This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft File: VTTpuw7k0wwx52r6aRrcknmz81Y.mft (raw, json) Hash identifier: kHvQJYvBnUGdKbHv42TJG1hb3fG1/Oxktc1BMYYGZm0= Subject key identifier: 22:35:09:F5:9B:DF:B4:4F:7C:12:10:35:04:3B:5F:65:99:22:82:98 Authority key identifier: 55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56 Certificate issuer: /CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356 Certificate serial: 019BAEA62121F36165A965851970126C2B83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft Manifest number: 17C5 Signing time: Sun 11 Jan 2026 20:01:21 +0000 Manifest this update: Sun 11 Jan 2026 20:01:21 +0000 Manifest next update: Mon 12 Jan 2026 20:01:21 +0000 Files and hashes: 1: Ay1de_CJDcGalpq6G-6jy9K11Gk.roa (hash: uc5IBSFrLOuYogekySiZznfKugYHdXYL0+i6gvyMboQ=) 2: VTTpuw7k0wwx52r6aRrcknmz81Y.crl (hash: JT6DN7M9pry5Xl2tHR888P8ZrFVOxB0FOFC1LfoZhUk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ae:a6:21:21:f3:61:65:a9:65:85:19:70:12:6c:2b:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5534e9bb0ee4d30c31e76afa691adc9279b3f356 Validity Not Before: Jan 11 20:01:21 2026 GMT Not After : Jan 12 20:01:21 2026 GMT Subject: CN=223509f59bdfb44f7c121035043b5f6599228298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f4:d5:9d:7e:26:46:bf:ec:75:7b:0d:84:06: 77:6c:92:b9:a2:24:6a:10:44:18:47:ef:0a:33:54: ee:16:f9:76:df:ae:69:f7:48:2e:c8:1a:fe:b5:37: ab:40:e1:f8:f1:7d:cf:15:eb:b5:2a:4f:3f:5c:a7: 6e:90:fd:06:9b:78:28:37:33:98:a7:6b:44:ed:ab: 08:25:13:68:63:3c:7c:0e:e0:6d:4f:8a:1a:ea:d5: db:ab:54:da:23:03:0d:0e:2a:d9:e2:ce:70:fd:05: c0:2a:3a:25:69:4c:b3:80:6d:e7:bc:b7:f0:dc:88: 20:31:cd:b8:34:65:d4:d0:f0:d9:ce:b0:9c:82:36: 7a:5a:28:2f:10:19:c6:ed:0a:3a:7f:1e:a2:8c:fc: 57:63:24:cc:ea:70:85:e1:10:b2:7c:8b:ba:52:22: e1:39:91:5a:2e:e5:90:b3:03:12:3b:c9:d5:c0:5d: d4:ac:c1:f3:1c:95:48:f9:d7:ee:1b:30:ea:cf:c4: 23:17:4d:f5:94:99:89:2d:6c:4e:89:9b:3e:44:1a: f3:71:73:bc:61:a4:ac:76:5b:bc:db:11:1f:6d:42: f2:8b:53:6d:b6:ff:c9:1f:43:c1:72:e7:25:81:bb: 97:da:84:94:43:0e:6d:dc:21:1f:e8:09:25:ce:d0: c7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:35:09:F5:9B:DF:B4:4F:7C:12:10:35:04:3B:5F:65:99:22:82:98 X509v3 Authority Key Identifier: keyid:55:34:E9:BB:0E:E4:D3:0C:31:E7:6A:FA:69:1A:DC:92:79:B3:F3:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTTpuw7k0wwx52r6aRrcknmz81Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f4ba63-cd9a-4311-b416-64f231dd4042/1/VTTpuw7k0wwx52r6aRrcknmz81Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:14:81:14:d7:68:ef:d3:74:48:39:0e:94:d5:21:c0:5a:02: d4:5a:7b:2c:f7:af:93:97:b4:87:71:e8:99:74:fd:54:8a:a4: 62:13:c7:72:26:de:f2:9a:37:37:e6:17:bc:d3:89:00:79:5f: f2:71:61:b6:52:a4:65:02:5a:00:ae:4d:ba:e8:6a:04:33:1f: 98:05:fb:d7:73:19:f7:d0:5e:ce:f9:4a:b4:dd:08:86:91:b6: e6:55:45:1e:dd:a0:62:eb:0f:d1:b1:cc:a3:d0:f2:11:e5:e3: d9:b4:35:89:e1:35:18:50:c6:94:46:89:c5:f7:78:40:d8:0a: e8:2d:c7:4c:4e:e6:03:f2:e5:2a:3b:21:6e:58:79:9d:11:6e: 26:f9:8d:59:8f:dc:ba:48:87:8a:77:d8:f3:d1:15:a3:32:4c: 6c:1e:10:a6:87:9b:8e:7b:b2:fc:d8:d5:d9:cd:fd:3e:41:fc: ca:f8:94:63:db:ca:09:31:d3:fe:e7:88:70:50:f2:5c:70:17: 5b:82:28:3c:83:9e:93:e3:6d:3f:b8:32:7a:8b:82:38:ad:a4: ad:22:73:ff:fb:60:e0:66:9c:99:8c:09:0c:4a:8c:fe:35:cc: 8d:a7:8e:e6:d3:e4:8f:2e:d8:20:a3:49:5e:b3:3c:9b:05:ba: bb:71:98:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZuupiEh82FlqWWFGXASbCuDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1MzRlOWJiMGVlNGQzMGMzMWU3NmFmYTY5MWFkYzkyNzli M2YzNTYwHhcNMjYwMTExMjAwMTIxWhcNMjYwMTEyMjAwMTIxWjAzMTEwLwYDVQQD EygyMjM1MDlmNTliZGZiNDRmN2MxMjEwMzUwNDNiNWY2NTk5MjI4Mjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/TVnX4mRr/sdXsNhAZ3bJK5oiRq EEQYR+8KM1TuFvl2365p90guyBr+tTerQOH48X3PFeu1Kk8/XKdukP0Gm3goNzOY p2tE7asIJRNoYzx8DuBtT4oa6tXbq1TaIwMNDirZ4s5w/QXAKjolaUyzgG3nvLfw 3IggMc24NGXU0PDZzrCcgjZ6WigvEBnG7Qo6fx6ijPxXYyTM6nCF4RCyfIu6UiLh OZFaLuWQswMSO8nVwF3UrMHzHJVI+dfuGzDqz8QjF031lJmJLWxOiZs+RBrzcXO8 YaSsdlu82xEfbULyi1Nttv/JH0PBcuclgbuX2oSUQw5t3CEf6AklztDHrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI1CfWb37RPfBIQNQQ7X2WZIoKYMB8GA1UdIwQY MBaAFFU06bsO5NMMMedq+mka3JJ5s/NWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mNGJhNjMtY2Q5YS00MzExLWI0MTYt NjRmMjMxZGQ0MDQyLzEvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9mNGJhNjMtY2Q5YS00MzExLWI0MTYtNjRmMjMxZGQ0MDQy LzEvVlRUcHV3N2swd3d4NTJyNmFScmNrbm16ODFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHBSBFNdo 79N0SDkOlNUhwFoC1Fp7LPevk5e0h3HomXT9VIqkYhPHcibe8po3N+YXvNOJAHlf 8nFhtlKkZQJaAK5NuuhqBDMfmAX713MZ99BezvlKtN0IhpG25lVFHt2gYusP0bHM o9DyEeXj2bQ1ieE1GFDGlEaJxfd4QNgK6C3HTE7mA/LlKjshblh5nRFuJvmNWY/c ukiHinfY89EVozJMbB4Qpoebjnuy/NjV2c39PkH8yviUY9vKCTHT/ueIcFDyXHAX W4IoPIOek+NtP7gyeouCOK2krSJz//tg4GacmYwJDEqM/jXMjaeO5tPkjy7YIKNJ XrM8mwW6u3GYoA== -----END CERTIFICATE-----Generated at Mon Jan 12 00:00:11 2026 by rpki-client