This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft File: VC8JTwQnsU80mffN9h2IOwiIYoo.mft (raw, json) Hash identifier: jiCtwIFSPOti072eg1K6v8E4UTTsK8QkrPG4ncV41Co= Subject key identifier: 32:FD:60:2A:BA:F3:89:AC:2B:4D:21:57:5E:4C:22:90:2C:95:E0:91 Authority key identifier: 54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A Certificate issuer: /CN=542f094f0427b14f3499f7cdf61d883b0888628a Certificate serial: 019BB6CDE6E233D201DE4394F5AB302DD6AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft Manifest number: 14AE Signing time: Tue 13 Jan 2026 10:01:45 +0000 Manifest this update: Tue 13 Jan 2026 10:01:45 +0000 Manifest next update: Wed 14 Jan 2026 10:01:45 +0000 Files and hashes: 1: MxmtZpT39ziVe-pzqj79_Ed_jAo.roa (hash: 4OhUHwywmDOO3mmhT6ZwnGr79zua7TEwc4pRLTJjvFc=) 2: VC8JTwQnsU80mffN9h2IOwiIYoo.crl (hash: Q9UuZiSiHUZvOQNmwb0JGOb/VlDgQJ71cRkZEE03Eas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Jan 2026 09:36:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:cd:e6:e2:33:d2:01:de:43:94:f5:ab:30:2d:d6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=542f094f0427b14f3499f7cdf61d883b0888628a Validity Not Before: Jan 13 10:01:45 2026 GMT Not After : Jan 14 10:01:45 2026 GMT Subject: CN=32fd602abaf389ac2b4d21575e4c22902c95e091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:7f:e9:1e:18:e9:a2:5b:92:1c:ed:41:3b: 41:e8:79:1d:00:27:71:3c:8e:dc:5e:7d:9e:66:53: d3:73:b3:ff:0a:9f:58:01:b2:c9:a7:ca:23:08:25: dc:13:36:6e:c6:af:a6:d6:42:48:19:c6:db:d9:a7: a1:f2:54:37:b6:30:9a:e2:6c:02:8f:93:f1:48:26: ea:68:23:37:c5:63:22:18:f2:fa:fe:1c:a3:87:99: c5:25:c3:b5:e6:ca:39:5e:08:61:29:4f:d5:46:2e: ab:67:ab:af:84:c3:5c:72:83:9c:f1:82:00:f4:b1: ef:b0:59:79:76:f2:58:e9:90:05:bc:4e:75:16:05: a1:d5:3d:85:b3:fc:34:72:77:81:6a:dd:22:5f:f1: 90:47:de:25:55:c5:e2:0b:20:14:92:b8:b5:ea:de: 01:7a:c9:97:bd:2a:83:56:f3:41:56:d9:dd:e0:fa: bb:b3:a1:97:d1:94:12:6f:f9:f3:d8:ec:0f:23:d9: 85:f7:2d:16:8c:d1:b2:55:e5:8f:2d:ce:4a:91:a1: 68:cd:69:69:ca:1e:95:63:ad:b8:33:1e:70:fa:db: eb:20:3d:f7:7a:1b:f2:ad:ad:0e:d2:a9:be:85:17: de:3c:fd:5f:97:e0:c1:0e:bc:c3:27:29:68:68:c9: e2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:FD:60:2A:BA:F3:89:AC:2B:4D:21:57:5E:4C:22:90:2C:95:E0:91 X509v3 Authority Key Identifier: keyid:54:2F:09:4F:04:27:B1:4F:34:99:F7:CD:F6:1D:88:3B:08:88:62:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC8JTwQnsU80mffN9h2IOwiIYoo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/756aeb-022e-4c98-8ddb-0e068c4970ff/1/VC8JTwQnsU80mffN9h2IOwiIYoo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:64:8e:50:61:be:7e:58:33:7e:26:45:05:a5:71:cc:0f:30: e6:58:e0:3b:67:e4:e1:d0:77:f1:a9:4e:d6:28:c7:df:a6:a1: 51:ed:24:a0:ec:d2:24:c9:29:ce:aa:07:9a:a5:99:45:0c:03: d3:d3:ab:0f:49:47:97:0d:11:22:d9:6f:3b:ea:37:49:de:96: 33:5e:de:e1:34:5c:99:0f:c9:a9:ce:de:86:61:4a:ec:74:af: 08:7b:77:39:4c:ce:c5:06:aa:5f:23:57:df:68:5c:a2:62:00: 5d:0d:88:26:d5:3e:37:ea:30:57:41:9a:cb:20:b4:af:ca:13: 7c:6f:21:70:77:f7:dc:e4:39:d2:e7:db:43:13:3a:c0:fb:c8: bb:24:7d:64:8b:fc:26:b3:40:a2:0c:bc:1b:9c:52:86:49:2c: 73:e2:8f:24:f8:59:e6:17:4b:40:96:72:3c:0a:e0:ce:ca:8a: ce:c8:7c:65:2e:42:b9:63:8d:8d:bc:a3:92:a6:7d:83:3e:ae: e8:62:54:57:59:46:ad:25:01:ae:48:73:ad:4a:cd:ea:f2:c3: f0:08:fd:19:6b:bc:54:56:e8:3d:dd:4f:f5:a1:52:ae:5d:08: 06:70:b2:24:98:fc:c4:8c:bd:f3:95:4d:1c:2e:be:ab:78:c2: ff:c7:46:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZu2zebiM9IB3kOU9aswLdasMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MmYwOTRmMDQyN2IxNGYzNDk5ZjdjZGY2MWQ4ODNiMDg4 ODYyOGEwHhcNMjYwMTEzMTAwMTQ1WhcNMjYwMTE0MTAwMTQ1WjAzMTEwLwYDVQQD EygzMmZkNjAyYWJhZjM4OWFjMmI0ZDIxNTc1ZTRjMjI5MDJjOTVlMDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAN/6R4Y6aJbkhztQTtB6HkdACdx PI7cXn2eZlPTc7P/Cp9YAbLJp8ojCCXcEzZuxq+m1kJIGcbb2aeh8lQ3tjCa4mwC j5PxSCbqaCM3xWMiGPL6/hyjh5nFJcO15so5XghhKU/VRi6rZ6uvhMNccoOc8YIA 9LHvsFl5dvJY6ZAFvE51FgWh1T2Fs/w0cneBat0iX/GQR94lVcXiCyAUkri16t4B esmXvSqDVvNBVtnd4Pq7s6GX0ZQSb/nz2OwPI9mF9y0WjNGyVeWPLc5KkaFozWlp yh6VY624Mx5w+tvrID33ehvyra0O0qm+hRfePP1fl+DBDrzDJyloaMnibwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDL9YCq684msK00hV15MIpAsleCRMB8GA1UdIwQY MBaAFFQvCU8EJ7FPNJn3zfYdiDsIiGKKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83NTZhZWItMDIyZS00Yzk4LThkZGIt MGUwNjhjNDk3MGZmLzEvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS83NTZhZWItMDIyZS00Yzk4LThkZGItMGUwNjhjNDk3MGZm LzEvVkM4SlR3UW5zVTgwbWZmTjloMklPd2lJWW9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVmSOUGG+ flgzfiZFBaVxzA8w5ljgO2fk4dB38alO1ijH36ahUe0koOzSJMkpzqoHmqWZRQwD 09OrD0lHlw0RItlvO+o3Sd6WM17e4TRcmQ/Jqc7ehmFK7HSvCHt3OUzOxQaqXyNX 32hcomIAXQ2IJtU+N+owV0GayyC0r8oTfG8hcHf33OQ50ufbQxM6wPvIuyR9ZIv8 JrNAogy8G5xShkksc+KPJPhZ5hdLQJZyPArgzsqKzsh8ZS5CuWONjbyjkqZ9gz6u 6GJUV1lGrSUBrkhzrUrN6vLD8Aj9GWu8VFboPd1P9aFSrl0IBnCyJJj8xIy985VN HC6+q3jC/8dGEw== -----END CERTIFICATE-----Generated at Tue Jan 13 12:33:09 2026 by rpki-client