This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json) Hash identifier: jaaw//Onp93SJTTEE3nwG37JeOHIPb2h4/CyOgjwEZs= Subject key identifier: 04:6C:2F:83:D7:8A:F5:01:7D:4F:AA:D8:1F:8B:D5:E8:2E:47:49:F1 Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b Certificate serial: 019BAEDD6195A01DB1FA727B7CD7CF8F3190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft Manifest number: 15A0 Signing time: Sun 11 Jan 2026 21:01:42 +0000 Manifest this update: Sun 11 Jan 2026 21:01:42 +0000 Manifest next update: Mon 12 Jan 2026 21:01:42 +0000 Files and hashes: 1: smH8IDaU7mi6eo7ubYIhaO6o_IM.roa (hash: zUmgtKSpqk5n2lEgS4LMSnmGpaSRvnHOfoCAI5v+7/g=) 2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: jrJNkXi9iCEFL5aUp7/mswyPXWnIqoy2xUe6N0Rkbhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:dd:61:95:a0:1d:b1:fa:72:7b:7c:d7:cf:8f:31:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b Validity Not Before: Jan 11 21:01:42 2026 GMT Not After : Jan 12 21:01:42 2026 GMT Subject: CN=046c2f83d78af5017d4faad81f8bd5e82e4749f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:cf:0b:05:c9:af:20:68:3c:2d:b5:40:3e: 4a:16:65:1d:71:ad:b9:6a:fa:3b:e9:09:45:55:43: 67:37:19:e4:5f:45:15:bf:bd:d3:f9:06:a0:bd:3f: 7e:2e:3d:de:d9:31:0f:5d:f8:cb:3b:33:d6:ec:ca: 4a:55:d4:4a:00:4f:c0:12:be:c0:79:84:db:cf:b0: 15:84:99:8f:bc:b8:b9:e1:ee:77:07:7c:3d:7a:48: 4e:69:f8:5b:6d:c0:69:e0:7d:9c:71:ee:3d:19:8a: b7:bd:db:16:ea:fd:8f:f2:3e:8c:61:99:9a:d0:54: 64:d5:f8:06:ed:c5:27:49:96:a0:ca:f9:6a:1c:db: 21:43:0b:0c:04:f7:e1:a0:70:b0:51:1e:aa:ed:f0: 59:7c:ef:3a:55:61:09:3b:96:90:15:a5:98:36:5d: e1:27:f1:2a:e8:95:74:33:f7:4e:9a:e9:38:07:e2: a6:0b:16:1a:63:d2:2d:93:7d:05:ea:ab:f1:1d:6a: 95:b4:e4:b0:5a:7b:7e:c8:fb:be:a1:04:7d:1e:21: 02:21:6e:d5:ea:fa:88:8c:24:66:d1:16:d9:30:49: 14:ad:b6:97:eb:74:ca:a0:56:3a:df:6b:c4:7e:83: ff:17:b1:88:b8:fa:4b:53:c0:9e:14:99:f4:74:28: d3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6C:2F:83:D7:8A:F5:01:7D:4F:AA:D8:1F:8B:D5:E8:2E:47:49:F1 X509v3 Authority Key Identifier: keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:99:c8:2f:22:64:e7:0c:7b:9f:09:08:96:d7:9e:1f:6f:c2: 43:0f:4e:22:00:86:55:5a:d6:44:d0:08:30:ce:8e:a7:28:b9: 62:30:81:10:64:bb:97:b7:21:67:19:f0:89:d3:55:7f:65:a6: 94:ba:06:94:15:28:42:51:47:88:44:9b:99:ee:c3:75:8a:41: d0:74:9d:4e:b3:fc:cf:a9:b0:f5:e8:06:2e:3e:08:19:76:d6: 0f:bf:8e:c3:2b:6a:43:27:7f:80:28:df:f1:aa:38:69:b4:be: 0d:bf:8a:91:54:51:87:09:6f:b3:08:30:ae:f2:9f:75:a7:8c: a0:c9:a4:2b:88:9a:e1:c2:a3:36:9b:88:9f:30:dd:4d:b4:07: c3:3a:2a:27:48:15:96:fb:4f:9f:91:98:73:e6:07:5a:e4:df: 0e:a1:f1:99:b7:73:b6:44:6f:40:cc:a4:db:25:62:78:26:d4: f7:d5:5f:9e:18:77:91:0a:db:66:43:17:f9:00:06:2f:7d:64: bc:17:9a:88:db:b4:68:aa:b2:e2:c0:bc:6d:8a:88:c7:15:9a: e4:cb:9e:88:b6:69:08:2f:6a:40:30:81:c6:d6:a8:42:f9:63: d9:af:fe:66:64:cf:ed:e6:06:0b:e7:82:17:7c:57:a0:4f:35: 4e:da:f4:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuu3WGVoB2x+nJ7fNfPjzGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmMWY2Y2Q2ZmFiOTVkMjQxY2Q5YWM1Zjg1ZjRkMDVmOWRl NThmOWIwHhcNMjYwMTExMjEwMTQyWhcNMjYwMTEyMjEwMTQyWjAzMTEwLwYDVQQD EygwNDZjMmY4M2Q3OGFmNTAxN2Q0ZmFhZDgxZjhiZDVlODJlNDc0OWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DLPCwXJryBoPC21QD5KFmUdca25 avo76QlFVUNnNxnkX0UVv73T+QagvT9+Lj3e2TEPXfjLOzPW7MpKVdRKAE/AEr7A eYTbz7AVhJmPvLi54e53B3w9ekhOafhbbcBp4H2cce49GYq3vdsW6v2P8j6MYZma 0FRk1fgG7cUnSZagyvlqHNshQwsMBPfhoHCwUR6q7fBZfO86VWEJO5aQFaWYNl3h J/Eq6JV0M/dOmuk4B+KmCxYaY9Itk30F6qvxHWqVtOSwWnt+yPu+oQR9HiECIW7V 6vqIjCRm0RbZMEkUrbaX63TKoFY632vEfoP/F7GIuPpLU8CeFJn0dCjTWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARsL4PXivUBfU+q2B+L1eguR0nxMB8GA1UdIwQY MBaAFL8fbNb6uV0kHNmsX4X00F+d5Y+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQt NTk3YzQzNTk4NTc3LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQtNTk3YzQzNTk4NTc3 LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZnILyJk 5wx7nwkIlteeH2/CQw9OIgCGVVrWRNAIMM6Opyi5YjCBEGS7l7chZxnwidNVf2Wm lLoGlBUoQlFHiESbme7DdYpB0HSdTrP8z6mw9egGLj4IGXbWD7+OwytqQyd/gCjf 8ao4abS+Db+KkVRRhwlvswgwrvKfdaeMoMmkK4ia4cKjNpuInzDdTbQHwzoqJ0gV lvtPn5GYc+YHWuTfDqHxmbdztkRvQMyk2yVieCbU99Vfnhh3kQrbZkMX+QAGL31k vBeaiNu0aKqy4sC8bYqIxxWa5MueiLZpCC9qQDCBxtaoQvlj2a/+ZmTP7eYGC+eC F3xXoE81Ttr0Qw== -----END CERTIFICATE-----Generated at Sun Jan 11 23:43:21 2026 by rpki-client