This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft File: vjcHM7jbYU2qdgoALCQEgCgwDi0.mft (raw, json) Hash identifier: P9rswkwjTFcJ0IFAIBjUgVtjPoS2tOPfS30Fvb8ujOQ= Subject key identifier: 0B:3E:AD:10:B4:95:0F:F4:D8:13:E3:25:E4:0B:A6:26:16:09:CB:A3 Authority key identifier: BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D Certificate issuer: /CN=be370733b8db614daa760a002c24048028300e2d Certificate serial: 019B796E4806024029CEA9EFC3D8BB7FC1C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft Manifest number: 17A7 Signing time: Thu 01 Jan 2026 12:00:28 +0000 Manifest this update: Thu 01 Jan 2026 12:00:28 +0000 Manifest next update: Fri 02 Jan 2026 12:00:28 +0000 Files and hashes: 1: paMGJN73rjp1fa_w9RA1xrwwx18.roa (hash: Z6fxiaAqnra9zk/dGdgt7claLY2U/7DrFceSHabOI5E=) 2: vjcHM7jbYU2qdgoALCQEgCgwDi0.crl (hash: sV5sLdjOVko0pF+ZFUpDJZDUiUhyf6/Ijwek1T44uYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:6e:48:06:02:40:29:ce:a9:ef:c3:d8:bb:7f:c1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be370733b8db614daa760a002c24048028300e2d Validity Not Before: Jan 1 12:00:28 2026 GMT Not After : Jan 2 12:00:28 2026 GMT Subject: CN=0b3ead10b4950ff4d813e325e40ba6261609cba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bc:6f:2e:e7:65:0b:9a:5e:9f:6a:b9:22:d0: 09:c5:6d:23:b2:a1:fb:16:98:c3:b9:96:cf:bd:f9: 57:b1:5f:f9:1f:bd:10:80:76:ca:77:e6:72:7e:cd: ca:98:4d:03:d4:f9:fa:bc:bd:97:63:6e:57:67:72: db:6d:ef:82:ab:b8:46:f7:18:29:7b:70:2b:41:3a: ca:d9:dc:64:a5:61:f0:d8:56:ed:79:8c:8f:12:36: 10:25:00:19:ca:b6:3c:1c:3f:93:80:68:45:02:16: 94:cf:88:4e:a0:84:4b:9c:5b:2f:22:4a:45:25:c6: a0:36:01:da:4c:06:59:3f:04:9f:0d:25:2a:2a:1c: 91:6b:31:67:71:65:71:8b:68:a4:05:39:b1:8d:16: d3:23:85:07:9b:9a:8d:35:d8:29:30:03:43:7a:0c: 48:a8:93:e4:53:0b:e7:92:c0:f3:c3:ba:ae:db:fa: a9:85:5a:2b:76:f8:b2:bb:19:5c:de:ed:ab:55:8f: 80:96:2d:2f:90:38:cf:32:e7:25:7b:31:c5:8c:33: 9c:b2:d5:6c:eb:20:de:d5:f6:55:ce:84:76:0d:67: 0d:9e:11:5f:d6:d8:0c:11:fe:46:6e:34:f2:f4:b8: 8a:eb:e1:bc:ab:cc:8e:f3:0e:c6:43:b0:06:cf:08: 52:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3E:AD:10:B4:95:0F:F4:D8:13:E3:25:E4:0B:A6:26:16:09:CB:A3 X509v3 Authority Key Identifier: keyid:BE:37:07:33:B8:DB:61:4D:AA:76:0A:00:2C:24:04:80:28:30:0E:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjcHM7jbYU2qdgoALCQEgCgwDi0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/896ab3-c479-470a-8bb9-24222d87f88d/1/vjcHM7jbYU2qdgoALCQEgCgwDi0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:81:5f:82:a2:b3:dd:c9:cb:64:0a:14:55:c2:20:ee:0b:1b: f3:dd:1d:c2:75:91:aa:02:73:4b:7f:72:15:3a:c1:65:6f:bd: 51:ef:b4:f0:e5:0a:16:d2:17:b1:06:79:cc:80:1b:c1:0e:8d: c4:0b:76:bc:ea:c3:b3:77:a1:ae:b3:72:c9:c3:f7:7a:a0:9e: c1:57:78:1e:b5:bb:82:fb:b5:66:2e:3c:1d:52:98:ef:9f:1c: ea:04:64:63:83:fc:b2:c0:ee:53:ce:8a:a0:f6:c6:76:32:16: d8:ba:46:e5:1a:a7:8e:03:01:1b:89:a2:b4:94:a3:b9:da:9c: e2:82:13:56:74:a5:c3:be:6b:7c:5f:f3:42:7a:0b:8d:02:5c: c3:19:60:75:a6:84:7e:0e:5b:de:a9:92:c2:fa:77:09:0e:6e: 36:d9:b4:0f:40:e3:b2:e9:34:41:84:29:f3:0c:d1:a7:a7:29: 22:69:ed:88:15:6b:fe:f3:bd:65:be:4e:9e:c4:42:cb:25:9a: 4e:6b:14:be:0f:c4:1e:cf:7f:9f:86:0e:82:96:48:31:8e:91: 6a:9c:9a:97:3c:3f:5f:8f:79:85:d3:79:6f:bd:16:0b:6c:08: e8:cc:a6:97:e2:25:66:55:32:e4:fe:79:e5:2f:b6:2c:7c:05: a3:93:6c:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt5bkgGAkApzqnvw9i7f8HEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMzcwNzMzYjhkYjYxNGRhYTc2MGEwMDJjMjQwNDgwMjgz MDBlMmQwHhcNMjYwMTAxMTIwMDI4WhcNMjYwMTAyMTIwMDI4WjAzMTEwLwYDVQQD EygwYjNlYWQxMGI0OTUwZmY0ZDgxM2UzMjVlNDBiYTYyNjE2MDljYmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7xvLudlC5pen2q5ItAJxW0jsqH7 FpjDuZbPvflXsV/5H70QgHbKd+Zyfs3KmE0D1Pn6vL2XY25XZ3Lbbe+Cq7hG9xgp e3ArQTrK2dxkpWHw2FbteYyPEjYQJQAZyrY8HD+TgGhFAhaUz4hOoIRLnFsvIkpF JcagNgHaTAZZPwSfDSUqKhyRazFncWVxi2ikBTmxjRbTI4UHm5qNNdgpMANDegxI qJPkUwvnksDzw7qu2/qphVordviyuxlc3u2rVY+Ali0vkDjPMuclezHFjDOcstVs 6yDe1fZVzoR2DWcNnhFf1tgMEf5GbjTy9LiK6+G8q8yO8w7GQ7AGzwhSjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAs+rRC0lQ/02BPjJeQLpiYWCcujMB8GA1UdIwQY MBaAFL43BzO422FNqnYKACwkBIAoMA4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmpjSE03amJZVTJxZGdvQUxDUUVnQ2d3RGkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84OTZhYjMtYzQ3OS00NzBhLThiYjkt MjQyMjJkODdmODhkLzEvdmpjSE03amJZVTJxZGdvQUxDUUVnQ2d3RGkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84OTZhYjMtYzQ3OS00NzBhLThiYjktMjQyMjJkODdmODhk LzEvdmpjSE03amJZVTJxZGdvQUxDUUVnQ2d3RGkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4FfgqKz 3cnLZAoUVcIg7gsb890dwnWRqgJzS39yFTrBZW+9Ue+08OUKFtIXsQZ5zIAbwQ6N xAt2vOrDs3ehrrNyycP3eqCewVd4HrW7gvu1Zi48HVKY758c6gRkY4P8ssDuU86K oPbGdjIW2LpG5RqnjgMBG4mitJSjudqc4oITVnSlw75rfF/zQnoLjQJcwxlgdaaE fg5b3qmSwvp3CQ5uNtm0D0Djsuk0QYQp8wzRp6cpImntiBVr/vO9Zb5OnsRCyyWa TmsUvg/EHs9/n4YOgpZIMY6Rapyalzw/X495hdN5b70WC2wI6Myml+IlZlUy5P55 5S+2LHwFo5Ns3A== -----END CERTIFICATE-----Generated at Thu Jan 1 19:36:33 2026 by rpki-client