This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json) Hash identifier: O0f6QkOjEeCqKWf+HqgIQPe6jurNyB8KGajA6Rfn99U= Subject key identifier: 66:6B:FE:C1:59:4C:68:CD:2F:28:AA:0C:BC:20:83:60:4A:D8:E5:83 Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f Certificate serial: 019BF5ABC93F8AFEDD5647D371C368D41CDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 15:00:34 +0000 Manifest this update: Sun 25 Jan 2026 15:00:34 +0000 Manifest next update: Mon 26 Jan 2026 15:00:34 +0000 Files and hashes: 1: 2gOMElZpuYjYWwfxZPDkr57xubA.roa (hash: VyukPCJwz31E+u5Ce9cCzwq/Lsn1oqGSgyO+hsnU0ek=) 2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: GVoHU2RMd/43nMnKp5ONNHZbu4ovBwx8uTVwroZEwEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c9:3f:8a:fe:dd:56:47:d3:71:c3:68:d4:1c:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f Validity Not Before: Jan 25 15:00:34 2026 GMT Not After : Jan 26 15:00:34 2026 GMT Subject: CN=666bfec1594c68cd2f28aa0cbc2083604ad8e583 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d4:f6:d8:c2:1c:0e:9f:9b:2f:08:d4:92:5b: 84:fb:f6:ea:88:d9:bd:1f:40:93:b2:90:8e:67:ec: 6d:63:67:84:3f:27:a3:bd:eb:82:6d:93:3d:08:fc: 36:51:00:f3:99:60:74:d5:56:99:71:fa:05:8d:51: b5:8e:23:fb:e6:4a:00:fc:ff:28:f9:fa:0e:a3:83: f2:83:1c:ea:60:fd:89:f3:1f:6b:67:30:23:0e:f0: 5b:72:7e:af:29:d1:bc:78:5e:a7:aa:31:c2:35:93: 7a:6f:2a:0c:58:5e:2d:8e:73:73:d0:68:5d:51:0c: 9f:5d:b3:02:5e:11:a5:10:8f:ed:e9:bb:a8:b0:ad: ab:f1:8a:96:1d:66:ab:95:88:f5:81:65:3e:87:5b: 6d:9a:8c:28:eb:1e:bf:4d:c5:1f:da:b0:9e:72:a0: 3c:b2:24:5f:5d:46:5a:79:1c:6f:7f:6e:4b:8b:46: 27:b4:1f:a9:11:e8:73:1e:f1:71:5b:25:99:62:9c: 20:01:a5:f0:af:44:a8:b6:6b:0a:e9:ec:fd:e2:20: 38:61:58:0d:ae:02:df:8e:bd:4d:db:d5:1d:74:92: 65:9d:3a:11:06:ce:9e:af:c1:4d:f4:a4:6a:6a:14: 6f:a6:5c:8a:97:71:f0:b9:bd:b6:cb:30:7c:49:16: 16:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:6B:FE:C1:59:4C:68:CD:2F:28:AA:0C:BC:20:83:60:4A:D8:E5:83 X509v3 Authority Key Identifier: keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:09:29:1b:73:b6:e4:18:26:fa:66:98:0f:57:9a:a8:0a:06: 67:e3:30:30:e6:a6:30:4f:49:da:90:22:d0:49:ec:09:39:cf: 5b:aa:65:47:dd:c9:c8:08:f9:a0:6d:d9:ce:97:13:c4:03:f4: 5b:4d:e1:d5:03:d3:a0:d8:b1:b6:e7:36:1c:ac:dc:0a:7f:df: 47:79:44:f9:1e:32:25:0b:89:63:16:59:b6:10:cd:b2:23:17: e3:b9:c3:e9:09:95:7b:db:d2:11:db:78:6d:70:68:c6:45:05: 36:58:31:3c:40:a5:79:c8:66:c6:74:cf:37:50:bd:3f:cf:95: 30:e5:84:b4:d7:89:fe:be:b3:0c:4e:6d:f2:30:87:c0:2a:01: a3:6a:ce:31:f4:bc:27:7e:eb:20:74:34:db:b9:2c:cb:9d:21: 08:d1:5b:aa:d7:d8:63:52:d1:96:6b:93:88:fd:d8:38:9b:d9: d4:b1:8c:4a:43:bd:a3:89:9e:af:18:1e:c2:f1:d1:82:9b:1b: 65:f4:cf:50:85:9f:8a:32:fd:08:ad:23:48:dc:2d:31:dd:40: 79:a8:71:1f:7f:ac:76:17:0d:68:9e:c6:fb:ea:f8:1a:1d:a2: a3:84:c5:4e:35:ea:26:66:b0:28:60:63:5e:f2:44:c2:09:7b: 1f:91:f2:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8k/iv7dVkfTccNo1BzfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlZGI2YTRlZDM5M2Q4YTNiNzUwN2Y5NmEzOGJlZTBjNGM4 YjQ3N2YwHhcNMjYwMTI1MTUwMDM0WhcNMjYwMTI2MTUwMDM0WjAzMTEwLwYDVQQD Eyg2NjZiZmVjMTU5NGM2OGNkMmYyOGFhMGNiYzIwODM2MDRhZDhlNTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dT22MIcDp+bLwjUkluE+/bqiNm9 H0CTspCOZ+xtY2eEPyejveuCbZM9CPw2UQDzmWB01VaZcfoFjVG1jiP75koA/P8o +foOo4PygxzqYP2J8x9rZzAjDvBbcn6vKdG8eF6nqjHCNZN6byoMWF4tjnNz0Ghd UQyfXbMCXhGlEI/t6buosK2r8YqWHWarlYj1gWU+h1ttmowo6x6/TcUf2rCecqA8 siRfXUZaeRxvf25Li0YntB+pEehzHvFxWyWZYpwgAaXwr0SotmsK6ez94iA4YVgN rgLfjr1N29UddJJlnToRBs6er8FN9KRqahRvplyKl3Hwub22yzB8SRYWmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGZr/sFZTGjNLyiqDLwgg2BK2OWDMB8GA1UdIwQY MBaAFL7bak7Tk9ijt1B/lqOL7gxMi0d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYt NDcwYTkzYjNkM2U3LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kNDYzNWYtMjE5NS00ZDk0LThkMTYtNDcwYTkzYjNkM2U3 LzEvdnR0cVR0T1QyS08zVUgtV280dnVERXlMUjM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAkpG3O2 5Bgm+maYD1eaqAoGZ+MwMOamME9J2pAi0EnsCTnPW6plR93JyAj5oG3ZzpcTxAP0 W03h1QPToNixtuc2HKzcCn/fR3lE+R4yJQuJYxZZthDNsiMX47nD6QmVe9vSEdt4 bXBoxkUFNlgxPEClechmxnTPN1C9P8+VMOWEtNeJ/r6zDE5t8jCHwCoBo2rOMfS8 J37rIHQ027ksy50hCNFbqtfYY1LRlmuTiP3YOJvZ1LGMSkO9o4merxgewvHRgpsb ZfTPUIWfijL9CK0jSNwtMd1AeahxH3+sdhcNaJ7G++r4Gh2io4TFTjXqJmawKGBj XvJEwgl7H5HycA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:45 2026 by rpki-client