This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft File: VHd3rO-MSS5QEb3ewSmviuyXS3c.mft (raw, json) Hash identifier: 6u0cDirQayNkWeSPmx35v1Sn8yfNNLU/7uOT/nL+lpw= Subject key identifier: 1A:A5:AF:57:1C:61:AA:0C:1F:6E:54:CA:C7:8C:D8:22:CA:E2:13:06 Authority key identifier: 54:77:77:AC:EF:8C:49:2E:50:11:BD:DE:C1:29:AF:8A:EC:97:4B:77 Certificate issuer: /CN=547777acef8c492e5011bddec129af8aec974b77 Certificate serial: 019BFBAED8218219D1A37257C285BE19E089 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft Manifest number: 03 Signing time: Mon 26 Jan 2026 19:01:38 +0000 Manifest this update: Mon 26 Jan 2026 19:01:38 +0000 Manifest next update: Tue 27 Jan 2026 19:01:38 +0000 Files and hashes: 1: H5HaxNWVOqxU799AVgPxEXn01qU.roa (hash: mWDQsDbJvuwqHmN/2vnE3qUbbfA/iapxxfRizly7drk=) 2: VHd3rO-MSS5QEb3ewSmviuyXS3c.crl (hash: xYv6Pvx9vTJL/g1ubFogRZy7skhQZzmT2l5Yyi43nOI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fb:ae:d8:21:82:19:d1:a3:72:57:c2:85:be:19:e0:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547777acef8c492e5011bddec129af8aec974b77 Validity Not Before: Jan 26 19:01:38 2026 GMT Not After : Jan 27 19:01:38 2026 GMT Subject: CN=1aa5af571c61aa0c1f6e54cac78cd822cae21306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d6:bb:20:af:68:d5:5e:c6:f5:26:d8:95:fc: 1d:51:0b:49:b2:dd:31:89:b3:90:d3:d6:25:ae:e1: 17:86:41:4b:4e:14:82:02:f9:d5:21:f6:53:21:2e: a4:88:01:53:ab:8b:35:ce:bd:6a:26:24:5a:a7:7e: ee:30:7b:f5:1d:a5:c9:ae:8e:07:15:85:3e:f9:5b: 00:66:9d:6f:86:80:7a:ec:7a:6b:89:6e:8b:3d:cd: 3f:10:6c:60:02:53:87:c3:2f:16:a1:52:3e:9c:a2: ce:93:4d:af:13:19:f1:fd:3c:31:76:42:d4:0d:d5: 1f:ed:b4:be:a4:d7:54:53:4e:38:c7:44:03:d7:df: 8e:91:bf:9a:db:01:93:55:4e:0b:31:df:7b:4f:ba: c4:42:cc:24:90:bf:40:b0:90:5c:b1:af:80:46:7b: 20:90:88:8d:69:a5:26:5a:bf:75:8d:f3:24:2e:bb: 92:15:d0:49:cf:00:30:a2:3e:fb:ce:6b:50:0d:b5: a9:07:51:47:89:15:20:96:65:de:2c:c0:5a:24:e9: b0:12:5a:8b:62:1e:72:bd:d2:37:1b:29:f9:d7:ab: 73:68:f4:ee:6e:0a:43:f2:ce:01:39:d4:a0:9e:c1: 1d:c4:b7:b4:f8:e2:bd:07:9a:0d:96:92:12:d4:f4: ee:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A5:AF:57:1C:61:AA:0C:1F:6E:54:CA:C7:8C:D8:22:CA:E2:13:06 X509v3 Authority Key Identifier: keyid:54:77:77:AC:EF:8C:49:2E:50:11:BD:DE:C1:29:AF:8A:EC:97:4B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:8d:4c:da:bb:29:fa:e9:4f:f1:85:02:a4:60:df:1c:79:af: 9f:d7:ef:68:6d:eb:4d:cf:97:92:64:1b:38:8f:52:88:a6:9b: eb:ae:c8:34:4a:de:9e:db:07:c2:c4:ce:25:e8:09:2c:d8:01: b5:c6:3c:3c:96:89:36:25:b9:a2:75:86:56:f1:96:4b:f8:f1: 17:1e:ea:1a:2c:10:ae:0c:77:a7:84:52:87:00:01:3b:3e:33: a7:cd:e1:66:51:32:50:b6:31:84:be:60:f8:76:37:dc:99:bf: ac:98:1a:27:90:eb:a7:4e:b6:2b:9a:71:08:c0:31:a0:26:22: 4a:db:e7:f9:14:33:00:ee:a1:2c:75:41:df:88:7d:a2:c9:79: 60:81:c6:76:21:58:3d:f0:5e:45:eb:19:89:41:df:78:03:2a: 07:d8:2f:8d:56:82:db:78:48:d1:27:07:73:b2:6e:b3:89:d1: 39:1c:6d:94:75:f7:b8:17:8f:e4:af:98:ba:bb:c1:1f:b9:6d: e5:52:0d:43:8e:89:c9:6d:9e:78:d8:db:28:12:48:01:ac:e5: 25:1f:4f:59:1e:b1:60:da:6a:7d:3e:59:c7:92:a8:76:20:54: 6a:d5:ab:83:6e:fb:33:d5:a7:16:f3:84:62:36:d4:4a:b1:a9: c7:15:25:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv7rtghghnRo3JXwoW+GeCJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Nzc3N2FjZWY4YzQ5MmU1MDExYmRkZWMxMjlhZjhhZWM5 NzRiNzcwHhcNMjYwMTI2MTkwMTM4WhcNMjYwMTI3MTkwMTM4WjAzMTEwLwYDVQQD EygxYWE1YWY1NzFjNjFhYTBjMWY2ZTU0Y2FjNzhjZDgyMmNhZTIxMzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyta7IK9o1V7G9SbYlfwdUQtJst0x ibOQ09YlruEXhkFLThSCAvnVIfZTIS6kiAFTq4s1zr1qJiRap37uMHv1HaXJro4H FYU++VsAZp1vhoB67HpriW6LPc0/EGxgAlOHwy8WoVI+nKLOk02vExnx/TwxdkLU DdUf7bS+pNdUU044x0QD19+Okb+a2wGTVU4LMd97T7rEQswkkL9AsJBcsa+ARnsg kIiNaaUmWr91jfMkLruSFdBJzwAwoj77zmtQDbWpB1FHiRUglmXeLMBaJOmwElqL Yh5yvdI3Gyn516tzaPTubgpD8s4BOdSgnsEdxLe0+OK9B5oNlpIS1PTuiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqlr1ccYaoMH25UyseM2CLK4hMGMB8GA1UdIwQY MBaAFFR3d6zvjEkuUBG93sEpr4rsl0t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkhkM3JPLU1TUzVRRWIzZXdTbXZpdXlYUzNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy83MGIxMWEtNGY5Zi00MmU2LTgwOWIt ZTU4OTIzZWEzMmJlLzEvVkhkM3JPLU1TUzVRRWIzZXdTbXZpdXlYUzNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy83MGIxMWEtNGY5Zi00MmU2LTgwOWItZTU4OTIzZWEzMmJl LzEvVkhkM3JPLU1TUzVRRWIzZXdTbXZpdXlYUzNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAco1M2rsp +ulP8YUCpGDfHHmvn9fvaG3rTc+XkmQbOI9SiKab667INErentsHwsTOJegJLNgB tcY8PJaJNiW5onWGVvGWS/jxFx7qGiwQrgx3p4RShwABOz4zp83hZlEyULYxhL5g +HY33Jm/rJgaJ5Drp062K5pxCMAxoCYiStvn+RQzAO6hLHVB34h9osl5YIHGdiFY PfBeResZiUHfeAMqB9gvjVaC23hI0ScHc7Jus4nRORxtlHX3uBeP5K+YurvBH7lt 5VINQ46JyW2eeNjbKBJIAazlJR9PWR6xYNpqfT5Zx5KodiBUatWrg277M9WnFvOE YjbUSrGpxxUlIQ== -----END CERTIFICATE-----Generated at Mon Jan 26 22:57:13 2026 by rpki-client