This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft File: VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft (raw, json) Hash identifier: FHc7AfyBPu5VcOR5GhED3dKSSWOxvDtQXBJMGajVTfA= Subject key identifier: ED:D5:34:93:D5:0A:62:A2:53:4C:0D:4C:DB:DF:7B:4E:A5:00:5E:74 Authority key identifier: 54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4 Certificate issuer: /CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4 Certificate serial: 019BFCC15335B5788C492FD27544D111CEAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft Manifest number: 17ED Signing time: Tue 27 Jan 2026 00:01:26 +0000 Manifest this update: Tue 27 Jan 2026 00:01:26 +0000 Manifest next update: Wed 28 Jan 2026 00:01:26 +0000 Files and hashes: 1: Tv-1lu7GVvYKCCNJrjspKQqz-UY.roa (hash: 9l4nrTM55YoKW+9z7XZNyjc96a4hC8pAvLejRN5e7BI=) 2: VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl (hash: sTkguYPKfR8e8zQaxINmcXxeb1FPe8pTArUJ3SihNAo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:c1:53:35:b5:78:8c:49:2f:d2:75:44:d1:11:ce:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=540b63d19d86ea345c9b5f169300c3a29d4c31c4 Validity Not Before: Jan 27 00:01:26 2026 GMT Not After : Jan 28 00:01:26 2026 GMT Subject: CN=edd53493d50a62a2534c0d4cdbdf7b4ea5005e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:54:a7:49:83:3c:f0:69:66:f7:23:5c:57:bd: 3c:89:1a:64:20:53:6e:e8:b9:29:aa:c7:f0:b8:53: 7e:8d:a4:cb:f2:f3:08:51:39:bd:c2:15:6d:c8:e6: 7b:71:f1:01:b5:1b:b6:2a:5b:69:51:c6:7f:e5:d6: 4c:fe:a3:2e:fe:d7:43:a2:12:b7:db:68:87:e0:e6: 03:19:2e:a7:a5:34:07:29:3c:3a:cd:d1:6e:97:20: b7:d0:6c:19:b6:e5:84:7c:ee:50:f8:c3:22:e6:64: 55:94:9b:c2:3d:91:f4:d3:be:49:07:9d:6c:ed:b9: df:c2:d1:26:a9:84:b1:65:ba:ec:25:f5:50:b2:20: d6:8c:06:21:70:4d:26:e2:45:79:b0:8c:d2:84:0c: 6c:6b:be:83:c6:23:96:b6:72:bd:c4:1e:5f:e5:ba: e3:16:96:10:f4:f6:a3:4e:9b:4f:6a:ba:77:67:62: fb:18:df:4c:70:a2:c1:02:09:c4:b2:16:f2:33:ea: e9:9d:1c:51:49:2f:f9:7a:a0:9e:75:58:6d:10:25: da:8c:bf:e1:b8:26:29:18:d1:fa:08:49:c7:c3:c2: ab:eb:9b:16:01:90:3f:a2:ee:f4:82:c9:3f:8b:2c: e8:b0:d2:97:16:10:ca:97:08:68:ce:0f:c0:69:6e: 99:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D5:34:93:D5:0A:62:A2:53:4C:0D:4C:DB:DF:7B:4E:A5:00:5E:74 X509v3 Authority Key Identifier: keyid:54:0B:63:D1:9D:86:EA:34:5C:9B:5F:16:93:00:C3:A2:9D:4C:31:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAtj0Z2G6jRcm18WkwDDop1MMcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/d98472-f0b7-4df3-925b-0004b274630b/1/VAtj0Z2G6jRcm18WkwDDop1MMcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:df:95:d8:b4:56:3f:92:c3:f5:6b:fc:3a:4b:49:24:83:ed: 0b:56:11:68:80:fc:29:fe:2d:e3:a2:44:06:ff:75:b6:23:0e: 42:9a:db:b2:e3:f3:54:bd:f1:e5:42:10:10:40:9c:0f:b4:3c: eb:80:cf:5b:cb:73:a1:e3:92:f4:08:e8:c9:a4:ef:86:63:28: 63:09:cd:bf:b6:e2:40:9f:de:38:bc:94:76:62:b6:9a:94:87: 3a:a0:17:de:b7:06:47:a3:d7:d1:79:5a:ae:8b:2f:d5:3a:a6: fc:bf:d9:47:ea:a2:36:84:5e:ea:eb:8b:1e:74:51:ba:00:a9: 92:36:1c:31:36:82:95:87:e0:b6:dc:01:9b:24:d0:6a:7f:a1: a5:4e:c1:6d:d6:8c:96:95:fe:b2:26:02:e3:ed:df:6f:fa:c4: 3a:77:ae:c7:ff:43:ab:62:34:06:53:4a:5b:56:bc:ea:9b:b6: 58:fb:c0:3b:40:ba:73:85:b1:a3:3e:2d:b2:fa:cc:39:56:91: b3:09:e5:cf:e1:66:78:0b:1b:29:76:cd:cd:03:a1:1d:c9:ec: d8:dc:f4:df:4e:77:19:99:ac:8e:c9:7b:e1:01:42:fd:84:b7: a0:c2:b2:66:08:9f:0f:90:94:5b:15:b2:b2:eb:fc:f4:b5:6f: cd:d7:83:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8wVM1tXiMSS/SdUTREc6sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MGI2M2QxOWQ4NmVhMzQ1YzliNWYxNjkzMDBjM2EyOWQ0 YzMxYzQwHhcNMjYwMTI3MDAwMTI2WhcNMjYwMTI4MDAwMTI2WjAzMTEwLwYDVQQD EyhlZGQ1MzQ5M2Q1MGE2MmEyNTM0YzBkNGNkYmRmN2I0ZWE1MDA1ZTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51SnSYM88Glm9yNcV708iRpkIFNu 6LkpqsfwuFN+jaTL8vMIUTm9whVtyOZ7cfEBtRu2KltpUcZ/5dZM/qMu/tdDohK3 22iH4OYDGS6npTQHKTw6zdFulyC30GwZtuWEfO5Q+MMi5mRVlJvCPZH0075JB51s 7bnfwtEmqYSxZbrsJfVQsiDWjAYhcE0m4kV5sIzShAxsa76DxiOWtnK9xB5f5brj FpYQ9PajTptParp3Z2L7GN9McKLBAgnEshbyM+rpnRxRSS/5eqCedVhtECXajL/h uCYpGNH6CEnHw8Kr65sWAZA/ou70gsk/iyzosNKXFhDKlwhozg/AaW6ZDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3VNJPVCmKiU0wNTNvfe06lAF50MB8GA1UdIwQY MBaAFFQLY9Gdhuo0XJtfFpMAw6KdTDHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWIt MDAwNGIyNzQ2MzBiLzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9kOTg0NzItZjBiNy00ZGYzLTkyNWItMDAwNGIyNzQ2MzBi LzEvVkF0ajBaMkc2alJjbTE4V2t3RERvcDFNTWNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAad+V2LRW P5LD9Wv8OktJJIPtC1YRaID8Kf4t46JEBv91tiMOQprbsuPzVL3x5UIQEECcD7Q8 64DPW8tzoeOS9AjoyaTvhmMoYwnNv7biQJ/eOLyUdmK2mpSHOqAX3rcGR6PX0Xla rosv1Tqm/L/ZR+qiNoRe6uuLHnRRugCpkjYcMTaClYfgttwBmyTQan+hpU7BbdaM lpX+siYC4+3fb/rEOneux/9Dq2I0BlNKW1a86pu2WPvAO0C6c4Wxoz4tsvrMOVaR swnlz+FmeAsbKXbNzQOhHcns2Nz03053GZmsjsl74QFC/YS3oMKyZgifD5CUWxWy suv89LVvzdeDrQ== -----END CERTIFICATE-----Generated at Tue Jan 27 08:02:39 2026 by rpki-client