This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft File: VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json) Hash identifier: Ej3YgTAYM2mxefV8f7unZ6AC8hRTFHQOBAfXLsvLzfA= Subject key identifier: 6C:03:88:5B:79:C6:BD:5D:54:BF:7A:F0:12:00:C4:48:87:6F:EB:E0 Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51 Certificate issuer: /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351 Certificate serial: 019BF8769BB72B3CEEE9A108A0D0FE1AB968 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 04:01:21 +0000 Manifest this update: Mon 26 Jan 2026 04:01:21 +0000 Manifest next update: Tue 27 Jan 2026 04:01:21 +0000 Files and hashes: 1: H72aDLmziajxH7j-buUE4Es0RIo.roa (hash: hI4MdmQURw2gDSqP3qZ28v2HkIRtU1OHtdMVA31r6DE=) 2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: sNyz+M+aPKQdfN5Huojj3L9gVRmEys1czMrc24DZNDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:9b:b7:2b:3c:ee:e9:a1:08:a0:d0:fe:1a:b9:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351 Validity Not Before: Jan 26 04:01:21 2026 GMT Not After : Jan 27 04:01:21 2026 GMT Subject: CN=6c03885b79c6bd5d54bf7af01200c448876febe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:83:c5:40:2d:57:91:1b:eb:7c:c3:d6:38:9c: 0e:9d:2f:45:77:0c:62:9a:73:e9:db:15:6f:70:0e: 38:20:93:77:ea:88:f0:5b:30:cd:7d:93:6e:a8:3f: d2:b3:19:00:04:67:4f:ea:bf:4c:df:76:a3:51:d5: 0d:a3:da:6f:3e:26:a6:a3:71:7d:59:41:44:f7:67: f1:f5:36:57:16:eb:6b:60:90:1e:c4:da:e3:f4:c7: 9a:31:1c:42:e5:20:3d:a6:f0:ea:09:d8:21:7e:20: fd:6a:d7:f2:21:df:03:08:80:9c:d8:59:0b:45:ce: 2f:19:7b:b1:fd:a8:88:0d:35:8e:99:d2:e6:77:a0: f8:5e:25:67:ea:5a:39:a2:d4:21:8e:e5:18:75:5a: 7a:2b:fd:75:5f:1a:f8:88:85:0f:75:27:21:3f:3e: 47:78:88:c6:60:71:21:12:6b:a4:21:4a:90:3c:f9: 8b:64:09:76:59:f6:b0:69:ab:ca:05:53:0f:4f:d8: 50:b9:dd:62:a1:56:7d:93:35:70:b9:43:87:93:3e: 7e:8d:28:a5:80:c8:68:7a:d2:80:ce:21:cc:67:39: b3:67:90:d2:62:d4:0e:96:24:78:e4:93:d9:12:5f: ca:4a:cf:0d:b3:12:a5:43:1c:4f:8d:c3:ae:6d:e6: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:03:88:5B:79:C6:BD:5D:54:BF:7A:F0:12:00:C4:48:87:6F:EB:E0 X509v3 Authority Key Identifier: keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:45:3b:41:40:f3:e0:8e:14:57:d5:6a:18:a8:da:76:ad:6a: c9:e2:e2:d7:de:73:71:9c:9b:b6:ad:cd:3c:a8:0c:77:12:14: 7b:22:c7:bb:d2:91:fb:29:df:54:60:31:cd:93:ad:58:47:03: b2:34:92:c9:f1:c9:e9:26:4c:2d:2a:e5:50:64:67:8e:6d:4e: 53:8e:84:15:5a:7a:de:db:89:2e:f7:13:68:f5:0a:d4:92:51: 53:b8:f5:88:17:ac:ad:44:32:83:08:87:c6:04:f1:b8:66:a9: 74:bf:c6:6f:77:af:da:eb:a4:0c:41:61:eb:6a:36:58:d1:cf: 7c:92:ea:37:65:30:ae:30:64:ba:9b:aa:95:27:50:5b:a5:49: 49:df:67:aa:03:6c:6a:c0:3f:7d:6d:80:5b:b5:63:57:c1:30: 76:4e:7c:d3:49:2e:fb:73:1c:49:79:00:bb:ef:ad:49:19:6a: 0d:f9:9f:be:b0:21:de:b6:20:33:e0:02:cd:13:59:a6:4b:90: 2f:f4:1d:b8:7f:b8:a5:51:bc:7d:4e:f7:0b:d5:9a:b3:0c:ee: a4:4a:37:9f:09:e7:75:a0:cd:b7:43:5f:3d:32:44:3e:81:fc: cc:2e:c0:79:35:b2:50:58:f5:bc:9e:59:3e:58:ac:20:c4:8f: 77:cc:5c:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dpu3Kzzu6aEIoND+GrloMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YjRiZmNkMDE2NGFkN2M2Njg4YWYyMjI0NmM4MmUxOTk1 ZGQzNTEwHhcNMjYwMTI2MDQwMTIxWhcNMjYwMTI3MDQwMTIxWjAzMTEwLwYDVQQD Eyg2YzAzODg1Yjc5YzZiZDVkNTRiZjdhZjAxMjAwYzQ0ODg3NmZlYmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IPFQC1XkRvrfMPWOJwOnS9Fdwxi mnPp2xVvcA44IJN36ojwWzDNfZNuqD/SsxkABGdP6r9M33ajUdUNo9pvPiamo3F9 WUFE92fx9TZXFutrYJAexNrj9MeaMRxC5SA9pvDqCdghfiD9atfyId8DCICc2FkL Rc4vGXux/aiIDTWOmdLmd6D4XiVn6lo5otQhjuUYdVp6K/11Xxr4iIUPdSchPz5H eIjGYHEhEmukIUqQPPmLZAl2WfawaavKBVMPT9hQud1ioVZ9kzVwuUOHkz5+jSil gMhoetKAziHMZzmzZ5DSYtQOliR45JPZEl/KSs8NsxKlQxxPjcOubeYZbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGwDiFt5xr1dVL968BIAxEiHb+vgMB8GA1UdIwQY MBaAFFa0v80BZK18ZoivIiRsguGZXdNRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9lMDNlMGYtZjNhNi00YzU1LWFkZGQt MjQxNjY1ZjQ5ZDI1LzEvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9lMDNlMGYtZjNhNi00YzU1LWFkZGQtMjQxNjY1ZjQ5ZDI1 LzEvVnJTX3pRRmtyWHhtaUs4aUpHeUM0WmxkMDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiUU7QUDz 4I4UV9VqGKjadq1qyeLi195zcZybtq3NPKgMdxIUeyLHu9KR+ynfVGAxzZOtWEcD sjSSyfHJ6SZMLSrlUGRnjm1OU46EFVp63tuJLvcTaPUK1JJRU7j1iBesrUQygwiH xgTxuGapdL/Gb3ev2uukDEFh62o2WNHPfJLqN2UwrjBkupuqlSdQW6VJSd9nqgNs asA/fW2AW7VjV8Ewdk5800ku+3McSXkAu++tSRlqDfmfvrAh3rYgM+ACzRNZpkuQ L/QduH+4pVG8fU73C9WaswzupEo3nwnndaDNt0NfPTJEPoH8zC7AeTWyUFj1vJ5Z PlisIMSPd8xc+g== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:51 2026 by rpki-client