This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft File: VKDwgR-cJWN0RIqgFdd2knGCG_M.mft (raw, json) Hash identifier: Czb7J0kJVQcM+S956zOexIQDcuoBx31FbatjsLDf58s= Subject key identifier: 0A:57:85:76:D2:D8:D7:E3:3D:2F:43:70:AC:F0:63:EF:86:84:1F:45 Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 Certificate issuer: /CN=54a0f0811f9c256374448aa015d7769271821bf3 Certificate serial: 019BF4999988939A035FEE933508CACC98CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft Manifest number: 9D Signing time: Sun 25 Jan 2026 10:01:05 +0000 Manifest this update: Sun 25 Jan 2026 10:01:05 +0000 Manifest next update: Mon 26 Jan 2026 10:01:05 +0000 Files and hashes: 1: Be8ZE-3fUDOUREKbRltRl9iw1eI.roa (hash: ts/tUG1XY8HQ9PPvnRSU96o95po47vRKYvpi0JSwMOQ=) 2: JPN0ZhHYSvkn7r532xwlghazy8M.roa (hash: b6weq00B1xhN/jGEGOFPdub/LMTw7LxhTg6NLGhBKwY=) 3: UZH0fpr1tyUVaCTBDnjkP57r0fg.roa (hash: asbZ5HvBqKNvkMzm24LOBMXDZ+s4an0DuYC6LDjlSWE=) 4: VKDwgR-cJWN0RIqgFdd2knGCG_M.crl (hash: tE9vb67B5qEaNldrXfUGWqLxqUfLSYTrJ8Jxb00u0nI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:99:88:93:9a:03:5f:ee:93:35:08:ca:cc:98:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3 Validity Not Before: Jan 25 10:01:05 2026 GMT Not After : Jan 26 10:01:05 2026 GMT Subject: CN=0a578576d2d8d7e33d2f4370acf063ef86841f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:52:43:60:b6:a7:c8:35:ec:ab:04:7e:3e:0d: 3d:5e:71:1a:f1:97:64:45:09:2a:67:c8:11:ab:65: df:73:b4:66:82:69:71:2a:1c:a7:24:38:9f:c4:27: f1:77:a6:ce:19:22:d4:27:59:ef:d3:c4:83:e0:78: 0b:26:89:54:67:5b:e6:1e:42:ef:52:52:de:6d:39: d2:1f:f5:61:b7:6f:40:8d:43:13:8a:43:14:ff:3a: 1f:5d:1d:9f:7a:32:92:86:75:37:c2:f7:f2:b5:70: 92:e0:cd:fc:f4:97:03:f9:e0:df:36:b7:45:b8:c1: da:7a:b2:4f:ec:a8:ab:48:cd:42:2b:d1:b4:23:e8: 4a:28:1d:3c:ad:23:cb:6f:a7:3f:7d:6a:45:f3:1c: 83:48:e5:f1:47:7d:5c:62:71:3b:ad:73:d3:27:58: a2:60:34:39:4d:13:a7:0c:33:8c:f3:52:35:34:20: 81:b4:d6:42:e4:0e:e0:f5:15:63:1d:84:1b:3e:35: 98:55:d2:20:d5:9b:1a:66:81:1d:bd:2e:7a:03:96: ec:f0:07:e3:25:87:c6:0b:4f:d3:1c:eb:f4:17:06: 83:67:1f:48:5d:64:c5:cd:a7:f2:04:8f:b7:dc:d4: 8a:0f:cb:e0:f3:6a:5f:a1:50:03:c1:94:45:97:af: 43:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:57:85:76:D2:D8:D7:E3:3D:2F:43:70:AC:F0:63:EF:86:84:1F:45 X509v3 Authority Key Identifier: keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:f5:fd:f3:c8:a2:5c:e7:40:cb:23:65:3a:6d:a8:67:1e:d2: f8:e9:16:cd:0e:1c:40:99:d4:99:9c:8e:b6:25:f0:1e:55:2d: 70:ae:e1:6c:0e:cf:02:0f:b2:ec:d7:ca:64:eb:30:1e:03:22: 02:ad:d3:79:0f:2e:e8:af:4e:88:78:3a:2e:96:4c:59:a1:a0: 6e:c6:b7:52:3a:16:0c:6f:3c:23:d4:be:85:3b:78:4e:a2:bf: 2c:57:3c:90:1c:de:39:76:c1:b0:68:01:6a:01:75:26:e3:dd: bb:29:8b:e4:4d:38:c4:dc:66:10:cf:fd:7f:94:5f:df:0b:18: 4c:7a:b3:0d:16:5d:26:7b:b6:47:6e:bd:61:25:ef:c0:4b:ae: 07:60:52:59:25:a3:d6:6d:4e:a4:de:bb:35:a3:d6:ee:e6:24: 16:82:d2:b6:1a:33:63:7f:a8:bf:74:f1:cf:e2:6c:ae:2a:46: 7c:ce:1c:d9:ae:05:33:c4:de:f5:ad:9a:77:0f:e4:9b:89:c5: 61:8a:6e:3b:ce:6e:a4:f7:de:37:1e:3a:e3:4a:ac:b9:0b:ca: 09:3a:95:a1:d8:d8:bc:2c:af:23:e7:8f:38:5a:53:42:c4:13: 22:ff:8b:1a:98:bc:f8:fe:7a:ae:dd:08:e7:18:e3:52:21:a7: 18:96:17:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mZmIk5oDX+6TNQjKzJjPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTBmMDgxMWY5YzI1NjM3NDQ0OGFhMDE1ZDc3NjkyNzE4 MjFiZjMwHhcNMjYwMTI1MTAwMTA1WhcNMjYwMTI2MTAwMTA1WjAzMTEwLwYDVQQD EygwYTU3ODU3NmQyZDhkN2UzM2QyZjQzNzBhY2YwNjNlZjg2ODQxZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlJDYLanyDXsqwR+Pg09XnEa8Zdk RQkqZ8gRq2Xfc7RmgmlxKhynJDifxCfxd6bOGSLUJ1nv08SD4HgLJolUZ1vmHkLv UlLebTnSH/Vht29AjUMTikMU/zofXR2fejKShnU3wvfytXCS4M389JcD+eDfNrdF uMHaerJP7KirSM1CK9G0I+hKKB08rSPLb6c/fWpF8xyDSOXxR31cYnE7rXPTJ1ii YDQ5TROnDDOM81I1NCCBtNZC5A7g9RVjHYQbPjWYVdIg1ZsaZoEdvS56A5bs8Afj JYfGC0/THOv0FwaDZx9IXWTFzafyBI+33NSKD8vg82pfoVADwZRFl69DUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFApXhXbS2NfjPS9DcKzwY++GhB9FMB8GA1UdIwQY MBaAFFSg8IEfnCVjdESKoBXXdpJxghvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmIt MDI5NjRjNTBkMjEyLzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jYWU4YTctMDBkYS00ODczLWJmMmItMDI5NjRjNTBkMjEy LzEvVktEd2dSLWNKV04wUklxZ0ZkZDJrbkdDR19NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPX988ii XOdAyyNlOm2oZx7S+OkWzQ4cQJnUmZyOtiXwHlUtcK7hbA7PAg+y7NfKZOswHgMi Aq3TeQ8u6K9OiHg6LpZMWaGgbsa3UjoWDG88I9S+hTt4TqK/LFc8kBzeOXbBsGgB agF1JuPduymL5E04xNxmEM/9f5Rf3wsYTHqzDRZdJnu2R269YSXvwEuuB2BSWSWj 1m1OpN67NaPW7uYkFoLSthozY3+ov3Txz+JsripGfM4c2a4FM8Te9a2adw/km4nF YYpuO85upPfeNx4640qsuQvKCTqVodjYvCyvI+ePOFpTQsQTIv+LGpi8+P56rt0I 5xjjUiGnGJYXmQ== -----END CERTIFICATE-----Generated at Sun Jan 25 13:52:30 2026 by rpki-client