This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json) Hash identifier: XIM+Qm4j2zVzp+oB0IxSH0LO4Kih5LG2vWVFpzJ5Mgs= Subject key identifier: F8:53:DC:4F:CA:A6:3F:D4:EB:D8:3F:6B:86:E1:17:48:1E:33:8E:E5 Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4 Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4 Certificate serial: 019BF83F1129C563E163A983852C4FE94D0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft Manifest number: 17E8 Signing time: Mon 26 Jan 2026 03:00:41 +0000 Manifest this update: Mon 26 Jan 2026 03:00:41 +0000 Manifest next update: Tue 27 Jan 2026 03:00:41 +0000 Files and hashes: 1: KBM2JifvD2Vh2akJjDLpqYRnGis.roa (hash: qcaeJ9j6EbyDF5mQddzhEcOLSvwlN5hP0uXT449+ltQ=) 2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: EHqpso0chD6m0JhgS1Flbi/iHQ0+fo7iPSldYmyOcAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:11:29:c5:63:e1:63:a9:83:85:2c:4f:e9:4d:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4 Validity Not Before: Jan 26 03:00:41 2026 GMT Not After : Jan 27 03:00:41 2026 GMT Subject: CN=f853dc4fcaa63fd4ebd83f6b86e117481e338ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:6f:55:91:7d:41:0f:4a:c0:73:c2:b6:43:c3: bd:1e:3f:a5:12:6c:0c:cd:f1:bd:e1:7e:fc:90:cf: f5:57:08:12:5e:6d:c2:74:78:a2:7e:99:f8:27:14: f1:98:4a:58:60:83:8a:01:ab:7e:e1:1b:a3:8f:14: 07:3a:20:d0:88:b2:6e:6b:2e:ee:c3:69:3c:60:88: 1a:c7:34:14:46:33:83:bd:7b:71:9a:c1:4b:6c:67: 76:7c:b2:6a:9b:df:df:ab:dd:d8:2c:0c:75:9f:f2: c1:dc:76:0f:34:cb:d1:dc:f0:3d:fb:98:38:b8:eb: 96:44:e2:ab:1d:41:5b:63:0b:ab:35:17:4a:6f:35: 3a:f9:29:f6:d7:ad:55:b1:e2:62:ef:2e:91:eb:22: 81:c8:69:0f:d5:37:a1:10:73:78:42:37:4e:ce:59: 16:a9:15:d1:aa:dc:81:a6:23:6d:c3:cc:3c:e0:ef: ad:3d:53:51:4e:d5:79:c7:cf:29:8f:49:4c:06:0f: 0b:39:68:ea:30:d2:82:f9:75:5f:ac:e8:49:b0:5a: 4f:b2:f5:48:f2:f4:37:d8:16:b9:6d:14:b4:f8:cd: 36:77:de:ab:c2:ac:9e:e2:22:e4:fc:13:ae:43:e6: 2b:a9:83:94:93:f8:06:ea:a4:3c:47:73:bb:44:ae: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:53:DC:4F:CA:A6:3F:D4:EB:D8:3F:6B:86:E1:17:48:1E:33:8E:E5 X509v3 Authority Key Identifier: keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:f7:2f:10:3e:c0:47:dd:a7:35:d4:bc:43:8c:1d:4e:5b:b1: 7f:17:af:07:1c:41:38:38:e2:f8:61:f0:04:93:70:df:d9:20: 3e:a9:f4:03:da:fd:d3:1f:52:5b:5b:80:46:dd:5e:ec:f3:c7: ef:be:4b:a4:c1:07:d5:ae:4a:7e:55:0b:d6:81:00:ee:8f:78: 71:e1:14:09:a8:96:36:3b:00:11:f6:17:3e:5c:6c:69:b3:89: 6e:31:6a:f6:b9:98:c4:4c:a7:e4:87:d8:8b:fa:3e:67:3f:08: 0c:16:4b:6c:11:fe:46:16:68:cf:1a:d9:2c:ca:a9:2c:bf:1a: f2:f3:60:4c:72:e3:e1:75:22:e9:06:9a:c5:f7:a9:d2:27:db: a0:94:ad:00:d4:a4:44:a1:6d:d9:30:e7:00:33:3e:ea:43:36: 75:41:1d:dd:01:da:f2:08:8b:3f:34:27:c4:38:a3:89:9c:55: 49:42:f1:93:51:19:3e:c4:9c:da:35:37:f8:e7:df:92:d3:6d: 9c:5a:73:2a:78:f8:cd:90:57:c2:38:20:5d:de:da:f5:65:29: 13:69:5b:6b:32:61:81:9c:09:1a:2d:20:c5:ab:f7:42:44:d9: 33:ca:78:4e:ba:d3:15:47:a4:a6:59:96:2a:ef:82:9f:55:85: bb:b4:79:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4PxEpxWPhY6mDhSxP6U0LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMTI1Y2FkN2RkNGM1ZjAyMDFlZTJhMjFkZWFjMzg3MzY2 OTgxYzQwHhcNMjYwMTI2MDMwMDQxWhcNMjYwMTI3MDMwMDQxWjAzMTEwLwYDVQQD EyhmODUzZGM0ZmNhYTYzZmQ0ZWJkODNmNmI4NmUxMTc0ODFlMzM4ZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjm9VkX1BD0rAc8K2Q8O9Hj+lEmwM zfG94X78kM/1VwgSXm3CdHiifpn4JxTxmEpYYIOKAat+4RujjxQHOiDQiLJuay7u w2k8YIgaxzQURjODvXtxmsFLbGd2fLJqm9/fq93YLAx1n/LB3HYPNMvR3PA9+5g4 uOuWROKrHUFbYwurNRdKbzU6+Sn2161VseJi7y6R6yKByGkP1TehEHN4QjdOzlkW qRXRqtyBpiNtw8w84O+tPVNRTtV5x88pj0lMBg8LOWjqMNKC+XVfrOhJsFpPsvVI 8vQ32Ba5bRS0+M02d96rwqye4iLk/BOuQ+YrqYOUk/gG6qQ8R3O7RK7UYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPhT3E/Kpj/U69g/a4bhF0geM47lMB8GA1UdIwQY MBaAFL4SXK191MXwIB7ioh3qw4c2aYHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NWE3NGYtNDljYS00YTYzLTllZGEt NTE3ZWZmOTA4OTc1LzEvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81NWE3NGYtNDljYS00YTYzLTllZGEtNTE3ZWZmOTA4OTc1 LzEvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfcvED7A R92nNdS8Q4wdTluxfxevBxxBODji+GHwBJNw39kgPqn0A9r90x9SW1uARt1e7PPH 775LpMEH1a5KflUL1oEA7o94ceEUCaiWNjsAEfYXPlxsabOJbjFq9rmYxEyn5IfY i/o+Zz8IDBZLbBH+RhZozxrZLMqpLL8a8vNgTHLj4XUi6Qaaxfep0ifboJStANSk RKFt2TDnADM+6kM2dUEd3QHa8giLPzQnxDijiZxVSULxk1EZPsSc2jU3+OffktNt nFpzKnj4zZBXwjggXd7a9WUpE2lbazJhgZwJGi0gxav3QkTZM8p4TrrTFUekplmW Ku+Cn1WFu7R5BQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:24:11 2026 by rpki-client