This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft File: vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json) Hash identifier: vaEsOl9GxIe/FPlNM8GYyJLiNOnASdh6r+6GUD8n9zM= Subject key identifier: 08:D8:5B:C3:4E:6D:30:33:54:05:50:5D:B2:49:FF:59:40:1F:79:F2 Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15 Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615 Certificate serial: 019BF387226E2ECBC7B4526A360B748C8221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft Manifest number: 0B5D Signing time: Sun 25 Jan 2026 05:01:18 +0000 Manifest this update: Sun 25 Jan 2026 05:01:18 +0000 Manifest next update: Mon 26 Jan 2026 05:01:18 +0000 Files and hashes: 1: 5DhZq_rBdW3po_ZrXdjJ55GpFqA.roa (hash: QKy+PuVbWKIlnbGB9uOk/snfAnZg1+WrdQuHuNMld0k=) 2: SDLTrQjkiw192HmXLpffrpBlDcs.roa (hash: BhXmkSXu3As8CiQ1UvxuCgeN4cbmIJZN7UIHsihXBW8=) 3: eJqsemrX4r9IuhcHQVX7WZ3vipk.roa (hash: EYEupg+CuEQXFJeFdsXHjk15qYcFEa8u1+yv6+YuTRw=) 4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: dbILtGhV/6pvJUt8CilcxtTxeF68VH3Rz6SEbIXebNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:87:22:6e:2e:cb:c7:b4:52:6a:36:0b:74:8c:82:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615 Validity Not Before: Jan 25 05:01:18 2026 GMT Not After : Jan 26 05:01:18 2026 GMT Subject: CN=08d85bc34e6d30335405505db249ff59401f79f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ec:db:be:77:0c:92:36:ea:25:8d:7c:a5:31: 3e:93:36:33:02:8c:ae:71:65:e1:db:c4:44:77:86: 4f:a9:43:0e:1b:ff:92:1d:3a:60:e4:69:3e:0a:56: b3:95:5f:65:6c:40:77:7d:df:37:c8:9b:70:e3:6b: 6b:8f:e2:27:fa:2e:49:d1:62:43:ef:70:cb:fa:8e: 12:75:dd:e8:e8:34:2e:00:71:60:85:30:28:49:5c: 85:91:3f:5a:e0:e0:f7:da:d7:b1:d5:aa:f8:ad:bc: b4:f7:a2:5d:96:f1:52:d3:cb:14:59:08:16:0c:20: 9a:98:d0:2a:4b:9b:d8:5e:a3:6c:d6:6e:e5:64:00: 80:8e:b4:cb:66:fd:86:76:3b:e9:87:76:c4:04:31: 14:49:ef:28:db:0f:09:6f:bd:12:9c:0e:e2:db:92: dc:f8:29:13:61:fb:35:b9:83:b4:60:4b:4a:c1:71: 42:78:ed:05:b2:f2:e7:95:ae:0f:2f:2d:12:42:6e: 45:46:68:ab:18:50:76:a6:18:67:29:bf:8b:cb:92: 48:2b:06:8a:24:19:e9:81:22:db:22:03:95:75:79: e7:34:de:4b:2d:69:ab:83:1d:26:2e:3f:cc:0a:80: 15:50:57:ea:71:1c:8d:ad:72:3b:5d:a0:f5:e0:e2: 8d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D8:5B:C3:4E:6D:30:33:54:05:50:5D:B2:49:FF:59:40:1F:79:F2 X509v3 Authority Key Identifier: keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:36:04:62:09:36:56:43:b4:fd:1f:23:52:85:53:38:61:9a: d5:bc:74:af:e6:82:a3:79:48:5a:85:65:12:d0:c1:eb:46:c1: 07:65:5f:28:56:0c:67:cd:cf:1e:e3:36:31:99:9b:b2:c0:03: 6a:5f:f5:f9:58:c4:b2:29:f1:cf:85:24:01:89:6f:ef:e1:c3: ed:18:f8:c0:0e:6b:81:61:29:75:e0:15:f8:7c:c7:14:5e:24: ae:0e:8c:22:a9:1e:ea:f7:96:84:56:e7:ff:d7:12:62:cc:db: 40:f9:f0:00:5d:b2:ad:e4:30:41:7d:b5:8e:4a:77:75:e8:33: 07:92:0d:05:59:ed:c2:bf:d7:c8:55:08:e0:c2:04:4c:89:d2: f5:14:15:6b:c3:70:4f:7d:b5:ed:cb:7d:39:98:7a:93:cf:4e: 87:71:39:6b:6d:ee:5c:dc:19:69:3f:fe:06:8d:42:8b:23:90: 74:5e:81:1e:6a:ac:f7:3f:39:2b:f7:14:2c:5d:85:01:57:9f: 11:c5:8e:7a:4b:8b:00:e3:2f:41:1b:a7:e3:24:ac:2c:ae:4d: 82:95:66:66:0e:e7:40:81:11:ec:38:6e:2f:b5:38:d6:e8:90: 51:73:32:7b:08:f7:fd:64:7e:fa:b6:3d:b7:ae:f6:6f:e1:78: 7a:d4:ca:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzhyJuLsvHtFJqNgt0jIIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkOGY5YzAzZTc1N2YzZGI1MTRjYTM4ZDE1YWRhNDUxZmEy ZTk2MTUwHhcNMjYwMTI1MDUwMTE4WhcNMjYwMTI2MDUwMTE4WjAzMTEwLwYDVQQD EygwOGQ4NWJjMzRlNmQzMDMzNTQwNTUwNWRiMjQ5ZmY1OTQwMWY3OWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuzbvncMkjbqJY18pTE+kzYzAoyu cWXh28REd4ZPqUMOG/+SHTpg5Gk+ClazlV9lbEB3fd83yJtw42trj+In+i5J0WJD 73DL+o4Sdd3o6DQuAHFghTAoSVyFkT9a4OD32tex1ar4rby096JdlvFS08sUWQgW DCCamNAqS5vYXqNs1m7lZACAjrTLZv2Gdjvph3bEBDEUSe8o2w8Jb70SnA7i25Lc +CkTYfs1uYO0YEtKwXFCeO0FsvLnla4PLy0SQm5FRmirGFB2phhnKb+Ly5JIKwaK JBnpgSLbIgOVdXnnNN5LLWmrgx0mLj/MCoAVUFfqcRyNrXI7XaD14OKNiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjYW8NObTAzVAVQXbJJ/1lAH3nyMB8GA1UdIwQY MBaAFL2PnAPnV/PbUUyjjRWtpFH6LpYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDct ZWNkZDgxNzQwMDdhLzEvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9iODNlNDctYmMwNC00OTJkLTlhMDctZWNkZDgxNzQwMDdh LzEvdlktY0EtZFg4OXRSVEtPTkZhMmtVZm91bGhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsTYEYgk2 VkO0/R8jUoVTOGGa1bx0r+aCo3lIWoVlEtDB60bBB2VfKFYMZ83PHuM2MZmbssAD al/1+VjEsinxz4UkAYlv7+HD7Rj4wA5rgWEpdeAV+HzHFF4krg6MIqke6veWhFbn /9cSYszbQPnwAF2yreQwQX21jkp3degzB5INBVntwr/XyFUI4MIETInS9RQVa8Nw T3217ct9OZh6k89Oh3E5a23uXNwZaT/+Bo1CiyOQdF6BHmqs9z85K/cULF2FAVef EcWOekuLAOMvQRun4ySsLK5NgpVmZg7nQIER7DhuL7U41uiQUXMyewj3/WR++rY9 t672b+F4etTKgA== -----END CERTIFICATE-----Generated at Sun Jan 25 11:07:36 2026 by rpki-client