This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft File: veGsj467UC_MRFYtwQ2XOIRJO-U.mft (raw, json) Hash identifier: 1wbEFveU48ifiUkK3hRI1TZkmefjRChwM9/0gQ7IKhs= Subject key identifier: E5:20:38:BD:2B:CA:C4:9F:17:BE:74:D1:BB:10:87:1F:68:2E:2D:15 Authority key identifier: BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5 Certificate issuer: /CN=bde1ac8f8ebb502fcc44562dc10d973884493be5 Certificate serial: 019C2A3DB7163428DF713184D74F44FA5D4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft Manifest number: 0B36 Signing time: Wed 04 Feb 2026 20:00:13 +0000 Manifest this update: Wed 04 Feb 2026 20:00:13 +0000 Manifest next update: Thu 05 Feb 2026 20:00:13 +0000 Files and hashes: 1: FHuC08xej65vWpoCn1vY19ZYaXo.roa (hash: fK+QZuAXM9LenQpI7DNcQDyQgibuJZ/UqzboQddeQwQ=) 2: veGsj467UC_MRFYtwQ2XOIRJO-U.crl (hash: aeJg7GssV9XM8wMghXBiTE2PPUD8cPDgD/2lirxIJKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2a:3d:b7:16:34:28:df:71:31:84:d7:4f:44:fa:5d:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde1ac8f8ebb502fcc44562dc10d973884493be5 Validity Not Before: Feb 4 20:00:13 2026 GMT Not After : Feb 5 20:00:13 2026 GMT Subject: CN=e52038bd2bcac49f17be74d1bb10871f682e2d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:9e:38:3f:43:63:f0:38:86:16:a8:fd:6e: d6:f9:00:68:81:7d:7d:d6:ed:7a:c1:a1:fe:41:e5: b7:f3:75:de:91:37:1b:92:c6:cf:34:4d:fc:66:a0: 01:ac:71:e4:86:e3:18:b6:4a:f1:0e:eb:71:f5:58: 5b:cc:37:8f:c7:f7:4a:c8:88:5e:b5:dc:08:63:b9: df:1a:f7:d1:82:94:ac:26:5c:2c:43:63:5d:2d:fe: 5f:8b:54:06:03:89:e8:13:26:af:45:43:6c:eb:65: 5f:e1:8a:f6:50:af:76:af:10:0f:aa:75:43:04:6e: 3e:32:9a:93:80:9f:43:67:84:a9:5d:ac:cb:96:04: 2d:5d:92:83:21:28:95:50:e1:c4:fc:9e:ca:08:05: 4c:ca:c7:9a:f6:8f:18:a0:d8:57:e9:86:35:d4:58: 89:6d:a8:e3:d4:c7:2d:f8:b6:86:bd:27:01:47:7d: b9:da:23:44:96:c0:b5:e3:b2:4e:ba:0c:ad:58:ca: f4:bf:f0:97:7c:91:3b:3d:ab:c4:3c:be:21:60:82: cc:02:09:6a:22:67:8f:02:07:a2:4e:f0:7b:42:43: eb:40:c1:c0:79:85:95:99:d4:24:a5:9c:66:1d:17: 13:82:02:60:ba:5b:69:12:7d:0f:a9:7c:41:e6:ba: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:20:38:BD:2B:CA:C4:9F:17:BE:74:D1:BB:10:87:1F:68:2E:2D:15 X509v3 Authority Key Identifier: keyid:BD:E1:AC:8F:8E:BB:50:2F:CC:44:56:2D:C1:0D:97:38:84:49:3B:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veGsj467UC_MRFYtwQ2XOIRJO-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/817e7d-5b82-487a-9d6f-1a5080864fa7/1/veGsj467UC_MRFYtwQ2XOIRJO-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:98:76:4c:33:74:2d:52:9a:a8:06:f6:a5:d9:2a:d0:33:15: e5:e8:79:40:af:35:e4:c3:e5:8a:7d:42:e4:71:3c:53:ad:66: f5:dd:91:34:1c:b0:47:21:cd:82:f8:6a:21:b6:4e:0f:88:33: ed:bc:e2:b2:9c:be:4c:aa:76:a5:91:c5:d5:b7:7c:d0:13:52: 9d:14:1f:b7:3e:0e:5d:b7:bc:84:f6:99:4f:3f:9d:ff:5f:87: 8b:64:4a:e9:f7:1e:80:3f:c7:0d:71:91:96:d8:3f:6d:68:9d: 22:bd:8d:2e:ba:8c:f9:46:29:b1:e8:27:91:2a:67:58:ce:48: 32:e5:38:bf:f2:d8:eb:1a:c0:f0:82:30:36:e3:d5:ce:de:6c: 6b:84:bf:9a:71:55:73:26:4b:0d:d2:20:07:a5:bb:4b:f7:82: fd:17:c4:17:ba:ab:cd:e5:27:89:9b:f4:eb:51:ab:b4:09:7b: 65:ed:c8:0c:d3:78:9f:e2:12:37:c0:45:31:ff:df:59:2a:be: 83:2c:c3:12:c8:d9:57:7a:6d:9d:e1:9d:22:0f:4c:a2:aa:46: 1f:94:09:e6:57:1a:a9:1a:9c:4f:2c:92:91:0b:df:83:6c:84: 81:09:e1:82:a6:62:ac:92:2e:6e:25:78:22:ee:e2:bb:0b:b1: dc:e3:df:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwqPbcWNCjfcTGE109E+l1OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkZTFhYzhmOGViYjUwMmZjYzQ0NTYyZGMxMGQ5NzM4ODQ0 OTNiZTUwHhcNMjYwMjA0MjAwMDEzWhcNMjYwMjA1MjAwMDEzWjAzMTEwLwYDVQQD EyhlNTIwMzhiZDJiY2FjNDlmMTdiZTc0ZDFiYjEwODcxZjY4MmUyZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmOeOD9DY/A4hhao/W7W+QBogX19 1u16waH+QeW383XekTcbksbPNE38ZqABrHHkhuMYtkrxDutx9VhbzDePx/dKyIhe tdwIY7nfGvfRgpSsJlwsQ2NdLf5fi1QGA4noEyavRUNs62Vf4Yr2UK92rxAPqnVD BG4+MpqTgJ9DZ4SpXazLlgQtXZKDISiVUOHE/J7KCAVMysea9o8YoNhX6YY11FiJ bajj1Mct+LaGvScBR3252iNElsC147JOugytWMr0v/CXfJE7PavEPL4hYILMAglq ImePAgeiTvB7QkPrQMHAeYWVmdQkpZxmHRcTggJgultpEn0PqXxB5roIuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUgOL0rysSfF7500bsQhx9oLi0VMB8GA1UdIwQY MBaAFL3hrI+Ou1AvzERWLcENlziESTvlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYt MWE1MDgwODY0ZmE3LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC84MTdlN2QtNWI4Mi00ODdhLTlkNmYtMWE1MDgwODY0ZmE3 LzEvdmVHc2o0NjdVQ19NUkZZdHdRMlhPSVJKTy1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZh2TDN0 LVKaqAb2pdkq0DMV5eh5QK815MPlin1C5HE8U61m9d2RNBywRyHNgvhqIbZOD4gz 7bzispy+TKp2pZHF1bd80BNSnRQftz4OXbe8hPaZTz+d/1+Hi2RK6fcegD/HDXGR ltg/bWidIr2NLrqM+UYpsegnkSpnWM5IMuU4v/LY6xrA8IIwNuPVzt5sa4S/mnFV cyZLDdIgB6W7S/eC/RfEF7qrzeUniZv061GrtAl7Ze3IDNN4n+ISN8BFMf/fWSq+ gyzDEsjZV3ptneGdIg9MoqpGH5QJ5lcaqRqcTyySkQvfg2yEgQnhgqZirJIubiV4 Iu7iuwux3OPflg== -----END CERTIFICATE-----Generated at Thu Feb 5 03:12:28 2026 by rpki-client