This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json) Hash identifier: 8SejdPnSXP2qb5mx+WtfkS27iB+pPNcYghhqKS/8xvE= Subject key identifier: 8F:E2:7E:54:88:28:E4:8A:B8:38:FC:6C:7F:B2:BB:92:F5:0C:D2:67 Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1 Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1 Certificate serial: 019BF83FBC6920F1AF17D35DFC6E7C260E57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft Manifest number: 0B38 Signing time: Mon 26 Jan 2026 03:01:24 +0000 Manifest this update: Mon 26 Jan 2026 03:01:24 +0000 Manifest next update: Tue 27 Jan 2026 03:01:24 +0000 Files and hashes: 1: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (hash: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM=) 2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: bLbKwajP7jIkJt751OmhmU23m68Pitbe/ehqgLQgZfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:bc:69:20:f1:af:17:d3:5d:fc:6e:7c:26:0e:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1 Validity Not Before: Jan 26 03:01:24 2026 GMT Not After : Jan 27 03:01:24 2026 GMT Subject: CN=8fe27e548828e48ab838fc6c7fb2bb92f50cd267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:91:84:e1:ef:54:5f:c7:a0:29:1a:1a:75: b7:98:9d:ab:3f:8e:eb:7b:f2:44:a3:da:e8:f3:97: 2f:86:5c:65:e7:e7:e9:32:9d:0b:66:53:30:c9:d6: fd:97:34:73:70:5a:fe:25:67:a3:42:39:96:b3:0a: ff:bb:8c:3d:42:2d:6a:c8:f8:ce:82:0e:8f:8b:a3: c8:68:a2:5c:8c:07:d6:b4:48:23:b6:7e:a8:66:14: 36:e7:bb:90:63:b4:7d:2a:5a:e9:ae:09:eb:87:c4: 4e:4c:25:ae:a3:c0:20:98:1f:3e:ca:5b:f5:3d:5f: ed:ef:c8:59:a9:73:b9:c6:4f:7f:1a:cb:25:67:6e: 92:79:5d:41:78:b3:c1:7e:e1:eb:e2:a6:51:92:dc: fc:74:84:22:04:a8:98:9d:9c:ea:4d:63:86:ee:8a: ff:51:bc:86:51:4a:72:02:91:df:55:da:be:4a:02: 6a:b9:df:4e:79:ab:6e:4f:cd:fe:c5:4d:03:14:41: ac:d1:a5:eb:5f:5b:e4:38:ee:d0:f4:44:41:5f:72: 91:82:99:f4:a8:63:a5:b2:58:ff:b9:76:5c:e7:c1: e1:a4:bb:88:96:ef:64:45:a1:a9:47:3c:af:97:13: 6e:a5:ac:b4:60:36:a8:62:75:67:bb:dc:ed:0f:29: 65:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E2:7E:54:88:28:E4:8A:B8:38:FC:6C:7F:B2:BB:92:F5:0C:D2:67 X509v3 Authority Key Identifier: keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:46:bc:77:37:89:04:f8:99:4e:07:b6:4d:38:3a:9c:29:c7: 95:c9:4d:35:95:96:ae:f3:15:1f:e6:c1:54:3f:55:ed:b9:b5: 0f:12:1a:c2:d8:11:4e:22:69:08:e1:e9:5a:76:ee:87:59:a7: e2:b4:7a:ec:ef:77:2b:c2:94:ec:f5:ca:88:ee:78:bb:ac:06: 99:fe:dd:16:f6:7d:e6:a8:d9:87:38:ef:19:73:03:d2:73:1d: 1b:35:20:9d:9b:95:a7:4d:9a:79:28:3d:c7:fa:c7:12:83:3e: 8c:d8:bc:c0:ea:54:c3:22:b4:26:4c:c4:f6:c2:cd:fc:af:fe: 0d:61:02:3d:63:f9:55:52:15:aa:4d:e1:f6:8a:98:36:a8:04: e5:a0:d2:68:b5:08:c5:81:d7:1c:b8:26:bc:89:ff:ab:aa:e5: e3:b2:a7:bd:d8:fa:11:f5:34:d5:30:0e:75:c3:42:b2:79:21: 50:8c:1d:63:b3:f6:f9:52:5a:4a:eb:cb:17:52:76:35:c0:29: c8:10:95:04:53:a8:9e:b3:68:b5:5f:17:a9:ef:7a:aa:da:8d: 3b:00:19:48:88:68:7b:35:27:97:24:cc:47:f8:82:c6:a8:ea: 15:15:e4:c0:18:4d:4a:1c:ae:45:ef:fa:74:0e:f9:df:46:38: fd:33:02:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P7xpIPGvF9Nd/G58Jg5XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0YTZjNDZkN2Q5MGZlYjRhNzI4YWYwZjhhZTExYmZhMGQ0 ZjhjYjEwHhcNMjYwMTI2MDMwMTI0WhcNMjYwMTI3MDMwMTI0WjAzMTEwLwYDVQQD Eyg4ZmUyN2U1NDg4MjhlNDhhYjgzOGZjNmM3ZmIyYmI5MmY1MGNkMjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsuRhOHvVF/HoCkaGnW3mJ2rP47r e/JEo9ro85cvhlxl5+fpMp0LZlMwydb9lzRzcFr+JWejQjmWswr/u4w9Qi1qyPjO gg6Pi6PIaKJcjAfWtEgjtn6oZhQ257uQY7R9Klrprgnrh8ROTCWuo8AgmB8+ylv1 PV/t78hZqXO5xk9/GsslZ26SeV1BeLPBfuHr4qZRktz8dIQiBKiYnZzqTWOG7or/ UbyGUUpyApHfVdq+SgJqud9OeatuT83+xU0DFEGs0aXrX1vkOO7Q9ERBX3KRgpn0 qGOlslj/uXZc58HhpLuIlu9kRaGpRzyvlxNupay0YDaoYnVnu9ztDyll8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/iflSIKOSKuDj8bH+yu5L1DNJnMB8GA1UdIwQY MBaAFFSmxG19kP60pyivD4rhG/oNT4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGIt MGZjOWJmY2Q3NGE2LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGItMGZjOWJmY2Q3NGE2 LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnUa8dzeJ BPiZTge2TTg6nCnHlclNNZWWrvMVH+bBVD9V7bm1DxIawtgRTiJpCOHpWnbuh1mn 4rR67O93K8KU7PXKiO54u6wGmf7dFvZ95qjZhzjvGXMD0nMdGzUgnZuVp02aeSg9 x/rHEoM+jNi8wOpUwyK0JkzE9sLN/K/+DWECPWP5VVIVqk3h9oqYNqgE5aDSaLUI xYHXHLgmvIn/q6rl47Knvdj6EfU01TAOdcNCsnkhUIwdY7P2+VJaSuvLF1J2NcAp yBCVBFOonrNotV8Xqe96qtqNOwAZSIhoezUnlyTMR/iCxqjqFRXkwBhNShyuRe/6 dA7530Y4/TMCVQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:58 2026 by rpki-client