This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft File: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json) Hash identifier: O5G8DvWfD6kF+s9Tfr75KZWviR4bO/vKsZMaQIyY+NQ= Subject key identifier: A1:98:54:6F:10:78:4B:F5:1D:EB:12:3B:61:55:A0:21:EA:77:1B:C4 Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB Certificate issuer: /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb Certificate serial: 019BF8ACE6A3E52A22CB418C2893917CF62A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 05:00:39 +0000 Manifest this update: Mon 26 Jan 2026 05:00:39 +0000 Manifest next update: Tue 27 Jan 2026 05:00:39 +0000 Files and hashes: 1: n7K--VygPD5bxJ2Nh4nbk7uTznw.roa (hash: fTr5X92PZm2YQIc6I3zwmHgOyHHHYgDg02uY9i85scE=) 2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: oIdmE0Cw3PkWraJNCZoemkpo0glC6b11W3WUa/UyhTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:e6:a3:e5:2a:22:cb:41:8c:28:93:91:7c:f6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb Validity Not Before: Jan 26 05:00:39 2026 GMT Not After : Jan 27 05:00:39 2026 GMT Subject: CN=a198546f10784bf51deb123b6155a021ea771bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:cc:ab:e3:cf:d1:21:ab:f3:3a:09:6a:ec: 4a:33:89:39:67:5c:42:40:e4:7c:de:ea:d8:21:25: 80:66:da:9d:14:c6:4f:96:a3:ab:66:c1:38:94:21: cb:82:e9:20:ab:43:37:56:c6:f0:8a:a1:a7:90:c4: e8:83:ed:1a:fb:51:70:fa:37:50:52:cd:34:fd:f2: ca:4b:61:25:39:7d:d1:dd:4e:0e:ad:f3:f0:3f:3f: 87:01:36:80:24:1e:09:5a:b8:04:c1:41:8e:dd:44: b4:45:84:a3:2e:b3:20:e5:7c:c1:11:89:c6:9f:17: a7:80:e4:a8:11:85:22:27:78:cd:78:e8:2b:2a:ac: a9:33:1d:05:2b:36:ff:30:2f:ce:69:f6:23:7f:75: c9:ec:48:66:69:06:33:77:06:c8:67:6f:d9:1f:f1: b0:95:b1:8b:d2:d0:78:60:af:b6:9b:21:43:4b:40: 9f:ce:dc:25:33:35:a8:e1:d7:7d:cd:44:cb:b2:af: d3:86:29:bd:bb:50:8b:d9:b2:b4:0e:c7:71:a5:4b: 61:e8:95:b7:47:b3:94:d6:15:68:37:b1:57:f6:d7: 55:0b:33:b7:51:af:55:33:ba:f8:e0:df:f1:86:d0: 30:c9:76:cf:fa:86:a3:72:d6:81:f9:fd:11:43:f6: 03:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:98:54:6F:10:78:4B:F5:1D:EB:12:3B:61:55:A0:21:EA:77:1B:C4 X509v3 Authority Key Identifier: keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:c9:e7:8b:cb:cb:29:b6:12:fa:0b:d4:9c:51:e3:27:c8:9b: ec:c0:1f:fe:a4:d2:51:e4:eb:df:64:bc:97:85:a2:16:fb:da: da:cf:6e:e0:2a:5e:3d:5d:1c:b4:76:38:f5:20:9e:dd:74:56: e4:6f:64:0c:23:9a:04:b0:bc:0f:75:77:50:e8:eb:5a:1a:26: 0c:42:f5:2a:0f:ee:37:18:fa:45:ae:ba:1a:3b:8d:3b:fc:b1: 93:f6:d2:87:ae:e2:ea:e8:9c:0c:c9:80:70:5b:20:83:b5:9b: 5f:7c:d2:9f:f1:44:57:c6:5d:f0:dd:a8:1c:52:aa:cb:98:7c: 92:74:86:9e:4b:9d:d4:82:1e:40:7b:39:d7:ae:77:d6:31:bd: 07:10:2b:c6:c1:8b:35:95:5b:2f:ba:8f:be:a5:ad:7a:ab:e9: 54:83:d0:c3:ba:5d:79:40:ca:0c:2c:bc:26:7d:ce:73:4e:86: 4f:36:3b:9c:e7:8e:fb:9c:35:36:f4:4c:5e:47:e1:4f:d2:11: 79:0a:e6:51:fd:7f:f6:9b:b6:76:96:29:ca:4d:34:cf:14:20: 51:ec:15:f7:23:07:55:a1:c1:9c:a2:f1:3e:49:49:b4:60:2e: 21:93:cd:79:52:8f:44:65:68:97:ac:9b:b6:86:e0:30:19:70: d5:a3:0b:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rOaj5Soiy0GMKJORfPYqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMmVlZmE3YzYwNDhlNmEwYTVhNjVjMDdlM2UyNTUzNDFl MTQzYmIwHhcNMjYwMTI2MDUwMDM5WhcNMjYwMTI3MDUwMDM5WjAzMTEwLwYDVQQD EyhhMTk4NTQ2ZjEwNzg0YmY1MWRlYjEyM2I2MTU1YTAyMWVhNzcxYmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCPMq+PP0SGr8zoJauxKM4k5Z1xC QOR83urYISWAZtqdFMZPlqOrZsE4lCHLgukgq0M3VsbwiqGnkMTog+0a+1Fw+jdQ Us00/fLKS2ElOX3R3U4OrfPwPz+HATaAJB4JWrgEwUGO3US0RYSjLrMg5XzBEYnG nxengOSoEYUiJ3jNeOgrKqypMx0FKzb/MC/OafYjf3XJ7EhmaQYzdwbIZ2/ZH/Gw lbGL0tB4YK+2myFDS0CfztwlMzWo4dd9zUTLsq/Thim9u1CL2bK0DsdxpUth6JW3 R7OU1hVoN7FX9tdVCzO3Ua9VM7r44N/xhtAwyXbP+oajctaB+f0RQ/YDQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGYVG8QeEv1HesSO2FVoCHqdxvEMB8GA1UdIwQY MBaAFL8u76fGBI5qClplwH4+JVNB4UO7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt MjFlYzY1NjVjOWJlLzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl LzEvdnk3dnA4WUVqbW9LV21YQWZqNGxVMEhoUTdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcnni8vL KbYS+gvUnFHjJ8ib7MAf/qTSUeTr32S8l4WiFvva2s9u4CpePV0ctHY49SCe3XRW 5G9kDCOaBLC8D3V3UOjrWhomDEL1Kg/uNxj6Ra66GjuNO/yxk/bSh67i6uicDMmA cFsgg7WbX3zSn/FEV8Zd8N2oHFKqy5h8knSGnkud1IIeQHs516531jG9BxArxsGL NZVbL7qPvqWteqvpVIPQw7pdeUDKDCy8Jn3Oc06GTzY7nOeO+5w1NvRMXkfhT9IR eQrmUf1/9pu2dpYpyk00zxQgUewV9yMHVaHBnKLxPklJtGAuIZPNeVKPRGVol6yb tobgMBlw1aMLww== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:35 2026 by rpki-client