This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json) Hash identifier: +Jb4j/aXZUZ7flu3LuvuAmxKdcVQCuRWiLp3Rpv04G4= Subject key identifier: 57:24:64:47:02:C8:1A:EF:2D:F8:56:04:29:2D:EB:06:64:ED:74:78 Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Certificate serial: 019BA2340AE77EE3198430C8606E81AC9C82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft Manifest number: 17BF Signing time: Fri 09 Jan 2026 10:01:18 +0000 Manifest this update: Fri 09 Jan 2026 10:01:18 +0000 Manifest next update: Sat 10 Jan 2026 10:01:18 +0000 Files and hashes: 1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=) 2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=) 3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=) 4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: hSrU0hn2zMBgVVH9sF8QEdW6BpUuhA1EA/BYpT0xAc0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:34:0a:e7:7e:e3:19:84:30:c8:60:6e:81:ac:9c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318 Validity Not Before: Jan 9 10:01:18 2026 GMT Not After : Jan 10 10:01:18 2026 GMT Subject: CN=5724644702c81aef2df85604292deb0664ed7478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:91:fb:f8:fa:8a:2a:c7:89:29:f2:51:12:75: 61:b4:2a:34:f6:5f:13:b1:36:60:58:0d:a1:29:5a: 63:6a:86:42:be:55:b5:36:5f:54:ca:87:09:66:09: eb:63:f5:80:44:d7:1f:dc:56:d7:e9:44:a7:8c:32: 96:51:da:0f:af:8e:16:70:2f:46:15:78:ae:40:c3: be:c3:71:28:f0:df:a5:49:49:9f:0c:2e:92:52:43: 68:61:0e:47:1d:cf:a6:8d:f7:bc:1d:40:75:71:1b: de:c7:5c:a9:71:97:de:d8:69:5e:b3:e0:1e:40:b2: b0:89:34:4c:44:49:22:64:89:5c:f4:af:ba:1d:12: 88:0a:f6:cb:71:d0:72:bb:1f:42:76:cd:92:72:54: 83:92:1f:0b:82:8e:4d:9c:a0:2a:c1:bc:dd:06:10: 07:8f:56:0b:c8:1f:c3:b3:5d:83:a4:29:d1:2c:bd: 50:11:5f:b9:f9:7b:1e:94:db:56:cf:83:52:4e:c1: e3:bc:31:7b:db:d5:77:33:6d:f2:7f:1b:2f:5e:96: 40:96:b6:1f:42:eb:5a:02:b0:20:04:6a:50:af:3b: 50:69:29:43:69:50:45:00:11:aa:ad:2a:89:df:65: 24:d5:3a:6d:0a:3f:d0:74:21:d2:71:79:4a:fa:cc: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:24:64:47:02:C8:1A:EF:2D:F8:56:04:29:2D:EB:06:64:ED:74:78 X509v3 Authority Key Identifier: keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8b:ea:b1:ff:0a:0c:59:51:fa:f6:2e:ad:7a:2f:b3:29:3d: a2:8b:09:28:2d:8a:eb:52:86:14:0d:c3:c5:2e:57:33:47:74: a8:76:ca:8b:e7:2d:1d:d4:39:1e:0c:51:e1:39:b4:aa:a1:9d: b3:04:45:1d:71:11:90:6b:a2:42:15:91:fe:4e:ad:ba:99:d2: 37:f8:e1:c8:2a:d2:e6:8a:43:2f:3e:0b:09:26:01:b8:2c:dd: 4b:67:1e:df:16:f2:b9:a5:77:53:66:2a:f5:67:e1:42:29:46: be:88:91:35:5e:cf:20:23:6a:2d:6c:d6:64:6f:7e:41:ef:c9: 2e:26:1b:b9:fc:1e:28:f2:37:62:10:72:8f:58:60:db:24:34: 0b:2d:2e:30:91:5f:bf:da:ba:a2:39:2d:9e:ea:bd:9a:8a:47: 8a:61:d7:e5:16:f7:fe:99:25:de:74:1c:62:c1:aa:6c:b3:5f: 44:5d:78:86:3f:7f:7b:a1:84:85:3c:25:e8:9f:8b:be:f6:e5: 7d:d3:7d:d0:c6:46:73:89:04:82:1e:6d:b7:f0:e6:97:81:3c: 67:47:1b:3c:05:70:6b:1b:d5:e5:39:08:ef:e2:5d:6f:77:a6: 18:07:be:78:ee:21:8a:da:ce:fa:c7:9f:93:88:48:20:a4:06: 77:f0:b2:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuiNArnfuMZhDDIYG6BrJyCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZjdhMGEwNDhiNjhlY2NmYTRkNDllYWI0ZjE2ZGM3OTJj MGQzMTgwHhcNMjYwMTA5MTAwMTE4WhcNMjYwMTEwMTAwMTE4WjAzMTEwLwYDVQQD Eyg1NzI0NjQ0NzAyYzgxYWVmMmRmODU2MDQyOTJkZWIwNjY0ZWQ3NDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpH7+PqKKseJKfJREnVhtCo09l8T sTZgWA2hKVpjaoZCvlW1Nl9UyocJZgnrY/WARNcf3FbX6USnjDKWUdoPr44WcC9G FXiuQMO+w3Eo8N+lSUmfDC6SUkNoYQ5HHc+mjfe8HUB1cRvex1ypcZfe2Gles+Ae QLKwiTRMREkiZIlc9K+6HRKICvbLcdByux9Cds2SclSDkh8Lgo5NnKAqwbzdBhAH j1YLyB/Ds12DpCnRLL1QEV+5+XselNtWz4NSTsHjvDF729V3M23yfxsvXpZAlrYf QutaArAgBGpQrztQaSlDaVBFABGqrSqJ32Uk1TptCj/QdCHScXlK+sxh5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFckZEcCyBrvLfhWBCkt6wZk7XR4MB8GA1UdIwQY MBaAFL33oKBIto7M+k1J6rTxbceSwNMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgt MzUxNjE5MWE5ZDY4LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgtMzUxNjE5MWE5ZDY4 LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYvqsf8K DFlR+vYurXovsyk9oosJKC2K61KGFA3DxS5XM0d0qHbKi+ctHdQ5HgxR4Tm0qqGd swRFHXERkGuiQhWR/k6tupnSN/jhyCrS5opDLz4LCSYBuCzdS2ce3xbyuaV3U2Yq 9WfhQilGvoiRNV7PICNqLWzWZG9+Qe/JLiYbufweKPI3YhByj1hg2yQ0Cy0uMJFf v9q6ojktnuq9mopHimHX5Rb3/pkl3nQcYsGqbLNfRF14hj9/e6GEhTwl6J+Lvvbl fdN90MZGc4kEgh5tt/Dml4E8Z0cbPAVwaxvV5TkI7+Jdb3emGAe+eO4hitrO+sef k4hIIKQGd/Cy5Q== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:57 2026 by rpki-client