This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft File: VCltI970yFIcZH3Giss8Ej9hHYk.mft (raw, json) Hash identifier: lZfxz3+3jaWuPoOYVlO27ZCXhXw9uFx0xbMl6t+3EZQ= Subject key identifier: 06:A7:C9:A0:53:9C:1D:C3:3E:FA:42:B2:BD:CA:FC:DF:9F:B8:8F:A9 Authority key identifier: 54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 Certificate issuer: /CN=54296d23def4c8521c647dc68acb3c123f611d89 Certificate serial: 019BF91B3BFBE3E001056D1BA25D5074BDA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft Manifest number: 1434 Signing time: Mon 26 Jan 2026 07:01:09 +0000 Manifest this update: Mon 26 Jan 2026 07:01:09 +0000 Manifest next update: Tue 27 Jan 2026 07:01:09 +0000 Files and hashes: 1: 1-YnG82-j-FrjouE5H4ZhP4Jd9oU.roa (hash: hrji1KjeKjAKriEWLrj6NNuKDhJmoSLQ68t4i9riIuU=) 2: 35XNJH4DSb19i8o6WUk8AizWXlw.roa (hash: bNnlRUj215HLo7MgAukw3lU1c5wmBEx5iCiaR7HqQk8=) 3: 3ayY0sh-ja6zDaMX5ykTck8Mrp4.roa (hash: xTWO/nv9Xto+ASqllbMmXKgtH7KN9ltQQ4P+K7lizHw=) 4: FV_nY2-kgq3LWSyqV_mt71Rtmf0.roa (hash: H5CfogAC8zmS7Yt1GHn4G+lxqysJq8BhzYyLCFKXkBo=) 5: QSDUixaMhnAjJT7MiLzynIup4QE.roa (hash: C1ALae2bSbaid/4pUu3vPVVQH1cH+56P62UzbCKJSRE=) 6: VCltI970yFIcZH3Giss8Ej9hHYk.crl (hash: xElJKhjs9MZ73i+syBjH9zu2TO5GX5mMb/tN9eAcCmw=) 7: W9SQbbft_Ki8s56MIbDhOe_7c3g.roa (hash: eeYBhi006bZdizyLLMhXoXvVRBAU1f0G/iCMoGWg62g=) 8: Yd2e1f2kdSdTzKoMXNusbn6jfTU.roa (hash: b1nLPHfQtMiRIvIbHS9Q4a7pKcd7WD/4Ts62afIoXTU=) 9: rIcQA0PO2akobpTqeGzHXp2G0TE.roa (hash: gnpP7TKJ2gUEEh/2CwGN3owunzcJzMcnrCHqbCH3s3M=) 10: soSOxHo0Z0SmOOmebp-ftxZ6VXs.roa (hash: 0b15G9tWrr98FbmkVjBIZ+RDO8284jHjeMknUdoswGE=) 11: tfjWDOLaBV3XOF9cIpIBjUhnoek.roa (hash: Hc/COV0+B6P1Wu2UfPsFZ89C/cMB9dbQnJgrPTFoG0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1b:3b:fb:e3:e0:01:05:6d:1b:a2:5d:50:74:bd:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54296d23def4c8521c647dc68acb3c123f611d89 Validity Not Before: Jan 26 07:01:09 2026 GMT Not After : Jan 27 07:01:09 2026 GMT Subject: CN=06a7c9a0539c1dc33efa42b2bdcafcdf9fb88fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:95:d8:df:73:9a:d9:d3:bd:3b:c2:1a:b4:af: 39:c7:1e:22:cf:a3:d6:18:5c:63:7c:a6:70:88:91: 74:01:bd:07:e8:c7:a6:24:4a:11:1a:c7:1f:31:7d: 76:7e:76:84:9e:2d:c2:91:cc:ec:52:2e:0d:a3:32: 94:3c:10:3a:85:e5:c2:fd:7e:9a:7e:9b:71:e9:bf: 9a:ca:49:c6:a0:b2:cc:ab:95:b5:c4:d8:84:f4:4e: 98:6d:7c:3d:7a:26:ca:04:52:40:4e:8f:dc:a6:87: d8:ad:d1:51:78:23:e4:51:2a:58:4e:14:3b:7a:5a: 7d:9c:a3:cb:ba:06:2b:93:6b:bb:b7:f2:5b:af:af: e8:7d:54:73:ed:4d:74:66:c5:9b:fe:05:82:0e:8c: c3:1b:af:58:35:30:bf:d4:a9:5e:18:ea:40:ae:b7: 9a:af:c6:00:76:58:18:60:6e:59:8d:61:c2:0c:9e: e7:77:35:a5:00:63:98:c6:cb:43:9a:02:0c:80:33: 65:fd:ee:65:82:3a:b8:a6:26:5b:e4:41:4b:82:ce: dc:a4:db:d2:0e:e8:c1:bc:41:4f:d7:f0:9f:77:52: ce:7e:c6:56:e2:85:f3:be:ca:2e:59:c5:38:75:73: 0c:fb:83:bc:42:bb:2a:9e:90:f4:17:6a:82:66:32: 2f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A7:C9:A0:53:9C:1D:C3:3E:FA:42:B2:BD:CA:FC:DF:9F:B8:8F:A9 X509v3 Authority Key Identifier: keyid:54:29:6D:23:DE:F4:C8:52:1C:64:7D:C6:8A:CB:3C:12:3F:61:1D:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCltI970yFIcZH3Giss8Ej9hHYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5cb454-7bee-4e5d-b295-942482f8d2ea/1/VCltI970yFIcZH3Giss8Ej9hHYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:79:fd:ee:fe:c9:0a:61:34:e0:dd:70:90:f8:cc:af:c0:c9: ed:e9:fb:a7:b6:9f:4b:29:97:d7:13:91:f5:93:96:e5:65:32: ed:90:a3:d3:1c:9c:07:dc:dd:41:39:38:f1:dc:c8:a2:aa:d7: dc:7b:da:f9:89:1f:58:83:71:fb:53:b1:b9:b5:a3:9d:6b:46: 33:06:f6:ec:9d:8f:af:8c:b7:ff:5c:99:ad:c9:a5:59:5a:53: 97:6a:de:1c:3c:63:e3:4a:3b:4b:3f:32:a4:89:ea:f0:cd:08: 24:cd:37:4e:1e:c5:cc:73:e5:f5:21:5d:8a:99:c9:77:cb:49: 4e:15:c1:2b:e7:c2:32:01:a2:db:cb:d4:0e:b1:61:4a:da:3d: e6:a7:ef:df:24:81:b7:de:4f:18:8f:ef:76:dd:88:68:47:fd: a3:1f:30:2c:0a:ae:b0:93:78:58:ca:5b:83:78:db:e5:c4:37: 5e:81:cf:9c:46:f1:5c:f8:f1:a2:90:8e:86:5b:6b:e1:29:a9: 73:28:4d:29:12:e3:68:2a:e3:a4:0a:43:02:51:5d:3c:1b:06: 49:0d:32:ca:42:c9:1e:89:0c:f8:c1:09:d9:81:82:b5:87:ad: c4:82:33:d5:ed:76:fe:e4:66:fd:f8:8e:a9:4d:f4:e1:b1:f6: 99:41:c3:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5Gzv74+ABBW0bol1QdL2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0Mjk2ZDIzZGVmNGM4NTIxYzY0N2RjNjhhY2IzYzEyM2Y2 MTFkODkwHhcNMjYwMTI2MDcwMTA5WhcNMjYwMTI3MDcwMTA5WjAzMTEwLwYDVQQD EygwNmE3YzlhMDUzOWMxZGMzM2VmYTQyYjJiZGNhZmNkZjlmYjg4ZmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpXY33Oa2dO9O8IatK85xx4iz6PW GFxjfKZwiJF0Ab0H6MemJEoRGscfMX12fnaEni3CkczsUi4NozKUPBA6heXC/X6a fptx6b+ayknGoLLMq5W1xNiE9E6YbXw9eibKBFJATo/cpofYrdFReCPkUSpYThQ7 elp9nKPLugYrk2u7t/Jbr6/ofVRz7U10ZsWb/gWCDozDG69YNTC/1KleGOpArrea r8YAdlgYYG5ZjWHCDJ7ndzWlAGOYxstDmgIMgDNl/e5lgjq4piZb5EFLgs7cpNvS DujBvEFP1/Cfd1LOfsZW4oXzvsouWcU4dXMM+4O8QrsqnpD0F2qCZjIv9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAanyaBTnB3DPvpCsr3K/N+fuI+pMB8GA1UdIwQY MBaAFFQpbSPe9MhSHGR9xorLPBI/YR2JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUt OTQyNDgyZjhkMmVhLzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81Y2I0NTQtN2JlZS00ZTVkLWIyOTUtOTQyNDgyZjhkMmVh LzEvVkNsdEk5NzB5RkljWkgzR2lzczhFajloSFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHHn97v7J CmE04N1wkPjMr8DJ7en7p7afSymX1xOR9ZOW5WUy7ZCj0xycB9zdQTk48dzIoqrX 3Hva+YkfWINx+1OxubWjnWtGMwb27J2Pr4y3/1yZrcmlWVpTl2reHDxj40o7Sz8y pInq8M0IJM03Th7FzHPl9SFdipnJd8tJThXBK+fCMgGi28vUDrFhSto95qfv3ySB t95PGI/vdt2IaEf9ox8wLAqusJN4WMpbg3jb5cQ3XoHPnEbxXPjxopCOhltr4Smp cyhNKRLjaCrjpApDAlFdPBsGSQ0yykLJHokM+MEJ2YGCtYetxIIz1e12/uRm/fiO qU304bH2mUHDuQ== -----END CERTIFICATE-----Generated at Mon Jan 26 15:20:55 2026 by rpki-client