This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft File: vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json) Hash identifier: NJbvqHNmL4PoauKgV+JfiPFCrkszafmwxrQaJuIFuvo= Subject key identifier: 91:9C:E4:83:75:21:64:02:49:1A:26:BA:7E:18:2F:94:49:7A:44:C0 Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48 Certificate issuer: /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148 Certificate serial: 019B7BA5F8363874B35FBFC3175DD0D6882E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft Manifest number: 0D7C Signing time: Thu 01 Jan 2026 22:20:33 +0000 Manifest this update: Thu 01 Jan 2026 22:20:33 +0000 Manifest next update: Fri 02 Jan 2026 22:20:33 +0000 Files and hashes: 1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=) 2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: VRod2bnt5uTFhwnEM7xv6Hi5BcbUU2bTRJYKP0c9d+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 22:20:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:f8:36:38:74:b3:5f:bf:c3:17:5d:d0:d6:88:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148 Validity Not Before: Jan 1 22:20:33 2026 GMT Not After : Jan 2 22:20:33 2026 GMT Subject: CN=919ce48375216402491a26ba7e182f94497a44c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:de:b0:d7:eb:f4:e5:df:e3:c3:c4:c4:45:8a: 90:38:9b:89:72:26:d8:90:fe:58:82:04:81:3b:80: 90:8c:32:00:42:b5:27:a3:b8:af:2c:a0:2e:dc:92: 2a:d8:98:28:8e:10:82:38:34:d3:ce:2d:82:5e:9f: b7:93:6a:b0:64:2d:fb:21:04:41:20:b5:83:53:9b: 4e:cc:2b:3e:a5:01:14:5d:3e:5e:66:c8:ca:b7:f0: a3:20:aa:74:fe:ba:5d:71:4c:bc:79:11:cb:0b:60: ee:7e:9d:67:6e:22:e7:73:48:86:ba:c4:9e:4b:75: fc:10:43:07:35:40:d8:10:d2:a0:b3:40:f7:70:3f: c3:81:96:37:27:cc:90:9f:4f:cc:c6:12:4e:29:46: 9c:6e:6d:2a:48:a7:aa:d0:c1:80:d1:e9:68:69:bc: 7b:1e:81:f7:59:e2:26:97:a1:fb:7e:9c:0d:3e:92: 62:74:6a:bb:c6:c3:54:14:b8:17:03:43:04:92:fc: 5a:44:3a:b7:29:c4:c6:20:db:22:f8:ba:b1:26:b7: 40:d2:1e:24:2c:78:8c:b5:0b:7c:3e:7c:18:74:65: 12:40:c8:bc:51:98:d3:47:f4:41:02:bc:fd:a8:25: cd:b6:b0:38:34:fd:70:6b:b6:4e:ef:50:42:d7:fc: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:9C:E4:83:75:21:64:02:49:1A:26:BA:7E:18:2F:94:49:7A:44:C0 X509v3 Authority Key Identifier: keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:d7:5d:4c:e7:91:33:e4:a8:28:ca:1a:5e:47:79:cb:8d:9b: eb:93:5e:b3:a8:03:b2:1a:7c:8e:c6:20:5d:58:34:58:d5:27: d1:0b:4f:05:e6:4a:00:9f:6a:5e:2f:35:64:01:0f:13:96:dd: 56:49:65:e0:ae:50:c3:7d:6e:a8:1f:9e:22:28:5e:34:57:0a: 4f:2b:da:30:6b:b0:ed:b4:3a:41:73:e9:6d:9f:4b:b9:8a:23: a8:d6:f7:e5:fc:9c:53:24:61:0f:0b:93:af:b9:b8:d3:d6:48: 13:46:d7:23:35:d6:d9:83:a1:04:c8:48:6c:9a:2d:8c:91:35: ed:b0:3e:ae:e0:76:53:10:9b:0a:e2:65:b6:87:00:b5:05:27: 03:f7:e4:71:33:e4:cb:6f:4c:28:d8:0f:fe:06:e9:32:32:d2: 43:39:0b:4c:91:ab:6d:bf:66:36:25:cd:68:a2:65:bb:ea:1d: 83:2b:d0:e1:7a:9f:19:a8:0e:6c:12:ca:86:6d:63:f8:dc:05: 08:a9:74:b8:6a:d1:60:18:14:8b:76:8c:09:83:f7:10:89:48: 1e:9c:e5:60:e1:b4:e6:bf:8a:6c:b0:d7:0c:85:8b:6b:0b:35: 65:7e:83:fe:bf:66:fb:1b:a6:54:7b:65:a7:7e:91:52:69:ff: f8:06:9f:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt7pfg2OHSzX7/DF13Q1oguMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlOGIxNWMyMzdmMzRjNWM1YzUzNDRiNDA3OWViYjNhNTg5 ZDAxNDgwHhcNMjYwMTAxMjIyMDMzWhcNMjYwMTAyMjIyMDMzWjAzMTEwLwYDVQQD Eyg5MTljZTQ4Mzc1MjE2NDAyNDkxYTI2YmE3ZTE4MmY5NDQ5N2E0NGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN6w1+v05d/jw8TERYqQOJuJcibY kP5YggSBO4CQjDIAQrUno7ivLKAu3JIq2JgojhCCODTTzi2CXp+3k2qwZC37IQRB ILWDU5tOzCs+pQEUXT5eZsjKt/CjIKp0/rpdcUy8eRHLC2Dufp1nbiLnc0iGusSe S3X8EEMHNUDYENKgs0D3cD/DgZY3J8yQn0/MxhJOKUacbm0qSKeq0MGA0eloabx7 HoH3WeIml6H7fpwNPpJidGq7xsNUFLgXA0MEkvxaRDq3KcTGINsi+LqxJrdA0h4k LHiMtQt8PnwYdGUSQMi8UZjTR/RBArz9qCXNtrA4NP1wa7ZO71BC1/xQfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGc5IN1IWQCSRomun4YL5RJekTAMB8GA1UdIwQY MBaAFL6LFcI380xcXFNEtAeeuzpYnQFIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQt MzFkZTE3NjlmZDhhLzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9hYTU5NzItMzUzOC00MzYxLWExMzQtMzFkZTE3NjlmZDhh LzEvdm9zVndqZnpURnhjVTBTMEI1NjdPbGlkQVVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtddTOeR M+SoKMoaXkd5y42b65Nes6gDshp8jsYgXVg0WNUn0QtPBeZKAJ9qXi81ZAEPE5bd Vkll4K5Qw31uqB+eIiheNFcKTyvaMGuw7bQ6QXPpbZ9LuYojqNb35fycUyRhDwuT r7m409ZIE0bXIzXW2YOhBMhIbJotjJE17bA+ruB2UxCbCuJltocAtQUnA/fkcTPk y29MKNgP/gbpMjLSQzkLTJGrbb9mNiXNaKJlu+odgyvQ4XqfGagObBLKhm1j+NwF CKl0uGrRYBgUi3aMCYP3EIlIHpzlYOG05r+KbLDXDIWLaws1ZX6D/r9m+xumVHtl p36RUmn/+Aaf8A== -----END CERTIFICATE-----Generated at Fri Jan 2 08:18:12 2026 by rpki-client