This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft File: VzzskGOoh0GEGQiwxSl_zbtDlTA.mft (raw, json) Hash identifier: +kkWIm/dw/4TuvM0Q2W5RJJuLe17N3kCeFLKe7QxrdI= Subject key identifier: 2B:4D:BB:14:0E:7D:FF:91:71:A4:2A:05:96:72:74:11:2B:2E:70:D6 Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30 Certificate issuer: /CN=573cec9063a88741841908b0c5297fcdbb439530 Certificate serial: 019BF2AAF6D530C5B7DE7B9B4B625B4B16A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft Manifest number: FE Signing time: Sun 25 Jan 2026 01:00:49 +0000 Manifest this update: Sun 25 Jan 2026 01:00:49 +0000 Manifest next update: Mon 26 Jan 2026 01:00:49 +0000 Files and hashes: 1: VzzskGOoh0GEGQiwxSl_zbtDlTA.crl (hash: UvrWxNwovKP36QvC+zuOJbw+sSqbe2h+0W8uaYf8lnQ=) 2: sFBfSSEwiyS0ygmkCruy8_1YRIE.roa (hash: 4EunHb1+zsKxtS/WLEJozWmgDLf80+fe8Qd3r1EEC+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:aa:f6:d5:30:c5:b7:de:7b:9b:4b:62:5b:4b:16:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530 Validity Not Before: Jan 25 01:00:49 2026 GMT Not After : Jan 26 01:00:49 2026 GMT Subject: CN=2b4dbb140e7dff9171a42a05967274112b2e70d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a6:3b:50:2b:97:31:f5:33:87:de:88:aa:f7: d0:86:47:b3:7f:b0:90:9d:dd:a6:95:84:cb:fd:db: d3:f1:02:68:60:34:02:b9:d9:05:f1:0c:9d:b8:02: 3e:d9:bf:a0:49:f1:ef:5f:b5:b6:74:a1:0b:f2:9d: d9:b4:24:98:5c:3a:a5:05:29:d8:79:0d:bf:fa:1f: e4:ab:fd:89:c5:32:79:43:8a:a1:66:fd:79:57:eb: df:f2:c8:c1:e0:86:c2:a9:6f:d9:be:8e:f4:b3:3f: 28:76:27:85:12:84:9f:8d:23:4f:b1:e1:b8:b3:71: e4:1d:d3:e6:33:51:a0:88:05:e3:12:4b:40:e3:d9: 16:12:00:ab:67:53:73:15:0e:23:5f:4d:da:b0:e4: 1b:d1:e7:03:f7:05:ae:fc:5f:de:1b:65:bf:14:d5: cd:88:d6:94:1e:9f:ce:d9:44:36:4a:db:a1:77:4d: 30:6c:c3:52:0e:e7:95:54:ec:d7:47:80:39:b2:ea: fe:22:8a:48:e8:eb:98:33:78:af:79:c4:9a:0e:63: 25:b8:7d:37:dc:84:c0:3f:5c:db:fd:cc:af:de:ee: 74:a4:98:e9:88:3f:d2:cd:6a:4e:59:97:fb:43:4e: 58:93:72:91:c2:ab:9c:4c:c8:9a:85:45:60:10:49: 76:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:4D:BB:14:0E:7D:FF:91:71:A4:2A:05:96:72:74:11:2B:2E:70:D6 X509v3 Authority Key Identifier: keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a9:06:9b:2f:66:3b:39:d1:5c:50:92:fc:0c:95:fb:4c:df: ff:b1:79:04:a3:6d:a0:27:e2:e8:9e:49:79:57:ef:8f:d3:d8: eb:6a:4e:a3:b5:17:df:28:55:3a:ea:a1:38:3a:cb:ea:c4:02: be:df:e6:59:ba:e3:ba:51:ac:6b:08:82:06:a7:2f:24:d0:00: ae:96:08:79:a5:e6:b8:60:1b:a3:eb:ec:f0:4d:42:78:96:03: 27:9e:ae:8a:ea:c5:de:e7:67:f8:26:28:dd:c1:cb:a9:ef:1e: c9:9b:6e:60:4c:40:b1:8d:6b:55:e0:a4:3b:3d:8e:01:fb:39: c5:ad:5d:b3:ef:21:85:70:99:0c:b3:29:f3:bb:4b:dc:90:05: 65:01:72:b3:69:5c:bd:a0:22:1c:41:6d:68:0d:49:6a:31:0b: fc:a7:c8:fc:41:69:a6:5b:09:ee:f4:7f:d5:ca:cb:12:a9:06: 0a:d6:6d:0b:c1:12:71:b3:fd:2c:db:f8:75:80:1d:8a:07:86: 21:9d:a1:ce:dc:4d:81:45:c3:bc:92:93:91:d0:98:e2:7e:a6: e0:d2:f3:cf:f5:89:51:bb:07:cb:96:0e:5a:db:5c:a6:9b:c6: 58:6a:03:f2:6d:19:ed:8b:4a:a5:a1:51:f6:3f:bc:d2:db:de: f5:ee:4f:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqvbVMMW33nubS2JbSxaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3M2NlYzkwNjNhODg3NDE4NDE5MDhiMGM1Mjk3ZmNkYmI0 Mzk1MzAwHhcNMjYwMTI1MDEwMDQ5WhcNMjYwMTI2MDEwMDQ5WjAzMTEwLwYDVQQD EygyYjRkYmIxNDBlN2RmZjkxNzFhNDJhMDU5NjcyNzQxMTJiMmU3MGQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6Y7UCuXMfUzh96IqvfQhkezf7CQ nd2mlYTL/dvT8QJoYDQCudkF8QyduAI+2b+gSfHvX7W2dKEL8p3ZtCSYXDqlBSnY eQ2/+h/kq/2JxTJ5Q4qhZv15V+vf8sjB4IbCqW/Zvo70sz8odieFEoSfjSNPseG4 s3HkHdPmM1GgiAXjEktA49kWEgCrZ1NzFQ4jX03asOQb0ecD9wWu/F/eG2W/FNXN iNaUHp/O2UQ2Stuhd00wbMNSDueVVOzXR4A5sur+IopI6OuYM3ivecSaDmMluH03 3ITAP1zb/cyv3u50pJjpiD/SzWpOWZf7Q05Yk3KRwqucTMiahUVgEEl2lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCtNuxQOff+RcaQqBZZydBErLnDWMB8GA1UdIwQY MBaAFFc87JBjqIdBhBkIsMUpf827Q5UwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEt NTQ1NGU1YTE2ZjQyLzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEtNTQ1NGU1YTE2ZjQy LzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFakGmy9m OznRXFCS/AyV+0zf/7F5BKNtoCfi6J5JeVfvj9PY62pOo7UX3yhVOuqhODrL6sQC vt/mWbrjulGsawiCBqcvJNAArpYIeaXmuGAbo+vs8E1CeJYDJ56uiurF3udn+CYo 3cHLqe8eyZtuYExAsY1rVeCkOz2OAfs5xa1ds+8hhXCZDLMp87tL3JAFZQFys2lc vaAiHEFtaA1JajEL/KfI/EFpplsJ7vR/1crLEqkGCtZtC8EScbP9LNv4dYAdigeG IZ2hztxNgUXDvJKTkdCY4n6m4NLzz/WJUbsHy5YOWttcppvGWGoD8m0Z7YtKpaFR 9j+80tve9e5P5g== -----END CERTIFICATE-----Generated at Sun Jan 25 11:45:37 2026 by rpki-client