This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json) Hash identifier: PIvzQ7+EqJFv6Pg/1mgfPYKNFn3Wt/c6HlRAEUTyl8Y= Subject key identifier: DA:B6:75:2B:CE:50:E2:0B:81:A9:28:B2:3E:CB:24:FA:48:F8:78:FA Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4 Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4 Certificate serial: 019BF8E3F673FB1832C237A23DD6C9F552F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 06:00:47 +0000 Manifest this update: Mon 26 Jan 2026 06:00:47 +0000 Manifest next update: Tue 27 Jan 2026 06:00:47 +0000 Files and hashes: 1: Tv-1lu7GVvYKCCNJrjspKQqz-UY.roa (hash: 9l4nrTM55YoKW+9z7XZNyjc96a4hC8pAvLejRN5e7BI=) 2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: WClrgPmyUSXbygeS7AEg+xMsuePeONwqwdFzAXK1fxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:e3:f6:73:fb:18:32:c2:37:a2:3d:d6:c9:f5:52:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4 Validity Not Before: Jan 26 06:00:47 2026 GMT Not After : Jan 27 06:00:47 2026 GMT Subject: CN=dab6752bce50e20b81a928b23ecb24fa48f878fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:72:b7:25:51:a9:d2:de:f5:d9:32:67:14:51: 91:c5:1c:4a:01:95:06:dc:2f:3e:1b:fd:a6:5c:de: 5b:6f:dc:46:e3:13:f5:c5:1e:bc:48:58:72:d4:a1: d1:4c:27:f7:c0:ca:2a:17:d2:bd:61:ee:ab:fd:e4: b6:5b:c8:39:bf:ac:44:a6:8c:24:c7:b7:99:a7:e0: e5:97:a5:99:e1:53:7c:e4:bd:af:dc:58:04:ee:2a: 33:ca:27:89:b3:37:2a:40:9c:f7:79:bb:5b:fd:d0: 7a:b4:31:c7:4b:5b:bc:ab:f2:79:74:d6:a4:72:4c: 23:b2:e1:9d:d2:28:ab:87:66:38:4e:ea:bc:ee:3c: 44:48:aa:60:50:97:75:fb:71:b0:d2:81:4e:67:3a: 30:30:56:21:3e:f2:74:9b:e8:1e:26:91:95:fd:27: 38:ad:0a:78:e3:0b:b2:04:df:e7:76:25:e7:e6:a7: 93:7a:fc:80:0a:43:72:61:5d:79:30:eb:da:e6:4a: 7b:5b:2a:c3:27:b7:9e:87:80:f8:68:38:a9:a3:4e: 85:84:15:6e:a3:cc:30:2b:30:b8:c8:17:75:14:3c: e6:32:2b:ce:e3:1a:e8:a9:bb:42:53:45:a8:3e:c8: 2b:3e:19:7d:fc:df:ef:e5:78:f5:3e:22:c9:0e:1b: 2f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B6:75:2B:CE:50:E2:0B:81:A9:28:B2:3E:CB:24:FA:48:F8:78:FA X509v3 Authority Key Identifier: keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:7f:aa:b4:37:f4:e4:98:d3:05:f4:37:2d:00:85:a2:a9:01: 55:a9:c7:b4:bc:4a:dd:3c:33:c7:05:d5:ac:38:3f:43:e4:45: bf:e2:b5:2a:99:4d:de:c8:a9:a4:b2:47:9f:cf:a6:bc:06:51: 60:4f:a6:95:2c:9a:71:fa:4c:3d:52:8a:af:46:83:f8:10:c2: 66:0f:0c:27:75:68:8d:61:f8:15:ff:a0:5d:65:ad:81:8d:d0: 98:95:28:13:46:c4:0e:68:b5:ad:6b:aa:eb:82:7c:b9:d8:14: db:2f:0c:2c:23:5a:b5:d3:bb:a4:5a:3a:ed:59:99:aa:3e:e4: a6:87:70:14:55:89:a1:7d:26:e9:89:64:1c:d9:f5:dc:7e:7b: e7:92:f7:0e:51:2f:81:51:09:35:19:29:3e:b7:6b:22:44:29: 9f:d4:d4:51:6b:25:1f:f3:99:ad:b6:55:0e:6e:1c:d3:41:36: 2f:3d:a6:38:81:61:33:85:58:67:4f:2a:a2:65:a2:24:66:b1: 40:6f:e5:b6:90:d0:ac:c4:06:d4:a5:16:0b:e2:54:81:90:d3: 69:d9:fa:9c:8d:b5:6b:59:82:df:4c:ba:dd:81:e7:06:3b:af: 98:bb:97:4e:72:70:7f:98:19:e8:8e:a0:6d:ce:e3:b2:0b:67: e2:4e:3d:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv44/Zz+xgywjeiPdbJ9VL0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGI2M2QxOWQ4NmVhMzQ1YzliNWYxNjkzMDBjM2EyOWQ0 YzMxYzQwHhcNMjYwMTI2MDYwMDQ3WhcNMjYwMTI3MDYwMDQ3WjAzMTEwLwYDVQQD EyhkYWI2NzUyYmNlNTBlMjBiODFhOTI4YjIzZWNiMjRmYTQ4Zjg3OGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXK3JVGp0t712TJnFFGRxRxKAZUG 3C8+G/2mXN5bb9xG4xP1xR68SFhy1KHRTCf3wMoqF9K9Ye6r/eS2W8g5v6xEpowk x7eZp+Dll6WZ4VN85L2v3FgE7iozyieJszcqQJz3ebtb/dB6tDHHS1u8q/J5dNak ckwjsuGd0iirh2Y4Tuq87jxESKpgUJd1+3Gw0oFOZzowMFYhPvJ0m+geJpGV/Sc4 rQp44wuyBN/ndiXn5qeTevyACkNyYV15MOva5kp7WyrDJ7eeh4D4aDipo06FhBVu o8wwKzC4yBd1FDzmMivO4xroqbtCU0WoPsgrPhl9/N/v5Xj1PiLJDhsvpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNq2dSvOUOILgakosj7LJPpI+Hj6MB8GA1UdIwQY MBaAFFQLY9Gdhuo0XJtfFpMAw6KdTDHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWIt MDAwNGIyNzQ2MzBiLzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWItMDAwNGIyNzQ2MzBi LzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuX+qtDf0 5JjTBfQ3LQCFoqkBVanHtLxK3TwzxwXVrDg/Q+RFv+K1KplN3sippLJHn8+mvAZR YE+mlSyacfpMPVKKr0aD+BDCZg8MJ3VojWH4Ff+gXWWtgY3QmJUoE0bEDmi1rWuq 64J8udgU2y8MLCNatdO7pFo67VmZqj7kpodwFFWJoX0m6YlkHNn13H5755L3DlEv gVEJNRkpPrdrIkQpn9TUUWslH/OZrbZVDm4c00E2Lz2mOIFhM4VYZ08qomWiJGax QG/ltpDQrMQG1KUWC+JUgZDTadn6nI21a1mC30y63YHnBjuvmLuXTnJwf5gZ6I6g bc7jsgtn4k49wg== -----END CERTIFICATE-----Generated at Mon Jan 26 10:58:13 2026 by rpki-client