This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft File: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft (raw, json) Hash identifier: QZFZItZg/orffNwSPEwT+mjo4aygZVINA1B+WU/izzc= Subject key identifier: FE:8C:B2:89:9C:B3:50:96:9B:22:3D:67:3A:B2:52:12:25:87:ED:70 Authority key identifier: 54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5 Certificate issuer: /CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5 Certificate serial: 019B77C7F175A192642593E3D281DAA65B7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft Manifest number: 14B4 Signing time: Thu 01 Jan 2026 04:19:10 +0000 Manifest this update: Thu 01 Jan 2026 04:19:10 +0000 Manifest next update: Fri 02 Jan 2026 04:19:10 +0000 Files and hashes: 1: VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl (hash: i6q9X6wWQu1HnUh4yLGf4+w8HV8BkUo9kYzqijtYQAg=) 2: a476xuuymM4DWMU4CoIgLsWXR7w.roa (hash: b+lJy211nvU2PKiMrKNYXzy/mvhM9oQWUJhcUzYhcH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 00:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:f1:75:a1:92:64:25:93:e3:d2:81:da:a6:5b:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5485c8ef037cb897c8e94cf621c5a37d651c5ea5 Validity Not Before: Jan 1 04:19:10 2026 GMT Not After : Jan 2 04:19:10 2026 GMT Subject: CN=fe8cb2899cb350969b223d673ab252122587ed70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:0d:89:ef:65:ba:27:70:4a:90:14:d5:4c: b1:f8:83:69:bd:0a:b1:d5:5d:ff:7c:b5:3c:d9:0a: 3e:74:3c:c7:e8:ff:e9:92:98:f8:c0:da:c4:7b:70: 20:2d:5f:f4:7a:cf:6e:34:59:4b:21:cd:53:02:7a: 11:67:1f:a6:4f:c8:24:ab:fe:05:de:c9:46:44:40: 51:7f:66:d4:23:e1:48:4f:2f:de:04:bd:4d:0b:54: 54:dc:60:f4:88:7b:e9:70:16:94:5f:7b:43:6c:5d: 42:b6:38:90:e2:b1:2d:71:78:ee:c0:98:74:39:0d: d6:31:17:1d:8f:4b:6d:be:fb:78:da:ba:a6:54:e9: a7:80:77:2d:c2:61:68:7f:0b:8c:eb:6a:69:0b:80: ca:0c:8e:81:28:b6:4e:b6:58:68:9b:c4:24:8a:b2: b2:b2:4a:f4:c4:07:e6:1f:3e:24:3f:a3:e0:68:8a: 72:ec:07:d0:24:16:f6:47:79:db:35:92:05:d3:00: 6a:db:99:dc:f9:3f:45:fc:a4:fa:b7:22:6f:bb:93: a2:a4:d7:e2:ee:c2:4c:53:e6:c5:94:eb:ef:03:17: ed:59:e8:05:07:0f:93:d2:1c:ac:5d:2b:b6:54:c4: c0:54:c6:6b:43:e4:da:3e:a4:4c:84:4d:2d:c2:4d: 3e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:8C:B2:89:9C:B3:50:96:9B:22:3D:67:3A:B2:52:12:25:87:ED:70 X509v3 Authority Key Identifier: keyid:54:85:C8:EF:03:7C:B8:97:C8:E9:4C:F6:21:C5:A3:7D:65:1C:5E:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0d6655-c0eb-4626-96d5-e63c91adce7f/1/VIXI7wN8uJfI6Uz2IcWjfWUcXqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:77:02:e0:f5:0f:f1:82:6b:2d:b4:b6:03:33:97:c9:01:f3: b4:ed:bb:8f:61:a6:b2:1c:f4:f6:98:65:9f:90:c9:ec:e8:70: 2d:84:96:97:e8:e1:67:3a:9f:cc:74:96:af:9d:31:0b:da:9d: dd:4f:a4:b4:34:6a:1c:ec:7c:c8:ed:b7:d6:89:06:a6:ca:e1: c2:36:9d:c8:a6:c9:9c:7b:03:78:84:de:25:86:79:a1:07:1e: ae:ac:96:8f:57:6a:39:26:ba:07:ba:d0:79:32:3b:d1:8c:a6: 35:36:91:cc:c5:34:db:a4:1b:85:6e:57:94:98:60:a2:4a:0d: 6e:cd:3e:ac:3e:07:97:40:05:05:47:76:71:e6:d3:34:3b:56: 1a:59:9b:1d:e2:62:2d:ae:5f:1e:87:f1:41:12:5d:bc:31:b0: 8a:b8:65:d7:c0:5b:fb:9d:ac:8a:55:61:a2:79:82:a8:1f:b6: ec:9b:df:fe:90:a0:42:83:19:73:fe:91:d4:c4:bd:24:84:ab: 51:ce:29:95:17:1c:a0:21:6d:ea:e7:77:82:f4:f2:c8:fb:19: 08:f1:a9:f6:94:8c:de:cf:25:62:a2:00:4e:15:49:1e:d6:2e: 76:27:b0:42:4e:73:85:ec:25:72:64:06:31:2d:b6:8a:3d:21: 9a:d8:d1:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3x/F1oZJkJZPj0oHaplt8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ODVjOGVmMDM3Y2I4OTdjOGU5NGNmNjIxYzVhMzdkNjUx YzVlYTUwHhcNMjYwMTAxMDQxOTEwWhcNMjYwMTAyMDQxOTEwWjAzMTEwLwYDVQQD EyhmZThjYjI4OTljYjM1MDk2OWIyMjNkNjczYWIyNTIxMjI1ODdlZDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFYNie9luidwSpAU1Uyx+INpvQqx 1V3/fLU82Qo+dDzH6P/pkpj4wNrEe3AgLV/0es9uNFlLIc1TAnoRZx+mT8gkq/4F 3slGREBRf2bUI+FITy/eBL1NC1RU3GD0iHvpcBaUX3tDbF1CtjiQ4rEtcXjuwJh0 OQ3WMRcdj0ttvvt42rqmVOmngHctwmFofwuM62ppC4DKDI6BKLZOtlhom8QkirKy skr0xAfmHz4kP6PgaIpy7AfQJBb2R3nbNZIF0wBq25nc+T9F/KT6tyJvu5OipNfi 7sJMU+bFlOvvAxftWegFBw+T0hysXSu2VMTAVMZrQ+TaPqRMhE0twk0+GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6Msomcs1CWmyI9ZzqyUhIlh+1wMB8GA1UdIwQY MBaAFFSFyO8DfLiXyOlM9iHFo31lHF6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVklYSTd3Tjh1SmZJNlV6MkljV2pmV1VjWHFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wZDY2NTUtYzBlYi00NjI2LTk2ZDUt ZTYzYzkxYWRjZTdmLzEvVklYSTd3Tjh1SmZJNlV6MkljV2pmV1VjWHFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8wZDY2NTUtYzBlYi00NjI2LTk2ZDUtZTYzYzkxYWRjZTdm LzEvVklYSTd3Tjh1SmZJNlV6MkljV2pmV1VjWHFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIncC4PUP 8YJrLbS2AzOXyQHztO27j2Gmshz09phln5DJ7OhwLYSWl+jhZzqfzHSWr50xC9qd 3U+ktDRqHOx8yO231okGpsrhwjadyKbJnHsDeITeJYZ5oQcerqyWj1dqOSa6B7rQ eTI70YymNTaRzMU026QbhW5XlJhgokoNbs0+rD4Hl0AFBUd2cebTNDtWGlmbHeJi La5fHofxQRJdvDGwirhl18Bb+52silVhonmCqB+27Jvf/pCgQoMZc/6R1MS9JISr Uc4plRccoCFt6ud3gvTyyPsZCPGp9pSM3s8lYqIAThVJHtYudiewQk5zhewlcmQG MS22ij0hmtjRiw== -----END CERTIFICATE-----Generated at Thu Jan 1 07:35:59 2026 by rpki-client