This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft File: v-V8w9sYQEcMc6CWBdGH172Vlcs.mft (raw, json) Hash identifier: oOczBoBurIApCnomlpS0ZNIkD3Dg6zeHUkFLOkjuolM= Subject key identifier: 08:BB:BC:43:1D:42:BA:C5:72:C1:33:9E:2E:20:0B:F4:BB:BB:17:5B Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB Certificate issuer: /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb Certificate serial: 019BF83FADD9677B511992AEE7168B5E8428 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 03:01:21 +0000 Manifest this update: Mon 26 Jan 2026 03:01:21 +0000 Manifest next update: Tue 27 Jan 2026 03:01:21 +0000 Files and hashes: 1: 2ikB92Z1YZga53T_5TgPbCYNO2U.roa (hash: 6LYS7/XU1c9VFgwkPm/Cq36EgEjl8++/LJln5tJD5X8=) 2: v-V8w9sYQEcMc6CWBdGH172Vlcs.crl (hash: y10y0I037yGW8UQBFDN6nNV77uVL/++Xn26xkTQg56I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:ad:d9:67:7b:51:19:92:ae:e7:16:8b:5e:84:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb Validity Not Before: Jan 26 03:01:21 2026 GMT Not After : Jan 27 03:01:21 2026 GMT Subject: CN=08bbbc431d42bac572c1339e2e200bf4bbbb175b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2b:77:05:f3:b4:26:47:64:8c:4d:26:bc:65: a1:82:c2:db:a8:55:66:77:08:66:f6:10:8a:e7:72: e9:5c:ae:77:3b:d2:49:b1:89:98:95:32:b4:05:fa: 37:60:02:e4:71:5a:ed:68:41:64:50:6c:3e:19:56: d9:70:52:1e:34:b6:32:60:f4:3e:23:2e:94:8f:f3: 34:02:c6:4c:72:b6:b6:42:69:5b:cb:cd:45:e6:32: ed:0a:b7:60:f0:6a:5c:3a:93:2b:87:39:d1:46:bd: 32:0f:18:26:bb:17:fa:66:f9:4a:b9:c8:88:91:85: 71:69:d9:64:ac:a6:29:00:26:bf:47:63:cd:57:bf: 30:4f:f0:de:d9:5d:eb:b5:14:94:d4:1e:bc:ae:27: 3b:85:3a:d3:0e:23:e8:39:a5:81:13:f8:6d:2b:2f: 57:e4:db:fb:39:84:28:a6:61:0d:48:79:02:c6:b1: 5d:75:f1:10:d9:29:3a:0a:47:f3:f5:b9:15:22:19: cc:0a:a8:86:df:50:24:11:53:0f:8e:da:61:c5:5d: 9f:04:1a:28:c7:43:7b:46:2f:17:a4:0e:16:de:9d: 44:56:0c:47:1e:fe:fd:ff:d0:c3:53:a9:cd:e2:17: 26:0c:5b:68:90:d6:da:4d:1b:a6:9c:5d:e8:07:fb: 4c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BB:BC:43:1D:42:BA:C5:72:C1:33:9E:2E:20:0B:F4:BB:BB:17:5B X509v3 Authority Key Identifier: keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f4:42:8a:2a:cc:d2:db:c7:70:5e:60:ba:30:2e:e0:02:43: 42:6f:13:8f:c9:0d:1d:48:de:95:0e:05:15:a2:ea:53:9c:eb: 81:82:8f:32:11:73:01:bf:a8:04:b3:a0:35:fb:c2:fc:c3:87: ae:64:8e:1b:f9:9a:0f:d5:5b:1b:72:18:bc:75:2c:67:e3:7a: e6:53:65:5b:7f:c2:c1:fa:d9:98:53:f7:98:3b:da:6e:88:13: 2b:ed:1c:3b:80:a0:f1:38:bd:c0:ff:f8:51:dc:87:eb:f4:4f: 9d:ce:71:68:15:71:ec:48:fe:e1:9e:26:5c:89:34:ca:10:a1: 88:ff:38:15:72:56:29:d0:0c:8d:8d:04:58:36:d2:2a:cb:3e: eb:e9:c8:91:00:df:14:b5:f8:57:28:c6:76:07:6c:c7:5a:47: 21:47:2c:9a:91:93:e5:61:ae:f5:1b:5e:50:47:9c:32:aa:97: 32:8e:46:98:35:25:d6:4b:44:24:3d:34:59:58:8c:bc:fe:24: 3e:60:72:23:9d:f1:5e:16:cb:d0:70:dc:fc:8f:8b:d0:0b:59: dd:7c:29:8f:ab:82:33:73:a5:93:42:1c:90:2b:b9:dc:84:fd: 8d:54:e9:e4:77:1a:6e:51:8b:11:bf:76:4a:f7:93:cb:ae:05: 52:73:3d:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P63ZZ3tRGZKu5xaLXoQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTU3Y2MzZGIxODQwNDcwYzczYTA5NjA1ZDE4N2Q3YmQ5 NTk1Y2IwHhcNMjYwMTI2MDMwMTIxWhcNMjYwMTI3MDMwMTIxWjAzMTEwLwYDVQQD EygwOGJiYmM0MzFkNDJiYWM1NzJjMTMzOWUyZTIwMGJmNGJiYmIxNzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyt3BfO0JkdkjE0mvGWhgsLbqFVm dwhm9hCK53LpXK53O9JJsYmYlTK0Bfo3YALkcVrtaEFkUGw+GVbZcFIeNLYyYPQ+ Iy6Uj/M0AsZMcra2Qmlby81F5jLtCrdg8GpcOpMrhznRRr0yDxgmuxf6ZvlKuciI kYVxadlkrKYpACa/R2PNV78wT/De2V3rtRSU1B68ric7hTrTDiPoOaWBE/htKy9X 5Nv7OYQopmENSHkCxrFddfEQ2Sk6Ckfz9bkVIhnMCqiG31AkEVMPjtphxV2fBBoo x0N7Ri8XpA4W3p1EVgxHHv79/9DDU6nN4hcmDFtokNbaTRumnF3oB/tMawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAi7vEMdQrrFcsEzni4gC/S7uxdbMB8GA1UdIwQY MBaAFL/lfMPbGEBHDHOglgXRh9e9lZXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEt MGEyNzVhNjc2M2NlLzEvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEtMGEyNzVhNjc2M2Nl LzEvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPRCiirM 0tvHcF5gujAu4AJDQm8Tj8kNHUjelQ4FFaLqU5zrgYKPMhFzAb+oBLOgNfvC/MOH rmSOG/maD9VbG3IYvHUsZ+N65lNlW3/CwfrZmFP3mDvabogTK+0cO4Cg8Ti9wP/4 UdyH6/RPnc5xaBVx7Ej+4Z4mXIk0yhChiP84FXJWKdAMjY0EWDbSKss+6+nIkQDf FLX4VyjGdgdsx1pHIUcsmpGT5WGu9RteUEecMqqXMo5GmDUl1ktEJD00WViMvP4k PmByI53xXhbL0HDc/I+L0AtZ3Xwpj6uCM3Olk0IckCu53IT9jVTp5HcablGLEb92 SveTy64FUnM9BQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:40 2026 by rpki-client