This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json) Hash identifier: pZuBAVKrBAVW+GMSEJU9HjrNL9hq3KJICWM2QNSdG3o= Subject key identifier: BA:DA:0B:2C:A5:91:A0:1C:DF:0C:37:35:EA:21:58:E4:F4:AD:6F:72 Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79 Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79 Certificate serial: 019BFE0A8D3068EF1B975017CF707AB10A5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft Manifest number: 17F0 Signing time: Tue 27 Jan 2026 06:01:02 +0000 Manifest this update: Tue 27 Jan 2026 06:01:02 +0000 Manifest next update: Wed 28 Jan 2026 06:01:02 +0000 Files and hashes: 1: jKPNglZB_9C1hd8ca4Jw_cWOzOY.roa (hash: AEoYWv6ZL0b6nATDt55iE0kgXS9whL4s6zBc29DhB/I=) 2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: ll/muw1gWWYpOMthCsrA4xhRHGux76CSgdwm4KpfLeQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:8d:30:68:ef:1b:97:50:17:cf:70:7a:b1:0a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79 Validity Not Before: Jan 27 06:01:02 2026 GMT Not After : Jan 28 06:01:02 2026 GMT Subject: CN=bada0b2ca591a01cdf0c3735ea2158e4f4ad6f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:fb:04:0b:c8:de:9a:9b:75:6a:39:0c:01: e0:5a:df:52:db:8f:5d:3f:da:3d:a2:e7:80:60:2d: 3d:d5:d8:d3:4d:81:6a:01:1d:b5:8b:ff:df:ad:b9: d7:bd:cc:47:82:42:3a:97:de:20:a9:26:d1:df:d8: 6c:d5:f8:bf:21:6b:d6:c5:3c:d4:93:e6:4c:81:83: 00:4c:4e:ca:b2:2a:58:e8:55:13:94:38:c1:f6:57: d4:f6:65:b3:91:2d:1b:3c:20:8b:77:bc:83:9b:a2: be:21:fb:9e:1f:50:91:88:af:85:b9:3f:cf:34:91: bb:49:51:00:0b:ac:f0:c6:f3:43:0b:53:8e:1c:29: 8c:2c:c8:34:75:67:40:d6:97:9c:05:36:99:1d:40: b0:3a:94:f1:f5:e7:cc:45:d4:4d:a7:0d:d9:d0:ad: c6:c8:cc:0d:9b:62:be:51:31:3f:62:8f:f9:d3:1c: 1b:e1:40:e0:4d:64:7a:f8:7f:b6:c1:4e:82:b2:8f: 10:94:9e:0a:1d:b4:63:90:04:0e:fc:93:5a:4a:f9: b6:d4:ca:70:9f:47:e9:8d:03:15:93:d6:07:29:91: c1:36:19:22:07:3a:45:96:49:b5:f3:03:2c:d3:e5: 40:4f:a8:32:98:cb:bb:b8:fe:35:2f:c2:f6:fd:4e: b2:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:DA:0B:2C:A5:91:A0:1C:DF:0C:37:35:EA:21:58:E4:F4:AD:6F:72 X509v3 Authority Key Identifier: keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:6e:e8:4c:76:80:ce:4b:64:2d:26:e2:63:68:2e:38:1a:78: 0a:6e:5b:d8:65:ba:fb:6c:7e:39:2f:c9:3e:1c:02:84:37:9e: f8:16:67:da:f1:5a:2e:dd:c0:bc:a9:04:1f:fc:19:1d:e4:30: fe:a7:91:3a:fc:90:84:17:3f:ca:8b:4c:b5:1e:ef:48:c5:7f: 8b:2e:05:f0:67:8a:0e:86:ae:2f:a6:a7:cc:a2:01:37:7d:6a: 17:b6:19:27:3d:89:15:25:ba:c1:6e:aa:77:99:eb:8d:3a:8c: 1e:ae:23:c0:a6:39:c3:04:ad:72:24:dd:d5:98:b3:d6:27:ac: 82:ec:52:4a:c6:e5:97:64:61:b5:42:0c:5f:93:65:a5:cc:05: 55:b2:45:b5:b0:de:7c:28:6d:0d:76:fb:fd:44:b9:e9:d9:43: 2c:b8:3e:e8:59:9e:26:17:21:60:56:b3:61:a4:42:0f:3d:f7: bb:d0:1f:82:67:4e:47:1e:11:ab:08:d6:68:aa:59:d2:3a:5e: 7b:75:cf:a8:d0:22:54:ea:1d:51:76:64:c2:df:3d:8a:64:f9: 48:6e:a8:38:13:3a:c9:68:14:da:00:af:0b:f7:04:a9:22:3e: 77:c0:6a:16:a7:9e:3a:f5:91:7e:04:f2:a6:b5:72:39:c0:ae: 80:d9:ad:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+Co0waO8bl1AXz3B6sQpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZWM4YzczMmFhNDNlZjBiMzliZDM0ZDE0MGZkZDNhNzNh ZWRiNzkwHhcNMjYwMTI3MDYwMTAyWhcNMjYwMTI4MDYwMTAyWjAzMTEwLwYDVQQD EyhiYWRhMGIyY2E1OTFhMDFjZGYwYzM3MzVlYTIxNThlNGY0YWQ2ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEf7BAvI3pqbdWo5DAHgWt9S249d P9o9oueAYC091djTTYFqAR21i//frbnXvcxHgkI6l94gqSbR39hs1fi/IWvWxTzU k+ZMgYMATE7KsipY6FUTlDjB9lfU9mWzkS0bPCCLd7yDm6K+IfueH1CRiK+FuT/P NJG7SVEAC6zwxvNDC1OOHCmMLMg0dWdA1pecBTaZHUCwOpTx9efMRdRNpw3Z0K3G yMwNm2K+UTE/Yo/50xwb4UDgTWR6+H+2wU6Cso8QlJ4KHbRjkAQO/JNaSvm21Mpw n0fpjQMVk9YHKZHBNhkiBzpFlkm18wMs0+VAT6gymMu7uP41L8L2/U6yvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLraCyylkaAc3ww3NeohWOT0rW9yMB8GA1UdIwQY MBaAFLzsjHMqpD7ws5vTTRQP3Tpzrtt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82MTE1OGEtNzI0Ni00YjQ3LWI0OTYt YzQwYzBkYmUxZGUwLzEvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC82MTE1OGEtNzI0Ni00YjQ3LWI0OTYtYzQwYzBkYmUxZGUw LzEvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI27oTHaA zktkLSbiY2guOBp4Cm5b2GW6+2x+OS/JPhwChDee+BZn2vFaLt3AvKkEH/wZHeQw /qeROvyQhBc/yotMtR7vSMV/iy4F8GeKDoauL6anzKIBN31qF7YZJz2JFSW6wW6q d5nrjTqMHq4jwKY5wwStciTd1Ziz1iesguxSSsbll2RhtUIMX5NlpcwFVbJFtbDe fChtDXb7/US56dlDLLg+6FmeJhchYFazYaRCDz33u9AfgmdORx4RqwjWaKpZ0jpe e3XPqNAiVOodUXZkwt89imT5SG6oOBM6yWgU2gCvC/cEqSI+d8BqFqeeOvWRfgTy prVyOcCugNmtkg== -----END CERTIFICATE-----Generated at Tue Jan 27 13:05:26 2026 by rpki-client