This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft File: VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json) Hash identifier: E/zDR3ndhffuYy0odSppkTqN7Jv1DZH0qczj1rFzca8= Subject key identifier: EB:7F:B7:E9:AA:BB:BA:26:22:0E:CF:4B:0F:54:15:3E:BC:8E:DD:98 Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F Certificate issuer: /CN=572ba64b3a9060b464337ad30a02bec4b11a551f Certificate serial: 019BFE0A5945AF1F7BAE5B45713002D4FE3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft Manifest number: 1482 Signing time: Tue 27 Jan 2026 06:00:49 +0000 Manifest this update: Tue 27 Jan 2026 06:00:49 +0000 Manifest next update: Wed 28 Jan 2026 06:00:49 +0000 Files and hashes: 1: E6VcUABJOgaDwD9RzJREvDXjkAM.roa (hash: qjoSCznyEiS7sQVKAn02kghNOIKy/+vPrXAKlA+IZs8=) 2: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: hdXnnQ83mPIO4HLMvQkXrhnapR/u7O9KdS3V/O5P54U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:0a:59:45:af:1f:7b:ae:5b:45:71:30:02:d4:fe:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f Validity Not Before: Jan 27 06:00:49 2026 GMT Not After : Jan 28 06:00:49 2026 GMT Subject: CN=eb7fb7e9aabbba26220ecf4b0f54153ebc8edd98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ac:63:cc:bc:5b:10:40:ee:42:35:30:1a:dd: 98:ee:db:09:b4:a3:ae:3b:15:39:e8:dd:1b:7f:37: 9f:79:e6:a7:2e:2a:2e:d1:50:c1:06:34:14:02:ee: 8f:3b:e7:1e:51:a8:7a:e0:4d:0b:89:4b:c2:10:c9: 8f:69:15:d8:66:c2:dc:29:62:d7:4e:05:c5:9f:e3: e9:f9:4a:30:f5:db:61:5d:df:11:49:fe:f3:5c:2a: 22:c5:91:8a:46:2f:5d:6d:c9:f4:87:97:93:e4:e7: 6c:0f:3f:97:76:a8:f9:89:00:84:66:b7:48:72:98: f3:45:ee:b8:aa:69:c0:ba:01:a5:6d:04:65:a2:88: 05:aa:76:e1:d0:62:c0:cb:6d:b6:dc:c2:9e:a1:4e: e3:8a:a5:6f:88:5e:ec:3e:7e:23:d7:89:3d:94:36: 0f:e0:a3:da:0a:1c:28:cc:b6:1f:39:12:14:a6:a5: 11:11:59:38:bf:af:9e:c4:97:31:c1:e6:b8:b4:64: 76:3b:04:c9:64:4b:59:7b:13:52:24:6c:4d:f6:d2: 0d:5e:95:34:d0:c6:a2:7f:72:32:67:c5:0a:32:a1: c6:c8:89:34:dd:70:cc:f2:c6:1c:05:c2:4b:5e:b7: 24:0a:47:00:0d:1f:11:bc:a5:22:ce:11:53:f2:29: 31:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7F:B7:E9:AA:BB:BA:26:22:0E:CF:4B:0F:54:15:3E:BC:8E:DD:98 X509v3 Authority Key Identifier: keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a7:0d:a7:0c:f2:b5:f2:72:4c:42:76:89:3d:cf:fc:43:9c: c2:1d:12:64:43:8a:60:fe:3e:3b:a0:d8:83:64:cc:46:fa:9d: a7:72:56:60:2f:ea:73:53:ce:42:20:8a:52:78:ef:e0:65:00: 41:cb:f6:02:5b:43:03:7f:95:ca:42:77:68:3d:d6:44:8b:c8: 3e:a6:40:d4:c4:b0:09:2c:31:69:fb:1d:1e:e0:97:9b:69:e6: 24:0c:4a:19:b7:c4:b8:74:9b:65:3e:10:78:fc:1b:29:a0:2e: df:c6:a6:d9:c7:a2:57:65:7d:d9:de:11:53:2b:a0:5c:eb:81: 0f:e3:26:ba:4a:da:0f:99:b7:2e:f4:99:6e:b8:57:e0:fc:7d: a6:21:f9:05:57:36:cd:36:5e:67:80:34:8b:1b:0d:fb:10:f7: cf:69:4d:9a:10:28:24:27:70:d3:77:59:ef:62:77:5e:d3:f5: ce:e6:4d:c4:19:46:82:05:31:98:b1:ea:00:65:58:81:e7:07: 25:33:fa:b3:9a:d2:7c:6f:7e:8d:78:ca:ff:9e:c4:c7:54:c0: 60:a2:a6:03:22:d3:10:97:33:cc:34:5a:62:eb:6a:61:a6:56: 60:b0:5a:f4:15:9b:56:c9:74:09:eb:c6:2b:18:e4:e5:f1:50: 8a:96:49:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+CllFrx97rltFcTAC1P46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MmJhNjRiM2E5MDYwYjQ2NDMzN2FkMzBhMDJiZWM0YjEx YTU1MWYwHhcNMjYwMTI3MDYwMDQ5WhcNMjYwMTI4MDYwMDQ5WjAzMTEwLwYDVQQD EyhlYjdmYjdlOWFhYmJiYTI2MjIwZWNmNGIwZjU0MTUzZWJjOGVkZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6xjzLxbEEDuQjUwGt2Y7tsJtKOu OxU56N0bfzefeeanLiou0VDBBjQUAu6PO+ceUah64E0LiUvCEMmPaRXYZsLcKWLX TgXFn+Pp+Uow9dthXd8RSf7zXCoixZGKRi9dbcn0h5eT5OdsDz+Xdqj5iQCEZrdI cpjzRe64qmnAugGlbQRloogFqnbh0GLAy2223MKeoU7jiqVviF7sPn4j14k9lDYP 4KPaChwozLYfORIUpqUREVk4v6+exJcxwea4tGR2OwTJZEtZexNSJGxN9tINXpU0 0Maif3IyZ8UKMqHGyIk03XDM8sYcBcJLXrckCkcADR8RvKUizhFT8ikxnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOt/t+mqu7omIg7PSw9UFT68jt2YMB8GA1UdIwQY MBaAFFcrpks6kGC0ZDN60woCvsSxGlUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTkt Mjk4ZmJlN2RjMTY4LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTktMjk4ZmJlN2RjMTY4 LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6cNpwzy tfJyTEJ2iT3P/EOcwh0SZEOKYP4+O6DYg2TMRvqdp3JWYC/qc1POQiCKUnjv4GUA Qcv2AltDA3+VykJ3aD3WRIvIPqZA1MSwCSwxafsdHuCXm2nmJAxKGbfEuHSbZT4Q ePwbKaAu38am2ceiV2V92d4RUyugXOuBD+MmukraD5m3LvSZbrhX4Px9piH5BVc2 zTZeZ4A0ixsN+xD3z2lNmhAoJCdw03dZ72J3XtP1zuZNxBlGggUxmLHqAGVYgecH JTP6s5rSfG9+jXjK/57Ex1TAYKKmAyLTEJczzDRaYutqYaZWYLBa9BWbVsl0CevG Kxjk5fFQipZJ3Q== -----END CERTIFICATE-----Generated at Tue Jan 27 12:45:25 2026 by rpki-client