This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft File: VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json) Hash identifier: 8aTtcbwmj8jpb9bNS3lLGNpfCEISCGznQU82iC0XYSQ= Subject key identifier: 2E:1E:37:BA:97:D0:11:AC:59:6F:A0:59:9A:A1:19:94:95:C7:B8:6E Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB Certificate issuer: /CN=556db695ddf31e2898466ef9edfba4880d8e19fb Certificate serial: 019BE180904C0AC981C3C4D9079B42C3D8F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft Manifest number: 02D8 Signing time: Wed 21 Jan 2026 17:00:57 +0000 Manifest this update: Wed 21 Jan 2026 17:00:57 +0000 Manifest next update: Thu 22 Jan 2026 17:00:57 +0000 Files and hashes: 1: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: n5ShPSuQXThGeV0/BfO6+NtDjsdvgwWSBX3aoUhHeGw=) 2: rDteTEGGPxt7CaJGBgKr1ALLgTM.roa (hash: TV2GDIQbIwm8aM3NmO/8wyhyHPMnS3b2eZNvh57dJ/4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:80:90:4c:0a:c9:81:c3:c4:d9:07:9b:42:c3:d8:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb Validity Not Before: Jan 21 17:00:57 2026 GMT Not After : Jan 22 17:00:57 2026 GMT Subject: CN=2e1e37ba97d011ac596fa0599aa1199495c7b86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3d:3c:07:6d:cf:4c:ca:c2:4c:00:be:05:b2: 1a:c6:0c:ef:d9:a9:25:74:d6:77:dd:dc:8d:cd:24: ef:6e:95:2e:31:90:66:57:95:dd:fa:10:e2:9a:f3: e0:3f:85:18:0f:5b:94:41:5f:41:4b:37:45:75:aa: 88:65:af:46:c6:f6:31:0b:f4:2e:d8:39:80:20:82: 8b:4b:e9:f6:70:70:f8:37:a3:7f:97:a9:f6:f2:bd: ac:eb:83:99:0d:f5:ea:2c:3b:1d:b9:ba:f4:70:c8: 63:6c:37:bb:f8:62:8f:36:5e:dc:5e:ff:91:f7:9d: 3d:4a:ad:78:9b:74:e7:80:96:70:e4:6c:58:bc:67: 3a:a6:ec:9a:39:76:02:d5:ae:fa:71:0b:ee:20:73: b4:e8:a3:41:5a:ab:f4:d0:62:06:b7:d1:28:ab:db: c8:54:cd:a6:4c:20:b5:75:76:62:e9:1f:de:83:51: 1d:b7:2e:b7:87:aa:5b:10:01:02:3e:46:35:02:9c: c4:87:12:d3:21:39:05:17:40:39:be:41:f1:42:ff: bc:ea:c9:b9:49:07:66:81:1e:69:4f:ad:3b:70:cb: 01:48:54:b8:94:60:2c:64:23:8f:67:16:4c:28:41: 59:60:6b:11:cc:b6:f2:f1:86:e1:f8:43:a9:58:e1: 45:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1E:37:BA:97:D0:11:AC:59:6F:A0:59:9A:A1:19:94:95:C7:B8:6E X509v3 Authority Key Identifier: keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:1b:f1:92:df:b2:a5:c3:c0:83:ed:de:0d:17:92:29:54:10: ad:07:7b:b4:7b:79:2b:cf:5a:09:e9:fb:8c:40:2d:12:4a:c7: ed:64:09:40:68:f3:6e:28:3c:c3:3a:e2:19:59:8f:89:53:03: 05:39:5d:39:62:bc:da:c5:31:95:c7:36:f1:12:43:fc:b3:c6: ae:92:5e:55:1e:fc:9a:ef:06:3e:aa:d5:9b:02:9a:98:5b:03: 44:79:13:01:22:94:56:18:cc:c8:75:bd:1d:f2:0b:78:a4:b7: 61:55:b3:36:29:0c:a3:4e:ce:3b:82:b7:55:ed:85:b3:e3:b4: c2:99:a1:98:cd:0d:d5:ea:10:0c:70:31:ad:8f:43:ad:88:05: 10:b3:7c:77:ac:0c:84:0b:90:60:b6:d2:33:02:1a:c6:56:07: 2a:2c:eb:99:4b:e5:d8:f9:76:9c:21:f5:03:c3:00:8f:c0:f6: 6c:1e:10:dd:14:8f:08:fa:f2:1b:c9:db:27:62:8b:14:e9:ae: f3:82:eb:2e:6d:3c:f0:8d:9e:0c:03:ec:dd:4b:b9:d5:a7:32: 38:64:66:dc:22:20:80:0b:b4:2f:8a:37:58:c8:57:3b:66:d3: 6b:58:98:a8:3d:bb:a4:16:b5:9e:f0:a1:6d:66:c3:e9:7c:b0: 84:ad:5d:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvhgJBMCsmBw8TZB5tCw9j5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NmRiNjk1ZGRmMzFlMjg5ODQ2NmVmOWVkZmJhNDg4MGQ4 ZTE5ZmIwHhcNMjYwMTIxMTcwMDU3WhcNMjYwMTIyMTcwMDU3WjAzMTEwLwYDVQQD EygyZTFlMzdiYTk3ZDAxMWFjNTk2ZmEwNTk5YWExMTk5NDk1YzdiODZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj08B23PTMrCTAC+BbIaxgzv2akl dNZ33dyNzSTvbpUuMZBmV5Xd+hDimvPgP4UYD1uUQV9BSzdFdaqIZa9GxvYxC/Qu 2DmAIIKLS+n2cHD4N6N/l6n28r2s64OZDfXqLDsdubr0cMhjbDe7+GKPNl7cXv+R 9509Sq14m3TngJZw5GxYvGc6puyaOXYC1a76cQvuIHO06KNBWqv00GIGt9Eoq9vI VM2mTCC1dXZi6R/eg1Edty63h6pbEAECPkY1ApzEhxLTITkFF0A5vkHxQv+86sm5 SQdmgR5pT607cMsBSFS4lGAsZCOPZxZMKEFZYGsRzLby8Ybh+EOpWOFFMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4eN7qX0BGsWW+gWZqhGZSVx7huMB8GA1UdIwQY MBaAFFVttpXd8x4omEZu+e37pIgNjhn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlcyMmxkM3pIaWlZUm03NTdmdWtpQTJPR2ZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81NDE0NjItYWRiNi00YzY2LWI1NDIt MDUyZWFlYWM2NDdlLzEvVlcyMmxkM3pIaWlZUm03NTdmdWtpQTJPR2ZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81NDE0NjItYWRiNi00YzY2LWI1NDItMDUyZWFlYWM2NDdl LzEvVlcyMmxkM3pIaWlZUm03NTdmdWtpQTJPR2ZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1Bvxkt+y pcPAg+3eDReSKVQQrQd7tHt5K89aCen7jEAtEkrH7WQJQGjzbig8wzriGVmPiVMD BTldOWK82sUxlcc28RJD/LPGrpJeVR78mu8GPqrVmwKamFsDRHkTASKUVhjMyHW9 HfILeKS3YVWzNikMo07OO4K3Ve2Fs+O0wpmhmM0N1eoQDHAxrY9DrYgFELN8d6wM hAuQYLbSMwIaxlYHKizrmUvl2Pl2nCH1A8MAj8D2bB4Q3RSPCPryG8nbJ2KLFOmu 84LrLm088I2eDAPs3Uu51acyOGRm3CIggAu0L4o3WMhXO2bTa1iYqD27pBa1nvCh bWbD6XywhK1dsA== -----END CERTIFICATE-----Generated at Wed Jan 21 19:06:13 2026 by rpki-client