This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft File: VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json) Hash identifier: wAuooWQ4+jfUA8h39cW6hL1u8NxENDvohQgzNF7FQlw= Subject key identifier: 3E:5D:A0:CB:49:AE:58:15:F3:94:3C:73:98:A6:7F:7F:F2:DF:AF:F5 Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1 Certificate issuer: /CN=546de326de9522bd296bed482385c9769258d8f1 Certificate serial: 019BF6BEAEF1F65F07CDDAA76A230F4EF0E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft Manifest number: 0ED0 Signing time: Sun 25 Jan 2026 20:00:50 +0000 Manifest this update: Sun 25 Jan 2026 20:00:50 +0000 Manifest next update: Mon 26 Jan 2026 20:00:50 +0000 Files and hashes: 1: ApzBB8QQLMI_xsO48Jm3jxRXuhI.roa (hash: K+MZAh6Qr7nnvD9WoHZdULSDa2rCr8sl1Vr//Yn6JfU=) 2: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: sEv+l0osIP6+C/Mki5P5M02b64t7MgItgp6WdcsDBYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:ae:f1:f6:5f:07:cd:da:a7:6a:23:0f:4e:f0:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=546de326de9522bd296bed482385c9769258d8f1 Validity Not Before: Jan 25 20:00:50 2026 GMT Not After : Jan 26 20:00:50 2026 GMT Subject: CN=3e5da0cb49ae5815f3943c7398a67f7ff2dfaff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:12:9f:32:74:b5:b3:d9:96:a8:51:28:22:31: f6:bf:94:3f:61:d5:98:98:7c:30:97:5b:26:96:ee: 4a:a6:09:83:94:a3:36:0c:80:98:b6:25:cc:07:fd: bd:d3:23:18:3e:2e:e9:65:a0:72:54:65:03:0d:f1: 9a:7f:81:ff:6f:90:aa:92:50:6e:d1:22:0e:62:9a: 5b:90:0d:be:31:50:d0:05:cd:07:cc:64:79:20:a4: 72:1e:43:f2:e6:2b:ee:5b:a7:13:1a:fc:c2:ae:61: 6c:30:33:5b:fe:02:ed:d7:95:d5:0b:56:69:cf:52: 40:4b:0a:a0:81:f9:f5:dc:be:79:6b:a1:80:49:de: 45:73:a8:d3:db:d8:1f:0d:63:6a:d6:3b:17:64:fd: 44:65:a4:5a:6f:27:a9:18:60:cd:7a:4c:88:d1:12: d7:96:b7:21:d0:3e:49:48:4f:de:11:c7:eb:10:31: 42:32:5f:61:18:a2:19:ac:5a:28:3b:a1:b5:34:fd: 01:d1:15:ab:60:3d:75:98:a1:fe:94:cf:ea:2d:95: 8e:8f:88:9f:e8:14:d5:5c:9d:16:72:42:65:6e:81: 43:d8:13:b5:94:cb:95:db:1a:a0:d7:54:16:ef:58: e3:68:b8:24:4f:51:4e:52:3a:d1:20:c2:11:cc:ba: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:5D:A0:CB:49:AE:58:15:F3:94:3C:73:98:A6:7F:7F:F2:DF:AF:F5 X509v3 Authority Key Identifier: keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:04:45:06:12:26:fd:07:7b:3e:f5:75:d2:db:69:09:bb:2b: 9d:ef:0d:f8:c1:a6:16:e3:d0:c7:7d:95:0e:bf:5c:c9:82:3d: 88:1a:0b:30:d2:a8:38:a6:73:28:31:43:a8:f6:56:6b:bb:7c: 4e:5a:15:aa:2c:f1:1f:c9:8f:89:d3:20:57:47:22:a5:49:af: d9:a8:dc:ad:81:7d:41:82:5a:20:8e:d0:1e:38:37:31:2b:cd: c5:10:e2:6c:06:2b:c2:aa:ac:44:01:8f:b3:7b:32:f9:85:a7: 85:18:5f:96:e7:96:42:d9:77:99:30:92:23:44:16:1c:83:3e: f2:86:72:52:75:15:ea:49:6f:a9:f2:90:51:4b:10:61:65:2b: ab:b9:d5:2a:ab:c7:e0:a9:e2:2d:e9:75:14:53:2c:2e:34:29: c6:0e:84:80:1c:d6:76:1d:10:37:97:42:36:ad:64:f1:15:6c: 32:e2:b6:b4:06:44:f0:e2:b0:f4:f8:44:1e:12:9a:c2:88:29: 8e:26:3e:1a:12:73:ff:7e:9a:71:d4:18:2b:7f:c0:67:34:b9: ad:97:b0:63:f2:b1:cd:81:46:5e:91:14:38:14:c4:77:6e:f8: 9c:d9:f4:61:54:65:22:94:2b:3d:d7:96:fe:80:ef:b5:ea:89: d4:89:96:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vq7x9l8HzdqnaiMPTvDhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NmRlMzI2ZGU5NTIyYmQyOTZiZWQ0ODIzODVjOTc2OTI1 OGQ4ZjEwHhcNMjYwMTI1MjAwMDUwWhcNMjYwMTI2MjAwMDUwWjAzMTEwLwYDVQQD EygzZTVkYTBjYjQ5YWU1ODE1ZjM5NDNjNzM5OGE2N2Y3ZmYyZGZhZmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhKfMnS1s9mWqFEoIjH2v5Q/YdWY mHwwl1smlu5KpgmDlKM2DICYtiXMB/290yMYPi7pZaByVGUDDfGaf4H/b5CqklBu 0SIOYppbkA2+MVDQBc0HzGR5IKRyHkPy5ivuW6cTGvzCrmFsMDNb/gLt15XVC1Zp z1JASwqggfn13L55a6GASd5Fc6jT29gfDWNq1jsXZP1EZaRabyepGGDNekyI0RLX lrch0D5JSE/eEcfrEDFCMl9hGKIZrFooO6G1NP0B0RWrYD11mKH+lM/qLZWOj4if 6BTVXJ0WckJlboFD2BO1lMuV2xqg11QW71jjaLgkT1FOUjrRIMIRzLohfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5doMtJrlgV85Q8c5imf3/y36/1MB8GA1UdIwQY MBaAFFRt4ybelSK9KWvtSCOFyXaSWNjxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8xYmFkN2UtY2Y1Yy00ZDFjLTg2NGEt NDkzNzYwMWM4ZmVhLzEvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8xYmFkN2UtY2Y1Yy00ZDFjLTg2NGEtNDkzNzYwMWM4ZmVh LzEvVkczakp0NlZJcjBwYS0xSUk0WEpkcEpZMlBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowRFBhIm /Qd7PvV10ttpCbsrne8N+MGmFuPQx32VDr9cyYI9iBoLMNKoOKZzKDFDqPZWa7t8 TloVqizxH8mPidMgV0cipUmv2ajcrYF9QYJaII7QHjg3MSvNxRDibAYrwqqsRAGP s3sy+YWnhRhflueWQtl3mTCSI0QWHIM+8oZyUnUV6klvqfKQUUsQYWUrq7nVKqvH 4KniLel1FFMsLjQpxg6EgBzWdh0QN5dCNq1k8RVsMuK2tAZE8OKw9PhEHhKawogp jiY+GhJz/36acdQYK3/AZzS5rZewY/KxzYFGXpEUOBTEd274nNn0YVRlIpQrPdeW /oDvteqJ1ImW0w== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:24 2026 by rpki-client