This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft File: vj9tfGzYM76l2u1XYlfSo0goKXE.mft (raw, json) Hash identifier: P3Ep5J/NN4az2QS7QsS9qKwzqwX1Rr5GgoR2x3IsjaU= Subject key identifier: 13:A9:F3:CA:89:AB:B6:8F:16:A7:28:65:F3:E9:C5:93:09:C7:1D:27 Authority key identifier: BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71 Certificate issuer: /CN=be3f6d7c6cd833bea5daed576257d2a348282971 Certificate serial: 019BA422D024F5C06F07860D6CB06BD674C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft Manifest number: 0E12 Signing time: Fri 09 Jan 2026 19:01:43 +0000 Manifest this update: Fri 09 Jan 2026 19:01:43 +0000 Manifest next update: Sat 10 Jan 2026 19:01:43 +0000 Files and hashes: 1: vj9tfGzYM76l2u1XYlfSo0goKXE.crl (hash: PCHTvaiEAGCzBPWvjKRqLDvrmL1HInxemRyjjE9rsuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 14:59:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a4:22:d0:24:f5:c0:6f:07:86:0d:6c:b0:6b:d6:74:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be3f6d7c6cd833bea5daed576257d2a348282971 Validity Not Before: Jan 9 19:01:43 2026 GMT Not After : Jan 10 19:01:43 2026 GMT Subject: CN=13a9f3ca89abb68f16a72865f3e9c59309c71d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b0:56:b3:c5:e2:c6:31:9f:2f:12:fc:de:8e: 6e:e5:e0:aa:d4:78:5c:dd:ad:a2:b5:ce:f3:70:33: f6:7e:8f:52:07:8e:87:c0:2a:33:9d:ca:39:44:90: 3f:85:ae:ec:af:3a:41:8c:bd:49:ab:dd:ae:cc:4d: 42:28:a1:3f:1f:5b:1b:6b:e4:07:b6:d1:a5:16:32: e1:bf:c0:52:c1:25:f3:4b:8f:49:57:18:a4:d8:96: ed:8a:da:4b:38:2a:5f:9d:09:3c:65:86:04:cc:b7: ee:88:d4:7c:58:ad:58:62:df:15:fb:22:db:ef:b4: b4:c4:b2:b5:de:ba:f0:29:a0:4b:0e:67:d0:16:e2: 7e:92:a9:ec:13:4a:a1:7a:8b:44:f6:23:39:67:00: 87:9d:8f:b8:a6:52:ce:7c:2c:6c:1b:5f:c0:b3:78: 4a:45:91:54:ac:d7:c6:fb:cd:f7:45:99:6d:22:fe: 67:9f:62:c4:d5:d9:d1:d1:52:a3:8b:28:7c:0c:21: 5f:d7:16:b8:90:63:17:34:da:11:69:ca:6f:4f:74: 20:4e:32:2e:12:3b:87:bc:a6:99:d5:30:26:42:a7: df:c0:14:66:3e:f5:23:eb:e8:67:8b:81:8d:b8:f1: 85:e0:f9:48:1c:d3:ca:cf:f3:91:d3:ac:71:af:48: b3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A9:F3:CA:89:AB:B6:8F:16:A7:28:65:F3:E9:C5:93:09:C7:1D:27 X509v3 Authority Key Identifier: keyid:BE:3F:6D:7C:6C:D8:33:BE:A5:DA:ED:57:62:57:D2:A3:48:28:29:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj9tfGzYM76l2u1XYlfSo0goKXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96d39b-3d4c-447c-b30d-43d017094e73/1/vj9tfGzYM76l2u1XYlfSo0goKXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:a2:06:95:6c:14:9e:78:5a:29:6d:52:26:e0:c5:2a:f6:38: a3:49:33:bd:8a:03:f7:7f:4b:c9:89:92:a6:16:93:6a:0f:66: ba:e6:00:aa:64:a1:82:d0:f9:ee:02:35:d0:b5:aa:6a:ee:99: 3c:8b:86:8d:dd:ae:f4:b6:f5:83:d5:ba:7a:df:d2:51:8f:50: a9:f1:5c:d0:31:42:f6:79:82:55:a4:1a:50:f0:d1:60:25:b3: 68:ff:5c:df:35:d4:dd:ad:07:54:76:15:9b:34:03:dd:f7:45: 51:05:2a:cb:0b:64:0d:d2:f8:55:a1:f6:c4:ce:38:f4:7e:f6: 51:51:7c:1d:18:b9:ae:05:d9:0f:00:2c:86:c0:77:e1:a2:33: bb:fc:05:2c:cb:0b:6b:0e:30:36:28:bc:9d:18:e3:e8:77:6d: 97:33:b3:1d:59:4b:d9:ea:cf:c8:da:a2:a8:87:c8:46:0d:e3: 97:3e:f2:b4:22:e3:7a:a8:44:f4:ea:08:a2:9c:a1:21:05:e6: 5e:97:e3:bd:ff:16:5d:61:9b:57:25:03:18:7b:8b:ae:11:73: 9c:d4:88:a3:0e:67:1e:ce:c8:eb:4f:26:82:6f:4f:af:22:58: 42:4c:5d:a6:0f:33:86:dd:cf:ae:ba:1a:92:3d:9d:6d:e2:a1: cf:25:56:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZukItAk9cBvB4YNbLBr1nTBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlM2Y2ZDdjNmNkODMzYmVhNWRhZWQ1NzYyNTdkMmEzNDgy ODI5NzEwHhcNMjYwMTA5MTkwMTQzWhcNMjYwMTEwMTkwMTQzWjAzMTEwLwYDVQQD EygxM2E5ZjNjYTg5YWJiNjhmMTZhNzI4NjVmM2U5YzU5MzA5YzcxZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7BWs8XixjGfLxL83o5u5eCq1Hhc 3a2itc7zcDP2fo9SB46HwCoznco5RJA/ha7srzpBjL1Jq92uzE1CKKE/H1sba+QH ttGlFjLhv8BSwSXzS49JVxik2JbtitpLOCpfnQk8ZYYEzLfuiNR8WK1YYt8V+yLb 77S0xLK13rrwKaBLDmfQFuJ+kqnsE0qheotE9iM5ZwCHnY+4plLOfCxsG1/As3hK RZFUrNfG+833RZltIv5nn2LE1dnR0VKjiyh8DCFf1xa4kGMXNNoRacpvT3QgTjIu EjuHvKaZ1TAmQqffwBRmPvUj6+hni4GNuPGF4PlIHNPKz/OR06xxr0izPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBOp88qJq7aPFqcoZfPpxZMJxx0nMB8GA1UdIwQY MBaAFL4/bXxs2DO+pdrtV2JX0qNIKClxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmo5dGZHellNNzZsMnUxWFlsZlNvMGdvS1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC85NmQzOWItM2Q0Yy00NDdjLWIzMGQt NDNkMDE3MDk0ZTczLzEvdmo5dGZHellNNzZsMnUxWFlsZlNvMGdvS1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC85NmQzOWItM2Q0Yy00NDdjLWIzMGQtNDNkMDE3MDk0ZTcz LzEvdmo5dGZHellNNzZsMnUxWFlsZlNvMGdvS1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACqIGlWwU nnhaKW1SJuDFKvY4o0kzvYoD939LyYmSphaTag9muuYAqmShgtD57gI10LWqau6Z PIuGjd2u9Lb1g9W6et/SUY9QqfFc0DFC9nmCVaQaUPDRYCWzaP9c3zXU3a0HVHYV mzQD3fdFUQUqywtkDdL4VaH2xM449H72UVF8HRi5rgXZDwAshsB34aIzu/wFLMsL aw4wNii8nRjj6HdtlzOzHVlL2erPyNqiqIfIRg3jlz7ytCLjeqhE9OoIopyhIQXm Xpfjvf8WXWGbVyUDGHuLrhFznNSIow5nHs7I608mgm9PryJYQkxdpg8zht3Prroa kj2dbeKhzyVWMQ== -----END CERTIFICATE-----Generated at Fri Jan 9 23:48:05 2026 by rpki-client