This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft File: VDxwGANHJZY6lxyWqMqrWYyuY4o.mft (raw, json) Hash identifier: jSSnCRN/rYQlkAKQG1vmAHl3pXdagmLQI8D7qVM9yLo= Subject key identifier: 3E:53:05:65:49:33:06:FE:55:98:09:A0:B0:DF:57:84:96:E3:99:CE Authority key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A Certificate issuer: /CN=543c7018034725963a971c96a8caab598cae638a Certificate serial: 019C1E7230317F2DCD5479CD6DA125A1863D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft Manifest number: 05F2 Signing time: Mon 02 Feb 2026 13:02:05 +0000 Manifest this update: Mon 02 Feb 2026 13:02:05 +0000 Manifest next update: Tue 03 Feb 2026 13:02:05 +0000 Files and hashes: 1: 6EkJKay6ASec3Uw_czHATgEyfKA.roa (hash: 2c9WHQTBPJnNJtn4QC9p7CmncMVB1cW6dCt+0dg0vCE=) 2: VDxwGANHJZY6lxyWqMqrWYyuY4o.crl (hash: 4V+SiT+xDTp2FeeonuSiVPGwTkDu3q0FjKEpRf7nRkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 13:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:72:30:31:7f:2d:cd:54:79:cd:6d:a1:25:a1:86:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c7018034725963a971c96a8caab598cae638a Validity Not Before: Feb 2 13:02:05 2026 GMT Not After : Feb 3 13:02:05 2026 GMT Subject: CN=3e530565493306fe559809a0b0df578496e399ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0b:38:4e:4c:63:af:b5:d9:fa:74:85:ef:93: 1a:37:a4:e9:e9:70:a5:b5:aa:05:c7:34:09:d1:0c: f6:d5:a4:14:ef:cc:1d:53:22:26:3e:e4:33:69:a9: c2:30:9d:4c:0a:6b:86:d8:55:ed:75:87:67:5f:90: d4:46:de:f2:3d:53:19:17:b9:55:11:55:5c:70:c3: 77:92:15:f3:b3:07:46:20:7a:f5:8f:59:02:31:81: 87:24:55:57:36:50:77:75:51:1a:89:92:a9:3e:03: 5b:5a:52:bb:53:6b:3b:3f:a0:a5:f3:72:ed:23:9b: 25:6b:ff:67:c1:9c:08:81:f9:bc:80:b5:b8:ad:59: fe:e3:c1:14:51:ad:1b:7b:90:ba:ff:60:0c:42:c8: ab:de:c9:6d:85:96:2b:e8:87:c5:25:a9:e9:c9:22: 23:f2:b2:a5:e9:7b:1a:57:39:ca:78:48:02:30:77: 22:35:45:17:3d:7c:1f:f4:45:fb:30:5c:a8:70:1f: 83:49:03:0f:2c:68:15:bc:b5:2b:5a:52:a2:6f:e9: 63:f8:4f:bb:12:03:95:be:38:1f:fc:b0:96:1c:fe: 25:7f:1e:47:5d:38:a6:d9:91:96:ee:cf:2a:37:82: e2:1b:65:0e:f3:5f:0a:5f:1a:57:44:9c:fb:73:c8: 21:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:53:05:65:49:33:06:FE:55:98:09:A0:B0:DF:57:84:96:E3:99:CE X509v3 Authority Key Identifier: keyid:54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:fd:4f:60:ef:3d:9f:15:ab:bd:82:fd:60:01:b1:b6:ad:8d: f5:e5:bc:b9:d7:cf:d1:f3:bf:65:84:5a:93:33:a1:77:e3:ca: 9b:f1:40:01:a8:6a:09:e6:ba:f9:3c:27:55:bd:27:c0:69:6a: a3:8d:50:7e:64:0c:3d:62:8f:9a:f6:b3:4d:74:c6:66:48:c2: bf:ce:46:96:06:eb:98:94:76:1c:13:0b:29:5d:77:3f:f5:11: d9:71:08:c9:17:30:7b:d9:00:92:4c:af:97:51:c4:11:04:45: 83:ea:d7:e4:77:3b:1c:34:81:7e:35:ce:e8:09:78:70:4f:75: 17:2a:84:53:68:68:85:ce:ff:17:07:4c:11:89:56:ce:09:88: 70:14:e1:0f:ae:29:eb:6e:6c:77:b1:2c:b3:be:25:78:7b:77: 0c:66:e9:53:eb:85:71:2f:81:26:27:f5:d0:83:08:3b:e0:1f: eb:8a:79:1d:9b:20:fb:03:44:a2:d4:d7:00:f9:bf:ef:22:0b: b3:07:ac:dc:fd:f8:e2:ad:0a:47:42:9c:8b:63:48:fd:d7:12: bd:fd:78:01:62:4f:d4:56:87:91:c6:31:87:04:d9:91:15:75: 04:4b:5a:b4:49:65:6c:cb:cd:bc:68:89:1b:c8:a6:77:07:c4: a2:74:7c:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwecjAxfy3NVHnNbaEloYY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M3MDE4MDM0NzI1OTYzYTk3MWM5NmE4Y2FhYjU5OGNh ZTYzOGEwHhcNMjYwMjAyMTMwMjA1WhcNMjYwMjAzMTMwMjA1WjAzMTEwLwYDVQQD EygzZTUzMDU2NTQ5MzMwNmZlNTU5ODA5YTBiMGRmNTc4NDk2ZTM5OWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQs4Tkxjr7XZ+nSF75MaN6Tp6XCl taoFxzQJ0Qz21aQU78wdUyImPuQzaanCMJ1MCmuG2FXtdYdnX5DURt7yPVMZF7lV EVVccMN3khXzswdGIHr1j1kCMYGHJFVXNlB3dVEaiZKpPgNbWlK7U2s7P6Cl83Lt I5sla/9nwZwIgfm8gLW4rVn+48EUUa0be5C6/2AMQsir3slthZYr6IfFJanpySIj 8rKl6XsaVznKeEgCMHciNUUXPXwf9EX7MFyocB+DSQMPLGgVvLUrWlKib+lj+E+7 EgOVvjgf/LCWHP4lfx5HXTim2ZGW7s8qN4LiG2UO818KXxpXRJz7c8ghIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5TBWVJMwb+VZgJoLDfV4SW45nOMB8GA1UdIwQY MBaAFFQ8cBgDRyWWOpcclqjKq1mMrmOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81MDlkMGItYWNkMS00OTU4LWEzY2Qt Mzc1ZjI0NDlhOGMxLzEvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81MDlkMGItYWNkMS00OTU4LWEzY2QtMzc1ZjI0NDlhOGMx LzEvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJP1PYO89 nxWrvYL9YAGxtq2N9eW8udfP0fO/ZYRakzOhd+PKm/FAAahqCea6+TwnVb0nwGlq o41QfmQMPWKPmvazTXTGZkjCv85GlgbrmJR2HBMLKV13P/UR2XEIyRcwe9kAkkyv l1HEEQRFg+rX5Hc7HDSBfjXO6Al4cE91FyqEU2hohc7/FwdMEYlWzgmIcBThD64p 625sd7Ess74leHt3DGbpU+uFcS+BJif10IMIO+Af64p5HZsg+wNEotTXAPm/7yIL swes3P344q0KR0Kci2NI/dcSvf14AWJP1FaHkcYxhwTZkRV1BEtatEllbMvNvGiJ G8imdwfEonR8Ww== -----END CERTIFICATE-----Generated at Mon Feb 2 17:17:08 2026 by rpki-client