This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft File: VGWtK05zj1QvoOaBOPNiZkQeKaA.mft (raw, json) Hash identifier: 3S6PXY+L9/pRahUj+pxcyTuo41YRQOy0M+wSwVPJyPE= Subject key identifier: E8:B9:9A:CD:3D:B5:48:98:01:00:EE:5E:58:02:27:BC:90:5D:5A:E6 Authority key identifier: 54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0 Certificate issuer: /CN=5465ad2b4e738f542fa0e68138f36266441e29a0 Certificate serial: 019BB0276EE1BBC199D61AAC3B72E967D411 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft Manifest number: 0E72 Signing time: Mon 12 Jan 2026 03:02:12 +0000 Manifest this update: Mon 12 Jan 2026 03:02:12 +0000 Manifest next update: Tue 13 Jan 2026 03:02:12 +0000 Files and hashes: 1: VGWtK05zj1QvoOaBOPNiZkQeKaA.crl (hash: 3aqCUsz/C3FdBJhvMYOTEAqPfEzLxZoF0puPOJarqL0=) 2: n28cYCSgTnP520B781yYlApy_Gg.roa (hash: oPppogarovRMmUPnZholMB6dsQYDDsQ39+mpcmiwa7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 02:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b0:27:6e:e1:bb:c1:99:d6:1a:ac:3b:72:e9:67:d4:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5465ad2b4e738f542fa0e68138f36266441e29a0 Validity Not Before: Jan 12 03:02:12 2026 GMT Not After : Jan 13 03:02:12 2026 GMT Subject: CN=e8b99acd3db548980100ee5e580227bc905d5ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:36:61:c3:d2:ff:1c:0f:17:71:61:a1:58:09: 13:28:0b:36:98:eb:75:35:3c:88:a3:8d:9f:c8:3d: 22:d9:b3:22:00:55:2d:5b:14:ef:53:68:09:b6:f6: f1:a0:b6:92:c0:a7:75:cc:f9:f5:e2:8c:26:bb:08: fe:68:80:ea:51:bb:6c:be:a1:c1:53:13:de:b9:c3: 71:20:16:d4:20:f8:77:fa:b1:83:bb:ce:62:8f:24: c0:b3:06:25:c6:27:38:14:ba:38:5b:0b:c7:04:12: dd:70:da:8c:b8:51:85:58:8c:13:f8:19:ec:43:7c: 08:5e:d5:6e:19:fa:64:21:72:4a:cf:cd:a3:b6:55: 97:16:be:68:27:31:57:37:4e:f9:72:b2:df:01:36: 6b:cb:0d:58:ca:5a:61:23:42:bc:05:fd:b2:dd:6e: c7:62:dd:f0:17:4b:76:3c:0f:e3:ba:d0:53:bd:7e: 8a:45:ab:35:ee:6d:2a:59:79:21:7b:fa:dc:35:d4: e9:e5:9f:1c:d8:c3:f4:35:e0:25:54:55:8f:ce:95: ac:cb:3c:a0:cc:8e:6c:88:86:84:88:fb:31:21:31: 4b:52:1b:33:01:3b:72:fb:61:ef:87:6f:d3:f1:8e: 6f:8e:05:47:d7:70:d5:bb:f5:f9:f8:36:ea:48:5a: b9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B9:9A:CD:3D:B5:48:98:01:00:EE:5E:58:02:27:BC:90:5D:5A:E6 X509v3 Authority Key Identifier: keyid:54:65:AD:2B:4E:73:8F:54:2F:A0:E6:81:38:F3:62:66:44:1E:29:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGWtK05zj1QvoOaBOPNiZkQeKaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3623e5-342e-4c9f-9183-0d3ad36eb161/1/VGWtK05zj1QvoOaBOPNiZkQeKaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:2a:61:41:17:0e:79:03:60:2a:91:4a:80:63:99:b8:7d:92: e2:97:4b:7f:10:a4:0c:40:19:70:0c:a0:f9:7c:21:26:1a:9a: 79:9f:34:65:5a:f5:22:72:a1:a4:0e:5d:38:ea:9b:b7:23:1e: 9e:ca:04:54:f2:c9:ff:ad:57:2d:4a:7f:3e:70:26:64:3a:ef: 72:82:48:38:6c:08:f1:b0:89:00:d7:49:22:24:e9:e6:ae:3b: d8:56:03:77:f6:cc:e2:99:d2:35:8e:0a:be:86:6b:90:69:de: 34:db:26:c7:8c:08:d9:16:54:2f:1f:7c:46:d5:2a:cb:38:ef: fc:55:08:4d:9a:c1:f1:8c:a4:b7:4e:1c:42:66:98:b8:6d:25: 09:2c:4a:8d:a9:3e:79:2b:44:e8:c4:dd:f6:91:8d:f5:2d:cd: cd:56:b4:e4:5e:c2:29:cb:d0:19:b1:1d:21:2e:61:9d:23:61: 0e:db:34:33:53:4c:08:cf:f0:8a:b0:ae:46:07:38:c0:17:44: 4f:01:80:bf:ce:27:22:02:6a:6e:54:be:f5:5e:92:30:e5:e7: 7c:37:f0:74:23:75:f1:e7:56:6a:7a:9d:36:75:32:93:ea:06: ca:12:4a:16:3c:ee:31:85:08:91:25:f8:37:02:71:6b:55:70: bd:11:3b:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuwJ27hu8GZ1hqsO3LpZ9QRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0NjVhZDJiNGU3MzhmNTQyZmEwZTY4MTM4ZjM2MjY2NDQx ZTI5YTAwHhcNMjYwMTEyMDMwMjEyWhcNMjYwMTEzMDMwMjEyWjAzMTEwLwYDVQQD EyhlOGI5OWFjZDNkYjU0ODk4MDEwMGVlNWU1ODAyMjdiYzkwNWQ1YWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzZhw9L/HA8XcWGhWAkTKAs2mOt1 NTyIo42fyD0i2bMiAFUtWxTvU2gJtvbxoLaSwKd1zPn14owmuwj+aIDqUbtsvqHB UxPeucNxIBbUIPh3+rGDu85ijyTAswYlxic4FLo4WwvHBBLdcNqMuFGFWIwT+Bns Q3wIXtVuGfpkIXJKz82jtlWXFr5oJzFXN075crLfATZryw1YylphI0K8Bf2y3W7H Yt3wF0t2PA/jutBTvX6KRas17m0qWXkhe/rcNdTp5Z8c2MP0NeAlVFWPzpWsyzyg zI5siIaEiPsxITFLUhszATty+2Hvh2/T8Y5vjgVH13DVu/X5+DbqSFq5TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOi5ms09tUiYAQDuXlgCJ7yQXVrmMB8GA1UdIwQY MBaAFFRlrStOc49UL6DmgTjzYmZEHimgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zNjIzZTUtMzQyZS00YzlmLTkxODMt MGQzYWQzNmViMTYxLzEvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zNjIzZTUtMzQyZS00YzlmLTkxODMtMGQzYWQzNmViMTYx LzEvVkdXdEswNXpqMVF2b09hQk9QTmlaa1FlS2FBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiphQRcO eQNgKpFKgGOZuH2S4pdLfxCkDEAZcAyg+XwhJhqaeZ80ZVr1InKhpA5dOOqbtyMe nsoEVPLJ/61XLUp/PnAmZDrvcoJIOGwI8bCJANdJIiTp5q472FYDd/bM4pnSNY4K voZrkGneNNsmx4wI2RZULx98RtUqyzjv/FUITZrB8Yykt04cQmaYuG0lCSxKjak+ eStE6MTd9pGN9S3NzVa05F7CKcvQGbEdIS5hnSNhDts0M1NMCM/wirCuRgc4wBdE TwGAv84nIgJqblS+9V6SMOXnfDfwdCN18edWanqdNnUyk+oGyhJKFjzuMYUIkSX4 NwJxa1VwvRE7FA== -----END CERTIFICATE-----Generated at Mon Jan 12 05:58:50 2026 by rpki-client