This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json) Hash identifier: aDB5gyGczJlaFw1TV2+8ebdC2duYfHFP5qTldjRw+P4= Subject key identifier: 3F:40:D8:30:52:D1:8E:04:53:B6:27:E1:A2:F4:76:C9:94:2B:E9:09 Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4 Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4 Certificate serial: 019BACEE76D6DE1CF739A1DCDB298DBA2032 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft Manifest number: 17C1 Signing time: Sun 11 Jan 2026 12:01:07 +0000 Manifest this update: Sun 11 Jan 2026 12:01:07 +0000 Manifest next update: Mon 12 Jan 2026 12:01:07 +0000 Files and hashes: 1: KBM2JifvD2Vh2akJjDLpqYRnGis.roa (hash: qcaeJ9j6EbyDF5mQddzhEcOLSvwlN5hP0uXT449+ltQ=) 2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: fuOReHaNKnoBjv0y+G/M4fHg1Qmdw7vHyBvj+PvqJ2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ac:ee:76:d6:de:1c:f7:39:a1:dc:db:29:8d:ba:20:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4 Validity Not Before: Jan 11 12:01:07 2026 GMT Not After : Jan 12 12:01:07 2026 GMT Subject: CN=3f40d83052d18e0453b627e1a2f476c9942be909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:94:23:75:f7:70:11:93:62:d5:af:bd:02: c2:73:69:5c:15:dd:9f:0c:39:71:94:42:df:c5:ca: fc:33:cb:5b:95:97:4a:72:b9:96:49:0a:f6:29:d9: 87:a8:0c:22:85:b4:c0:12:29:bc:3a:99:00:8c:74: 6f:7c:29:23:57:4e:74:12:1b:e8:04:3d:ae:08:f1: 10:64:c2:65:db:8f:33:c9:33:e8:7d:30:b1:cf:4a: 60:ab:26:cf:9e:e6:57:b9:8c:51:ad:61:58:b0:11: 51:64:5e:c4:12:cb:9d:df:33:e4:54:17:de:1b:57: 0f:79:2a:be:17:18:ee:0a:a7:aa:9c:1e:40:80:65: 27:a4:81:d6:f3:37:ad:62:2b:09:3a:b7:f6:c1:09: 7e:f8:2e:be:5b:db:1a:5d:c6:f3:96:75:1e:af:1b: a0:a2:8d:ac:18:e0:1a:01:80:ef:8c:90:5f:05:a3: 29:a5:03:34:15:41:6e:31:f8:67:f9:e7:45:19:e5: f5:33:8b:15:3a:2b:8b:0c:98:81:3d:36:9b:ce:b5: 27:91:9f:12:02:5d:ef:ef:c2:86:87:31:e4:57:05: 4f:fc:e9:59:c5:f6:f2:8c:f4:fa:0b:23:a1:67:fb: e8:ba:50:e9:ae:15:ed:06:07:80:dd:12:66:34:18: 87:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:40:D8:30:52:D1:8E:04:53:B6:27:E1:A2:F4:76:C9:94:2B:E9:09 X509v3 Authority Key Identifier: keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:e2:7d:b7:16:22:f7:5c:f9:f2:46:ef:b1:06:97:0e:aa:14: 8a:32:92:87:96:92:ac:06:e7:ed:4b:8a:07:77:fc:54:5d:cd: 0d:5f:18:95:28:ad:2c:04:ac:5d:ad:66:a8:77:27:59:15:92: 15:d5:83:2f:64:92:2a:81:2e:dc:f5:4d:cd:51:ec:2f:b0:67: 62:73:68:e1:ec:6f:8f:04:b2:c6:ec:c0:6d:1b:bc:e1:a2:25: a3:6a:27:4c:02:1e:21:5d:b5:72:18:c8:4b:7b:bb:ca:98:9f: 35:cd:15:20:34:97:ac:15:1c:e8:9e:4c:02:46:52:16:a1:a4: 00:d1:ca:62:e5:3c:11:70:1f:51:55:32:fe:f4:ce:1a:5d:f0: 4f:f5:f1:c4:d2:d3:11:2f:65:c9:a0:97:b1:14:5a:1c:24:70: 9d:75:51:b4:ce:29:ea:ca:ff:0b:8d:64:1c:b7:af:81:3b:7d: 04:9b:c4:40:dc:ba:93:3d:fa:76:dc:5a:3a:ef:45:0e:59:60: 15:34:3c:ec:81:06:c6:3d:c9:8f:42:92:aa:55:6f:47:8a:a3: 7f:ee:fc:13:47:ba:ef:b9:65:e7:20:5d:89:19:b1:1a:06:3d: b0:33:d1:87:8b:d2:f1:2e:28:c4:a4:32:af:1d:a2:de:1d:9e: da:91:55:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZus7nbW3hz3OaHc2ymNuiAyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlMTI1Y2FkN2RkNGM1ZjAyMDFlZTJhMjFkZWFjMzg3MzY2 OTgxYzQwHhcNMjYwMTExMTIwMTA3WhcNMjYwMTEyMTIwMTA3WjAzMTEwLwYDVQQD EygzZjQwZDgzMDUyZDE4ZTA0NTNiNjI3ZTFhMmY0NzZjOTk0MmJlOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw2UI3X3cBGTYtWvvQLCc2lcFd2f DDlxlELfxcr8M8tblZdKcrmWSQr2KdmHqAwihbTAEim8OpkAjHRvfCkjV050Ehvo BD2uCPEQZMJl248zyTPofTCxz0pgqybPnuZXuYxRrWFYsBFRZF7EEsud3zPkVBfe G1cPeSq+FxjuCqeqnB5AgGUnpIHW8zetYisJOrf2wQl++C6+W9saXcbzlnUerxug oo2sGOAaAYDvjJBfBaMppQM0FUFuMfhn+edFGeX1M4sVOiuLDJiBPTabzrUnkZ8S Al3v78KGhzHkVwVP/OlZxfbyjPT6CyOhZ/voulDprhXtBgeA3RJmNBiH6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9A2DBS0Y4EU7Yn4aL0dsmUK+kJMB8GA1UdIwQY MBaAFL4SXK191MXwIB7ioh3qw4c2aYHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NWE3NGYtNDljYS00YTYzLTllZGEt NTE3ZWZmOTA4OTc1LzEvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy81NWE3NGYtNDljYS00YTYzLTllZGEtNTE3ZWZmOTA4OTc1 LzEvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOJ9txYi 91z58kbvsQaXDqoUijKSh5aSrAbn7UuKB3f8VF3NDV8YlSitLASsXa1mqHcnWRWS FdWDL2SSKoEu3PVNzVHsL7BnYnNo4exvjwSyxuzAbRu84aIlo2onTAIeIV21chjI S3u7ypifNc0VIDSXrBUc6J5MAkZSFqGkANHKYuU8EXAfUVUy/vTOGl3wT/XxxNLT ES9lyaCXsRRaHCRwnXVRtM4p6sr/C41kHLevgTt9BJvEQNy6kz36dtxaOu9FDllg FTQ87IEGxj3Jj0KSqlVvR4qjf+78E0e677ll5yBdiRmxGgY9sDPRh4vS8S4oxKQy rx2i3h2e2pFVPg== -----END CERTIFICATE-----Generated at Sun Jan 11 19:06:21 2026 by rpki-client