This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft File: VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json) Hash identifier: BbhAduaOksRfrKZk9JpwrOIg7BvRqHKB3MTqZI9VFRk= Subject key identifier: B8:E7:C9:79:3C:1E:87:4C:E5:24:BA:6F:26:17:5D:06:C7:95:6D:8E Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F Certificate issuer: /CN=56c107a13d5807b792f7a557b2fbad58f944a19f Certificate serial: 019BF619CD645E8B851D2300F8F658E6C62F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft Manifest number: 1013 Signing time: Sun 25 Jan 2026 17:00:44 +0000 Manifest this update: Sun 25 Jan 2026 17:00:44 +0000 Manifest next update: Mon 26 Jan 2026 17:00:44 +0000 Files and hashes: 1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: L2GcYZ95Yq6bE1TYL4JYjyIoNY6xjsEhIpj/IxL0huY=) 2: qwRgsQyWceddvM_GZ0mcBzGmfsw.roa (hash: u5m7OeUQAJztt6tYqPBa102kwAghmU7lU7GBR2CQZGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:cd:64:5e:8b:85:1d:23:00:f8:f6:58:e6:c6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f Validity Not Before: Jan 25 17:00:44 2026 GMT Not After : Jan 26 17:00:44 2026 GMT Subject: CN=b8e7c9793c1e874ce524ba6f26175d06c7956d8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4a:da:56:ea:61:00:76:15:1f:88:70:a4:75: 23:ee:ac:a2:6c:73:df:ef:98:60:94:a8:96:78:68: 13:78:76:ea:26:18:49:5d:76:79:1a:e6:dc:f6:2e: 7a:45:b1:cf:1e:f5:9e:ed:62:95:f2:d2:f0:68:9f: fa:25:06:76:77:a6:1d:23:82:cf:db:69:32:3a:7e: a9:60:5f:70:ac:5e:60:07:3e:26:d2:1b:e9:da:d3: f1:0f:f5:74:b1:ef:4a:13:58:df:05:b1:c0:fd:e8: ef:80:20:8b:ef:b7:92:6b:42:54:a0:aa:68:b1:c2: 20:a8:21:d4:4f:ab:4e:20:c9:be:0e:3a:05:97:04: 98:1f:df:6f:92:89:4c:7f:86:b4:6b:7e:46:44:4b: 16:51:02:35:8e:0e:77:2a:f4:ad:29:e4:6a:9d:10: 03:b3:fd:51:43:8a:98:b1:2b:60:b3:4b:77:60:c6: 23:9e:39:47:14:c3:55:96:5c:46:53:70:09:83:3f: a9:36:a0:82:00:3b:95:e5:dd:2c:e0:6a:52:97:4b: d5:e7:c6:0e:c3:a8:a4:a1:a7:be:03:f9:b1:79:43: 44:fd:a1:fb:ac:85:7e:fc:1a:e0:79:e1:03:8a:1b: 28:6e:c4:ae:17:80:be:cf:1a:92:86:bc:bf:14:17: d5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E7:C9:79:3C:1E:87:4C:E5:24:BA:6F:26:17:5D:06:C7:95:6D:8E X509v3 Authority Key Identifier: keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:dc:73:12:21:e8:7d:c7:34:77:71:39:69:96:9c:c5:7f:79: 9e:b7:82:5e:e4:09:ef:d1:c5:d5:9b:94:5b:f2:8a:bc:29:da: 7f:86:7d:7f:d6:a2:fd:d1:44:d2:3e:8a:35:e5:3e:3c:06:1a: 57:51:9a:0f:cf:87:ce:c1:e2:0a:c7:cd:77:7a:8c:2c:cd:0c: 7a:28:a8:ce:a5:d9:1e:4e:c3:03:b4:e0:67:33:c6:7b:01:5a: 4a:27:82:17:26:08:7a:76:ad:75:6f:7b:dc:c4:a2:69:5b:37: be:0b:f3:1c:d6:c8:a8:f8:e4:ea:2e:16:4b:eb:a9:56:01:28: 85:c9:15:ef:1a:c2:b7:61:35:42:4f:9a:8f:43:9a:8f:2e:0a: 8a:9f:aa:69:b0:9b:64:ae:ec:4d:f0:cd:b6:9b:1e:f3:4e:10: 78:46:4d:86:c4:6d:95:23:e6:2c:5f:49:91:97:5c:61:85:57: f0:81:b9:7f:39:6f:68:49:44:77:92:ed:ff:a0:9a:1e:5a:a6: 29:b8:1f:a1:0c:3f:05:dd:e2:c6:46:ff:05:e5:7e:da:01:dd: f8:ab:72:9f:65:5d:17:b4:de:80:08:fd:dd:88:40:29:96:d9: 87:0e:42:68:93:84:87:ed:d3:44:c2:57:f9:b5:1a:13:95:e2: 1b:ee:86:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Gc1kXouFHSMA+PZY5sYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2YzEwN2ExM2Q1ODA3Yjc5MmY3YTU1N2IyZmJhZDU4Zjk0 NGExOWYwHhcNMjYwMTI1MTcwMDQ0WhcNMjYwMTI2MTcwMDQ0WjAzMTEwLwYDVQQD EyhiOGU3Yzk3OTNjMWU4NzRjZTUyNGJhNmYyNjE3NWQwNmM3OTU2ZDhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEraVuphAHYVH4hwpHUj7qyibHPf 75hglKiWeGgTeHbqJhhJXXZ5Gubc9i56RbHPHvWe7WKV8tLwaJ/6JQZ2d6YdI4LP 22kyOn6pYF9wrF5gBz4m0hvp2tPxD/V0se9KE1jfBbHA/ejvgCCL77eSa0JUoKpo scIgqCHUT6tOIMm+DjoFlwSYH99vkolMf4a0a35GREsWUQI1jg53KvStKeRqnRAD s/1RQ4qYsStgs0t3YMYjnjlHFMNVllxGU3AJgz+pNqCCADuV5d0s4GpSl0vV58YO w6ikoae+A/mxeUNE/aH7rIV+/BrgeeEDihsobsSuF4C+zxqShry/FBfVGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLjnyXk8HodM5SS6byYXXQbHlW2OMB8GA1UdIwQY MBaAFFbBB6E9WAe3kvelV7L7rVj5RKGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUt ZjMwZTE3NDU0ZTRiLzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUtZjMwZTE3NDU0ZTRi LzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtxzEiHo fcc0d3E5aZacxX95nreCXuQJ79HF1ZuUW/KKvCnaf4Z9f9ai/dFE0j6KNeU+PAYa V1GaD8+HzsHiCsfNd3qMLM0MeiiozqXZHk7DA7TgZzPGewFaSieCFyYIenatdW97 3MSiaVs3vgvzHNbIqPjk6i4WS+upVgEohckV7xrCt2E1Qk+aj0Oajy4Kip+qabCb ZK7sTfDNtpse804QeEZNhsRtlSPmLF9JkZdcYYVX8IG5fzlvaElEd5Lt/6CaHlqm KbgfoQw/Bd3ixkb/BeV+2gHd+Ktyn2VdF7TegAj93YhAKZbZhw5CaJOEh+3TRMJX +bUaE5XiG+6G+w== -----END CERTIFICATE-----Generated at Mon Jan 26 00:19:29 2026 by rpki-client