash identifier: xbngsMJH12T/Df3xDnrte/XFCK6yub/HZGpwBFanl2E= Subject key identifier: 8A:E1:69:E1:B6:24:51:04:A2:2D:85:B6:48:B6:51:C8:9A:EA:FF:5F Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78 Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78 Certificate serial: 019BF3BDA225535054EEDE15917362EB3301 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 06:00:49 +0000 Manifest this update: Sun 25 Jan 2026 06:00:49 +0000 Manifest next update: Mon 26 Jan 2026 06:00:49 +0000 Files and hashes: 1: Dnv-EV1F19e9aMG1L9dsaqy1C4Y.roa (hash: RrE3tRzsghSzPvz2h6aM81MCjghx1uCG0mdEiIujtTg=) 2: P8qRXIUXFRxLqpqPgoGyj2ksP4E.roa (hash: c/qoc2pQET/0jm2wOTLQC7x1KXfZ+jeD/PYJBR55Ebk=) 3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: khgHC252rHbvm5t7hH4Zbwq2XPC6FXChzCOLIHmgshg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:bd:a2:25:53:50:54:ee:de:15:91:73:62:eb:33:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78 Validity Not Before: Jan 25 06:00:49 2026 GMT Not After : Jan 26 06:00:49 2026 GMT Subject: CN=8ae169e1b6245104a22d85b648b651c89aeaff5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:82:ca:a3:14:2a:95:52:de:19:15:c0:9d:98: 65:20:79:ce:59:85:37:de:b6:93:d3:7b:0b:47:1c: 4f:c1:0f:6f:ec:81:d3:38:25:43:e0:1e:d1:6f:14: 2e:be:fe:26:54:8a:d6:37:dc:f0:98:28:1a:04:14: 5d:4c:b6:10:73:b0:8e:18:f5:bd:b1:22:aa:01:7d: 1f:fa:ed:a8:9c:51:d9:04:a6:ec:30:30:03:49:2a: 14:54:7d:b1:4b:42:5e:86:5a:b3:65:52:48:19:f0: ab:a4:48:4c:c0:a0:b5:7c:e4:87:e2:28:09:e0:05: 4d:f3:c2:e5:26:97:fe:8d:38:48:a7:a3:d1:35:72: 0c:c8:bd:12:7b:6e:5a:d9:e5:f8:98:66:63:9a:29: d8:ff:33:34:78:83:cd:71:aa:52:4c:84:c3:af:14: ad:de:93:73:5c:fa:91:d8:d9:b0:71:96:d4:25:6e: 5e:64:ef:b3:02:bb:f3:3d:f2:ee:0a:01:c7:ed:7d: ec:5c:e6:69:d5:2f:fb:0f:ea:df:74:ec:be:13:59: 37:44:11:32:e5:82:6f:be:ff:86:e8:5e:1d:c6:ad: 84:b0:6e:c7:7f:f8:f7:63:0c:8b:a6:4b:bd:a8:ec: b5:79:bb:3b:5b:12:d3:1b:e1:5a:08:ea:54:b7:d5: 27:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E1:69:E1:B6:24:51:04:A2:2D:85:B6:48:B6:51:C8:9A:EA:FF:5F X509v3 Authority Key Identifier: keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8f:de:f5:37:ce:7f:45:16:c8:f4:da:49:23:ad:7d:9c:cc: 94:14:d7:db:57:a5:9a:ba:f5:a6:0e:91:a9:f7:07:87:fd:aa: ec:16:43:96:06:4c:df:27:d9:d9:8b:fe:17:89:f7:88:76:89: 69:9c:1c:24:b7:7a:ef:7c:42:87:d2:e2:2f:6d:44:fc:85:6b: a9:a3:33:be:53:77:4e:16:d6:36:35:2b:fe:59:e0:97:09:a4: 18:f6:76:fb:8d:1b:59:8f:87:79:32:08:a6:cf:92:b1:2b:d2: 48:68:9e:61:35:96:fb:d0:c9:d8:e8:9f:9a:dd:98:eb:b0:59: 5a:1e:e5:9b:c8:19:46:51:3a:fa:34:55:e7:d4:f3:56:4b:77: 03:9b:04:91:27:fa:74:0c:9b:bc:b6:8b:7b:50:5d:05:cc:72: 4a:3a:50:2d:e3:e5:62:52:84:81:79:43:3c:8c:be:c5:d7:34: a9:78:f1:2a:f4:35:21:38:3e:19:07:f8:6d:f6:74:0b:76:51: 69:0b:3f:48:84:b5:5d:0d:c8:d5:52:4d:e6:1a:f7:37:55:47: ba:f7:50:ad:cd:77:ad:b2:56:e6:a4:b7:70:eb:44:81:99:84: 5b:4c:de:ff:fb:9c:41:7e:85:02:75:d9:a9:a2:fa:04:0e:41: bb:50:a5:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzvaIlU1BU7t4VkXNi6zMBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMzEyNDdmMzU5YTZkNDkyZGM5OTQzYWUwZjAwZmM4YmUy MTZjNzgwHhcNMjYwMTI1MDYwMDQ5WhcNMjYwMTI2MDYwMDQ5WjAzMTEwLwYDVQQD Eyg4YWUxNjllMWI2MjQ1MTA0YTIyZDg1YjY0OGI2NTFjODlhZWFmZjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44LKoxQqlVLeGRXAnZhlIHnOWYU3 3raT03sLRxxPwQ9v7IHTOCVD4B7RbxQuvv4mVIrWN9zwmCgaBBRdTLYQc7COGPW9 sSKqAX0f+u2onFHZBKbsMDADSSoUVH2xS0JehlqzZVJIGfCrpEhMwKC1fOSH4igJ 4AVN88LlJpf+jThIp6PRNXIMyL0Se25a2eX4mGZjminY/zM0eIPNcapSTITDrxSt 3pNzXPqR2NmwcZbUJW5eZO+zArvzPfLuCgHH7X3sXOZp1S/7D+rfdOy+E1k3RBEy 5YJvvv+G6F4dxq2EsG7Hf/j3YwyLpku9qOy1ebs7WxLTG+FaCOpUt9Un0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrhaeG2JFEEoi2Ftki2Ucia6v9fMB8GA1UdIwQY MBaAFLwxJH81mm1JLcmUOuDwD8i+IWx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQt NTY4MDVjYTExYzMzLzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC8zNDZiZWYtMGE1ZS00NDAwLTlmODQtNTY4MDVjYTExYzMz LzEvdkRFa2Z6V2FiVWt0eVpRNjRQQVB5TDRoYkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJY/e9TfO f0UWyPTaSSOtfZzMlBTX21elmrr1pg6RqfcHh/2q7BZDlgZM3yfZ2Yv+F4n3iHaJ aZwcJLd673xCh9LiL21E/IVrqaMzvlN3ThbWNjUr/lnglwmkGPZ2+40bWY+HeTII ps+SsSvSSGieYTWW+9DJ2Oifmt2Y67BZWh7lm8gZRlE6+jRV59TzVkt3A5sEkSf6 dAybvLaLe1BdBcxySjpQLePlYlKEgXlDPIy+xdc0qXjxKvQ1ITg+GQf4bfZ0C3ZR aQs/SIS1XQ3I1VJN5hr3N1VHuvdQrc13rbJW5qS3cOtEgZmEW0ze//ucQX6FAnXZ qaL6BA5Bu1CllQ== -----END CERTIFICATE-----Generated at Sun Jan 25 16:24:03 2026 by rpki-client