This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft File: vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json) Hash identifier: 2yiYxj8WXpBlZ7I/lXgFvwMIuZcTnd63bDJl9Sq0Z/U= Subject key identifier: BB:A3:FF:B4:C1:89:48:88:55:A1:43:84:26:0A:4D:E3:F6:FF:C8:D8 Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6 Certificate issuer: /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6 Certificate serial: 019C096A19C23C8AE7459A41CFE4817E15C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft Manifest number: 138D Signing time: Thu 29 Jan 2026 11:01:14 +0000 Manifest this update: Thu 29 Jan 2026 11:01:14 +0000 Manifest next update: Fri 30 Jan 2026 11:01:14 +0000 Files and hashes: 1: kq-hWSmz-MFl73s5gbREYrag4Mo.roa (hash: F1nBzA9PPwvdvb6M3PbhCg7MtCLOKfzqRqmw7zMeMt0=) 2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: lAW4Ene0Qm2TJ3kdrpyNs0WkElPA7C9PYheeD1Hb+nE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 11:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:6a:19:c2:3c:8a:e7:45:9a:41:cf:e4:81:7e:15:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6 Validity Not Before: Jan 29 11:01:14 2026 GMT Not After : Jan 30 11:01:14 2026 GMT Subject: CN=bba3ffb4c189488855a14384260a4de3f6ffc8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ce:6f:ec:0d:b6:25:dc:42:40:01:7c:92:20: 50:5d:07:7b:ba:ad:ff:af:a1:4b:02:0a:11:71:1d: fd:da:4e:4d:fc:7b:dd:87:e4:04:94:9b:de:37:bc: b0:11:0e:13:be:11:39:ce:05:a7:df:dd:61:34:1a: 74:4d:52:d9:f6:53:28:9b:07:28:83:99:c6:97:0b: f5:1d:4a:ce:2b:e4:6f:ea:eb:ff:28:63:d6:58:7a: 42:a2:f5:09:bb:fc:b6:67:40:17:63:69:c7:d8:c0: 4b:a0:5d:5b:03:7b:d7:15:e7:ea:87:62:cc:b7:5c: 43:75:ea:b7:1b:01:1c:45:d5:98:e2:b3:57:ba:25: 3f:59:1f:ee:f6:32:25:9c:ac:af:28:8d:b8:40:a5: e0:12:f8:72:1d:19:35:9c:9f:0e:82:dc:3e:97:40: 13:ba:48:1b:14:d6:d8:a5:18:7b:1e:f3:7b:63:59: da:86:31:49:99:57:a8:95:5f:37:d6:9f:a1:f1:69: f3:23:bd:e7:0c:a3:de:32:91:53:2b:34:aa:35:16: 4f:05:c7:73:ae:c8:5d:2d:e2:1a:fe:51:81:3e:7b: 4e:81:ac:cb:91:87:e4:ef:20:34:98:e3:41:7b:81: a0:e0:40:c2:cc:81:cd:3e:9e:c4:26:a2:17:fb:13: c0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A3:FF:B4:C1:89:48:88:55:A1:43:84:26:0A:4D:E3:F6:FF:C8:D8 X509v3 Authority Key Identifier: keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:85:61:dd:11:2c:09:de:45:23:04:14:1e:82:a5:5f:58:53: b5:d4:51:8a:fd:0f:31:6b:87:c8:3e:0a:50:41:d2:15:cf:8f: cd:f4:d5:9b:c2:a7:ca:f6:e3:41:e1:fe:a0:85:85:8c:53:16: 54:3b:5e:46:dc:b2:de:b0:7d:b7:f8:f6:5b:80:29:49:b9:40: ed:22:88:8e:93:26:f2:cd:d0:3d:e6:e8:99:14:83:26:d7:94: 9f:1c:3d:6f:c5:8a:b8:e6:1d:4d:41:e7:2c:70:d9:b3:ce:cf: ae:d8:70:ad:ba:e8:27:44:53:92:48:9b:a6:e9:1a:14:f2:b2: b2:0f:2f:28:8b:ab:c0:ce:d9:5e:1c:a4:4d:3b:8d:76:e0:c4: 72:5c:71:34:4b:6e:a5:8f:c7:8e:9f:2a:f4:7f:41:4c:a0:e6: 0f:0c:29:96:12:5c:11:50:f8:85:c5:a6:e0:c1:9f:87:8c:c0: 04:51:f7:55:da:63:fc:3a:b1:35:5a:ab:7d:aa:de:7a:8d:05: 30:74:f5:49:43:32:7b:e0:08:2b:7a:02:c9:c1:b1:f3:35:e4: ce:c6:0a:b4:6b:c0:b5:63:39:9a:60:18:c0:25:93:3e:e1:30: ee:ad:49:cc:45:bf:13:f0:5a:63:56:41:07:6e:69:f3:da:92: e4:c9:f3:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwJahnCPIrnRZpBz+SBfhXGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOWI1NDU4YzIzN2RiNjU4NDhjYjJhY2JlYzZkYjk0MjNm Y2IzYTYwHhcNMjYwMTI5MTEwMTE0WhcNMjYwMTMwMTEwMTE0WjAzMTEwLwYDVQQD EyhiYmEzZmZiNGMxODk0ODg4NTVhMTQzODQyNjBhNGRlM2Y2ZmZjOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc5v7A22JdxCQAF8kiBQXQd7uq3/ r6FLAgoRcR392k5N/Hvdh+QElJveN7ywEQ4TvhE5zgWn391hNBp0TVLZ9lMomwco g5nGlwv1HUrOK+Rv6uv/KGPWWHpCovUJu/y2Z0AXY2nH2MBLoF1bA3vXFefqh2LM t1xDdeq3GwEcRdWY4rNXuiU/WR/u9jIlnKyvKI24QKXgEvhyHRk1nJ8Ogtw+l0AT ukgbFNbYpRh7HvN7Y1nahjFJmVeolV831p+h8WnzI73nDKPeMpFTKzSqNRZPBcdz rshdLeIa/lGBPntOgazLkYfk7yA0mONBe4Gg4EDCzIHNPp7EJqIX+xPAHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuj/7TBiUiIVaFDhCYKTeP2/8jYMB8GA1UdIwQY MBaAFL6bVFjCN9tlhIyyrL7G25Qj/LOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUt MzcwYjgyZTlmOTBiLzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jZDFkYjMtMjg3Ny00ZjMyLTgzYzUtMzcwYjgyZTlmOTBi LzEvdnB0VVdNSTMyMldFakxLc3ZzYmJsQ1A4czZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdYVh3REs Cd5FIwQUHoKlX1hTtdRRiv0PMWuHyD4KUEHSFc+PzfTVm8KnyvbjQeH+oIWFjFMW VDteRtyy3rB9t/j2W4ApSblA7SKIjpMm8s3QPebomRSDJteUnxw9b8WKuOYdTUHn LHDZs87PrthwrbroJ0RTkkibpukaFPKysg8vKIurwM7ZXhykTTuNduDEclxxNEtu pY/Hjp8q9H9BTKDmDwwplhJcEVD4hcWm4MGfh4zABFH3Vdpj/DqxNVqrfareeo0F MHT1SUMye+AIK3oCycGx8zXkzsYKtGvAtWM5mmAYwCWTPuEw7q1JzEW/E/BaY1ZB B25p89qS5Mnzog== -----END CERTIFICATE-----Generated at Thu Jan 29 14:11:11 2026 by rpki-client