This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json) Hash identifier: 2tJaLKU5LvdfkHBqoJcEzOR8dzFp+XfHbwKr/c0OH20= Subject key identifier: 22:EF:18:6B:B9:28:DD:AA:B8:76:96:7C:EB:38:F5:23:92:25:A8:75 Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72 Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72 Certificate serial: 019BF5755EABFED305D726047695EFBB7E3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft Manifest number: 10BF Signing time: Sun 25 Jan 2026 14:01:08 +0000 Manifest this update: Sun 25 Jan 2026 14:01:08 +0000 Manifest next update: Mon 26 Jan 2026 14:01:08 +0000 Files and hashes: 1: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: KOZBPVOMmW5x1e8aQnfIi4J84lNU5iIFLGNHu0uMUBk=) 2: i75-S_kyjvhoIsIY0w--h64E4Jc.roa (hash: q77XzfN8gfhfffdA+9TVq9UHq/n2PXDK+2eXQR9J7QQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:75:5e:ab:fe:d3:05:d7:26:04:76:95:ef:bb:7e:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72 Validity Not Before: Jan 25 14:01:08 2026 GMT Not After : Jan 26 14:01:08 2026 GMT Subject: CN=22ef186bb928ddaab876967ceb38f5239225a875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:07:45:65:18:ef:de:7e:ee:ce:58:da:b1:ff: 48:91:16:97:5d:cc:71:5f:ca:c3:92:15:1f:d8:ea: 60:f0:1b:56:b6:94:b3:cb:ea:44:71:0e:7e:52:60: 08:58:e2:28:00:3e:d1:5a:88:20:2f:77:61:04:7e: 11:e3:f2:e8:1c:89:d3:c8:5d:d2:de:fd:c1:64:84: 49:11:1a:4a:7a:6c:f7:9a:61:65:02:a3:cd:63:aa: 05:63:d5:e8:42:fe:06:22:53:48:de:ea:45:c3:ca: c2:33:1b:43:7a:7e:ea:8c:3a:d7:63:df:18:9d:a8: a1:73:1f:d9:58:a3:7e:cc:da:52:14:8f:ba:5e:37: dd:17:6e:b9:e7:0e:c3:12:57:4d:7a:c9:71:ef:23: 4f:c9:70:82:0a:ac:12:44:6a:cd:9a:50:26:c4:b1: 0e:bc:aa:54:4c:c6:e8:27:6b:c4:76:79:c2:d2:b0: 90:86:71:01:bc:1f:39:c7:20:84:47:60:9c:7a:f9: be:bb:42:3d:73:5a:31:f0:19:67:22:63:e4:1f:38: ce:00:7f:46:3c:b1:e8:12:fc:35:aa:c5:5f:c4:e4: 1a:89:1b:2c:51:78:d4:30:10:20:19:e4:3f:c9:73: 0a:1d:bf:68:ea:9c:78:42:12:d0:55:d1:8b:d3:8c: f5:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:EF:18:6B:B9:28:DD:AA:B8:76:96:7C:EB:38:F5:23:92:25:A8:75 X509v3 Authority Key Identifier: keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7d:d4:67:a3:54:8b:a2:2d:f0:b6:9f:09:65:00:69:ee:32: 5b:f9:b3:a8:24:db:3e:2b:c9:30:7a:50:1b:3b:36:bf:fc:41: 07:41:6a:82:6f:83:55:af:98:b2:6a:ed:ba:3a:92:88:0a:35: ab:7d:71:3e:6d:84:2d:86:e7:d0:e8:ff:a1:f8:1f:5e:3e:1f: a0:11:f0:8c:3a:02:8c:0b:37:6d:71:86:29:76:b7:a0:48:d3: c9:b4:a4:d7:36:b0:1e:e4:18:a2:4b:a0:6a:6a:56:b6:7e:c3: 23:ba:39:9d:95:55:b5:88:36:97:6b:7a:46:68:19:97:9b:20: fd:1a:77:45:10:58:1d:09:70:32:17:d7:c1:84:05:ae:1e:2f: 7e:f5:37:15:92:d4:62:2a:42:b2:5e:01:03:d8:9e:99:2a:74: 85:66:ba:be:f9:62:46:5f:88:18:55:d4:7c:2b:0a:4c:c2:8c: 20:1a:5a:d7:b3:5c:a6:ca:d1:b7:7f:88:4d:f2:0d:71:00:02: d4:b7:06:a9:24:9a:1a:1f:af:b9:47:e4:73:14:91:45:c6:ea: 0d:e6:d5:36:1f:c0:fc:fe:1e:a9:2d:58:e8:94:e8:03:a5:d4: 54:e7:8d:ec:b3:05:b8:cd:26:63:c7:72:2c:0b:da:8f:af:5e: b3:de:69:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1dV6r/tMF1yYEdpXvu349MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MTE5NjhiNzk3YWNhNTdkNjExODAxYTkzYTg1Y2I4NjRl NDNlNzIwHhcNMjYwMTI1MTQwMTA4WhcNMjYwMTI2MTQwMTA4WjAzMTEwLwYDVQQD EygyMmVmMTg2YmI5MjhkZGFhYjg3Njk2N2NlYjM4ZjUyMzkyMjVhODc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgdFZRjv3n7uzljasf9IkRaXXcxx X8rDkhUf2Opg8BtWtpSzy+pEcQ5+UmAIWOIoAD7RWoggL3dhBH4R4/LoHInTyF3S 3v3BZIRJERpKemz3mmFlAqPNY6oFY9XoQv4GIlNI3upFw8rCMxtDen7qjDrXY98Y naihcx/ZWKN+zNpSFI+6XjfdF2655w7DEldNeslx7yNPyXCCCqwSRGrNmlAmxLEO vKpUTMboJ2vEdnnC0rCQhnEBvB85xyCER2Ccevm+u0I9c1ox8BlnImPkHzjOAH9G PLHoEvw1qsVfxOQaiRssUXjUMBAgGeQ/yXMKHb9o6px4QhLQVdGL04z1dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLvGGu5KN2quHaWfOs49SOSJah1MB8GA1UdIwQY MBaAFFURlot5espX1hGAGpOoXLhk5D5yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUt YzM1ZDVkNTQwMWRhLzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8xMTkxMzAtZGJmZC00MDI3LWExNmUtYzM1ZDVkNTQwMWRh LzEvVlJHV2kzbDZ5bGZXRVlBYWs2aGN1R1RrUG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADH3UZ6NU i6It8LafCWUAae4yW/mzqCTbPivJMHpQGzs2v/xBB0Fqgm+DVa+YsmrtujqSiAo1 q31xPm2ELYbn0Oj/ofgfXj4foBHwjDoCjAs3bXGGKXa3oEjTybSk1zawHuQYokug ampWtn7DI7o5nZVVtYg2l2t6RmgZl5sg/Rp3RRBYHQlwMhfXwYQFrh4vfvU3FZLU YipCsl4BA9iemSp0hWa6vvliRl+IGFXUfCsKTMKMIBpa17NcpsrRt3+ITfINcQAC 1LcGqSSaGh+vuUfkcxSRRcbqDebVNh/A/P4eqS1Y6JToA6XUVOeN7LMFuM0mY8dy LAvaj69es95pmA== -----END CERTIFICATE-----Generated at Sun Jan 25 18:34:15 2026 by rpki-client