This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft File: VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json) Hash identifier: 449s6F3VgQEQ3nV5+O+XnUpYBetfXDeapGHydKBMRvg= Subject key identifier: AC:FF:2A:6B:4C:57:36:2E:69:C1:48:94:9C:5B:DB:67:04:3A:10:DB Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB Certificate issuer: /CN=556828d62a5b893e22d5867f1a142d198e85e1ab Certificate serial: 019BD168545F23896722289A4965909F75D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft Manifest number: 0240 Signing time: Sun 18 Jan 2026 14:00:34 +0000 Manifest this update: Sun 18 Jan 2026 14:00:34 +0000 Manifest next update: Mon 19 Jan 2026 14:00:34 +0000 Files and hashes: 1: MdhTY8foQJKx0mdlP05igAT5a9E.roa (hash: 1qZJayac2vfyAfUyRCRfqXyKoeJ0mRVVfL/eLJWxk1s=) 2: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: n/Oie2ZHfvmtI8PEFwM2fK9bATSgpfCjF52ax+HhwmY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:68:54:5f:23:89:67:22:28:9a:49:65:90:9f:75:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab Validity Not Before: Jan 18 14:00:34 2026 GMT Not After : Jan 19 14:00:34 2026 GMT Subject: CN=acff2a6b4c57362e69c148949c5bdb67043a10db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:46:5e:a9:76:27:3a:02:e1:49:dd:ff:3e:d9: 5d:5d:8d:72:c5:fa:3e:23:95:5e:21:67:ae:67:2b: bf:38:1c:15:69:8f:6c:1a:2a:06:c4:b2:e8:a5:27: 99:6d:99:33:cd:85:99:ad:2b:74:f0:11:1c:df:3a: 8e:8b:fc:9a:a6:e1:ac:a5:80:64:2d:16:8f:e1:01: f5:79:39:12:fe:6d:d9:8f:e4:30:09:82:e4:c7:73: 9b:06:49:80:c4:0d:38:ae:ed:d3:1d:75:82:1f:4b: ba:a7:70:07:cc:da:19:41:40:0b:57:49:4a:83:b6: cf:1f:59:c3:63:1f:67:e8:b5:2d:45:4e:64:32:17: bf:f4:ba:e9:19:5d:d9:77:88:e3:e9:a8:5c:b5:37: 7f:a8:c8:66:ee:13:a4:0f:d5:80:37:d8:56:c1:f1: 47:ed:f0:47:77:eb:c6:65:54:82:10:14:62:f1:16: 6b:c8:27:07:47:71:b8:ec:9a:ec:4a:4b:ff:86:73: 4f:91:b5:a4:2f:8b:12:1a:c7:9e:e6:cf:b4:57:00: d9:3a:0d:2d:60:51:00:ae:63:35:fc:90:c4:80:5e: a9:67:f4:dd:fb:47:22:fb:be:9e:81:fd:28:4b:7d: b5:d9:b3:4e:0a:1d:99:f3:f9:fd:8a:e1:51:92:ce: 3b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FF:2A:6B:4C:57:36:2E:69:C1:48:94:9C:5B:DB:67:04:3A:10:DB X509v3 Authority Key Identifier: keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ba:ad:53:4d:c7:cc:b9:f4:93:81:d5:19:53:22:9c:e6:67: d1:31:2e:bc:d6:8b:c8:9b:34:51:87:2a:da:9a:53:8c:3b:49: a3:6f:35:0d:75:99:44:55:02:e9:93:d8:a9:20:bd:f6:de:36: 0e:88:96:0c:d9:48:fa:2e:af:fa:3c:41:80:69:59:b8:23:f3: 01:c5:3e:88:10:de:af:90:87:f9:69:76:68:fb:5f:9a:ac:38: 21:0a:21:c6:d4:4b:c7:ee:e7:33:ce:6b:49:1b:ff:4f:71:7d: ce:3a:ce:e4:f3:2b:2c:11:b9:34:e9:75:66:ec:21:c6:38:60: 5d:a0:67:9f:58:0d:3a:ed:6c:10:33:df:4f:57:47:a0:0e:8b: fe:af:51:71:85:c7:e1:c2:b0:e2:b1:23:b0:c3:f0:a5:da:04: a9:08:c9:fe:49:f6:3a:87:b5:25:7d:12:e9:52:37:6d:ea:7c: 41:84:43:6d:b5:dd:4e:89:9d:c4:41:2c:2e:99:4c:0e:e2:a4: 44:a4:ac:71:d7:f5:9c:24:76:01:38:12:7d:66:3d:92:83:55: 78:d0:5e:e8:12:6f:a6:1a:d1:52:59:50:f8:9b:73:c4:53:a8: 11:4e:02:4f:50:47:cd:d2:64:b3:d1:25:64:00:0a:1f:9d:bf: bf:df:1d:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvRaFRfI4lnIiiaSWWQn3XTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1NjgyOGQ2MmE1Yjg5M2UyMmQ1ODY3ZjFhMTQyZDE5OGU4 NWUxYWIwHhcNMjYwMTE4MTQwMDM0WhcNMjYwMTE5MTQwMDM0WjAzMTEwLwYDVQQD EyhhY2ZmMmE2YjRjNTczNjJlNjljMTQ4OTQ5YzViZGI2NzA0M2ExMGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EZeqXYnOgLhSd3/PtldXY1yxfo+ I5VeIWeuZyu/OBwVaY9sGioGxLLopSeZbZkzzYWZrSt08BEc3zqOi/yapuGspYBk LRaP4QH1eTkS/m3Zj+QwCYLkx3ObBkmAxA04ru3THXWCH0u6p3AHzNoZQUALV0lK g7bPH1nDYx9n6LUtRU5kMhe/9LrpGV3Zd4jj6ahctTd/qMhm7hOkD9WAN9hWwfFH 7fBHd+vGZVSCEBRi8RZryCcHR3G47JrsSkv/hnNPkbWkL4sSGsee5s+0VwDZOg0t YFEArmM1/JDEgF6pZ/Td+0ci+76egf0oS3212bNOCh2Z8/n9iuFRks47UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKz/KmtMVzYuacFIlJxb22cEOhDbMB8GA1UdIwQY MBaAFFVoKNYqW4k+ItWGfxoULRmOheGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVldnbzFpcGJpVDRpMVlaX0doUXRHWTZGNGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82M2I4NzUtMDY0My00NzI0LTkyOGUt M2Q3NDM5ODBiNmUyLzEvVldnbzFpcGJpVDRpMVlaX0doUXRHWTZGNGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82M2I4NzUtMDY0My00NzI0LTkyOGUtM2Q3NDM5ODBiNmUy LzEvVldnbzFpcGJpVDRpMVlaX0doUXRHWTZGNGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7qtU03H zLn0k4HVGVMinOZn0TEuvNaLyJs0UYcq2ppTjDtJo281DXWZRFUC6ZPYqSC99t42 DoiWDNlI+i6v+jxBgGlZuCPzAcU+iBDer5CH+Wl2aPtfmqw4IQohxtRLx+7nM85r SRv/T3F9zjrO5PMrLBG5NOl1ZuwhxjhgXaBnn1gNOu1sEDPfT1dHoA6L/q9RcYXH 4cKw4rEjsMPwpdoEqQjJ/kn2Ooe1JX0S6VI3bep8QYRDbbXdTomdxEEsLplMDuKk RKSscdf1nCR2ATgSfWY9koNVeNBe6BJvphrRUllQ+JtzxFOoEU4CT1BHzdJks9El ZAAKH52/v98ddQ== -----END CERTIFICATE-----Generated at Sun Jan 18 22:19:51 2026 by rpki-client