This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft File: VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft (raw, json) Hash identifier: yzLsnSmtZyxBEWQsbuqa9nPWd5cbze9usSdm+QnfDu4= Subject key identifier: 3C:70:8A:0D:1E:09:94:64:D3:D4:47:DC:3F:7C:98:D3:66:45:9A:94 Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9 Certificate issuer: /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9 Certificate serial: 019B789319FBC600D890853FEA8756AD2AEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft Manifest number: 143B Signing time: Thu 01 Jan 2026 08:01:04 +0000 Manifest this update: Thu 01 Jan 2026 08:01:04 +0000 Manifest next update: Fri 02 Jan 2026 08:01:04 +0000 Files and hashes: 1: OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa (hash: Aex7iaImK8VF1F7ddVhsOVcjsTFE1aBCNKfli39IJNE=) 2: VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl (hash: OP9oii9zGqmhepww+iEvDjQOWtDIL8LaNFOkOj6pBKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 08:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:93:19:fb:c6:00:d8:90:85:3f:ea:87:56:ad:2a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9 Validity Not Before: Jan 1 08:01:04 2026 GMT Not After : Jan 2 08:01:04 2026 GMT Subject: CN=3c708a0d1e099464d3d447dc3f7c98d366459a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4c:49:98:23:5f:03:da:85:7f:1e:d7:d8:55: 78:cb:b0:48:6c:ee:36:2d:60:c1:1d:bb:e7:9b:1e: 61:17:50:59:b4:67:d4:1b:8e:9d:44:10:de:78:5e: 17:91:9b:2a:ea:3a:7a:ae:2f:98:d8:6d:bb:4b:f1: 47:0e:48:7e:8c:df:59:17:b4:5e:4e:f7:8a:64:4a: 7a:3c:75:2d:40:2a:80:b3:7a:38:6a:e4:d3:c3:78: 26:2e:77:92:f6:33:37:d6:d9:59:41:93:f9:e2:54: 41:41:13:2f:a8:e9:a2:58:10:4f:27:8f:ba:39:74: 44:1c:77:7f:5a:f2:82:59:fc:70:f5:da:5d:1e:c9: f8:3b:d4:d2:57:e3:c0:fa:67:cd:71:9e:b8:2d:77: 55:d4:4c:d6:4b:23:99:aa:e1:c4:9d:f5:49:83:fa: 0d:7c:56:b2:62:3a:55:4b:5c:5d:35:8f:43:24:30: 9a:74:8c:c5:9c:20:eb:ae:2a:5d:d2:96:70:cf:9c: f4:e4:2c:29:e1:2f:73:6d:a0:3c:8a:77:b0:ea:bd: 8b:4c:27:78:ee:69:9c:2b:19:15:10:54:b2:da:59: 11:b7:67:f7:28:a5:7e:a1:70:f3:a0:f3:30:9a:c2: a2:2e:d6:27:9a:c9:65:d8:09:2d:0b:04:5a:be:53: 14:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:70:8A:0D:1E:09:94:64:D3:D4:47:DC:3F:7C:98:D3:66:45:9A:94 X509v3 Authority Key Identifier: keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d0:2a:3d:00:74:fd:a7:7f:f2:34:22:6d:c6:b6:7f:5b:fb: 1f:43:f1:51:12:25:af:75:d4:94:02:6c:ce:1d:33:ca:2c:c4: 0b:66:08:59:aa:b3:c2:a2:15:8c:a9:43:98:88:66:56:03:fb: 6d:c6:d6:8a:34:b6:52:cd:88:09:7b:a9:93:ea:03:07:42:8a: b3:0b:b2:3c:42:27:32:13:0c:76:d8:a5:07:c6:27:e2:63:48: 7c:7f:31:75:af:61:56:3c:5a:dc:24:5f:ac:56:9b:9a:b4:35: 87:f5:97:51:17:dc:23:8b:03:ca:c9:11:70:a3:cc:de:31:81: f8:0a:70:a2:7a:43:8b:54:cd:a7:21:1d:a5:a2:8f:3a:38:df: 3b:af:a8:bb:4c:37:95:58:e0:39:76:7d:a5:ce:ed:3c:cb:53: 2f:29:0c:81:de:37:d3:b3:78:ba:ed:f4:7a:62:88:b3:27:6c: 23:50:98:29:b9:e8:e6:9b:c6:12:75:af:fe:c8:a5:5a:b0:04: b5:a6:07:d8:a0:75:e4:50:d5:26:94:39:ec:2d:69:ba:f0:5d: c5:7c:dc:f5:8d:03:b3:a5:bf:f1:29:cb:e5:45:f7:22:8b:28: c0:c9:95:a3:28:94:b2:f9:a3:84:e5:ec:3d:ce:2b:cb:a0:da: e0:96:37:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt4kxn7xgDYkIU/6odWrSrvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0ZTY2MGI0OGM4ZjA0YzlhMzJkY2RlYTFjZmVlZTUxODA0 NDZiZDkwHhcNMjYwMTAxMDgwMTA0WhcNMjYwMTAyMDgwMTA0WjAzMTEwLwYDVQQD EygzYzcwOGEwZDFlMDk5NDY0ZDNkNDQ3ZGMzZjdjOThkMzY2NDU5YTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUxJmCNfA9qFfx7X2FV4y7BIbO42 LWDBHbvnmx5hF1BZtGfUG46dRBDeeF4XkZsq6jp6ri+Y2G27S/FHDkh+jN9ZF7Re TveKZEp6PHUtQCqAs3o4auTTw3gmLneS9jM31tlZQZP54lRBQRMvqOmiWBBPJ4+6 OXREHHd/WvKCWfxw9dpdHsn4O9TSV+PA+mfNcZ64LXdV1EzWSyOZquHEnfVJg/oN fFayYjpVS1xdNY9DJDCadIzFnCDrripd0pZwz5z05Cwp4S9zbaA8inew6r2LTCd4 7mmcKxkVEFSy2lkRt2f3KKV+oXDzoPMwmsKiLtYnmsll2AktCwRavlMU4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxwig0eCZRk09RH3D98mNNmRZqUMB8GA1UdIwQY MBaAFFTmYLSMjwTJoy3N6hz+7lGARGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85MmU3NmYtMTZjMy00NWQyLTg2NDct YTg5YWJlNDVlZGY2LzEvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85MmU3NmYtMTZjMy00NWQyLTg2NDctYTg5YWJlNDVlZGY2 LzEvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdAqPQB0 /ad/8jQibca2f1v7H0PxURIlr3XUlAJszh0zyizEC2YIWaqzwqIVjKlDmIhmVgP7 bcbWijS2Us2ICXupk+oDB0KKswuyPEInMhMMdtilB8Yn4mNIfH8xda9hVjxa3CRf rFabmrQ1h/WXURfcI4sDyskRcKPM3jGB+ApwonpDi1TNpyEdpaKPOjjfO6+ou0w3 lVjgOXZ9pc7tPMtTLykMgd4307N4uu30emKIsydsI1CYKbno5pvGEnWv/silWrAE taYH2KB15FDVJpQ57C1puvBdxXzc9Y0Ds6W/8SnL5UX3IosowMmVoyiUsvmjhOXs Pc4ry6Da4JY3lg== -----END CERTIFICATE-----Generated at Thu Jan 1 15:57:34 2026 by rpki-client