This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft File: vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json) Hash identifier: mfbhnCJ6zNADYRAfrESifrTiYPVd30I9ay9WbGKGY0A= Subject key identifier: 3C:3F:F1:5A:1A:41:7F:A5:2B:82:DB:EC:08:6E:07:A6:49:42:F2:42 Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07 Certificate issuer: /CN=be3c54d1edca692f44c9da383402c24fde723507 Certificate serial: 019BFB098CB68E263CA328BF15D9AC929DD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft Manifest number: 177E Signing time: Mon 26 Jan 2026 16:01:05 +0000 Manifest this update: Mon 26 Jan 2026 16:01:05 +0000 Manifest next update: Tue 27 Jan 2026 16:01:05 +0000 Files and hashes: 1: CIRhprz3rBBOPNEdy3jnFyLtmiA.roa (hash: z/XfH3Aycu8JqZsvCP3U4kd6hBotdVQ6hRO0n7omiP8=) 2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: 0W6AA+oQgTpdg1n3mGblCQSFSYejXnh06xbvuLOuvCI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:8c:b6:8e:26:3c:a3:28:bf:15:d9:ac:92:9d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507 Validity Not Before: Jan 26 16:01:05 2026 GMT Not After : Jan 27 16:01:05 2026 GMT Subject: CN=3c3ff15a1a417fa52b82dbec086e07a64942f242 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ca:c0:09:52:4a:e4:a1:26:67:69:fe:89:5c: 15:9f:dc:7f:33:76:04:04:ea:c0:80:47:fa:7f:be: 50:10:cf:60:58:29:ee:fb:0c:7d:58:49:68:97:41: a2:20:81:05:f3:6f:07:dc:9a:e7:99:5c:37:33:7f: ee:01:a7:bd:de:75:82:07:63:4c:60:5c:64:c0:e1: 1c:81:a7:6a:22:21:54:03:df:89:e6:5f:21:e7:04: 0e:be:f0:b5:fc:5b:03:ab:89:34:01:6f:da:a8:2d: 52:18:fa:28:13:96:21:de:dd:80:71:be:21:78:92: 81:b6:bc:5f:c3:df:92:9a:1b:8c:f0:cd:0f:92:e3: 00:7d:be:da:b2:71:01:70:dd:83:0b:36:d0:08:71: c8:0e:a9:10:a1:92:2b:25:93:ec:c8:5d:4f:9d:4a: 20:99:a7:21:43:6d:1a:79:54:00:07:81:ce:ff:d5: 98:fc:e3:fc:99:3e:a5:c7:2f:b1:d4:40:3d:15:b7: 70:2a:a0:ae:88:69:8a:e1:f6:ee:cb:54:3c:5d:16: f1:63:8f:70:bb:38:e9:d1:28:ce:0d:3e:99:92:9e: e3:5e:47:7b:c5:8f:12:a5:bd:fc:b2:29:a3:1d:90: 8e:64:26:dd:cc:f2:01:eb:fd:a5:fa:ac:c9:4f:34: 2e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:3F:F1:5A:1A:41:7F:A5:2B:82:DB:EC:08:6E:07:A6:49:42:F2:42 X509v3 Authority Key Identifier: keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:37:48:f9:b2:ab:ad:a9:a6:d5:c0:17:2d:f5:d5:e0:03:4f: 37:53:7c:bb:4c:00:5e:fb:32:d1:26:31:88:a6:3c:f0:9c:ae: fc:a1:9f:c7:34:4a:e8:44:41:30:b2:c8:8d:ec:fc:f1:1b:d5: a6:95:25:f3:aa:82:74:26:fb:94:b6:6c:70:5b:d8:d4:1c:7d: 3d:01:8c:20:04:32:65:94:a7:1d:f9:ab:8e:ba:63:dd:af:4b: 62:b2:6e:b2:a7:e6:1d:23:09:fc:cb:42:6e:48:38:da:da:d8: 27:57:d8:3c:da:92:37:87:8b:6a:27:e7:ba:b0:d6:6e:85:34: 7c:46:b0:04:e4:e8:c2:d4:be:ce:6a:ab:c3:42:77:b3:73:24: 25:06:1a:82:95:12:2a:55:98:9e:e7:0e:a6:cb:21:71:b5:5c: e8:62:c6:d9:9d:bc:c5:97:1b:90:3e:69:46:de:56:e4:eb:36: 7f:8f:84:8a:08:ee:c8:cd:1d:29:69:e7:95:7c:bc:35:28:f3: 00:33:aa:1a:1f:70:b0:89:2c:1f:fb:90:68:42:8b:da:66:2e: a1:0b:d8:01:e2:9e:df:17:1b:e6:2c:bf:65:51:0e:a0:03:4f: 16:d0:79:f4:cb:f6:2b:da:ca:0b:2f:53:42:a6:dd:73:89:4a: 24:0f:79:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7CYy2jiY8oyi/Fdmskp3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlM2M1NGQxZWRjYTY5MmY0NGM5ZGEzODM0MDJjMjRmZGU3 MjM1MDcwHhcNMjYwMTI2MTYwMTA1WhcNMjYwMTI3MTYwMTA1WjAzMTEwLwYDVQQD EygzYzNmZjE1YTFhNDE3ZmE1MmI4MmRiZWMwODZlMDdhNjQ5NDJmMjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8rACVJK5KEmZ2n+iVwVn9x/M3YE BOrAgEf6f75QEM9gWCnu+wx9WElol0GiIIEF828H3JrnmVw3M3/uAae93nWCB2NM YFxkwOEcgadqIiFUA9+J5l8h5wQOvvC1/FsDq4k0AW/aqC1SGPooE5Yh3t2Acb4h eJKBtrxfw9+SmhuM8M0PkuMAfb7asnEBcN2DCzbQCHHIDqkQoZIrJZPsyF1PnUog machQ20aeVQAB4HO/9WY/OP8mT6lxy+x1EA9FbdwKqCuiGmK4fbuy1Q8XRbxY49w uzjp0SjODT6Zkp7jXkd7xY8Spb38simjHZCOZCbdzPIB6/2l+qzJTzQudwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDw/8VoaQX+lK4Lb7AhuB6ZJQvJCMB8GA1UdIwQY MBaAFL48VNHtymkvRMnaODQCwk/ecjUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZDY3NDUtZTBkNi00MGQwLTg0ZWQt YzM0OTUzZWRjN2U1LzEvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZDY3NDUtZTBkNi00MGQwLTg0ZWQtYzM0OTUzZWRjN2U1 LzEvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApzdI+bKr ramm1cAXLfXV4ANPN1N8u0wAXvsy0SYxiKY88Jyu/KGfxzRK6ERBMLLIjez88RvV ppUl86qCdCb7lLZscFvY1Bx9PQGMIAQyZZSnHfmrjrpj3a9LYrJusqfmHSMJ/MtC bkg42trYJ1fYPNqSN4eLaifnurDWboU0fEawBOTowtS+zmqrw0J3s3MkJQYagpUS KlWYnucOpsshcbVc6GLG2Z28xZcbkD5pRt5W5Os2f4+EigjuyM0dKWnnlXy8NSjz ADOqGh9wsIksH/uQaEKL2mYuoQvYAeKe3xcb5iy/ZVEOoANPFtB59Mv2K9rKCy9T Qqbdc4lKJA95wA== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:30 2026 by rpki-client