This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft File: VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json) Hash identifier: fXQwxNwtrwqls9TbSeK1LlL3LCsSZifG+/VO3bevwWU= Subject key identifier: DB:93:A4:BA:42:94:20:7B:3B:F3:76:59:38:2F:22:27:1C:1F:B2:B2 Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50 Certificate issuer: /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950 Certificate serial: 019C1BDD95695F858403DFB8DF0126F26363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft Manifest number: 19 Signing time: Mon 02 Feb 2026 01:00:32 +0000 Manifest this update: Mon 02 Feb 2026 01:00:32 +0000 Manifest next update: Tue 03 Feb 2026 01:00:32 +0000 Files and hashes: 1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=) 2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: weYqMNGz+SjkQczdfqXnmiPaMglK3SqfYg9728ok0KQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:dd:95:69:5f:85:84:03:df:b8:df:01:26:f2:63:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950 Validity Not Before: Feb 2 01:00:32 2026 GMT Not After : Feb 3 01:00:32 2026 GMT Subject: CN=db93a4ba4294207b3bf37659382f22271c1fb2b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:6c:f7:ce:19:d1:38:ee:b1:58:01:9e:82:d6: 3e:ab:34:26:e9:cb:62:e3:d2:52:2a:db:b0:73:9f: 80:86:d6:27:d0:98:12:65:a8:2f:9e:e7:88:76:1d: ec:8d:63:ff:5f:ed:a1:ea:20:61:6b:79:c9:69:6e: 59:de:cf:f0:3b:d0:06:22:ea:f4:a6:d8:c7:08:3a: 55:5c:4d:6d:b4:0c:81:e3:ac:d9:6d:15:95:d4:e8: 7a:c5:8f:a0:e9:80:c1:28:c4:7b:9b:c5:d7:25:bc: 5d:31:8c:70:22:59:9b:70:ed:b7:ea:61:9a:e3:da: 69:ac:7e:d2:62:0a:9a:bf:43:60:f5:73:61:43:dd: 04:17:28:b7:4f:a3:db:e1:00:d9:c1:f5:46:92:39: 35:28:c9:30:d3:1a:43:62:e0:99:92:fe:b7:58:0c: 97:0c:17:25:4f:eb:e6:f8:fe:bd:c3:05:be:2b:3e: cd:6d:df:db:eb:80:78:b6:2c:d3:d4:f8:a2:2f:fd: fb:4d:e1:05:3e:65:60:80:19:eb:a1:b6:be:42:37: df:6b:ab:02:07:54:5c:0a:a0:d3:83:19:cb:bc:07: 80:e2:1b:f2:90:85:34:cc:24:e9:fb:7a:c1:2d:9c: 7f:76:fe:8a:de:70:40:21:db:e1:dc:dd:a9:3d:bb: 72:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:93:A4:BA:42:94:20:7B:3B:F3:76:59:38:2F:22:27:1C:1F:B2:B2 X509v3 Authority Key Identifier: keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:cf:1b:f9:c6:60:36:db:9f:85:f8:af:eb:34:27:8e:5d:2b: e4:a4:c7:4b:58:da:40:82:55:c6:05:df:bc:0c:af:e3:22:ba: a1:be:8e:23:99:fc:a1:a0:bd:c2:5a:32:6d:da:e4:35:02:46: ff:98:8b:79:b9:58:71:77:1e:bb:10:c9:1f:f9:21:ec:3c:a6: ce:d1:3e:13:72:97:10:9c:d1:f6:a2:91:bf:4d:f2:69:7a:a8: 9e:47:38:bb:2a:86:3d:3a:46:1d:a2:f6:35:92:90:33:e6:fd: fb:fd:f3:b4:7f:49:52:4e:a4:78:7f:4e:bf:33:16:ff:78:0f: 5f:f3:ee:b9:c8:0e:57:76:0d:61:8a:92:12:90:a6:76:0a:25: 7b:a8:bf:96:53:bd:35:7c:a9:45:e3:db:17:28:ff:98:be:db: 5f:35:ac:3b:99:20:a8:03:e7:68:d9:62:7c:07:b0:07:1c:2d: 1c:c8:5b:13:94:25:ec:93:62:e0:09:a7:9b:a1:5d:07:4c:9d: df:a6:7c:a3:8f:1e:54:69:98:81:ee:85:48:c2:8c:b0:a6:56: 1c:6f:e3:f1:dc:00:35:ce:86:12:64:a3:77:6b:81:d7:6c:1c: 7c:c2:1c:69:c6:75:a2:9f:ac:2e:ea:15:62:38:cb:d1:9b:72: 76:ca:e5:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwb3ZVpX4WEA9+43wEm8mNjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MDgyNWVjN2JkMzNhMDIyMDRjZDFiYzE1MzVmYzFjYTIx NTA5NTAwHhcNMjYwMjAyMDEwMDMyWhcNMjYwMjAzMDEwMDMyWjAzMTEwLwYDVQQD EyhkYjkzYTRiYTQyOTQyMDdiM2JmMzc2NTkzODJmMjIyNzFjMWZiMmIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mz3zhnROO6xWAGegtY+qzQm6cti 49JSKtuwc5+AhtYn0JgSZagvnueIdh3sjWP/X+2h6iBha3nJaW5Z3s/wO9AGIur0 ptjHCDpVXE1ttAyB46zZbRWV1Oh6xY+g6YDBKMR7m8XXJbxdMYxwIlmbcO236mGa 49pprH7SYgqav0Ng9XNhQ90EFyi3T6Pb4QDZwfVGkjk1KMkw0xpDYuCZkv63WAyX DBclT+vm+P69wwW+Kz7Nbd/b64B4tizT1PiiL/37TeEFPmVggBnroba+Qjffa6sC B1RcCqDTgxnLvAeA4hvykIU0zCTp+3rBLZx/dv6K3nBAIdvh3N2pPbtyqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuTpLpClCB7O/N2WTgvIiccH7KyMB8GA1UdIwQY MBaAFFQIJex70zoCIEzRvBU1/ByiFQlQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi82OGJmNTQtZDk4OS00ODgxLWE3NmYt NWYyZjE1YmUyN2M0LzEvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi82OGJmNTQtZDk4OS00ODgxLWE3NmYtNWYyZjE1YmUyN2M0 LzEvVkFnbDdIdlRPZ0lnVE5HOEZUWDhIS0lWQ1ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABM8b+cZg Ntufhfiv6zQnjl0r5KTHS1jaQIJVxgXfvAyv4yK6ob6OI5n8oaC9wloybdrkNQJG /5iLeblYcXceuxDJH/kh7DymztE+E3KXEJzR9qKRv03yaXqonkc4uyqGPTpGHaL2 NZKQM+b9+/3ztH9JUk6keH9OvzMW/3gPX/PuucgOV3YNYYqSEpCmdgole6i/llO9 NXypRePbFyj/mL7bXzWsO5kgqAPnaNlifAewBxwtHMhbE5Ql7JNi4Amnm6FdB0yd 36Z8o48eVGmYge6FSMKMsKZWHG/j8dwANc6GEmSjd2uB12wcfMIcacZ1op+sLuoV YjjL0ZtydsrldA== -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:45 2026 by rpki-client