This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json) Hash identifier: 7mylD4j/orljf3Q/HfUdZhh4zhEq+wLbjkCCgTE9tSE= Subject key identifier: 2B:90:85:8D:6E:08:8D:8D:82:4D:94:95:D3:10:CC:D7:C5:71:31:3F Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48 Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148 Certificate serial: 019BFB09BDDBAC5F35E183B7B6DB99E6CAEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft Manifest number: 0DBE Signing time: Mon 26 Jan 2026 16:01:17 +0000 Manifest this update: Mon 26 Jan 2026 16:01:17 +0000 Manifest next update: Tue 27 Jan 2026 16:01:17 +0000 Files and hashes: 1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=) 2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: 290dmfELrfs+1QQGu0lxaLuydg48QddVjYJH4lX5YYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:09:bd:db:ac:5f:35:e1:83:b7:b6:db:99:e6:ca:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148 Validity Not Before: Jan 26 16:01:17 2026 GMT Not After : Jan 27 16:01:17 2026 GMT Subject: CN=2b90858d6e088d8d824d9495d310ccd7c571313f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:39:f9:69:93:e8:a1:72:42:6a:59:1c:b6:6c: d2:2d:4d:b2:58:79:b3:c7:6f:df:92:17:d7:f5:56: 35:2d:27:b7:54:99:ca:58:78:38:42:ea:93:28:4a: 39:5b:e6:6a:fd:29:87:47:dd:d5:37:54:7e:9e:0c: 3a:92:3c:4f:e6:c9:ce:8c:5b:ce:35:fe:52:a4:38: 41:cf:ac:97:31:1c:af:46:22:b1:8a:30:ab:67:2f: 9e:da:7d:0a:8f:3c:bc:2e:21:c2:a3:0d:43:b5:a7: 6e:53:7d:e4:c4:02:28:ed:dd:c7:8d:c8:47:73:2e: 97:68:7a:40:fb:70:6f:a9:70:26:d4:f8:51:9f:3a: c3:af:f9:1f:a6:2f:6a:14:80:16:c5:45:c9:12:11: 6c:86:c8:82:17:66:b1:53:d1:ab:39:a8:fa:08:94: 24:ca:d2:88:0a:f5:8e:64:ce:8a:ec:a3:c8:b2:e1: c7:15:67:d6:f9:3a:5c:64:1b:5a:9d:05:cb:9c:f8: 8a:cc:a9:1e:c6:41:07:1f:ec:eb:3c:31:35:c7:64: 84:5d:2e:26:1f:8a:2f:f4:6b:5d:44:d3:0e:9e:85: fb:43:a3:67:3b:ba:f9:45:1c:5e:48:19:b4:ff:61: 35:c3:24:0a:17:94:06:59:d5:bf:6a:cd:c7:e0:8d: c7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:90:85:8D:6E:08:8D:8D:82:4D:94:95:D3:10:CC:D7:C5:71:31:3F X509v3 Authority Key Identifier: keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:73:5d:a3:d0:53:c8:36:64:d9:73:2f:ca:ba:4a:10:73:91: b1:15:27:0c:a1:c9:e8:11:48:2b:54:1b:af:56:77:49:4c:87: e3:e2:c3:3b:9b:be:62:73:c2:c7:d8:ff:5b:e1:85:45:c8:04: f8:c3:77:fa:d2:15:91:18:1d:21:9e:19:19:26:ce:90:7e:f2: 39:a8:da:78:82:85:c5:48:b3:a7:38:5b:b8:cd:6b:ca:a8:8c: 14:2e:ad:e8:c5:41:52:8b:02:b9:d2:96:86:c7:57:d5:d3:2c: cb:95:7e:3f:9b:38:de:2c:dc:e7:7b:ac:0c:2b:38:9f:82:83: bd:9e:03:b4:b8:5b:1d:4d:eb:8f:cd:a2:10:9d:40:cb:af:d2: a3:86:e1:0d:bf:8f:9d:59:9e:9e:2b:83:2e:60:a7:83:d0:26: 77:65:cc:c4:11:8f:ee:9b:5c:68:b9:86:6a:9b:88:9b:94:75: 99:b8:3a:06:a1:e4:3a:9a:ef:9d:9f:9c:01:31:31:c6:f3:52: 9a:dc:46:e4:0d:03:50:73:b6:4e:db:7c:16:08:25:2f:47:da: 71:33:39:cc:8f:2b:0f:ef:2b:20:ee:31:da:1a:77:c9:cd:21: db:2f:e8:fc:68:04:38:3f:0c:18:aa:c7:08:72:90:49:86:e9: 91:e4:3c:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7Cb3brF814YO3ttuZ5srrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOGIxNWMyMzdmMzRjNWM1YzUzNDRiNDA3OWViYjNhNTg5 ZDAxNDgwHhcNMjYwMTI2MTYwMTE3WhcNMjYwMTI3MTYwMTE3WjAzMTEwLwYDVQQD EygyYjkwODU4ZDZlMDg4ZDhkODI0ZDk0OTVkMzEwY2NkN2M1NzEzMTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTn5aZPooXJCalkctmzSLU2yWHmz x2/fkhfX9VY1LSe3VJnKWHg4QuqTKEo5W+Zq/SmHR93VN1R+ngw6kjxP5snOjFvO Nf5SpDhBz6yXMRyvRiKxijCrZy+e2n0Kjzy8LiHCow1DtaduU33kxAIo7d3HjchH cy6XaHpA+3BvqXAm1PhRnzrDr/kfpi9qFIAWxUXJEhFshsiCF2axU9GrOaj6CJQk ytKICvWOZM6K7KPIsuHHFWfW+TpcZBtanQXLnPiKzKkexkEHH+zrPDE1x2SEXS4m H4ov9GtdRNMOnoX7Q6NnO7r5RRxeSBm0/2E1wyQKF5QGWdW/as3H4I3HPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCuQhY1uCI2Ngk2UldMQzNfFcTE/MB8GA1UdIwQY MBaAFL6LFcI380xcXFNEtAeeuzpYnQFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQt MzFkZTE3NjlmZDhhLzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQtMzFkZTE3NjlmZDhh LzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHNdo9BT yDZk2XMvyrpKEHORsRUnDKHJ6BFIK1Qbr1Z3SUyH4+LDO5u+YnPCx9j/W+GFRcgE +MN3+tIVkRgdIZ4ZGSbOkH7yOajaeIKFxUizpzhbuM1ryqiMFC6t6MVBUosCudKW hsdX1dMsy5V+P5s43izc53usDCs4n4KDvZ4DtLhbHU3rj82iEJ1Ay6/So4bhDb+P nVmeniuDLmCng9Amd2XMxBGP7ptcaLmGapuIm5R1mbg6BqHkOprvnZ+cATExxvNS mtxG5A0DUHO2Ttt8FgglL0facTM5zI8rD+8rIO4x2hp3yc0h2y/o/GgEOD8MGKrH CHKQSYbpkeQ85A== -----END CERTIFICATE-----Generated at Tue Jan 27 00:10:00 2026 by rpki-client