This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json) Hash identifier: n4MxxoRFMxDJDeKrYMvCSE6hvzk+I+PIpB55nWhMvA4= Subject key identifier: 60:01:45:D7:5C:E1:CF:2E:6C:04:41:6A:64:91:C4:F0:EE:EC:94:53 Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b Certificate serial: 019BF619B2DB095A2835000105ACFD17F8B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 17:00:37 +0000 Manifest this update: Sun 25 Jan 2026 17:00:37 +0000 Manifest next update: Mon 26 Jan 2026 17:00:37 +0000 Files and hashes: 1: E003qgJ4I9qvGlY7B1XPp0u0MlQ.roa (hash: xKw3RbXtT8VE14RlLt8v3dsDM7RBw/rthN/HKkMsh3k=) 2: HlDH52s4uBY0o3RXjaTnpkpnjvE.roa (hash: 4xuvqkCyBJtSeW2wuHWLKkaZtMl2Q7rYR4JXvXDwkuI=) 3: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: SZPni+8zFZUu9CtRBmWUB0jrMzZ1T/ZmoeidOFmySfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:b2:db:09:5a:28:35:00:01:05:ac:fd:17:f8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b Validity Not Before: Jan 25 17:00:37 2026 GMT Not After : Jan 26 17:00:37 2026 GMT Subject: CN=600145d75ce1cf2e6c04416a6491c4f0eeec9453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:37:97:a2:55:ad:61:37:10:ab:a0:01:f1:3e: cc:8d:77:7a:e8:a5:b1:7e:99:6f:f1:81:4a:92:00: b1:ed:86:a7:74:77:3d:66:14:03:b4:a7:bb:3a:92: da:72:4e:6d:4a:0d:66:03:c3:e1:38:70:73:ca:9b: 6f:37:99:fc:86:02:91:b0:5b:05:5e:9c:c8:84:c5: fb:0f:28:82:1a:c4:57:09:cb:50:45:ec:6a:ca:b6: c3:7f:16:1e:a0:63:c2:33:9e:91:a0:74:31:b4:db: 49:e7:b6:0d:e5:ea:b3:6b:1b:69:2c:d1:3f:3a:15: b8:24:b0:80:56:be:e6:c0:16:3b:ce:54:34:a0:69: 50:78:ee:25:63:82:2b:d5:b1:09:94:16:b4:cb:48: d1:54:6b:2f:a7:26:37:ed:3e:21:ad:6c:83:8a:54: 7f:b2:bc:2c:d1:b1:8a:ed:d9:f4:a6:0e:b8:b7:6a: 06:fb:43:6b:aa:31:ac:99:9d:60:be:2b:95:44:70: 3f:98:9b:5f:98:b9:30:d0:c7:ad:c5:d6:63:bb:ba: eb:4b:d5:d6:ed:14:6c:d5:cc:c8:2b:9d:a4:1a:52: cd:d1:0e:a1:f4:fa:ac:c8:e3:25:a5:04:27:6d:4e: da:7a:fc:73:ec:7c:e4:13:25:b5:ae:6d:1c:d7:e1: c6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:01:45:D7:5C:E1:CF:2E:6C:04:41:6A:64:91:C4:F0:EE:EC:94:53 X509v3 Authority Key Identifier: keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:98:b9:34:48:3c:53:c5:18:9e:b1:a4:bb:30:d6:2a:6c:b0: 78:67:b4:55:a7:d8:f1:a3:74:cd:08:fe:5a:a1:01:4e:76:42: d5:8d:79:d5:bf:08:83:16:88:5e:0c:ae:41:65:6a:41:93:eb: 34:bb:f3:37:91:7c:b6:18:b8:5b:84:26:95:f6:19:fc:97:58: a2:6e:26:92:77:f0:a6:95:68:c2:36:f6:24:69:15:6e:7c:56: bc:73:2d:8c:cb:2c:c8:ef:bd:82:9d:af:b0:79:98:2e:64:f3: b4:08:74:b5:68:2a:27:92:4c:af:c5:d9:be:24:cf:c7:75:7c: 69:73:a0:c7:ef:dd:5b:eb:30:0c:cc:32:97:d7:61:b5:8c:3c: b2:26:83:16:74:53:1e:8f:df:5a:7e:11:b5:0f:db:c5:73:90: 13:74:58:0e:f1:64:ca:d6:e8:ba:12:af:de:14:63:d7:2b:14: cc:8d:1d:db:c1:99:06:ea:b9:02:15:4c:e3:55:73:ba:31:7d: 68:92:8c:e1:5e:21:b8:93:77:28:7f:be:0f:d9:8f:ae:1b:63: 5c:bd:7a:b9:60:ee:b3:21:8c:8c:de:da:ac:2a:c6:9d:b3:9c: fa:8d:a6:fe:9a:e9:a2:da:2d:48:44:b0:ab:eb:b9:b9:42:1a: 5e:54:e7:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GbLbCVooNQABBaz9F/i0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MjFiYTRiNTM5MTYyZDdlZjE5MWE1NjYyMDQ5ZTUxZmRj MzYyMmIwHhcNMjYwMTI1MTcwMDM3WhcNMjYwMTI2MTcwMDM3WjAzMTEwLwYDVQQD Eyg2MDAxNDVkNzVjZTFjZjJlNmMwNDQxNmE2NDkxYzRmMGVlZWM5NDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTeXolWtYTcQq6AB8T7MjXd66KWx fplv8YFKkgCx7YandHc9ZhQDtKe7OpLack5tSg1mA8PhOHBzyptvN5n8hgKRsFsF XpzIhMX7DyiCGsRXCctQRexqyrbDfxYeoGPCM56RoHQxtNtJ57YN5eqzaxtpLNE/ OhW4JLCAVr7mwBY7zlQ0oGlQeO4lY4Ir1bEJlBa0y0jRVGsvpyY37T4hrWyDilR/ srws0bGK7dn0pg64t2oG+0NrqjGsmZ1gviuVRHA/mJtfmLkw0MetxdZju7rrS9XW 7RRs1czIK52kGlLN0Q6h9PqsyOMlpQQnbU7aevxz7HzkEyW1rm0c1+HGtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGABRddc4c8ubARBamSRxPDu7JRTMB8GA1UdIwQY MBaAFFQhuktTkWLX7xkaVmIEnlH9w2IrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUt ZWYwNjNlNzg2ZTU0LzEvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUtZWYwNjNlNzg2ZTU0 LzEvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARZi5NEg8 U8UYnrGkuzDWKmyweGe0VafY8aN0zQj+WqEBTnZC1Y151b8IgxaIXgyuQWVqQZPr NLvzN5F8thi4W4QmlfYZ/JdYom4mknfwppVowjb2JGkVbnxWvHMtjMssyO+9gp2v sHmYLmTztAh0tWgqJ5JMr8XZviTPx3V8aXOgx+/dW+swDMwyl9dhtYw8siaDFnRT Ho/fWn4RtQ/bxXOQE3RYDvFkytbouhKv3hRj1ysUzI0d28GZBuq5AhVM41VzujF9 aJKM4V4huJN3KH++D9mPrhtjXL16uWDusyGMjN7arCrGnbOc+o2m/prpototSESw q+u5uUIaXlTnPg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:50:45 2026 by rpki-client