This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json) Hash identifier: vX+MqMyZU81uy3PPUnfJLj/OodURZQ224npGEiFASPs= Subject key identifier: 13:14:32:2E:B2:1B:2B:BD:90:57:0F:6E:C7:F9:2D:B1:61:55:93:CD Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57 Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757 Certificate serial: 019BF91B7737A7D26F681802561A9F49140F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft Manifest number: 0C44 Signing time: Mon 26 Jan 2026 07:01:25 +0000 Manifest this update: Mon 26 Jan 2026 07:01:25 +0000 Manifest next update: Tue 27 Jan 2026 07:01:25 +0000 Files and hashes: 1: LjJLqjcnZZvUB7mKjCH-7GZzeLM.roa (hash: A/qN/8X4NxsgNcRehmeeZdCg0e5U0+miw/dGRfft/VI=) 2: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: GoPMiUDmTcaYRuP1o3KmyuFRGIfFQtlB1eNXGPWarGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:77:37:a7:d2:6f:68:18:02:56:1a:9f:49:14:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559349644323315f806dc64ca4d9ed9557762757 Validity Not Before: Jan 26 07:01:25 2026 GMT Not After : Jan 27 07:01:25 2026 GMT Subject: CN=1314322eb21b2bbd90570f6ec7f92db1615593cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6e:86:69:28:9d:31:47:28:16:f6:0c:02:b2: cf:4a:f2:5a:9a:b2:95:d1:dd:79:f9:96:c4:90:2e: f3:4a:97:34:46:97:ee:37:8c:4e:69:a0:9b:75:31: c1:a3:7e:2f:ad:25:3c:bb:42:b3:0c:cf:fa:37:c1: 29:9f:6e:8a:16:eb:cd:ee:1d:58:2d:9b:cd:1f:0d: fc:0b:66:d5:b3:26:52:14:06:d2:c9:18:3d:52:86: 59:50:db:67:1a:30:cf:27:82:5b:91:94:a5:f5:20: cf:29:ed:08:56:75:5c:e9:47:bf:f8:e6:62:87:a4: 8f:24:df:7c:7d:77:bd:da:82:69:68:35:51:dd:5c: 5f:ed:1b:ee:87:bc:31:b2:c2:22:e0:c8:6e:da:7d: 45:78:12:1f:06:2e:bd:b4:59:c2:30:af:b5:54:16: 1e:e0:f8:5e:35:5c:1a:8c:8c:c3:4f:7f:51:07:33: 8e:31:8c:75:d5:07:91:6d:fe:ba:81:c2:d0:fe:aa: 9b:5a:e6:34:e2:2b:48:c6:9b:0b:29:04:36:ee:bf: b8:6d:99:31:43:ff:e5:a1:03:4f:c7:e9:d3:27:9f: 8b:b0:88:8c:0f:b0:71:0d:d7:c8:30:bd:49:01:8b: 95:63:2f:f0:ee:7a:fc:9d:a7:e9:2e:9b:16:a8:d8: 66:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:14:32:2E:B2:1B:2B:BD:90:57:0F:6E:C7:F9:2D:B1:61:55:93:CD X509v3 Authority Key Identifier: keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:73:fe:ea:de:61:77:52:d0:aa:96:12:ce:ef:19:3c:2a:10: ae:83:10:32:41:be:45:97:4d:f6:ad:f0:50:66:9d:52:9d:e5: 3d:b8:ba:bb:f6:ee:08:15:04:07:ce:d2:6a:fe:6f:85:01:72: 45:3d:14:3f:c9:11:83:eb:a5:65:c1:dc:a2:c7:60:43:1f:a7: 77:e6:39:2d:39:55:42:57:b2:b5:a8:fd:7a:bb:f0:d2:0c:d7: e4:11:fd:b2:53:81:6f:1b:9a:0e:6b:c8:98:41:ac:a7:43:83: 07:a5:57:d9:2a:3d:6b:9d:26:26:53:a8:da:cc:df:6a:c6:9b: 50:67:94:cb:00:58:c8:6f:28:67:fb:6f:3d:16:44:c3:28:f3: bc:a0:24:49:e6:9b:d7:5a:53:e8:7f:20:44:99:e5:18:f2:73: 8a:4c:0d:00:87:78:18:7c:f7:df:0a:0a:2c:74:0e:c5:9f:54: bb:54:31:2e:89:10:11:e1:b5:b7:ba:15:3e:03:17:b9:70:3a: 1b:bd:21:25:61:98:5b:54:26:a4:b4:4c:40:46:64:e6:17:04: 92:76:f9:d5:e6:cd:fd:98:35:71:9b:0a:49:52:ff:8a:b4:c1: 15:7e:09:8c:86:75:1b:fa:65:44:b1:6f:aa:c3:6c:92:92:f0: c1:38:b2:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5G3c3p9JvaBgCVhqfSRQPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OTM0OTY0NDMyMzMxNWY4MDZkYzY0Y2E0ZDllZDk1NTc3 NjI3NTcwHhcNMjYwMTI2MDcwMTI1WhcNMjYwMTI3MDcwMTI1WjAzMTEwLwYDVQQD EygxMzE0MzIyZWIyMWIyYmJkOTA1NzBmNmVjN2Y5MmRiMTYxNTU5M2NkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5W6GaSidMUcoFvYMArLPSvJamrKV 0d15+ZbEkC7zSpc0RpfuN4xOaaCbdTHBo34vrSU8u0KzDM/6N8Epn26KFuvN7h1Y LZvNHw38C2bVsyZSFAbSyRg9UoZZUNtnGjDPJ4JbkZSl9SDPKe0IVnVc6Ue/+OZi h6SPJN98fXe92oJpaDVR3Vxf7Rvuh7wxssIi4Mhu2n1FeBIfBi69tFnCMK+1VBYe 4PheNVwajIzDT39RBzOOMYx11QeRbf66gcLQ/qqbWuY04itIxpsLKQQ27r+4bZkx Q//loQNPx+nTJ5+LsIiMD7BxDdfIML1JAYuVYy/w7nr8nafpLpsWqNhmjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBMUMi6yGyu9kFcPbsf5LbFhVZPNMB8GA1UdIwQY MBaAFFWTSWRDIzFfgG3GTKTZ7ZVXdidXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTIt NjA2NmQ4OWYwNWI4LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTItNjA2NmQ4OWYwNWI4 LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWXP+6t5h d1LQqpYSzu8ZPCoQroMQMkG+RZdN9q3wUGadUp3lPbi6u/buCBUEB87Sav5vhQFy RT0UP8kRg+ulZcHcosdgQx+nd+Y5LTlVQleytaj9ervw0gzX5BH9slOBbxuaDmvI mEGsp0ODB6VX2So9a50mJlOo2szfasabUGeUywBYyG8oZ/tvPRZEwyjzvKAkSeab 11pT6H8gRJnlGPJzikwNAId4GHz33woKLHQOxZ9Uu1QxLokQEeG1t7oVPgMXuXA6 G70hJWGYW1QmpLRMQEZk5hcEknb51ebN/Zg1cZsKSVL/irTBFX4JjIZ1G/plRLFv qsNskpLwwTiyoQ== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:07 2026 by rpki-client