This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft File: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft (raw, json) Hash identifier: CFqCJTQxheMXqJsEjJvMTkIzTJ4X4SqhxFWTwY+pZEE= Subject key identifier: 80:3A:34:68:AC:88:E8:28:DE:B4:DC:DE:A1:03:F6:16:1C:95:C8:45 Authority key identifier: 54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71 Certificate issuer: /CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271 Certificate serial: 019BE03698F1F5E3B59A4C6B371131E2DB8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft Manifest number: 0250 Signing time: Wed 21 Jan 2026 11:00:32 +0000 Manifest this update: Wed 21 Jan 2026 11:00:32 +0000 Manifest next update: Thu 22 Jan 2026 11:00:32 +0000 Files and hashes: 1: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl (hash: wS96Br2Ay7AXfnSAeG9miT1Gwc7CYp/zhDDVADCbAIY=) 2: W7MYlrRkEep6jX1uiDW1h6QrWPY.roa (hash: 2G8If5Akk3DoPi0CKo8A3PQxay+dZxlNMAA61OVVxk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 11:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e0:36:98:f1:f5:e3:b5:9a:4c:6b:37:11:31:e2:db:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271 Validity Not Before: Jan 21 11:00:32 2026 GMT Not After : Jan 22 11:00:32 2026 GMT Subject: CN=803a3468ac88e828deb4dcdea103f6161c95c845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:8a:6b:f6:29:55:e9:b1:6f:bc:f4:0a:82:ea: de:3d:e4:fd:de:25:22:f3:f4:77:bb:68:6d:ef:db: 41:0b:32:1c:1a:15:80:2d:41:75:88:4f:a8:09:79: 1d:43:43:c3:06:38:3b:6a:64:8d:2b:46:45:d0:d3: 07:75:a8:5d:fe:31:17:fb:ce:87:55:80:ba:a9:c7: dd:a4:73:f1:fd:46:da:fb:28:f9:4f:98:ef:6f:79: ae:5f:a3:4f:16:67:83:39:27:90:30:9e:cc:f6:cc: d9:92:39:de:16:62:b6:be:5d:d1:17:be:34:bb:06: db:ef:df:81:24:20:0a:01:46:73:5f:f2:44:93:6f: 56:c3:72:2a:64:12:a6:7b:c6:44:25:62:6b:02:d0: 9d:a0:ce:37:34:10:2b:da:98:33:d8:3a:fd:7b:91: e6:f6:9f:61:e5:3b:cd:83:ba:ec:6a:31:d8:6b:8d: 07:2d:25:a6:ff:ab:8b:b6:f4:fb:01:51:01:52:23: 4a:fa:54:0e:3e:a2:6a:03:13:22:6e:0c:21:40:c9: 1e:b4:ea:36:eb:5b:2e:2b:d2:24:89:2f:b0:83:59: 2b:c4:48:c9:03:6c:4b:27:20:8a:d7:da:6f:e0:b5: ad:d3:62:2c:fb:85:c7:83:d3:71:ef:26:2b:57:65: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3A:34:68:AC:88:E8:28:DE:B4:DC:DE:A1:03:F6:16:1C:95:C8:45 X509v3 Authority Key Identifier: keyid:54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:04:52:f3:38:7f:c4:e6:c0:6f:f9:d6:57:5f:42:3c:9e:a5: 39:0f:9b:90:cc:f1:81:ed:1e:12:94:87:4e:78:6c:16:70:b6: b4:c6:fb:54:c7:8b:d5:80:4d:c2:18:76:e5:ca:4d:b4:9b:20: ce:2d:51:0e:22:81:8f:11:91:64:1f:78:3b:ba:96:ce:4e:05: ab:cd:7d:7f:3c:8f:ab:26:bb:aa:b7:47:79:6e:42:54:b6:99: df:8c:6b:ec:5b:2d:84:33:62:97:62:ea:47:1f:3d:7c:d2:15: 98:2e:7c:e2:01:e4:98:af:53:f7:82:ed:df:52:42:13:a8:cd: c3:48:bd:50:3a:86:0e:65:8c:d3:91:ed:24:ad:a4:e4:a5:cd: 81:fd:18:a5:5a:0d:6f:1e:4a:60:fe:ea:4d:b5:79:4e:3e:d4: 34:8c:87:2b:b9:d9:4c:a4:54:78:20:aa:38:29:af:0e:eb:f7: f6:ca:4b:eb:35:72:75:7f:99:2d:d5:5a:75:5e:a4:36:fd:e7: ef:77:82:39:2e:67:d3:b9:21:3a:33:c8:a8:e8:e0:d9:29:a3: 85:72:bb:66:bf:44:e2:07:68:fa:15:59:f7:99:95:a6:bb:22: 2c:7d:92:67:4d:25:9f:0b:ce:93:a5:89:b4:1b:b8:ad:ee:79: 74:84:cf:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvgNpjx9eO1mkxrNxEx4tuMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZGViMWQ2YTM3N2FjOWQxZjViODg4YzVjZDFkNDAwYzc5 OTcyNzEwHhcNMjYwMTIxMTEwMDMyWhcNMjYwMTIyMTEwMDMyWjAzMTEwLwYDVQQD Eyg4MDNhMzQ2OGFjODhlODI4ZGViNGRjZGVhMTAzZjYxNjFjOTVjODQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84pr9ilV6bFvvPQKgurePeT93iUi 8/R3u2ht79tBCzIcGhWALUF1iE+oCXkdQ0PDBjg7amSNK0ZF0NMHdahd/jEX+86H VYC6qcfdpHPx/Uba+yj5T5jvb3muX6NPFmeDOSeQMJ7M9szZkjneFmK2vl3RF740 uwbb79+BJCAKAUZzX/JEk29Ww3IqZBKme8ZEJWJrAtCdoM43NBAr2pgz2Dr9e5Hm 9p9h5TvNg7rsajHYa40HLSWm/6uLtvT7AVEBUiNK+lQOPqJqAxMibgwhQMketOo2 61suK9IkiS+wg1krxEjJA2xLJyCK19pv4LWt02Is+4XHg9Nx7yYrV2XKpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIA6NGisiOgo3rTc3qED9hYclchFMB8GA1UdIwQY MBaAFFTesdajd6ydH1uIjFzR1ADHmXJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8wNDQzOWYtNDJlMy00ZTZjLWJkM2It YjMzNmYzMWU0YTc0LzEvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS8wNDQzOWYtNDJlMy00ZTZjLWJkM2ItYjMzNmYzMWU0YTc0 LzEvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgRS8zh/ xObAb/nWV19CPJ6lOQ+bkMzxge0eEpSHTnhsFnC2tMb7VMeL1YBNwhh25cpNtJsg zi1RDiKBjxGRZB94O7qWzk4Fq819fzyPqya7qrdHeW5CVLaZ34xr7FsthDNil2Lq Rx89fNIVmC584gHkmK9T94Lt31JCE6jNw0i9UDqGDmWM05HtJK2k5KXNgf0YpVoN bx5KYP7qTbV5Tj7UNIyHK7nZTKRUeCCqOCmvDuv39spL6zVydX+ZLdVadV6kNv3n 73eCOS5n07khOjPIqOjg2SmjhXK7Zr9E4gdo+hVZ95mVprsiLH2SZ00lnwvOk6WJ tBu4re55dITPzg== -----END CERTIFICATE-----Generated at Wed Jan 21 17:35:55 2026 by rpki-client