This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft File: vK-LpZ96PF0A_grUVk2AUk33-pA.mft (raw, json) Hash identifier: 0Mlal+zvqPiA+96v26/2zCdxCCvmmbKzSSKCks4wILA= Subject key identifier: 99:35:D0:E3:29:77:8D:E8:56:23:EE:0B:64:9D:77:90:B4:D5:62:23 Authority key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90 Certificate issuer: /CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90 Certificate serial: 019BF72D5A5CDC95460E31BB0D840A0D4C87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft Manifest number: 17E6 Signing time: Sun 25 Jan 2026 22:01:43 +0000 Manifest this update: Sun 25 Jan 2026 22:01:43 +0000 Manifest next update: Mon 26 Jan 2026 22:01:43 +0000 Files and hashes: 1: JH9XT1NUV14_SKsiiCKlHziQ9DM.roa (hash: 04vIJ1yQ8bNTRGDpE43oQ18qFJ2VyqPCHwJQW+bmQgI=) 2: vK-LpZ96PF0A_grUVk2AUk33-pA.crl (hash: FhAcBlWAciOphWCTaQ7YOCbcuFrsoPPpNAQdMkRNzYI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:5a:5c:dc:95:46:0e:31:bb:0d:84:0a:0d:4c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90 Validity Not Before: Jan 25 22:01:43 2026 GMT Not After : Jan 26 22:01:43 2026 GMT Subject: CN=9935d0e329778de85623ee0b649d7790b4d56223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c9:e2:b9:98:d5:5e:6b:a8:28:cf:0c:cd:d4: c3:42:b6:58:01:22:71:35:f5:f4:d7:39:6d:b2:52: 0f:40:27:a3:db:76:1b:f9:f2:3c:84:10:95:8f:61: dd:fd:0c:3c:01:61:f0:31:7c:8c:2c:ab:cf:af:fe: 4b:f8:73:05:07:96:00:d4:ae:45:f9:ef:cf:fb:e0: 0d:35:de:5f:7f:7b:02:d7:98:8a:8b:4a:83:45:d7: 74:30:e6:25:fd:fb:30:b4:e9:d8:a3:45:6f:c4:14: a1:31:dd:92:64:e8:a7:25:9f:a7:2b:2c:a5:01:72: c0:e3:87:22:01:50:00:2d:ce:9d:bb:b7:69:d0:6e: 8f:99:b0:40:7e:0f:d3:ed:e9:c2:30:e4:15:a4:d6: f2:0b:9e:ad:ba:f4:c9:6e:96:7a:73:00:cc:af:58: 4a:f4:28:c8:f0:5b:88:35:aa:ff:c4:3e:3b:10:7b: 79:0b:3c:3c:60:1c:83:5a:9f:d2:06:23:ca:8f:e6: f9:7a:1a:6c:57:ba:f5:e2:1d:eb:b2:d0:96:59:64: 68:04:1b:11:7c:51:2e:1c:1d:a6:3d:28:55:82:bd: 01:40:fe:26:69:c4:01:d8:b8:a2:d7:ef:a6:83:6c: 08:54:75:62:b4:91:e3:28:5d:f1:bd:b5:8c:71:ef: f9:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:35:D0:E3:29:77:8D:E8:56:23:EE:0B:64:9D:77:90:B4:D5:62:23 X509v3 Authority Key Identifier: keyid:BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:8a:68:ed:cc:22:4c:e5:8b:85:67:ae:01:0d:9a:5d:ad:b7: f8:72:52:5a:3d:b6:4a:99:5e:a9:b6:d5:15:44:be:59:bb:f1: 03:18:54:e7:d9:dd:36:53:ea:9f:a5:dd:da:e2:29:48:c1:c3: a9:23:b5:f0:9f:c8:62:53:9f:4b:43:f2:6c:49:6a:83:bb:23: a8:ee:7e:55:2a:69:5a:e3:e6:d1:42:71:b0:db:b3:11:b2:2a: a9:67:77:50:04:c5:07:8a:52:36:0c:b2:74:52:4c:76:0f:d4: 04:7b:52:38:3e:45:26:76:b1:0f:34:ee:cb:62:e1:16:73:de: 13:eb:98:9f:e3:5a:8c:ff:68:b1:41:fa:e1:93:16:10:af:8f: 54:76:c8:28:f8:08:a3:2d:2e:ce:e0:b6:e4:5b:a7:62:71:d7: f3:1e:3e:24:7d:7e:11:ee:9b:9f:e2:a7:1e:ac:79:3f:67:dc: 64:1b:4b:ed:bb:c5:a5:42:93:37:58:6e:e2:30:0a:cf:75:08: 80:97:e9:80:c2:e4:45:df:55:e2:12:47:4e:8d:af:cc:e5:96: b9:66:24:be:cb:b3:90:1a:89:e1:80:c6:35:9a:01:32:42:22: 87:4f:2b:95:05:26:3c:a1:10:c5:0c:9e:b7:cb:85:1c:a5:7f: 51:f3:0c:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LVpc3JVGDjG7DYQKDUyHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjYWY4YmE1OWY3YTNjNWQwMGZlMGFkNDU2NGQ4MDUyNGRm N2ZhOTAwHhcNMjYwMTI1MjIwMTQzWhcNMjYwMTI2MjIwMTQzWjAzMTEwLwYDVQQD Eyg5OTM1ZDBlMzI5Nzc4ZGU4NTYyM2VlMGI2NDlkNzc5MGI0ZDU2MjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcniuZjVXmuoKM8MzdTDQrZYASJx NfX01zltslIPQCej23Yb+fI8hBCVj2Hd/Qw8AWHwMXyMLKvPr/5L+HMFB5YA1K5F +e/P++ANNd5ff3sC15iKi0qDRdd0MOYl/fswtOnYo0VvxBShMd2SZOinJZ+nKyyl AXLA44ciAVAALc6du7dp0G6PmbBAfg/T7enCMOQVpNbyC56tuvTJbpZ6cwDMr1hK 9CjI8FuINar/xD47EHt5Czw8YByDWp/SBiPKj+b5ehpsV7r14h3rstCWWWRoBBsR fFEuHB2mPShVgr0BQP4macQB2Lii1++mg2wIVHVitJHjKF3xvbWMce/5AwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJk10OMpd43oViPuC2Sdd5C01WIjMB8GA1UdIwQY MBaAFLyvi6WfejxdAP4K1FZNgFJN9/qQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkstTHBaOTZQRjBBX2dyVVZrMkFVazMzLXBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9kMDdlOWUtMTMyYS00OGUyLTk1Mzgt OTAyYWVjNDQwNDY0LzEvdkstTHBaOTZQRjBBX2dyVVZrMkFVazMzLXBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9kMDdlOWUtMTMyYS00OGUyLTk1MzgtOTAyYWVjNDQwNDY0 LzEvdkstTHBaOTZQRjBBX2dyVVZrMkFVazMzLXBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzopo7cwi TOWLhWeuAQ2aXa23+HJSWj22SpleqbbVFUS+WbvxAxhU59ndNlPqn6Xd2uIpSMHD qSO18J/IYlOfS0PybElqg7sjqO5+VSppWuPm0UJxsNuzEbIqqWd3UATFB4pSNgyy dFJMdg/UBHtSOD5FJnaxDzTuy2LhFnPeE+uYn+NajP9osUH64ZMWEK+PVHbIKPgI oy0uzuC25FunYnHX8x4+JH1+Ee6bn+KnHqx5P2fcZBtL7bvFpUKTN1hu4jAKz3UI gJfpgMLkRd9V4hJHTo2vzOWWuWYkvsuzkBqJ4YDGNZoBMkIih08rlQUmPKEQxQye t8uFHKV/UfMMQQ== -----END CERTIFICATE-----Generated at Mon Jan 26 07:46:55 2026 by rpki-client