This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft File: VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json) Hash identifier: ARoIlKCHXiwjKaZwu20ntP7onLHEVTHa2cFSdOzFg+Q= Subject key identifier: 73:C7:E9:17:BD:B3:AC:A0:20:23:FE:20:0C:F8:D9:85:EA:74:E8:68 Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C Certificate issuer: /CN=5661d964df4a86db8ffb99aa89582da68a30908c Certificate serial: 019BFE0AEAC4B6D6EB6CEE248B97B52F7332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft Manifest number: 0382 Signing time: Tue 27 Jan 2026 06:01:26 +0000 Manifest this update: Tue 27 Jan 2026 06:01:26 +0000 Manifest next update: Wed 28 Jan 2026 06:01:26 +0000 Files and hashes: 1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: /3THmhQH8GaKcf5Op9tkwkml6MEQ9EyYJ1d3lODZAMs=) 2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:ea:c4:b6:d6:eb:6c:ee:24:8b:97:b5:2f:73:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c Validity Not Before: Jan 27 06:01:26 2026 GMT Not After : Jan 28 06:01:26 2026 GMT Subject: CN=73c7e917bdb3aca02023fe200cf8d985ea74e868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:23:de:98:3f:ff:05:b4:a8:c1:33:f6:56:af: 7d:f8:b7:0d:f1:43:c5:d7:ac:0c:e9:80:4b:0d:e6: c8:82:e7:ff:0f:c0:c5:a4:19:1d:17:1f:57:47:02: e1:bf:7c:4f:9e:8b:85:c7:51:42:01:97:95:40:7b: d1:ca:42:04:73:b3:4f:82:78:0b:d9:22:cc:43:83: 56:60:03:f5:0d:95:8a:9c:72:e7:97:10:50:92:56: 10:02:5b:be:c2:8a:41:8d:fe:2f:47:2d:a2:be:9b: a7:fc:4e:6f:4c:79:e5:b7:8b:89:35:24:0c:5b:dc: 30:dc:51:9d:a3:aa:86:e3:00:44:06:51:fb:81:d2: f7:79:4d:91:b6:33:5b:b2:57:8d:c6:97:60:a2:1a: 6c:53:5d:7a:f1:2c:fa:15:a8:88:5e:14:8b:69:24: e5:b6:26:97:30:a4:8e:f1:a3:b9:01:c8:ee:12:98: af:5b:d1:cd:bb:0b:66:75:b0:1f:ab:92:8f:93:66: d3:51:79:93:e9:d7:84:fc:b6:09:38:5e:69:6f:61: 5c:fa:0c:c0:97:76:cc:2d:82:14:9f:89:28:55:e9: 82:cd:16:69:f1:33:14:6e:a4:63:91:84:e4:42:12: 60:8d:2a:c2:ad:86:f9:ae:26:af:9f:48:6f:17:5c: 38:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C7:E9:17:BD:B3:AC:A0:20:23:FE:20:0C:F8:D9:85:EA:74:E8:68 X509v3 Authority Key Identifier: keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c2:31:f1:33:9b:c5:6b:c0:e0:45:c5:d9:2e:d4:54:c6:e2: 18:ec:dc:7b:04:2d:ca:b4:09:7f:6b:a2:a3:c5:d4:b5:d5:8f: bf:91:f9:3d:48:72:5d:26:6f:e6:68:7f:ce:31:1c:1d:2e:3b: be:cc:c9:cd:c9:33:a5:2a:8f:6e:1b:db:1a:68:88:bc:6a:94: e9:75:0d:1f:81:13:02:71:0d:1b:19:84:36:85:82:be:1e:91: a3:1f:bf:ae:d7:f3:74:8a:ea:03:40:5a:42:84:46:c7:0c:46: f0:e0:b2:3d:d8:fc:6c:fd:9b:bb:ec:0d:58:37:fe:6f:a4:3a: 24:53:9f:85:65:ad:65:94:f1:15:48:9f:12:c8:fe:ee:2d:66: 45:4e:ff:80:d6:f8:ce:d6:44:6e:5d:ce:62:8e:f7:8a:74:28: 49:eb:5f:4d:b4:6d:c6:28:6d:17:a5:d1:2b:5f:ab:54:28:8e: 77:5a:d5:dd:3f:12:03:72:78:c5:11:68:52:e6:34:51:22:6d: 0e:fc:5c:dc:7f:b9:10:fb:ec:cf:40:77:2b:40:32:52:6a:4e: ed:e1:f5:51:75:c4:d6:80:64:1c:34:92:05:96:a6:c5:58:25: b3:40:3c:db:0d:cd:07:f4:ec:a8:d8:c5:48:f4:52:dc:32:09: de:83:9d:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CurEttbrbO4ki5e1L3MyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2NjFkOTY0ZGY0YTg2ZGI4ZmZiOTlhYTg5NTgyZGE2OGEz MDkwOGMwHhcNMjYwMTI3MDYwMTI2WhcNMjYwMTI4MDYwMTI2WjAzMTEwLwYDVQQD Eyg3M2M3ZTkxN2JkYjNhY2EwMjAyM2ZlMjAwY2Y4ZDk4NWVhNzRlODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCPemD//BbSowTP2Vq99+LcN8UPF 16wM6YBLDebIguf/D8DFpBkdFx9XRwLhv3xPnouFx1FCAZeVQHvRykIEc7NPgngL 2SLMQ4NWYAP1DZWKnHLnlxBQklYQAlu+wopBjf4vRy2ivpun/E5vTHnlt4uJNSQM W9ww3FGdo6qG4wBEBlH7gdL3eU2RtjNbsleNxpdgohpsU1168Sz6FaiIXhSLaSTl tiaXMKSO8aO5AcjuEpivW9HNuwtmdbAfq5KPk2bTUXmT6deE/LYJOF5pb2Fc+gzA l3bMLYIUn4koVemCzRZp8TMUbqRjkYTkQhJgjSrCrYb5riavn0hvF1w4bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPH6Re9s6ygICP+IAz42YXqdOhoMB8GA1UdIwQY MBaAFFZh2WTfSobbj/uZqolYLaaKMJCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYt M2Q0MzliN2NkZTcyLzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYtM2Q0MzliN2NkZTcy LzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcIx8TOb xWvA4EXF2S7UVMbiGOzcewQtyrQJf2uio8XUtdWPv5H5PUhyXSZv5mh/zjEcHS47 vszJzckzpSqPbhvbGmiIvGqU6XUNH4ETAnENGxmENoWCvh6Rox+/rtfzdIrqA0Ba QoRGxwxG8OCyPdj8bP2bu+wNWDf+b6Q6JFOfhWWtZZTxFUifEsj+7i1mRU7/gNb4 ztZEbl3OYo73inQoSetfTbRtxihtF6XRK1+rVCiOd1rV3T8SA3J4xRFoUuY0USJt Dvxc3H+5EPvsz0B3K0AyUmpO7eH1UXXE1oBkHDSSBZamxVgls0A82w3NB/TsqNjF SPRS3DIJ3oOd3Q== -----END CERTIFICATE-----Generated at Tue Jan 27 07:32:53 2026 by rpki-client