This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft File: vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json) Hash identifier: Gop9i0k28TJb4OQGbh57Eyu6UDv1M79Auc1CeF7H3Lo= Subject key identifier: CE:6C:53:B5:97:43:9C:61:DA:5E:CE:02:93:F0:61:55:57:DB:B6:12 Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1 Certificate issuer: /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1 Certificate serial: 019BFC8A924BC9ED65828661DF1FA93F3A0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft Manifest number: 0D44 Signing time: Mon 26 Jan 2026 23:01:38 +0000 Manifest this update: Mon 26 Jan 2026 23:01:38 +0000 Manifest next update: Tue 27 Jan 2026 23:01:38 +0000 Files and hashes: 1: t1JXKPULVgSgvQ0I80otAQ7Epzg.roa (hash: sx0p3fASYGJ0JSBWFt0pc+jsNHZgbTF+OTJo6DFYN9A=) 2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: RtCamHH0D0KtHiMDCeib6b7N6PT9acMBY/HOd3r9nzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:8a:92:4b:c9:ed:65:82:86:61:df:1f:a9:3f:3a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1 Validity Not Before: Jan 26 23:01:38 2026 GMT Not After : Jan 27 23:01:38 2026 GMT Subject: CN=ce6c53b597439c61da5ece0293f0615557dbb612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:89:5b:38:5c:53:09:43:91:1a:d6:de:6e:e6: 11:21:06:74:a8:5f:23:b5:04:92:bb:f1:b9:c4:62: 5e:6b:56:f2:82:0f:86:86:1f:94:4c:fb:bc:b1:e8: 5c:15:7e:69:e1:25:cf:2a:85:a3:e5:fd:e5:e7:d5: a7:7c:b8:eb:27:6c:85:9d:cc:d9:95:46:8a:d3:03: 70:f0:0f:9e:15:7a:2b:8d:74:98:05:b6:0d:5d:ef: 74:7e:e4:02:24:24:8c:fe:8b:a6:7a:d4:33:c2:76: 63:1b:79:45:de:02:64:f8:38:87:2d:eb:4e:8a:4e: 46:bf:4d:cd:14:ad:06:1f:9c:74:48:aa:22:b1:0a: 15:50:45:83:58:7b:75:f9:13:96:67:85:11:29:9c: 3e:e9:34:a4:6e:b6:f6:e9:f8:35:76:6a:47:e2:a5: 48:81:c5:0d:75:2b:25:11:c1:92:23:8f:99:c4:2e: fc:86:6e:41:6e:25:a5:3e:6f:6f:4e:2b:b1:3e:c9: 66:2f:92:0e:aa:9e:be:06:5c:ff:26:cd:a9:36:e3: 38:90:8e:35:62:27:95:7e:88:ca:9e:31:97:fd:44: 8a:ee:5d:8f:63:8a:c9:b2:72:b4:76:38:85:12:0a: 55:f1:2c:44:40:6a:95:d1:3d:73:71:34:f5:39:76: 29:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:6C:53:B5:97:43:9C:61:DA:5E:CE:02:93:F0:61:55:57:DB:B6:12 X509v3 Authority Key Identifier: keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:81:f8:fb:73:e8:10:ad:03:7b:40:06:7e:18:13:d9:3f:12: a0:67:5f:22:e1:2b:c4:6e:9e:d3:82:a9:cc:73:d3:3b:31:f1: 43:28:26:74:db:57:fc:e7:60:9b:22:e9:ac:44:93:99:09:18: f4:68:b9:5f:b4:a4:0c:96:32:9d:41:82:4a:6c:0a:7b:42:14: 27:15:37:58:dc:91:1b:6b:38:c3:b1:cd:5d:f8:4c:26:e2:29: f9:6a:ac:8d:82:64:cc:53:35:15:2b:d6:1f:ba:2c:80:8d:9f: f2:45:61:d2:a9:fc:bd:64:d6:0c:ed:0e:98:9a:24:95:61:4d: d4:ab:e0:b5:c3:17:83:3d:ba:86:aa:35:d8:1e:1a:ab:53:fc: 39:d0:bd:50:3f:ab:f6:fc:70:b7:65:15:40:95:21:52:ab:7c: 49:58:ab:b1:ac:32:4c:6f:5a:14:84:98:df:f9:f1:e9:21:b5: d6:f6:2e:56:fc:bf:bb:42:34:24:d6:f1:54:e5:f3:fb:15:4d: 29:08:32:9c:52:04:b0:e5:9a:ab:4c:1a:f1:25:b6:5a:e6:33: 5f:d7:b3:2e:bd:68:8b:1c:00:1d:f7:41:ef:39:95:99:44:81: 68:f7:73:3b:f5:28:45:ff:c5:bc:f5:92:d4:c2:46:bf:0c:ae: fd:04:df:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ipJLye1lgoZh3x+pPzoKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNjViMzBkYWQ3NGFjNzY5ZDRiNWIzMjMxMmRhOGZhODFh YjMzZDEwHhcNMjYwMTI2MjMwMTM4WhcNMjYwMTI3MjMwMTM4WjAzMTEwLwYDVQQD EyhjZTZjNTNiNTk3NDM5YzYxZGE1ZWNlMDI5M2YwNjE1NTU3ZGJiNjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYlbOFxTCUORGtbebuYRIQZ0qF8j tQSSu/G5xGJea1bygg+Ghh+UTPu8sehcFX5p4SXPKoWj5f3l59WnfLjrJ2yFnczZ lUaK0wNw8A+eFXorjXSYBbYNXe90fuQCJCSM/oumetQzwnZjG3lF3gJk+DiHLetO ik5Gv03NFK0GH5x0SKoisQoVUEWDWHt1+ROWZ4URKZw+6TSkbrb26fg1dmpH4qVI gcUNdSslEcGSI4+ZxC78hm5BbiWlPm9vTiuxPslmL5IOqp6+Blz/Js2pNuM4kI41 YieVfojKnjGX/USK7l2PY4rJsnK0djiFEgpV8SxEQGqV0T1zcTT1OXYpRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5sU7WXQ5xh2l7OApPwYVVX27YSMB8GA1UdIwQY MBaAFL5lsw2tdKx2nUtbMjEtqPqBqzPRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm1XekRhMTBySGFkUzFzeU1TMm8tb0dyTTlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS82NmUwMzItYWI2YS00ZDNhLWExMmIt NTEwY2ZhNDU1NjQwLzEvdm1XekRhMTBySGFkUzFzeU1TMm8tb0dyTTlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS82NmUwMzItYWI2YS00ZDNhLWExMmItNTEwY2ZhNDU1NjQw LzEvdm1XekRhMTBySGFkUzFzeU1TMm8tb0dyTTlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOYH4+3Po EK0De0AGfhgT2T8SoGdfIuErxG6e04KpzHPTOzHxQygmdNtX/OdgmyLprESTmQkY 9Gi5X7SkDJYynUGCSmwKe0IUJxU3WNyRG2s4w7HNXfhMJuIp+WqsjYJkzFM1FSvW H7osgI2f8kVh0qn8vWTWDO0OmJoklWFN1KvgtcMXgz26hqo12B4aq1P8OdC9UD+r 9vxwt2UVQJUhUqt8SVirsawyTG9aFISY3/nx6SG11vYuVvy/u0I0JNbxVOXz+xVN KQgynFIEsOWaq0wa8SW2WuYzX9ezLr1oixwAHfdB7zmVmUSBaPdzO/UoRf/FvPWS 1MJGvwyu/QTf2Q== -----END CERTIFICATE-----Generated at Tue Jan 27 03:55:56 2026 by rpki-client