This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft File: vhji2fUJydO0VREqoojTNhhYAaA.mft (raw, json) Hash identifier: fMLS2gKnouiMhlil2Myuyeur9Papu9VuYRnLNZDi0/U= Subject key identifier: DF:4B:CE:DE:F0:BB:5E:74:BE:55:3D:7D:E7:34:7E:0F:7D:6B:6D:BB Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0 Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0 Certificate serial: 019B774902D6C0F82BEA430D32B7B10D5D65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft Manifest number: 1189 Signing time: Thu 01 Jan 2026 02:00:32 +0000 Manifest this update: Thu 01 Jan 2026 02:00:32 +0000 Manifest next update: Fri 02 Jan 2026 02:00:32 +0000 Files and hashes: 1: K7bdbq2NQi5Og3pBR0VNiKqzF3o.roa (hash: Y5TCg/QVPxm4ctwH0Vu0TBEdMj0uZUrfAJN0ICvLjOc=) 2: vhji2fUJydO0VREqoojTNhhYAaA.crl (hash: UcqFZpqgKjWjBV9B5n9sI72CHI4k6mlJrqqElusWodE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 02:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:49:02:d6:c0:f8:2b:ea:43:0d:32:b7:b1:0d:5d:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0 Validity Not Before: Jan 1 02:00:32 2026 GMT Not After : Jan 2 02:00:32 2026 GMT Subject: CN=df4bcedef0bb5e74be553d7de7347e0f7d6b6dbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:b7:53:32:69:a0:31:e8:c6:3c:81:ea:00: 03:50:cb:09:d3:26:3b:f0:03:59:ff:f9:9b:0a:17: ca:57:75:96:72:f4:e4:56:08:b4:c0:6b:8b:b5:51: a1:96:17:4a:af:b3:a2:4a:a9:35:41:12:03:ac:da: ef:83:99:b5:d7:46:44:b2:26:e6:8d:1e:a7:88:86: 3f:56:bf:6e:7b:fa:19:d8:cf:23:ff:59:78:49:ba: 07:a5:52:c7:71:84:27:fd:da:ab:c2:78:5f:cf:d8: 52:5d:ca:c7:3e:e6:83:ce:62:81:f1:00:93:94:13: 2b:64:23:b9:9f:3c:3d:d0:8b:ab:ee:25:8c:55:84: df:56:f4:34:b2:87:29:24:47:44:0a:03:e5:4b:fa: 09:cd:02:6a:05:c0:0b:b5:76:6e:27:20:11:5c:89: 51:ec:ff:06:02:de:ed:9b:4a:f8:d6:d4:cc:2a:a3: 3c:d4:76:7e:ba:99:62:f4:39:1d:4e:c6:9e:7f:f1: c3:9b:7e:e3:fa:19:9e:1c:c8:df:77:be:5d:83:ce: a6:29:c4:51:4f:5f:6a:95:05:b9:89:be:98:92:f7: 13:6c:1d:e6:94:2a:4d:af:9b:cf:d6:c6:11:07:d7: ec:1c:aa:b4:f1:3a:a1:c8:fe:4b:b0:ff:5f:46:b6: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4B:CE:DE:F0:BB:5E:74:BE:55:3D:7D:E7:34:7E:0F:7D:6B:6D:BB X509v3 Authority Key Identifier: keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:60:2d:ff:1f:23:83:16:6a:7f:f0:63:0f:7e:c2:23:4b:e2: 37:a2:36:5b:4f:3c:bb:a1:c9:07:e3:98:a6:c7:06:49:91:34: bb:cc:7b:ee:77:6d:dc:4c:bc:b2:30:fe:37:49:d3:5d:0c:ce: d8:7a:65:cc:2b:91:13:e5:48:25:dc:dd:1b:4c:d9:b4:68:e0: ca:4b:11:e6:c7:9f:c9:4d:af:80:03:c9:fd:3e:74:f7:83:21: c1:2f:ea:0f:62:04:f5:01:60:a8:2e:d8:7c:19:57:2a:21:d5: df:64:4c:90:b0:c5:a2:6c:95:00:66:ca:90:ba:3c:96:ee:89: 1e:ba:ea:61:7a:5f:05:15:5a:48:1d:3c:87:aa:9b:ad:0a:3f: a2:0c:62:ee:71:f2:03:4c:ae:2a:9f:5c:bc:fc:12:2b:fd:5d: 1b:91:be:87:eb:38:b5:d0:38:2f:90:82:f5:59:2f:6b:12:76: ea:c3:2c:cb:ba:00:54:6e:c7:b4:8c:d7:c0:0f:b3:42:7b:11: 5f:30:48:d1:4b:d0:62:dc:05:76:6e:77:36:e3:11:59:36:95: a7:89:63:cc:f0:e9:23:8f:5b:90:3f:5d:11:cb:f2:f3:f6:2e: 10:89:6d:71:7a:a0:81:7b:fd:3d:6a:a6:f0:f1:92:99:02:95: 37:59:1b:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt3SQLWwPgr6kMNMrexDV1lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMThlMmQ5ZjUwOWM5ZDNiNDU1MTEyYWEyODhkMzM2MTg1 ODAxYTAwHhcNMjYwMTAxMDIwMDMyWhcNMjYwMTAyMDIwMDMyWjAzMTEwLwYDVQQD EyhkZjRiY2VkZWYwYmI1ZTc0YmU1NTNkN2RlNzM0N2UwZjdkNmI2ZGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNq3UzJpoDHoxjyB6gADUMsJ0yY7 8ANZ//mbChfKV3WWcvTkVgi0wGuLtVGhlhdKr7OiSqk1QRIDrNrvg5m110ZEsibm jR6niIY/Vr9ue/oZ2M8j/1l4SboHpVLHcYQn/dqrwnhfz9hSXcrHPuaDzmKB8QCT lBMrZCO5nzw90Iur7iWMVYTfVvQ0socpJEdECgPlS/oJzQJqBcALtXZuJyARXIlR 7P8GAt7tm0r41tTMKqM81HZ+upli9DkdTsaef/HDm37j+hmeHMjfd75dg86mKcRR T19qlQW5ib6YkvcTbB3mlCpNr5vP1sYRB9fsHKq08TqhyP5LsP9fRrZJywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9Lzt7wu150vlU9fec0fg99a227MB8GA1UdIwQY MBaAFL4Y4tn1CcnTtFURKqKI0zYYWAGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82NjQ1ZDUtZDE5My00YTYzLTg1ZTYt MmNhMGU1YzEwNGZkLzEvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi82NjQ1ZDUtZDE5My00YTYzLTg1ZTYtMmNhMGU1YzEwNGZk LzEvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx2At/x8j gxZqf/BjD37CI0viN6I2W088u6HJB+OYpscGSZE0u8x77ndt3Ey8sjD+N0nTXQzO 2HplzCuRE+VIJdzdG0zZtGjgyksR5sefyU2vgAPJ/T5094MhwS/qD2IE9QFgqC7Y fBlXKiHV32RMkLDFomyVAGbKkLo8lu6JHrrqYXpfBRVaSB08h6qbrQo/ogxi7nHy A0yuKp9cvPwSK/1dG5G+h+s4tdA4L5CC9VkvaxJ26sMsy7oAVG7HtIzXwA+zQnsR XzBI0UvQYtwFdm53NuMRWTaVp4ljzPDpI49bkD9dEcvy8/YuEIltcXqggXv9PWqm 8PGSmQKVN1kbRg== -----END CERTIFICATE-----Generated at Thu Jan 1 12:31:03 2026 by rpki-client