This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft File: vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json) Hash identifier: Prpha+gGcPmitLpu+Fj+RE8s+A1RCO4e16UcElHDrQs= Subject key identifier: BD:D9:90:14:16:50:91:9F:A6:7A:C7:7F:13:F6:B0:67:27:87:9C:99 Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6 Certificate issuer: /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6 Certificate serial: 019BD7D8D506A06BF03D8BDF8666ED4FFCFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft Manifest number: 01AF Signing time: Mon 19 Jan 2026 20:01:10 +0000 Manifest this update: Mon 19 Jan 2026 20:01:10 +0000 Manifest next update: Tue 20 Jan 2026 20:01:10 +0000 Files and hashes: 1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: ztAo8iauXv0g/CSM8Si89ZO0FXP/AgN6KIIhj8eHPVI=) 2: xnX10RwznEnmTe1E1E5B2rhOTnA.roa (hash: feg+CLsY1TCQ8UES6e5qZUfIKp0hLMvvn81xyTCKGRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:d8:d5:06:a0:6b:f0:3d:8b:df:86:66:ed:4f:fc:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6 Validity Not Before: Jan 19 20:01:10 2026 GMT Not After : Jan 20 20:01:10 2026 GMT Subject: CN=bdd990141650919fa67ac77f13f6b06727879c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:cb:54:e8:ad:5a:2a:5d:86:42:c2:41:fd:95: 83:ba:7d:d2:fa:a1:62:04:a1:87:42:1f:e2:6a:fc: 4e:c6:18:8e:a2:2b:6b:61:f0:29:4b:60:d8:e9:f5: 37:77:bb:1a:9b:9c:46:28:17:9a:6c:fe:7e:7f:f3: 9f:65:4f:13:cb:cc:a2:26:7f:af:21:eb:da:d1:4b: 11:fd:ae:3f:7f:2e:fd:17:eb:e8:97:e2:62:fb:28: 2a:6a:78:6b:ac:55:1d:1c:13:1a:af:aa:71:a8:25: 7e:46:58:bd:a4:10:f1:cd:46:83:fb:bd:b0:04:b7: 70:8f:ea:aa:35:45:74:0b:a9:a1:8c:50:78:13:2f: 1b:7b:24:cf:74:a6:50:6a:77:46:eb:11:4b:38:7f: fa:46:a8:d1:5d:1f:02:07:4c:34:44:dc:fd:90:68: 4b:3b:e7:4b:0f:d7:cc:22:21:c3:c0:b0:f5:47:55: cb:5e:17:95:d7:c2:58:58:62:08:0e:6e:08:50:1b: cc:08:46:bb:07:fe:92:19:b3:e5:8d:a0:fd:ea:a2: a3:96:e8:43:ff:d7:a7:e1:e4:da:73:18:d3:d2:43: 66:be:9f:d0:33:6c:41:49:8b:5e:c4:6f:ba:ff:a6: 6c:81:2f:e3:40:aa:b8:66:14:35:74:30:b8:0b:f7: 95:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D9:90:14:16:50:91:9F:A6:7A:C7:7F:13:F6:B0:67:27:87:9C:99 X509v3 Authority Key Identifier: keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:de:ba:07:b7:f4:a1:f6:a8:bc:ad:d2:2c:f9:1d:79:57:c7: 15:35:ac:e2:2f:3f:a0:70:1a:30:05:8e:a4:9e:c9:19:b6:1c: 1c:c3:de:f1:c1:8e:f2:7c:e5:03:e8:55:74:d6:3a:4c:b1:86: 97:f0:79:0d:d0:74:8e:7d:85:09:e4:0e:a2:70:fe:5a:62:76: bc:49:d9:b5:9f:35:6b:4b:19:81:f0:3a:73:a5:4d:b6:93:b1: 48:4d:77:bc:15:14:77:dc:32:4f:70:8b:27:c4:73:0a:18:06: fa:3d:f0:91:d7:fa:6d:2a:7e:40:aa:8d:29:08:0d:e6:49:af: 63:30:b7:29:ca:b4:5f:46:05:2b:ca:ed:5f:3f:4e:2f:45:35: 90:5a:73:d5:aa:26:97:60:3f:2d:a9:ff:0d:ef:af:7d:18:26: 3f:84:91:bc:8c:b9:b5:03:a4:bb:2a:f3:e9:60:7f:60:23:d2: 81:11:a3:e2:52:9f:ee:7d:79:16:58:76:14:93:32:3c:8c:23: d1:9a:63:cc:31:f0:a6:e6:4a:c5:d1:04:b8:de:f3:20:f6:47: 3a:5f:03:36:db:f0:78:a1:83:d8:fe:6a:0e:2b:b4:97:19:ee: ad:24:a9:14:07:16:43:79:81:23:ad:f5:75:87:16:c6:3e:7c: a6:7b:2c:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvX2NUGoGvwPYvfhmbtT/z9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNjg5MmU5OWM4NGExYzVkYzliMTJlMTE0ZDY3YWYxNmMy NGE5ZDYwHhcNMjYwMTE5MjAwMTEwWhcNMjYwMTIwMjAwMTEwWjAzMTEwLwYDVQQD EyhiZGQ5OTAxNDE2NTA5MTlmYTY3YWM3N2YxM2Y2YjA2NzI3ODc5Yzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8tU6K1aKl2GQsJB/ZWDun3S+qFi BKGHQh/iavxOxhiOoitrYfApS2DY6fU3d7sam5xGKBeabP5+f/OfZU8Ty8yiJn+v Ieva0UsR/a4/fy79F+vol+Ji+ygqanhrrFUdHBMar6pxqCV+Rli9pBDxzUaD+72w BLdwj+qqNUV0C6mhjFB4Ey8beyTPdKZQandG6xFLOH/6RqjRXR8CB0w0RNz9kGhL O+dLD9fMIiHDwLD1R1XLXheV18JYWGIIDm4IUBvMCEa7B/6SGbPljaD96qKjluhD /9en4eTacxjT0kNmvp/QM2xBSYtexG+6/6ZsgS/jQKq4ZhQ1dDC4C/eVEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3ZkBQWUJGfpnrHfxP2sGcnh5yZMB8GA1UdIwQY MBaAFLxokumchKHF3JsS4RTWevFsJKnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MmQ5ZGQtNzJmMi00MmE3LTk5ODIt YjY0ZTBmNmEwOWNhLzEvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My82MmQ5ZGQtNzJmMi00MmE3LTk5ODItYjY0ZTBmNmEwOWNh LzEvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARt66B7f0 ofaovK3SLPkdeVfHFTWs4i8/oHAaMAWOpJ7JGbYcHMPe8cGO8nzlA+hVdNY6TLGG l/B5DdB0jn2FCeQOonD+WmJ2vEnZtZ81a0sZgfA6c6VNtpOxSE13vBUUd9wyT3CL J8RzChgG+j3wkdf6bSp+QKqNKQgN5kmvYzC3Kcq0X0YFK8rtXz9OL0U1kFpz1aom l2A/Lan/De+vfRgmP4SRvIy5tQOkuyrz6WB/YCPSgRGj4lKf7n15Flh2FJMyPIwj 0ZpjzDHwpuZKxdEEuN7zIPZHOl8DNtvweKGD2P5qDiu0lxnurSSpFAcWQ3mBI631 dYcWxj58pnssaQ== -----END CERTIFICATE-----Generated at Tue Jan 20 01:00:55 2026 by rpki-client