This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft File: vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json) Hash identifier: rqTlFzLARtRC55mTEsVjTVr1qnpU7vKJ9vw3dNFlupI= Subject key identifier: E4:61:3D:75:DF:21:3E:82:FB:D4:F1:40:87:CC:F0:D2:FE:4C:B6:C8 Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1 Certificate issuer: /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1 Certificate serial: 019BFCF87FC7DD0B49651EA6C3EA11C3207C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft Manifest number: 02A1 Signing time: Tue 27 Jan 2026 01:01:42 +0000 Manifest this update: Tue 27 Jan 2026 01:01:42 +0000 Manifest next update: Wed 28 Jan 2026 01:01:42 +0000 Files and hashes: 1: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: hySgSvqpm0aWAWxGIsGW6B2u0poccX0sRGlhENN4/G0=) 2: vrcTV9T60dw5CNY2Khhi6KZnqHk.roa (hash: ix8gZjImI2UbE6/f3JbGRhO6BlyOiB3BG+MN7icZDoA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:7f:c7:dd:0b:49:65:1e:a6:c3:ea:11:c3:20:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1 Validity Not Before: Jan 27 01:01:42 2026 GMT Not After : Jan 28 01:01:42 2026 GMT Subject: CN=e4613d75df213e82fbd4f14087ccf0d2fe4cb6c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8f:31:b1:31:a6:ad:db:4d:8e:25:cf:bb:0f: 37:ba:61:b0:72:79:00:d5:82:d9:26:1c:0d:de:be: 76:f6:88:38:bb:af:e0:0d:fb:f6:6d:5c:45:09:21: 58:6b:d3:12:1a:b6:1a:c7:77:a4:59:79:e8:07:e1: 12:f5:0f:49:ae:3d:fc:62:66:32:17:d2:1a:0e:d1: 41:cd:d4:6b:7e:63:28:33:7b:b8:28:49:50:d0:c0: 1f:b9:92:19:44:fc:68:95:64:92:57:94:5d:84:49: d3:dc:77:10:e9:a0:8f:c8:e6:c6:fb:81:28:58:3b: 4e:65:59:00:94:1e:07:9d:e9:70:52:54:1b:84:34: c5:9f:f3:80:44:fb:6a:11:3f:bb:8e:39:d2:d1:a2: f7:92:f0:2f:d3:7b:d7:54:39:7f:21:b8:c2:3e:39: 82:1e:9f:a2:dc:ae:fd:d5:17:2f:0c:bc:b5:3c:5c: c3:c0:3c:1e:0d:94:0a:3d:7f:86:57:fb:92:e8:c7: 73:24:f8:5b:ef:f1:65:d6:9d:a7:04:9a:13:a5:52: e8:cd:e0:01:b1:0a:f1:35:c4:00:4a:e5:8a:82:e8: e4:4f:54:9e:37:13:d7:a5:e9:4d:c9:29:e8:57:36: b1:ae:e4:d8:3c:a0:ee:df:77:84:22:4a:a6:ff:4d: dc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:61:3D:75:DF:21:3E:82:FB:D4:F1:40:87:CC:F0:D2:FE:4C:B6:C8 X509v3 Authority Key Identifier: keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d3:e1:6d:dd:55:11:d4:da:ec:0f:b4:ea:61:24:a0:ec:99: 7b:47:9a:d4:3b:55:bb:20:c5:c1:47:49:8c:24:67:74:49:be: 2b:a4:88:ad:df:aa:9a:f3:da:da:21:2b:37:69:56:0a:33:c5: 95:43:88:b8:16:d7:d8:2a:d1:9c:3f:59:9a:d5:06:40:1a:2b: 53:11:36:50:17:a1:18:ed:88:9a:7b:27:b0:2a:3e:98:cf:59: 8b:ee:42:91:1c:1a:6f:3c:14:51:b1:8a:56:cc:5f:51:6d:b4: d7:d3:65:32:dd:c3:9d:b7:88:1f:c7:41:b0:00:6e:08:cd:88: df:b3:77:b2:fe:55:3f:65:81:f9:4d:f0:c1:a2:47:09:86:47: a0:8a:06:9c:ca:53:1c:9c:f9:84:6f:de:25:24:f1:55:63:03: 8a:73:e2:24:8e:f7:a7:17:85:4f:64:19:4c:fa:ac:8b:3d:84: 27:3d:9d:af:d8:f8:e6:a0:a7:57:5d:37:40:f6:5e:26:18:04: 72:d5:8a:66:9e:77:aa:e2:56:06:85:1b:b1:f7:8c:e0:b8:d7: 87:48:48:ec:93:cd:3f:62:ac:de:59:19:d5:9b:6b:b8:f5:5f: 7d:3d:b5:b5:47:5f:66:32:1a:c1:c0:9f:01:8c:3a:41:41:d4: 56:22:71:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+H/H3QtJZR6mw+oRwyB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDgyNjA3NjNhMTFlNzdiMGI1ZDdkZDIwMmJhNGNjMzAw NTM4YjEwHhcNMjYwMTI3MDEwMTQyWhcNMjYwMTI4MDEwMTQyWjAzMTEwLwYDVQQD EyhlNDYxM2Q3NWRmMjEzZTgyZmJkNGYxNDA4N2NjZjBkMmZlNGNiNmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw48xsTGmrdtNjiXPuw83umGwcnkA 1YLZJhwN3r529og4u6/gDfv2bVxFCSFYa9MSGrYax3ekWXnoB+ES9Q9Jrj38YmYy F9IaDtFBzdRrfmMoM3u4KElQ0MAfuZIZRPxolWSSV5RdhEnT3HcQ6aCPyObG+4Eo WDtOZVkAlB4HnelwUlQbhDTFn/OARPtqET+7jjnS0aL3kvAv03vXVDl/IbjCPjmC Hp+i3K791RcvDLy1PFzDwDweDZQKPX+GV/uS6MdzJPhb7/Fl1p2nBJoTpVLozeAB sQrxNcQASuWKgujkT1SeNxPXpelNySnoVzaxruTYPKDu33eEIkqm/03cFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORhPXXfIT6C+9TxQIfM8NL+TLbIMB8GA1UdIwQY MBaAFLxIJgdjoR53sLXX3SArpMwwBTixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVnbUIyT2hIbmV3dGRmZElDdWt6REFGT0xFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85M2VkYzUtY2RlYi00NjNlLTg3YjQt OWFiNTc2NWQ1YmI2LzEvdkVnbUIyT2hIbmV3dGRmZElDdWt6REFGT0xFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC85M2VkYzUtY2RlYi00NjNlLTg3YjQtOWFiNTc2NWQ1YmI2 LzEvdkVnbUIyT2hIbmV3dGRmZElDdWt6REFGT0xFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF9Phbd1V EdTa7A+06mEkoOyZe0ea1DtVuyDFwUdJjCRndEm+K6SIrd+qmvPa2iErN2lWCjPF lUOIuBbX2CrRnD9ZmtUGQBorUxE2UBehGO2ImnsnsCo+mM9Zi+5CkRwabzwUUbGK VsxfUW2019NlMt3DnbeIH8dBsABuCM2I37N3sv5VP2WB+U3wwaJHCYZHoIoGnMpT HJz5hG/eJSTxVWMDinPiJI73pxeFT2QZTPqsiz2EJz2dr9j45qCnV103QPZeJhgE ctWKZp53quJWBoUbsfeM4LjXh0hI7JPNP2Ks3lkZ1ZtruPVffT21tUdfZjIawcCf AYw6QUHUViJxGw== -----END CERTIFICATE-----Generated at Tue Jan 27 07:16:32 2026 by rpki-client