This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft File: v-V8w9sYQEcMc6CWBdGH172Vlcs.mft (raw, json) Hash identifier: OSMKAWPpROwbbaOy8lawokEIk2CVASiKTro+4UVtAqE= Subject key identifier: A3:95:A6:AB:5B:0C:AD:4F:ED:B8:53:9E:4A:63:A2:5B:8C:BF:40:A2 Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB Certificate issuer: /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb Certificate serial: 019BFA2DE58FD50B860A9125B3D9CF87AD1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft Manifest number: 17ED Signing time: Mon 26 Jan 2026 12:01:10 +0000 Manifest this update: Mon 26 Jan 2026 12:01:10 +0000 Manifest next update: Tue 27 Jan 2026 12:01:10 +0000 Files and hashes: 1: 2ikB92Z1YZga53T_5TgPbCYNO2U.roa (hash: 6LYS7/XU1c9VFgwkPm/Cq36EgEjl8++/LJln5tJD5X8=) 2: v-V8w9sYQEcMc6CWBdGH172Vlcs.crl (hash: d1w8QpUBFzFk7/jzAOZpqPgJz7//SQp5f0XPyXVgE+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fa:2d:e5:8f:d5:0b:86:0a:91:25:b3:d9:cf:87:ad:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb Validity Not Before: Jan 26 12:01:10 2026 GMT Not After : Jan 27 12:01:10 2026 GMT Subject: CN=a395a6ab5b0cad4fedb8539e4a63a25b8cbf40a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:db:03:aa:c2:88:3e:98:ed:06:e9:c8:c2:c0: 74:44:03:8c:d5:5f:db:bb:61:1e:c6:ce:3b:7b:a1: ab:cb:ec:8c:82:45:28:10:b8:e2:b0:8b:23:c1:16: b9:5c:ea:88:e7:e0:47:13:9f:cc:8c:a4:2f:3f:54: 44:d8:9d:a9:a6:ec:c0:52:49:f6:50:be:e6:af:0e: 7d:75:68:a9:85:52:b7:87:b2:bd:bc:6d:77:f6:20: 90:5b:e7:33:d7:98:ea:6e:03:9c:68:78:4d:44:b0: d9:ea:2c:95:8e:aa:7a:b4:ec:60:b9:bf:1d:ac:f1: e5:e3:3c:30:fc:9f:02:e3:23:b4:28:f3:53:99:b7: 22:2c:34:a1:4b:9e:9f:c1:4f:76:e7:44:f8:42:c0: 75:ab:a0:53:ef:93:88:2a:ef:9e:a2:0b:bd:69:91: b8:3c:af:3d:47:78:21:c2:be:f9:b7:3d:43:eb:b4: 7f:97:f4:71:2a:c9:9e:58:6d:99:fe:28:84:c1:ff: 42:d3:6c:5c:64:61:95:ff:a8:b8:75:a4:57:88:2d: e6:17:15:15:4c:a9:f2:68:b1:16:eb:44:b4:00:b6: 92:81:23:57:0e:ee:0a:fa:59:78:1d:77:a0:4c:d4: 9f:47:12:f6:e8:62:80:f6:00:5d:ea:86:bf:b5:5d: 79:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:95:A6:AB:5B:0C:AD:4F:ED:B8:53:9E:4A:63:A2:5B:8C:BF:40:A2 X509v3 Authority Key Identifier: keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:62:78:e4:a2:7f:c7:a1:4d:d2:d3:b7:fc:bc:77:e6:c0:66: bb:6b:71:95:6e:3f:1a:97:81:ad:65:db:c3:84:e5:77:76:ca: f7:3a:34:d3:c0:85:41:dc:f6:9a:35:d3:0f:06:0b:bf:55:26: b6:8e:ba:50:93:db:d5:e9:e9:b7:5a:db:a1:00:0d:26:e3:98: 2f:f3:07:4b:79:68:c6:eb:93:d8:4f:ec:b4:7e:50:d3:89:58: 80:df:96:47:cd:e4:7c:67:5a:46:1a:86:7a:9a:d3:44:a0:63: d0:20:07:fd:07:85:6a:3f:cb:84:42:27:ed:85:2e:a2:6e:3e: 1e:e7:d0:82:a2:90:84:7f:48:64:d3:4a:60:e1:c1:89:eb:ef: 88:87:bb:63:6c:2e:57:ec:4a:ab:dd:19:51:9f:94:ba:b8:85: e1:40:f9:fa:4f:86:b2:ef:32:a0:1d:b0:d0:8c:dc:99:33:e2: 91:0d:27:26:f0:39:e1:8b:99:f9:e4:fa:3e:c0:29:ac:e6:2d: c4:ea:34:5c:89:eb:e7:4d:76:84:f8:2f:06:db:72:5d:3c:bc: 81:63:05:e1:73:b0:09:af:13:7f:23:4b:c4:f9:31:1b:ce:f5: 3d:b0:24:74:c9:c7:78:41:85:8a:0b:b1:6e:1b:8b:27:29:1f: 10:16:16:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv6LeWP1QuGCpEls9nPh60fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZTU3Y2MzZGIxODQwNDcwYzczYTA5NjA1ZDE4N2Q3YmQ5 NTk1Y2IwHhcNMjYwMTI2MTIwMTEwWhcNMjYwMTI3MTIwMTEwWjAzMTEwLwYDVQQD EyhhMzk1YTZhYjViMGNhZDRmZWRiODUzOWU0YTYzYTI1YjhjYmY0MGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktsDqsKIPpjtBunIwsB0RAOM1V/b u2Eexs47e6Gry+yMgkUoELjisIsjwRa5XOqI5+BHE5/MjKQvP1RE2J2ppuzAUkn2 UL7mrw59dWiphVK3h7K9vG139iCQW+cz15jqbgOcaHhNRLDZ6iyVjqp6tOxgub8d rPHl4zww/J8C4yO0KPNTmbciLDShS56fwU9250T4QsB1q6BT75OIKu+eogu9aZG4 PK89R3ghwr75tz1D67R/l/RxKsmeWG2Z/iiEwf9C02xcZGGV/6i4daRXiC3mFxUV TKnyaLEW60S0ALaSgSNXDu4K+ll4HXegTNSfRxL26GKA9gBd6oa/tV15HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOVpqtbDK1P7bhTnkpjoluMv0CiMB8GA1UdIwQY MBaAFL/lfMPbGEBHDHOglgXRh9e9lZXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEt MGEyNzVhNjc2M2NlLzEvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEtMGEyNzVhNjc2M2Nl LzEvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWJ45KJ/ x6FN0tO3/Lx35sBmu2txlW4/GpeBrWXbw4Tld3bK9zo008CFQdz2mjXTDwYLv1Um to66UJPb1enpt1rboQANJuOYL/MHS3loxuuT2E/stH5Q04lYgN+WR83kfGdaRhqG eprTRKBj0CAH/QeFaj/LhEIn7YUuom4+HufQgqKQhH9IZNNKYOHBievviIe7Y2wu V+xKq90ZUZ+UuriF4UD5+k+Gsu8yoB2w0IzcmTPikQ0nJvA54YuZ+eT6PsAprOYt xOo0XInr5012hPgvBttyXTy8gWMF4XOwCa8TfyNLxPkxG871PbAkdMnHeEGFigux bhuLJykfEBYWqQ== -----END CERTIFICATE-----Generated at Mon Jan 26 16:02:35 2026 by rpki-client