This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft File: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json) Hash identifier: ebVPdsJI/KTpPOn06Ms69XedHQiu5mI+DfzR3owHBUA= Subject key identifier: 73:90:B5:63:63:73:1B:A0:6F:8B:1D:2A:24:E7:8A:61:BD:CD:BE:10 Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9 Certificate issuer: /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9 Certificate serial: 019BDD3683B431EE192C0C4CF822775DEE32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft Manifest number: 15F9 Signing time: Tue 20 Jan 2026 21:01:35 +0000 Manifest this update: Tue 20 Jan 2026 21:01:35 +0000 Manifest next update: Wed 21 Jan 2026 21:01:35 +0000 Files and hashes: 1: R-q6ieQ5ZRpyZAS3VuKsjP1lbqI.roa (hash: LE0wpmfemoMC71Up9yLLrAR45HiWA1m8U6namnoo6+E=) 2: RoC9yHrjkOJ0GiednXz9KzpBgEI.roa (hash: kugJughWaN4KyRcT9vU8DskQM03Ay2SChRmN27jdndQ=) 3: Uj9qErLJ7z3sRt5hNWIVbAoCTJU.roa (hash: XmHbyEYbwLMwHEMXeqgjX8MuDffCoDklGaGBFZdSn00=) 4: u_BnVwDhAa2ItOuzTxp9mi3OVGk.roa (hash: DT0/HarFisk4IStUU9LzkErJGL5WNt4QSQVHnd5C+vo=) 5: upv2bkah2kmcgwzii9vlsV1YYx0.roa (hash: DdoCoWJ4MAXwMUb9LrgBORU0OoZ8wqZEHBq3WjBn6lw=) 6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: EhvEW24N4R6ZJ7BUe5fdEAK6S0+3/oPqKzG6BQM8iaU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:dd:36:83:b4:31:ee:19:2c:0c:4c:f8:22:77:5d:ee:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9 Validity Not Before: Jan 20 21:01:35 2026 GMT Not After : Jan 21 21:01:35 2026 GMT Subject: CN=7390b56363731ba06f8b1d2a24e78a61bdcdbe10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e7:d3:3b:af:fe:30:5e:08:5f:fb:66:69:9e: 84:4e:ed:85:03:1d:00:1d:a8:39:15:90:3a:78:54: 5b:28:fd:0e:f7:15:08:7f:b4:9b:de:99:b2:d6:45: 1d:95:a0:5c:48:95:94:52:f9:76:6b:f0:25:2a:2e: 1a:d3:b1:13:57:62:f0:67:7f:1f:17:f0:a5:01:a6: 96:7b:fe:1f:17:21:f1:d4:b7:98:0e:e5:54:c6:c0: c3:1c:69:38:cb:62:54:b2:e2:2f:56:67:49:d7:74: a3:f2:2a:d3:1f:19:00:03:bc:a5:e2:9a:cc:c9:ab: 38:c9:e6:d5:dc:db:ef:39:92:58:ac:6b:2d:c4:90: b3:f5:be:e1:49:43:46:e7:65:60:f2:7d:63:fe:34: 1b:6f:39:17:96:64:e9:8f:e3:3f:74:51:cd:ea:c6: 06:c4:b4:04:7e:ce:c7:56:ce:e7:4b:27:85:79:f7: 96:c8:78:5c:c9:e3:4b:a1:ba:d8:2c:dd:b4:ae:49: 0a:a6:46:4b:50:ee:a6:e8:33:dd:98:0e:00:9d:d2: b5:5b:f0:f3:c8:68:eb:52:10:bd:f0:bf:7b:16:ed: 2c:d6:c0:84:5c:a9:c9:47:eb:ad:f3:ae:e6:26:f5: f8:7a:f6:f0:90:18:92:de:a7:7d:58:43:89:70:a5: e2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:90:B5:63:63:73:1B:A0:6F:8B:1D:2A:24:E7:8A:61:BD:CD:BE:10 X509v3 Authority Key Identifier: keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:84:d7:4e:80:15:ca:7b:1f:04:56:21:1a:c3:9b:5c:df:3c: 20:df:20:b4:95:a8:26:5f:0a:60:7f:3c:1b:2d:b2:a4:c1:e8: 34:ae:e4:70:99:54:aa:f3:7b:7d:31:b4:4f:1e:4d:45:6f:97: 9f:96:bf:aa:07:de:b5:32:dc:ea:18:34:00:17:69:56:de:2d: eb:bc:e0:b4:75:a1:62:52:83:57:1b:81:a1:06:87:8b:f6:f3: bd:ed:a5:61:1d:ab:21:81:38:45:2e:d8:f9:77:c7:ae:cf:5e: 0d:45:0c:bd:35:2f:ce:61:ac:eb:68:a0:ea:c3:6f:f6:de:9c: 74:fa:d8:c1:e9:e0:00:69:85:c4:e7:20:d9:ff:da:fa:ec:0a: 02:3d:a9:92:cd:7a:80:7c:1b:9b:81:1d:e7:f9:7d:fe:94:ac: 9f:ab:2d:18:27:20:3f:d9:3a:d0:7b:06:7d:85:59:3a:d3:82: 0e:19:ed:27:09:1a:65:b9:83:e8:e5:ab:34:c6:9a:e1:bf:7d: 20:dc:ea:9d:03:04:c3:4d:19:4c:1b:cd:6f:dc:14:b3:6c:06: ad:72:86:42:19:48:34:ce:67:c3:c8:3c:51:d2:c7:c3:73:42: 3e:15:14:3f:4f:58:cd:a9:9e:f7:da:d8:0f:4c:1b:96:a1:19: 0d:74:76:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvdNoO0Me4ZLAxM+CJ3Xe4yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNDlmYjE5MGY0YmQwZjU4MTVhOGU1NzlmMzY2YWQ1OGQ1 ZDQxZjkwHhcNMjYwMTIwMjEwMTM1WhcNMjYwMTIxMjEwMTM1WjAzMTEwLwYDVQQD Eyg3MzkwYjU2MzYzNzMxYmEwNmY4YjFkMmEyNGU3OGE2MWJkY2RiZTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+fTO6/+MF4IX/tmaZ6ETu2FAx0A Hag5FZA6eFRbKP0O9xUIf7Sb3pmy1kUdlaBcSJWUUvl2a/AlKi4a07ETV2LwZ38f F/ClAaaWe/4fFyHx1LeYDuVUxsDDHGk4y2JUsuIvVmdJ13Sj8irTHxkAA7yl4prM yas4yebV3NvvOZJYrGstxJCz9b7hSUNG52Vg8n1j/jQbbzkXlmTpj+M/dFHN6sYG xLQEfs7HVs7nSyeFefeWyHhcyeNLobrYLN20rkkKpkZLUO6m6DPdmA4AndK1W/Dz yGjrUhC98L97Fu0s1sCEXKnJR+ut867mJvX4evbwkBiS3qd9WEOJcKXimQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHOQtWNjcxugb4sdKiTnimG9zb4QMB8GA1UdIwQY MBaAFL5J+xkPS9D1gVqOV582atWNXUH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDct NWU2NTZmMWI0ODc2LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDctNWU2NTZmMWI0ODc2 LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4TXToAV ynsfBFYhGsObXN88IN8gtJWoJl8KYH88Gy2ypMHoNK7kcJlUqvN7fTG0Tx5NRW+X n5a/qgfetTLc6hg0ABdpVt4t67zgtHWhYlKDVxuBoQaHi/bzve2lYR2rIYE4RS7Y +XfHrs9eDUUMvTUvzmGs62ig6sNv9t6cdPrYwengAGmFxOcg2f/a+uwKAj2pks16 gHwbm4Ed5/l9/pSsn6stGCcgP9k60HsGfYVZOtOCDhntJwkaZbmD6OWrNMaa4b99 INzqnQMEw00ZTBvNb9wUs2wGrXKGQhlINM5nw8g8UdLHw3NCPhUUP09Yzame99rY D0wblqEZDXR2SQ== -----END CERTIFICATE-----Generated at Wed Jan 21 02:34:15 2026 by rpki-client