This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft File: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json) Hash identifier: Armm6iKNxgKlcmGoLiK8907n3rAUyX6ABWaFZDoMCj0= Subject key identifier: D7:69:3B:61:DE:D9:21:A3:C6:27:42:EC:F6:9E:80:6A:CD:5B:12:D6 Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1 Certificate issuer: /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1 Certificate serial: 019BFB771B8F415AE4B2DBFAA32D216642EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft Manifest number: 143A Signing time: Mon 26 Jan 2026 18:00:45 +0000 Manifest this update: Mon 26 Jan 2026 18:00:45 +0000 Manifest next update: Tue 27 Jan 2026 18:00:45 +0000 Files and hashes: 1: 1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa (hash: 6iVNvhe10i4KO9IhQfbWbvNH2WkwCCWrKbOYcXZWq7g=) 2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: HEa7n0FRqAR1IIzCjJI9bJ3kZ9Csax+W2/j2zxSgdkg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:77:1b:8f:41:5a:e4:b2:db:fa:a3:2d:21:66:42:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1 Validity Not Before: Jan 26 18:00:45 2026 GMT Not After : Jan 27 18:00:45 2026 GMT Subject: CN=d7693b61ded921a3c62742ecf69e806acd5b12d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e2:91:fe:2b:97:80:e7:44:29:3b:33:4f:bb: ad:4d:a4:a8:cf:3d:c3:d2:88:ea:e0:0b:1b:16:aa: bf:77:53:57:c5:a1:80:d2:f4:cd:0b:c8:71:f3:c2: 4e:67:e6:54:c0:ef:aa:f5:da:20:41:26:33:d6:a7: 5e:0d:b3:e4:0e:c0:e9:24:c7:ab:6d:6e:ed:4e:11: 49:e0:89:35:1d:3d:04:98:bb:ff:a1:75:38:20:1b: 72:b7:68:57:d8:2c:d5:3e:e3:f6:6c:c4:21:42:5e: 4c:eb:0d:9e:2c:d7:70:1e:be:42:e0:57:84:da:65: 07:8e:1a:30:f9:b4:e5:cd:38:34:e5:e2:b7:26:8c: bf:df:b2:ac:ef:72:62:d9:a0:68:60:ff:1e:e0:1c: a3:99:c1:6d:d1:ab:da:8f:4c:bc:7f:17:16:f0:6d: 08:80:72:0d:1d:17:4c:9e:a9:36:bd:95:ee:91:bb: 03:87:ff:f2:24:5c:93:ac:15:ae:44:0c:1c:f3:82: 5d:7f:b9:73:79:24:ed:b1:e2:8f:6d:0f:6d:d5:80: a3:a2:17:c2:c5:dc:7d:06:6e:f4:1d:54:4d:67:87: 04:f8:02:9b:b6:a7:2f:a7:16:cf:f5:2f:fb:c2:4c: e8:e1:8c:b6:93:90:d7:3b:e5:9d:3f:19:4e:95:23: 53:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:69:3B:61:DE:D9:21:A3:C6:27:42:EC:F6:9E:80:6A:CD:5B:12:D6 X509v3 Authority Key Identifier: keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5d:cf:a9:e9:02:11:2c:13:d1:d8:74:c7:e5:21:23:c3:0f: 2a:6d:5f:6a:75:09:69:65:f6:1a:be:fa:1f:d4:5a:57:1a:32: 57:3c:95:3a:0a:b2:bd:40:c4:90:5d:51:0a:ce:9d:a4:f2:e8: d3:7a:03:7f:b3:cf:d7:52:8a:3b:3b:a3:6b:eb:71:2c:14:64: fc:e1:05:e5:13:0e:c0:7c:16:60:0e:91:82:d5:51:7d:e6:12: b1:9f:bf:ae:0b:14:ff:35:75:9a:e8:4a:98:d4:de:5e:26:b3: 6d:89:ed:66:6f:9c:56:27:69:46:1e:11:1d:4b:f3:4d:14:7a: 77:1d:f1:83:35:fc:e7:1e:29:15:0b:5d:6c:4c:b4:33:24:0b: c2:89:3a:0b:8a:85:ad:4e:32:07:c4:4f:6b:04:58:4c:89:90: 19:2b:7d:09:2f:39:07:8f:9a:55:29:db:66:05:e6:35:ab:15: 63:e7:1c:3f:18:fa:60:55:31:bc:d6:39:10:9c:3e:57:93:79: 71:4d:d7:ae:93:67:5f:5c:74:66:85:2c:93:f3:a5:9d:44:d9: cf:f8:0d:a2:69:69:0d:e5:40:79:ff:b3:63:99:52:b8:73:41: bc:2f:cc:bf:14:cf:30:37:c9:20:d4:95:82:05:f0:27:a0:34: 68:24:28:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7dxuPQVrkstv6oy0hZkLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MGQ0YzU3MWQ4YmZiZmRkOGZhM2ExNzBmOTlmYjNhZmFi NDExZDEwHhcNMjYwMTI2MTgwMDQ1WhcNMjYwMTI3MTgwMDQ1WjAzMTEwLwYDVQQD EyhkNzY5M2I2MWRlZDkyMWEzYzYyNzQyZWNmNjllODA2YWNkNWIxMmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreKR/iuXgOdEKTszT7utTaSozz3D 0ojq4AsbFqq/d1NXxaGA0vTNC8hx88JOZ+ZUwO+q9dogQSYz1qdeDbPkDsDpJMer bW7tThFJ4Ik1HT0EmLv/oXU4IBtyt2hX2CzVPuP2bMQhQl5M6w2eLNdwHr5C4FeE 2mUHjhow+bTlzTg05eK3Joy/37Ks73Ji2aBoYP8e4ByjmcFt0avaj0y8fxcW8G0I gHINHRdMnqk2vZXukbsDh//yJFyTrBWuRAwc84Jdf7lzeSTtseKPbQ9t1YCjohfC xdx9Bm70HVRNZ4cE+AKbtqcvpxbP9S/7wkzo4Yy2k5DXO+WdPxlOlSNTKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdpO2He2SGjxidC7PaegGrNWxLWMB8GA1UdIwQY MBaAFFUNTFcdi/v92Po6Fw+Z+zr6tBHRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzIt M2Q0NmNhZjU1NzM4LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81N2NkNTYtN2JlYy00MGYxLWJmNzItM2Q0NmNhZjU1NzM4 LzEvVlExTVZ4MkwtXzNZLWpvWEQ1bjdPdnEwRWRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcl3PqekC ESwT0dh0x+UhI8MPKm1fanUJaWX2Gr76H9RaVxoyVzyVOgqyvUDEkF1RCs6dpPLo 03oDf7PP11KKOzuja+txLBRk/OEF5RMOwHwWYA6RgtVRfeYSsZ+/rgsU/zV1muhK mNTeXiazbYntZm+cVidpRh4RHUvzTRR6dx3xgzX85x4pFQtdbEy0MyQLwok6C4qF rU4yB8RPawRYTImQGSt9CS85B4+aVSnbZgXmNasVY+ccPxj6YFUxvNY5EJw+V5N5 cU3XrpNnX1x0ZoUsk/OlnUTZz/gNomlpDeVAef+zY5lSuHNBvC/MvxTPMDfJINSV ggXwJ6A0aCQo2Q== -----END CERTIFICATE-----Generated at Mon Jan 26 22:40:17 2026 by rpki-client