This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft File: vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json) Hash identifier: WDlszxY7XbCWzZfSxHp3GhxffueCE6KEp3Zjmlc9QrI= Subject key identifier: F4:BC:1E:5F:72:04:11:CD:2C:2E:F2:D8:68:23:17:91:48:F9:FA:26 Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd Certificate serial: 019BAF8198558070BE4DE39C8792774C470C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft Manifest number: 0FC4 Signing time: Mon 12 Jan 2026 00:01:04 +0000 Manifest this update: Mon 12 Jan 2026 00:01:04 +0000 Manifest next update: Tue 13 Jan 2026 00:01:04 +0000 Files and hashes: 1: R1-sQ-aIXEFJT-93CGHyULWdzGI.roa (hash: wTAnQ3p13dmuTH6bJb6Zb4Pwzwq21wLmg4ze6Go9HJA=) 2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: OyGeDDu2iRs3wuJtV9SBIset5yeWxu1FWLRHy+e9S8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 00:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:af:81:98:55:80:70:be:4d:e3:9c:87:92:77:4c:47:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd Validity Not Before: Jan 12 00:01:04 2026 GMT Not After : Jan 13 00:01:04 2026 GMT Subject: CN=f4bc1e5f720411cd2c2ef2d86823179148f9fa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:91:51:b2:d1:bc:ba:df:79:6a:97:f5:bc:d9: 63:9a:62:7d:b2:78:55:6e:67:7d:42:c1:68:1f:5e: 06:a7:39:ba:2d:04:a0:b5:cc:66:b0:ef:3d:96:35: 93:99:fd:73:c3:a4:b4:24:f7:84:98:75:07:48:9e: 6b:cc:84:81:36:29:13:73:45:a1:33:26:89:45:a9: 30:63:7c:fd:90:7b:29:6c:92:96:fb:bf:12:e8:ad: 71:b2:6a:97:ff:49:0b:57:dc:6f:b5:4b:1b:45:24: 3c:7a:14:b9:2f:3e:4a:de:f7:a0:bb:70:7e:39:07: 38:f1:0a:cd:76:9f:e6:e8:a7:7e:d1:d9:e3:c1:87: b0:f9:ba:8e:ad:6e:f3:54:fd:81:ce:ce:14:7b:de: 21:39:e0:99:16:12:17:89:e6:2b:0f:da:23:38:8b: 6b:bb:79:45:14:0e:23:cf:a6:26:7c:79:3d:b8:e0: 23:62:a8:32:22:a1:6e:ff:e5:1c:63:0c:ad:d9:48: da:d4:a5:eb:1a:aa:3c:a5:ce:bd:3d:1f:03:be:be: d6:08:fe:a6:e9:76:83:54:ff:23:87:ea:e5:ab:cd: 38:56:94:18:86:05:7d:a2:2b:74:c3:86:68:17:0f: 96:08:90:9f:97:07:3f:b8:08:2c:10:cb:07:94:ac: 00:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:BC:1E:5F:72:04:11:CD:2C:2E:F2:D8:68:23:17:91:48:F9:FA:26 X509v3 Authority Key Identifier: keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:c0:21:70:0f:f7:68:cf:6b:1f:41:84:bd:23:ed:21:70:5f: ef:2b:2e:ce:f9:d5:c3:1e:4d:f1:6d:fe:3f:e5:12:50:5e:d7: 7a:d4:94:e8:38:d7:4f:69:71:8e:a4:8a:e8:fb:7a:a8:cc:96: b9:2c:90:34:9a:8d:74:04:4d:4d:2c:88:21:3a:2b:56:72:47: 2f:0f:ea:cc:4f:1c:88:c3:00:b1:52:5d:e6:fb:82:8d:1d:32: c1:5f:c6:60:c3:07:b0:2f:14:35:21:09:60:e7:43:b2:f0:85: 9e:df:24:3b:0e:ae:b7:10:35:8e:5a:4d:cc:cf:17:95:39:8e: bf:a9:0c:78:94:d1:8a:57:d2:6c:40:98:d4:26:2d:9d:87:88: 0e:65:08:d2:49:c0:32:41:93:a5:3c:51:db:4b:c0:fa:66:2f: 10:16:4f:fe:e5:93:3d:76:9c:1d:8a:10:dc:73:17:ab:fe:ca: 89:61:5b:71:af:32:24:09:50:a9:88:c8:9d:f8:64:6f:9b:bf: 78:05:04:3a:50:3b:ad:33:bb:84:47:53:73:be:14:66:ca:fc: ec:40:6a:9c:a4:cc:48:9e:20:97:16:68:b5:f7:1c:a5:25:48: 85:7c:ba:56:c0:67:cc:38:f7:63:10:5a:40:55:6a:09:a6:6f: da:cf:89:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuvgZhVgHC+TeOch5J3TEcMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjMWU2NmVmYTAwNWE2ZGU1M2IxZDBjOTFmMzc1NTRiZGY0 Njc2YmQwHhcNMjYwMTEyMDAwMTA0WhcNMjYwMTEzMDAwMTA0WjAzMTEwLwYDVQQD EyhmNGJjMWU1ZjcyMDQxMWNkMmMyZWYyZDg2ODIzMTc5MTQ4ZjlmYTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ZFRstG8ut95apf1vNljmmJ9snhV bmd9QsFoH14Gpzm6LQSgtcxmsO89ljWTmf1zw6S0JPeEmHUHSJ5rzISBNikTc0Wh MyaJRakwY3z9kHspbJKW+78S6K1xsmqX/0kLV9xvtUsbRSQ8ehS5Lz5K3vegu3B+ OQc48QrNdp/m6Kd+0dnjwYew+bqOrW7zVP2Bzs4Ue94hOeCZFhIXieYrD9ojOItr u3lFFA4jz6YmfHk9uOAjYqgyIqFu/+UcYwyt2Uja1KXrGqo8pc69PR8Dvr7WCP6m 6XaDVP8jh+rlq804VpQYhgV9oit0w4ZoFw+WCJCflwc/uAgsEMsHlKwAGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPS8Hl9yBBHNLC7y2GgjF5FI+fomMB8GA1UdIwQY MBaAFLweZu+gBabeU7HQyR83VUvfRna9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iYjJiZGItNzQ3ZC00ODU1LTg5NDUt N2Y5YTNlNDUyNTZlLzEvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9iYjJiZGItNzQ3ZC00ODU1LTg5NDUtN2Y5YTNlNDUyNTZl LzEvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsAhcA/3 aM9rH0GEvSPtIXBf7ysuzvnVwx5N8W3+P+USUF7XetSU6DjXT2lxjqSK6Pt6qMyW uSyQNJqNdARNTSyIITorVnJHLw/qzE8ciMMAsVJd5vuCjR0ywV/GYMMHsC8UNSEJ YOdDsvCFnt8kOw6utxA1jlpNzM8XlTmOv6kMeJTRilfSbECY1CYtnYeIDmUI0knA MkGTpTxR20vA+mYvEBZP/uWTPXacHYoQ3HMXq/7KiWFbca8yJAlQqYjInfhkb5u/ eAUEOlA7rTO7hEdTc74UZsr87EBqnKTMSJ4glxZotfccpSVIhXy6VsBnzDj3YxBa QFVqCaZv2s+JGw== -----END CERTIFICATE-----Generated at Mon Jan 12 05:39:43 2026 by rpki-client