This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft File: veasKPlU4T3LfbabwiK3hbTXXyw.mft (raw, json) Hash identifier: D/1yhrvvjpSjNS9ybwNzGSqUqbjsq6xjAZqk3Xxy1Xo= Subject key identifier: 65:0A:B8:2A:BE:54:3B:EA:E5:CB:57:8B:99:B7:BB:51:31:8C:69:E8 Authority key identifier: BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C Certificate issuer: /CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c Certificate serial: 019BA30FC2576E0987CC17FA4A47499FA857 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft Manifest number: 0EA4 Signing time: Fri 09 Jan 2026 14:01:17 +0000 Manifest this update: Fri 09 Jan 2026 14:01:17 +0000 Manifest next update: Sat 10 Jan 2026 14:01:17 +0000 Files and hashes: 1: fNmRYBB_y5qrTpD_HG4Mj6gKJGg.roa (hash: GCMtnktG1EHO/VdELDulMItSCpc0TfpSbN+GlUgxuiE=) 2: h7Uzdn3QCG9HXrxBJJQfKOf_wrU.roa (hash: B5SpfQD49xaKavcSBPmQWnJvbXttVFrT+Gp3dIpS18Y=) 3: i__p0JsHuiqPylXpC5Eh8HJk-q0.roa (hash: tD7G29bUtBn0T0NGAjmoXjsJogAe47kZEPeNJWkADNw=) 4: veasKPlU4T3LfbabwiK3hbTXXyw.crl (hash: sxruCkN8ul0u349nHUpmPegeE82r9TfzLaGCOLYEqPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a3:0f:c2:57:6e:09:87:cc:17:fa:4a:47:49:9f:a8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde6ac28f954e13dcb7db69bc222b785b4d75f2c Validity Not Before: Jan 9 14:01:17 2026 GMT Not After : Jan 10 14:01:17 2026 GMT Subject: CN=650ab82abe543beae5cb578b99b7bb51318c69e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:d1:d1:41:8d:2a:cb:d8:1a:d7:b0:04:5b: 1e:80:04:fc:0c:3f:eb:2c:13:5e:72:b5:b5:a7:2e: ec:07:2f:2f:40:74:20:19:42:1c:e7:ed:e8:92:2c: 2b:f3:df:9b:5c:b1:75:fb:9e:41:29:69:87:f3:45: 8d:c7:47:f8:e9:69:08:d4:de:80:ee:ff:18:ea:ba: c2:a3:ae:e1:a7:53:59:78:26:7d:8a:ee:d6:9a:61: 6f:df:23:e6:3b:40:b7:24:b9:56:12:25:b2:7b:a0: ca:09:37:8e:c6:ad:5b:cb:18:c6:06:13:25:f0:45: 32:71:62:53:e6:43:f9:08:bc:5a:0d:68:13:11:ad: db:4c:74:31:38:d8:2c:81:c8:c7:b5:1c:ff:a0:27: 57:80:06:fe:a4:cd:7a:4e:62:37:5c:22:35:2c:e8: 07:12:52:2c:bf:15:00:43:22:6f:e8:06:be:9f:22: a6:41:c1:ee:fa:82:7d:71:db:c6:80:b2:91:f5:18: 94:d6:65:bc:89:8b:b4:e4:15:3f:da:f0:f7:28:03: 9d:18:c8:06:47:4f:95:08:46:89:10:ad:8b:c8:d8: 8b:f5:b9:56:e3:14:99:3e:b1:67:00:a4:39:6a:13: ad:e7:33:d9:d0:eb:bd:49:01:4d:7b:4e:5f:eb:7a: ae:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:0A:B8:2A:BE:54:3B:EA:E5:CB:57:8B:99:B7:BB:51:31:8C:69:E8 X509v3 Authority Key Identifier: keyid:BD:E6:AC:28:F9:54:E1:3D:CB:7D:B6:9B:C2:22:B7:85:B4:D7:5F:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veasKPlU4T3LfbabwiK3hbTXXyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5b4e13-b3dd-4d8a-8e71-cae6c725d92f/1/veasKPlU4T3LfbabwiK3hbTXXyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:6d:ff:64:52:07:a6:a3:fe:85:4c:c6:2e:83:84:73:7b:a5: 45:8b:d7:86:8b:c0:ba:42:05:0f:33:12:81:a0:f4:e5:74:8f: 86:a6:7b:d0:96:eb:52:af:8c:d0:f2:ac:eb:32:5c:52:a4:43: 5b:94:ac:01:65:d3:d0:d2:c7:13:a9:13:ad:e9:0a:fc:64:f6: fe:8d:c3:3c:42:59:95:81:ee:ec:d7:0a:2d:11:0b:b9:7b:2d: 7c:88:79:8f:c8:e6:15:fa:1b:fb:28:a1:e2:82:f5:4a:a0:2e: 18:63:c9:a3:fd:da:85:f9:69:bc:3c:ec:da:b2:6f:7b:5a:26: 6e:12:76:b3:c8:52:ab:4a:54:68:a8:f6:b9:bd:bb:d6:90:76: 93:77:e5:a0:1e:c3:1d:c8:74:12:49:af:d5:26:35:e4:6a:2d: 60:e0:3c:e8:a0:a1:16:79:a8:db:31:83:1d:08:97:62:49:6a: 68:af:e2:84:d0:b8:18:c3:15:8e:45:00:72:cd:0c:c3:dc:37: 5c:44:69:64:c3:d6:8f:a6:23:15:01:e3:0b:90:bd:6c:94:96: 3f:c7:5f:63:cf:67:7d:4e:d6:3c:83:ab:2c:19:d0:e8:54:21: bd:35:25:61:95:aa:b9:a7:de:17:7c:ae:e8:25:03:41:c4:44: ec:c9:65:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZujD8JXbgmHzBf6SkdJn6hXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTZhYzI4Zjk1NGUxM2RjYjdkYjY5YmMyMjJiNzg1YjRk NzVmMmMwHhcNMjYwMTA5MTQwMTE3WhcNMjYwMTEwMTQwMTE3WjAzMTEwLwYDVQQD Eyg2NTBhYjgyYWJlNTQzYmVhZTVjYjU3OGI5OWI3YmI1MTMxOGM2OWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbvR0UGNKsvYGtewBFsegAT8DD/r LBNecrW1py7sBy8vQHQgGUIc5+3okiwr89+bXLF1+55BKWmH80WNx0f46WkI1N6A 7v8Y6rrCo67hp1NZeCZ9iu7WmmFv3yPmO0C3JLlWEiWye6DKCTeOxq1byxjGBhMl 8EUycWJT5kP5CLxaDWgTEa3bTHQxONgsgcjHtRz/oCdXgAb+pM16TmI3XCI1LOgH ElIsvxUAQyJv6Aa+nyKmQcHu+oJ9cdvGgLKR9RiU1mW8iYu05BU/2vD3KAOdGMgG R0+VCEaJEK2LyNiL9blW4xSZPrFnAKQ5ahOt5zPZ0Ou9SQFNe05f63quMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGUKuCq+VDvq5ctXi5m3u1ExjGnoMB8GA1UdIwQY MBaAFL3mrCj5VOE9y322m8Iit4W0118sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81YjRlMTMtYjNkZC00ZDhhLThlNzEt Y2FlNmM3MjVkOTJmLzEvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy81YjRlMTMtYjNkZC00ZDhhLThlNzEtY2FlNmM3MjVkOTJm LzEvdmVhc0tQbFU0VDNMZmJhYndpSzNoYlRYWHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIW3/ZFIH pqP+hUzGLoOEc3ulRYvXhovAukIFDzMSgaD05XSPhqZ70JbrUq+M0PKs6zJcUqRD W5SsAWXT0NLHE6kTrekK/GT2/o3DPEJZlYHu7NcKLRELuXstfIh5j8jmFfob+yih 4oL1SqAuGGPJo/3ahflpvDzs2rJve1ombhJ2s8hSq0pUaKj2ub271pB2k3floB7D Hch0Ekmv1SY15GotYOA86KChFnmo2zGDHQiXYklqaK/ihNC4GMMVjkUAcs0Mw9w3 XERpZMPWj6YjFQHjC5C9bJSWP8dfY89nfU7WPIOrLBnQ6FQhvTUlYZWquafeF3yu 6CUDQcRE7MllBQ== -----END CERTIFICATE-----Generated at Fri Jan 9 17:08:59 2026 by rpki-client