This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft File: VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json) Hash identifier: i/lp3kwqRaPMIRYqGtsvSH3C9pd6rm7tXaA9VP/m3Ho= Subject key identifier: EA:94:8F:A9:0F:41:5A:B5:3B:D8:4A:4C:28:7C:35:F0:BF:5C:42:5A Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10 Certificate issuer: /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910 Certificate serial: 019BD7A2224800E0423D5D338E42435ADFFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft Manifest number: 12AC Signing time: Mon 19 Jan 2026 19:01:25 +0000 Manifest this update: Mon 19 Jan 2026 19:01:25 +0000 Manifest next update: Tue 20 Jan 2026 19:01:25 +0000 Files and hashes: 1: 4-WbBaq98Oq9Hev6MWdBUYGPmH0.roa (hash: GNmnhi1gsX6X4qEuEkfyWsKzBAsClKRsbDlEB+HLZ4o=) 2: CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa (hash: xRBb5qX8Yz/3LKM505uXNjs7V3IJIMZmvB9mN9XYUV0=) 3: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: 76IY6oUaX5kYtuzI8W+BO2SKUCiqMxSPonDCenPVNOU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:a2:22:48:00:e0:42:3d:5d:33:8e:42:43:5a:df:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910 Validity Not Before: Jan 19 19:01:25 2026 GMT Not After : Jan 20 19:01:25 2026 GMT Subject: CN=ea948fa90f415ab53bd84a4c287c35f0bf5c425a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:79:5a:57:5d:4a:a7:16:95:e1:70:07:4a:e9: 0b:ff:a5:9a:3c:7c:62:c8:72:58:bd:c6:00:f0:c8: c3:7b:d3:67:be:26:57:ab:0e:58:13:b5:5f:4a:f0: 50:18:9e:8d:b5:34:4a:ba:ec:ed:f8:e4:24:4a:e4: 9e:f3:43:ab:0e:4a:17:2c:32:ff:ca:20:59:77:5c: 80:f5:90:b6:33:35:4d:fa:46:d0:56:41:7e:fd:75: 14:84:3a:cf:d2:0d:8f:08:fe:e2:04:5c:a7:8a:cf: e9:b2:67:96:1c:0c:08:c0:40:c5:e4:a8:7b:37:1b: 5d:4e:2f:f9:94:a3:92:db:eb:dc:05:ea:51:1e:d3: 97:a5:9a:02:b4:44:53:7e:40:a8:29:5d:e9:9f:e5: 39:62:ad:72:98:8f:2e:57:3b:02:71:30:c8:cd:0c: 2e:e8:2c:62:e1:d0:42:bd:b5:fa:af:60:13:4a:06: 78:48:d5:fe:ae:0e:7e:e6:88:1d:25:ab:14:1f:b1: 8b:e7:7b:57:fe:a5:3d:d8:86:6d:6a:94:17:08:48: dd:3e:89:44:5c:36:79:8d:fd:96:b2:1a:77:06:a8: 9a:53:b8:4a:97:35:fb:f8:ab:f9:ad:9e:93:20:c5: d2:e5:a2:fb:5e:5f:f6:80:52:30:14:7f:d0:79:22: a3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:94:8F:A9:0F:41:5A:B5:3B:D8:4A:4C:28:7C:35:F0:BF:5C:42:5A X509v3 Authority Key Identifier: keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6b:b0:73:8b:a1:ab:04:9b:ea:3e:51:01:d2:f5:23:cb:14: 03:b2:95:6b:a9:fa:c3:1a:5e:7f:a6:b4:d1:17:87:4a:36:a6: 90:05:f4:d5:ba:68:92:ff:18:54:f3:2d:60:d2:33:99:4c:e0: bb:75:a9:c9:bf:6c:f5:4b:72:a8:27:e1:bf:68:0e:b4:58:d0: aa:79:70:61:86:c6:ac:9f:46:8f:9c:da:b2:b3:2c:8a:4c:8a: dc:ea:e6:03:3b:84:9d:dc:0a:4a:36:09:c5:87:7f:80:ab:8c: 20:ad:36:62:bc:42:38:ff:43:56:cb:9c:23:7e:3b:5f:e6:49: d0:e5:aa:54:3e:07:41:42:38:ca:b3:2b:d6:32:93:74:f2:91: 49:b1:a9:df:5d:7b:31:b8:3c:57:f9:0a:5e:d6:67:86:66:4f: 2e:95:c3:72:18:9f:23:e7:b3:5f:da:e2:55:e2:aa:e7:5b:60: ed:35:59:2a:d5:bc:84:1d:79:1d:f5:88:ee:2b:05:a8:ef:a1: 83:58:3b:1c:40:55:fd:03:c7:85:45:d0:7c:d9:df:67:67:80: 9f:01:4e:57:c8:bb:53:2a:1f:e9:8b:90:c8:46:8f:ea:5e:ee: df:e5:35:24:80:b2:af:01:8a:87:17:b4:2c:65:89:2d:92:e5: ba:be:e1:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvXoiJIAOBCPV0zjkJDWt/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1M2NhN2IyZTZjMWUxN2Y1ZjNlZGJlMzc1ZTE5ZWNlMzk1 MzM5MTAwHhcNMjYwMTE5MTkwMTI1WhcNMjYwMTIwMTkwMTI1WjAzMTEwLwYDVQQD EyhlYTk0OGZhOTBmNDE1YWI1M2JkODRhNGMyODdjMzVmMGJmNWM0MjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3nlaV11KpxaV4XAHSukL/6WaPHxi yHJYvcYA8MjDe9NnviZXqw5YE7VfSvBQGJ6NtTRKuuzt+OQkSuSe80OrDkoXLDL/ yiBZd1yA9ZC2MzVN+kbQVkF+/XUUhDrP0g2PCP7iBFynis/psmeWHAwIwEDF5Kh7 NxtdTi/5lKOS2+vcBepRHtOXpZoCtERTfkCoKV3pn+U5Yq1ymI8uVzsCcTDIzQwu 6Cxi4dBCvbX6r2ATSgZ4SNX+rg5+5ogdJasUH7GL53tX/qU92IZtapQXCEjdPolE XDZ5jf2Wshp3BqiaU7hKlzX7+Kv5rZ6TIMXS5aL7Xl/2gFIwFH/QeSKjzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqUj6kPQVq1O9hKTCh8NfC/XEJaMB8GA1UdIwQY MBaAFFU8p7LmweF/Xz7b43Xhns45UzkQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMt MTUzZTkxODJhZjQxLzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kNTcyYzMtMzUwZi00NzliLWE3YjMtMTUzZTkxODJhZjQx LzEvVlR5bnN1YkI0WDlmUHR2amRlR2V6amxUT1JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXWuwc4uh qwSb6j5RAdL1I8sUA7KVa6n6wxpef6a00ReHSjamkAX01bpokv8YVPMtYNIzmUzg u3Wpyb9s9UtyqCfhv2gOtFjQqnlwYYbGrJ9Gj5zasrMsikyK3OrmAzuEndwKSjYJ xYd/gKuMIK02YrxCOP9DVsucI347X+ZJ0OWqVD4HQUI4yrMr1jKTdPKRSbGp3117 Mbg8V/kKXtZnhmZPLpXDchifI+ezX9riVeKq51tg7TVZKtW8hB15HfWI7isFqO+h g1g7HEBV/QPHhUXQfNnfZ2eAnwFOV8i7Uyof6YuQyEaP6l7u3+U1JICyrwGKhxe0 LGWJLZLlur7hsQ== -----END CERTIFICATE-----Generated at Tue Jan 20 03:00:51 2026 by rpki-client