This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft File: VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json) Hash identifier: Tjha5u34Y++96MKM0GwMq0JM3hcVz6GPHEj6vwacs1U= Subject key identifier: 2E:A7:6A:2E:0F:41:57:61:C5:4C:84:C0:34:17:45:D6:18:57:63:E2 Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57 Certificate issuer: /CN=559349644323315f806dc64ca4d9ed9557762757 Certificate serial: 019C1FBB366CF38191BE40CFDD29B97C6521 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft Manifest number: 0C58 Signing time: Mon 02 Feb 2026 19:01:28 +0000 Manifest this update: Mon 02 Feb 2026 19:01:28 +0000 Manifest next update: Tue 03 Feb 2026 19:01:28 +0000 Files and hashes: 1: LjJLqjcnZZvUB7mKjCH-7GZzeLM.roa (hash: A/qN/8X4NxsgNcRehmeeZdCg0e5U0+miw/dGRfft/VI=) 2: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: f92b8+keGTDAdBJbRN1FO3f1+eAprpGkJZsXnGcohg0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 19:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1f:bb:36:6c:f3:81:91:be:40:cf:dd:29:b9:7c:65:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=559349644323315f806dc64ca4d9ed9557762757 Validity Not Before: Feb 2 19:01:28 2026 GMT Not After : Feb 3 19:01:28 2026 GMT Subject: CN=2ea76a2e0f415761c54c84c0341745d6185763e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:55:15:27:bb:b0:9d:63:58:37:a3:2d:91:9a: 6a:b6:30:8c:16:61:7e:2e:5c:34:a6:89:7c:da:27: 3a:60:a0:d4:69:2b:af:e9:14:ea:76:de:b7:ca:e5: 38:f1:bd:4c:d5:f1:a5:5a:0e:d6:31:5e:b1:b1:4e: 76:2c:a1:41:2c:44:42:c5:e9:5e:86:e3:73:bc:7d: 50:44:e2:14:28:43:fb:11:35:18:38:ba:2b:cd:bf: 18:fc:f1:40:79:32:91:1c:3d:9f:9c:49:50:4e:8f: 83:6d:6e:51:bf:46:b7:69:90:7d:28:c5:f9:05:49: 11:3d:a6:0a:5a:99:6c:b9:1c:4c:e1:0b:44:97:5b: 97:66:0d:ca:bb:fa:64:b1:9c:6e:a1:4d:a4:8a:b4: cb:a1:98:d9:48:94:04:47:b6:fb:a7:01:05:83:5d: 89:da:28:82:e4:f4:a6:74:d5:f8:33:75:a0:f2:c0: 66:ce:93:67:7c:2c:50:74:ec:55:ba:2b:48:33:1b: 5b:a9:f4:3c:30:8c:ee:4f:32:a4:31:78:05:d1:59: 37:e0:53:cf:21:7a:ea:13:b2:6d:d7:cd:6f:7f:58: cf:bb:15:e8:5e:06:5e:a7:9c:f3:ef:99:94:d1:cf: 5f:e1:38:d3:6f:35:cc:f2:bc:85:b2:d3:b8:e1:95: 5c:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A7:6A:2E:0F:41:57:61:C5:4C:84:C0:34:17:45:D6:18:57:63:E2 X509v3 Authority Key Identifier: keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7c:c6:13:a9:94:95:1b:04:53:a6:2d:4d:33:79:60:7e:06: da:ed:81:f9:94:e8:cc:36:f0:36:58:66:53:47:c9:bc:09:ee: f5:86:b0:d4:64:bc:ee:75:fd:a7:1f:c8:7e:eb:69:28:4d:16: 59:b5:1f:96:fb:b7:70:02:e0:a8:00:9b:a7:b1:e8:fa:46:54: ca:b8:4c:3a:4c:8d:cb:bc:27:f1:8e:a4:91:de:24:86:a7:17: 39:96:d6:1f:96:3b:28:c6:e4:a1:26:db:e1:9f:8b:a7:15:4b: 33:3d:60:df:c2:72:5e:a5:2f:c8:fb:ee:11:d6:03:81:b9:e9: dc:30:31:7e:19:cd:1c:64:51:17:c5:dd:b7:1f:a0:ce:13:e3: f1:68:5b:10:0f:67:9c:5a:a6:aa:f7:66:a2:72:1a:e7:98:87: 21:a8:b9:ff:69:da:bb:01:c5:5b:c4:10:79:63:94:5d:dd:c5: a4:47:64:48:cd:f9:63:c2:4f:96:2c:c9:4e:40:e5:f4:aa:c1: 7c:e0:7c:93:3a:43:a0:8c:40:94:0c:3a:36:f3:7d:fb:64:72: cc:db:a3:cc:4b:a0:e8:58:c0:d2:07:c1:0c:bb:9d:fd:15:5c: d4:43:90:bf:4e:97:91:f6:ae:e0:8f:ba:be:67:ac:b7:79:5b: eb:36:3b:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwfuzZs84GRvkDP3Sm5fGUhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1OTM0OTY0NDMyMzMxNWY4MDZkYzY0Y2E0ZDllZDk1NTc3 NjI3NTcwHhcNMjYwMjAyMTkwMTI4WhcNMjYwMjAzMTkwMTI4WjAzMTEwLwYDVQQD EygyZWE3NmEyZTBmNDE1NzYxYzU0Yzg0YzAzNDE3NDVkNjE4NTc2M2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FUVJ7uwnWNYN6MtkZpqtjCMFmF+ Llw0pol82ic6YKDUaSuv6RTqdt63yuU48b1M1fGlWg7WMV6xsU52LKFBLERCxele huNzvH1QROIUKEP7ETUYOLorzb8Y/PFAeTKRHD2fnElQTo+DbW5Rv0a3aZB9KMX5 BUkRPaYKWplsuRxM4QtEl1uXZg3Ku/pksZxuoU2kirTLoZjZSJQER7b7pwEFg12J 2iiC5PSmdNX4M3Wg8sBmzpNnfCxQdOxVuitIMxtbqfQ8MIzuTzKkMXgF0Vk34FPP IXrqE7Jt181vf1jPuxXoXgZep5zz75mU0c9f4TjTbzXM8ryFstO44ZVcrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6nai4PQVdhxUyEwDQXRdYYV2PiMB8GA1UdIwQY MBaAFFWTSWRDIzFfgG3GTKTZ7ZVXdidXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTIt NjA2NmQ4OWYwNWI4LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kZjk3ZWYtMzQzNS00NjU3LWExYTItNjA2NmQ4OWYwNWI4 LzEvVlpOSlpFTWpNVi1BYmNaTXBObnRsVmQySjFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOXzGE6mU lRsEU6YtTTN5YH4G2u2B+ZTozDbwNlhmU0fJvAnu9Yaw1GS87nX9px/IfutpKE0W WbUflvu3cALgqACbp7Ho+kZUyrhMOkyNy7wn8Y6kkd4khqcXOZbWH5Y7KMbkoSbb 4Z+LpxVLMz1g38JyXqUvyPvuEdYDgbnp3DAxfhnNHGRRF8Xdtx+gzhPj8WhbEA9n nFqmqvdmonIa55iHIai5/2nauwHFW8QQeWOUXd3FpEdkSM35Y8JPlizJTkDl9KrB fOB8kzpDoIxAlAw6NvN9+2RyzNujzEug6FjA0gfBDLud/RVc1EOQv06Xkfau4I+6 vmest3lb6zY7lw== -----END CERTIFICATE-----Generated at Tue Feb 3 05:02:09 2026 by rpki-client