This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json) Hash identifier: DnNzVDNZMn/dSG/q8y2xhTWxDy0SQCWf4ScFWCPoHRk= Subject key identifier: FE:28:EB:C6:46:2B:2D:DF:4E:8D:A2:D9:9E:55:43:C5:C1:7D:AC:E5 Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89 Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89 Certificate serial: 019BFCF89F657E997D0DAE9149B93E5C5485 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft Manifest number: 17EE Signing time: Tue 27 Jan 2026 01:01:50 +0000 Manifest this update: Tue 27 Jan 2026 01:01:50 +0000 Manifest next update: Wed 28 Jan 2026 01:01:50 +0000 Files and hashes: 1: OK14eevAKdeAPJmbmDqPtR4gKY4.roa (hash: pxijgyk5n8Xjg/9qnmaxeKyE+sgbGdhnse8g+yBaAZs=) 2: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: LRhaTmgHshRrzozN8hhibhn6TF59DC97ZvAUgM1eU+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:f8:9f:65:7e:99:7d:0d:ae:91:49:b9:3e:5c:54:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c54067385a765b1d5617c43331956fb208e89 Validity Not Before: Jan 27 01:01:50 2026 GMT Not After : Jan 28 01:01:50 2026 GMT Subject: CN=fe28ebc6462b2ddf4e8da2d99e5543c5c17dace5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:9c:e8:7c:be:07:8f:b1:59:ca:36:31:16:3b: 34:ea:82:97:3f:0e:7a:8e:eb:3b:5a:ac:24:cc:ad: 57:91:7a:e4:47:d1:a9:86:99:94:43:08:a2:0d:ba: 4f:6c:1a:d9:d3:6e:b2:91:7a:fb:77:58:15:48:f3: a5:10:44:0a:7a:ee:82:bc:22:f4:2c:55:c6:45:54: 4f:de:1c:18:ab:43:bf:54:8a:70:66:d6:13:ce:28: 36:16:69:31:b2:3b:ab:f0:19:52:27:b9:38:53:3a: 6b:93:f3:85:59:99:cd:6e:2e:ac:4b:44:1e:c9:fb: 2a:5c:a7:b3:d8:0d:6e:9d:8f:29:85:32:86:13:3d: b2:b6:3b:b1:35:3a:d0:ba:95:92:03:52:fd:4c:2c: 2a:aa:7b:38:07:b3:fa:cb:f3:fa:e4:6c:1b:17:be: 67:2d:fc:81:2d:d4:ee:fe:78:4a:e6:70:ac:6a:dd: c3:e2:bf:ee:ab:d3:44:09:d0:c0:8b:33:43:00:a4: d2:28:75:e9:5d:f2:04:f4:ac:c6:a8:b0:70:53:94: 65:63:25:67:e0:19:46:3c:4f:c1:49:f4:0b:9c:1c: fc:a4:c9:1c:36:73:4c:f2:9e:58:ed:ca:92:e9:ee: 21:6f:a6:c5:e7:c5:9f:a6:a0:6e:77:d8:c6:cc:26: 60:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:28:EB:C6:46:2B:2D:DF:4E:8D:A2:D9:9E:55:43:C5:C1:7D:AC:E5 X509v3 Authority Key Identifier: keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:f2:5c:e3:e0:9b:4e:10:72:22:16:58:91:92:1e:57:00:14: 5c:b0:7c:1f:01:c0:54:28:67:51:96:41:b9:79:e6:3b:10:87: 8f:a8:fd:f4:18:92:74:43:17:4f:92:c1:31:f0:c7:18:4c:8e: d1:25:f8:32:6d:4e:71:87:2b:fc:66:d8:be:e4:3d:46:ad:f7: 3d:46:4e:41:cb:dc:57:45:89:33:20:1b:a3:ba:bb:46:c7:0d: 7c:c4:bb:0f:06:f0:44:bf:76:af:42:fc:35:d4:4e:ed:75:5d: 64:cc:a1:39:c7:25:f4:ad:07:5e:2a:8b:44:99:8d:05:73:74: 33:73:f6:da:b9:36:f3:c7:96:fa:0e:f3:bd:b7:20:a1:b0:da: f3:5b:02:4e:da:cf:f5:2a:9c:06:13:91:35:ca:62:a5:1e:17: 82:bf:20:4a:fc:f7:cf:f8:01:4c:2f:8c:8f:e9:8c:de:1e:57: 7b:f9:50:a0:e2:d2:ab:22:77:8d:79:92:41:a2:b9:02:e0:c7: d7:79:ac:96:27:c3:14:fd:cd:b2:2d:19:c3:e9:86:c2:2b:56: 12:02:62:d8:77:b8:17:77:fd:cb:dc:67:27:0f:a9:8a:8c:e1: b4:1e:74:64:18:d1:38:94:64:99:38:f1:ab:9a:9e:58:0f:e2: 76:e3:46:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8+J9lfpl9Da6RSbk+XFSFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M1NDA2NzM4NWE3NjViMWQ1NjE3YzQzMzMxOTU2ZmIy MDhlODkwHhcNMjYwMTI3MDEwMTUwWhcNMjYwMTI4MDEwMTUwWjAzMTEwLwYDVQQD EyhmZTI4ZWJjNjQ2MmIyZGRmNGU4ZGEyZDk5ZTU1NDNjNWMxN2RhY2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pzofL4Hj7FZyjYxFjs06oKXPw56 jus7WqwkzK1XkXrkR9GphpmUQwiiDbpPbBrZ026ykXr7d1gVSPOlEEQKeu6CvCL0 LFXGRVRP3hwYq0O/VIpwZtYTzig2Fmkxsjur8BlSJ7k4Uzprk/OFWZnNbi6sS0Qe yfsqXKez2A1unY8phTKGEz2ytjuxNTrQupWSA1L9TCwqqns4B7P6y/P65GwbF75n LfyBLdTu/nhK5nCsat3D4r/uq9NECdDAizNDAKTSKHXpXfIE9KzGqLBwU5RlYyVn 4BlGPE/BSfQLnBz8pMkcNnNM8p5Y7cqS6e4hb6bF58WfpqBud9jGzCZg5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4o68ZGKy3fTo2i2Z5VQ8XBfazlMB8GA1UdIwQY MBaAFFQ8VAZzhadlsdVhfEMzGVb7II6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjct YTQxYTQ4MzRlY2FhLzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjctYTQxYTQ4MzRlY2Fh LzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhfJc4+Cb ThByIhZYkZIeVwAUXLB8HwHAVChnUZZBuXnmOxCHj6j99BiSdEMXT5LBMfDHGEyO 0SX4Mm1OcYcr/GbYvuQ9Rq33PUZOQcvcV0WJMyAbo7q7RscNfMS7DwbwRL92r0L8 NdRO7XVdZMyhOccl9K0HXiqLRJmNBXN0M3P22rk288eW+g7zvbcgobDa81sCTtrP 9SqcBhORNcpipR4Xgr8gSvz3z/gBTC+Mj+mM3h5Xe/lQoOLSqyJ3jXmSQaK5AuDH 13mslifDFP3Nsi0Zw+mGwitWEgJi2He4F3f9y9xnJw+piozhtB50ZBjROJRkmTjx q5qeWA/iduNGCQ== -----END CERTIFICATE-----Generated at Tue Jan 27 05:36:36 2026 by rpki-client