This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft File: Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json) Hash identifier: iJZLVLQsOPCzfX7nxH/YSwWj0qNw2+qamhgcA7O0E60= Subject key identifier: 1C:23:8E:16:11:03:08:6F:C1:4E:62:65:61:47:8A:45:BA:41:30:CB Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa Certificate serial: 019BB35E615B14A70B821DA7EA4517FA17D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft Manifest number: 1259 Signing time: Mon 12 Jan 2026 18:01:05 +0000 Manifest this update: Mon 12 Jan 2026 18:01:05 +0000 Manifest next update: Tue 13 Jan 2026 18:01:05 +0000 Files and hashes: 1: FpVW71nyoW-_gJoXR54EYMZoVQE.roa (hash: gZatusuUvr/QTel7Hexm6oiz929ityXKMuJIjfNYW6U=) 2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: OkZkqbgxD33qCxFiw6+SksmTVsrYXPXNifvcc8Mm0r4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 16:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b3:5e:61:5b:14:a7:0b:82:1d:a7:ea:45:17:fa:17:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa Validity Not Before: Jan 12 18:01:05 2026 GMT Not After : Jan 13 18:01:05 2026 GMT Subject: CN=1c238e161103086fc14e626561478a45ba4130cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:cd:49:af:97:3e:f1:be:70:cf:2a:db:e8:d9: 22:b0:1d:b0:bf:36:79:cc:0b:a1:f3:fe:58:dd:37: 46:4d:bd:c0:b7:45:11:2c:16:ae:57:f3:00:bc:d6: ed:76:00:59:2b:e8:76:5b:30:a8:5a:89:31:6a:13: c5:ff:4e:33:37:80:6e:33:96:d1:2d:a9:b8:1d:20: 63:20:28:90:eb:c7:50:62:a2:28:d3:9c:b9:05:dd: 98:e0:14:6f:83:12:aa:46:6c:a1:d3:16:0e:dc:a5: 4c:00:3b:24:08:99:cb:64:11:9c:59:d3:11:8d:fa: 7b:45:cd:c3:32:1c:fc:34:ef:b5:36:f5:94:46:6b: c9:3b:34:c6:e1:ab:2d:a1:95:48:8b:74:91:86:c0: 16:be:df:35:ed:b0:6d:f3:07:4d:38:7b:3a:94:d4: 88:e8:89:a4:f4:39:8b:38:25:e5:e9:b9:22:ef:90: 50:c5:98:ff:fb:49:89:68:5f:01:ea:cb:3c:3d:87: 20:c8:79:ca:4f:f5:f2:30:59:5a:b2:b8:f3:44:8a: 88:75:45:1b:21:53:3c:c6:88:b0:02:98:b0:8e:6d: be:cf:5a:a9:02:0c:71:b8:7b:01:5b:73:c5:73:b5: 2f:52:c4:33:93:ed:9d:3c:0b:20:7c:4f:9e:54:73: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:23:8E:16:11:03:08:6F:C1:4E:62:65:61:47:8A:45:BA:41:30:CB X509v3 Authority Key Identifier: keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:bd:a5:d5:12:0e:cf:9a:92:b3:91:11:e3:75:b6:3a:af:93: 48:f3:cc:9c:3f:b4:e7:0f:c2:08:ef:30:bd:a0:56:bc:a1:f9: 3c:75:11:47:3e:96:7a:79:c6:18:8e:24:81:94:e5:a0:06:79: b9:7e:fb:d1:90:f0:40:2c:2e:d4:ac:dd:bc:81:7f:66:c0:a2: 98:60:ba:46:94:25:88:86:df:ae:b9:7e:4b:8f:dd:67:c2:c5: 01:f5:5c:5a:48:12:55:30:b1:d3:81:46:31:f4:ce:62:e5:b7: 89:d2:3f:48:01:3f:10:8f:43:d8:9d:01:cb:7a:5e:9b:34:4e: 37:cd:31:05:bf:4b:48:9b:a0:29:f7:94:94:a5:30:58:3b:4a: 65:6a:e2:af:da:47:79:57:bb:3b:c8:6b:b8:73:71:73:b8:7d: 1d:f5:9c:8c:fb:03:80:c2:fb:e2:aa:e1:e5:96:2d:7d:d6:22: c2:2a:88:2c:5f:a2:40:73:2d:e0:4f:06:7f:7a:b5:aa:4f:0b: c2:b0:18:b0:42:da:d9:bd:5d:07:67:6c:d9:3b:77:2d:14:6c: 72:aa:11:ca:1e:28:f7:38:1f:48:7d:84:85:e0:57:2b:3a:98: 9d:e4:17:ba:24:1f:6c:17:9a:4a:a4:bf:66:c1:62:05:8c:c1: cf:dc:bd:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuzXmFbFKcLgh2n6kUX+hfYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1ZTkzY2MzZTYxY2YzMzRiMTYxMTFjYWUzNGFlOTkyOGM0 ZmMzZmEwHhcNMjYwMTEyMTgwMTA1WhcNMjYwMTEzMTgwMTA1WjAzMTEwLwYDVQQD EygxYzIzOGUxNjExMDMwODZmYzE0ZTYyNjU2MTQ3OGE0NWJhNDEzMGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxc1Jr5c+8b5wzyrb6NkisB2wvzZ5 zAuh8/5Y3TdGTb3At0URLBauV/MAvNbtdgBZK+h2WzCoWokxahPF/04zN4BuM5bR Lam4HSBjICiQ68dQYqIo05y5Bd2Y4BRvgxKqRmyh0xYO3KVMADskCJnLZBGcWdMR jfp7Rc3DMhz8NO+1NvWURmvJOzTG4astoZVIi3SRhsAWvt817bBt8wdNOHs6lNSI 6Imk9DmLOCXl6bki75BQxZj/+0mJaF8B6ss8PYcgyHnKT/XyMFlasrjzRIqIdUUb IVM8xoiwApiwjm2+z1qpAgxxuHsBW3PFc7UvUsQzk+2dPAsgfE+eVHPshwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwjjhYRAwhvwU5iZWFHikW6QTDLMB8GA1UdIwQY MBaAFFXpPMPmHPM0sWERyuNK6ZKMT8P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGIt ZTgwOTJkZDY1YzdmLzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGItZTgwOTJkZDY1Yzdm LzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbL2l1RIO z5qSs5ER43W2Oq+TSPPMnD+05w/CCO8wvaBWvKH5PHURRz6WennGGI4kgZTloAZ5 uX770ZDwQCwu1KzdvIF/ZsCimGC6RpQliIbfrrl+S4/dZ8LFAfVcWkgSVTCx04FG MfTOYuW3idI/SAE/EI9D2J0By3pemzRON80xBb9LSJugKfeUlKUwWDtKZWrir9pH eVe7O8hruHNxc7h9HfWcjPsDgML74qrh5ZYtfdYiwiqILF+iQHMt4E8Gf3q1qk8L wrAYsELa2b1dB2ds2Tt3LRRscqoRyh4o9zgfSH2EheBXKzqYneQXuiQfbBeaSqS/ ZsFiBYzBz9y9yw== -----END CERTIFICATE-----Generated at Mon Jan 12 22:46:22 2026 by rpki-client