This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json) Hash identifier: rtZaE8oHGkwyRifNYEkeN/1dgIAVuqoituVofGXfviI= Subject key identifier: C5:1F:A2:02:44:EE:34:0B:23:66:01:C8:28:9B:41:BC:15:9F:1B:2C Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Certificate serial: 019BFEAF9CFC84303FEC3C7567C239860CBA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft Manifest number: 0A08 Signing time: Tue 27 Jan 2026 09:01:20 +0000 Manifest this update: Tue 27 Jan 2026 09:01:20 +0000 Manifest next update: Wed 28 Jan 2026 09:01:20 +0000 Files and hashes: 1: 60wJ4Ifb12thZkTYydBMGCHyhjU.roa (hash: loGVk4GY7PqMyMndtxYwq4ib8ZW1ZuV/iu1LnLyoy/k=) 2: BP73BKF5mJwPLLJxOSLVxLOWrtk.roa (hash: Ld3t48e3ZQBGQXb3cT/E5oe6b14FRU/wgq1qRxepE/s=) 3: HMrWWr_GpU-7TilUWTszNhM4XF4.roa (hash: ZxbJ+8rmhmPIZSt+dx++l6IVbkPcuwgYpg8+JSAPwH4=) 4: KjnHPRF-cTfafr7GSVcAiCyWeb0.roa (hash: 3qGWJTyestuh3mdWTHBj0z2W00hoEy0Lbm5OnbjIxk0=) 5: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: /XB/s0yJi4V7XEO7zRG7+cMARqBqMD8q7p2cWl02HMw=) 6: iCDpMweR3UnjQ3t5pDnJ4r1H_Z8.roa (hash: p7eqJ/28CY3BrDo7BINDBAyzyYyfthKUBP0i3u+PKTY=) 7: zSQVk9Uctt-RfcBSveyCr38CFfA.roa (hash: tRgRAlHE1zW+KtCt3216eqpIBlefLEs1R+bVPcz6sq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:af:9c:fc:84:30:3f:ec:3c:75:67:c2:39:86:0c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7 Validity Not Before: Jan 27 09:01:20 2026 GMT Not After : Jan 28 09:01:20 2026 GMT Subject: CN=c51fa20244ee340b236601c8289b41bc159f1b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:10:d2:5a:42:0e:8f:ae:64:b5:ff:dc:50:fd: ba:e0:ce:8a:e1:ed:f1:5e:b2:b3:01:55:bf:64:b0: db:9d:36:0f:b6:29:9f:7f:be:9a:de:66:89:7e:81: df:33:5b:8c:f2:12:d0:70:13:a2:84:73:42:f8:13: a3:88:e4:64:be:71:5f:b5:01:ab:65:35:54:6c:5c: 68:11:8d:2f:db:db:27:74:b0:56:c6:9a:c7:ea:34: e7:92:0c:21:88:5b:a6:d8:a3:93:7b:b3:2f:47:86: b3:b2:67:21:3d:38:ca:ff:e8:7f:53:3c:20:3d:86: 60:31:23:1a:f8:78:3d:3c:ae:d4:93:b0:45:47:af: e1:29:94:88:eb:7d:59:55:aa:fc:89:c4:e5:af:d7: 2f:a8:5d:da:32:7b:e4:2b:77:a8:16:87:f6:7f:d0: 98:75:b3:10:29:ea:0e:8c:48:16:8c:24:36:de:8c: a6:42:36:3d:39:51:0c:bf:fa:76:af:9a:ea:41:49: c7:b9:4b:88:24:bd:9a:4b:c5:99:7b:cd:d4:08:0f: 76:d5:49:6e:79:6f:7f:8a:7d:79:74:f2:82:8e:f9: df:02:03:50:ca:9c:ac:0d:68:33:a7:59:b3:93:7a: 4b:e9:3c:89:a7:d3:1d:56:0c:77:b0:f2:83:5e:4b: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1F:A2:02:44:EE:34:0B:23:66:01:C8:28:9B:41:BC:15:9F:1B:2C X509v3 Authority Key Identifier: keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6c:f6:95:b8:0b:e2:08:c9:1b:a1:78:0f:25:70:81:6b:e4: 30:75:7d:21:03:44:4b:bd:0c:ef:57:3d:65:14:52:eb:9c:35: 56:94:60:5f:be:13:7d:23:d5:69:65:2c:68:1e:dc:4a:52:2f: ee:9a:5c:0e:9d:5d:e5:11:43:91:03:f3:7f:ca:2d:1e:f6:4f: a2:c3:bf:4c:63:d9:c9:06:c5:33:49:66:9c:af:b5:e3:80:48: 63:f2:97:81:8b:75:46:31:3b:fa:4b:00:1a:d6:12:2c:61:c4: 6a:96:53:c8:3c:24:a0:4a:58:3f:48:17:08:e6:01:c3:18:64: d7:4b:68:e1:30:15:80:6c:d0:00:10:ce:af:ad:89:7e:8f:55: 9f:97:20:5c:c9:c6:4b:45:ab:a6:96:6c:85:1c:bc:c8:a8:4c: 5e:5e:6d:b3:c2:a9:ef:cc:64:5d:9c:ec:3e:c8:b5:03:fd:79: 61:34:4a:35:ae:f9:ce:d3:0f:13:5d:ec:f6:da:ea:c6:0a:db: 05:5d:9f:85:37:34:a6:ae:16:f0:60:22:6b:f7:12:fd:08:ec: 42:80:ed:df:3f:7f:97:29:56:61:a9:81:43:3e:eb:f3:d0:40: 2f:54:2a:4b:49:9a:84:20:95:7c:c2:2b:2c:3a:11:20:c3:db: 8c:b6:0c:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv+r5z8hDA/7Dx1Z8I5hgy6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl ZTdlZjcwHhcNMjYwMTI3MDkwMTIwWhcNMjYwMTI4MDkwMTIwWjAzMTEwLwYDVQQD EyhjNTFmYTIwMjQ0ZWUzNDBiMjM2NjAxYzgyODliNDFiYzE1OWYxYjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxDSWkIOj65ktf/cUP264M6K4e3x XrKzAVW/ZLDbnTYPtimff76a3maJfoHfM1uM8hLQcBOihHNC+BOjiORkvnFftQGr ZTVUbFxoEY0v29sndLBWxprH6jTnkgwhiFum2KOTe7MvR4azsmchPTjK/+h/Uzwg PYZgMSMa+Hg9PK7Uk7BFR6/hKZSI631ZVar8icTlr9cvqF3aMnvkK3eoFof2f9CY dbMQKeoOjEgWjCQ23oymQjY9OVEMv/p2r5rqQUnHuUuIJL2aS8WZe83UCA921Ulu eW9/in15dPKCjvnfAgNQypysDWgzp1mzk3pL6TyJp9MdVgx3sPKDXkvcyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUfogJE7jQLI2YByCibQbwVnxssMB8GA1UdIwQY MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt ZjRmMWY5M2UwNDY3LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3 LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmz2lbgL 4gjJG6F4DyVwgWvkMHV9IQNES70M71c9ZRRS65w1VpRgX74TfSPVaWUsaB7cSlIv 7ppcDp1d5RFDkQPzf8otHvZPosO/TGPZyQbFM0lmnK+144BIY/KXgYt1RjE7+ksA GtYSLGHEapZTyDwkoEpYP0gXCOYBwxhk10to4TAVgGzQABDOr62Jfo9Vn5cgXMnG S0WrppZshRy8yKhMXl5ts8Kp78xkXZzsPsi1A/15YTRKNa75ztMPE13s9trqxgrb BV2fhTc0pq4W8GAia/cS/QjsQoDt3z9/lylWYamBQz7r89BAL1QqS0mahCCVfMIr LDoRIMPbjLYMmg== -----END CERTIFICATE-----Generated at Tue Jan 27 11:35:17 2026 by rpki-client