This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft File: wXLnuWJS7qhzJjPTulGpsFWDp7M.mft (raw, json) Hash identifier: fZrNUX3sYuJUxrO9sHNQAaVAiHGor1qc+OOqWEbbDT0= Subject key identifier: B6:40:A0:1B:7B:9F:E4:3F:FB:D0:18:8F:A2:E0:20:8B:1B:A8:39:9A Authority key identifier: C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3 Certificate issuer: /CN=c172e7b96252eea8732633d3ba51a9b05583a7b3 Certificate serial: 019BF6BF7BFD8B88F8152E0730496DDEC0CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft Manifest number: 0ECB Signing time: Sun 25 Jan 2026 20:01:42 +0000 Manifest this update: Sun 25 Jan 2026 20:01:42 +0000 Manifest next update: Mon 26 Jan 2026 20:01:42 +0000 Files and hashes: 1: 98vr8W__XpPfxKb3oWjSNeB9O4g.roa (hash: HfCtLcixn47JEXRyfpP8IgjT4+bHM16DwTuzO5zQzKk=) 2: wXLnuWJS7qhzJjPTulGpsFWDp7M.crl (hash: 2kAUEuuZgYtZZBIFpQRVf88M1IjUSKwhFV5etyyoCIM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:7b:fd:8b:88:f8:15:2e:07:30:49:6d:de:c0:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c172e7b96252eea8732633d3ba51a9b05583a7b3 Validity Not Before: Jan 25 20:01:42 2026 GMT Not After : Jan 26 20:01:42 2026 GMT Subject: CN=b640a01b7b9fe43ffbd0188fa2e0208b1ba8399a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:30:8d:1a:3c:3d:f4:b1:6d:7f:7d:af:60:31: 70:7f:b2:a5:53:2c:da:70:97:d0:24:0b:63:18:15: 4a:1b:5e:c8:67:53:ac:c6:db:1a:ad:a3:10:d9:2a: 3d:e9:c4:5d:59:e5:e7:13:5a:44:fa:fc:6c:3a:30: 3a:f5:97:d7:6b:83:17:ac:b6:0d:21:2c:c2:04:03: 51:9b:67:2d:08:a2:5b:f9:13:0f:c3:53:9b:e9:fa: dc:dc:01:e1:7d:3e:6c:6a:7f:4e:39:96:06:67:3f: ce:01:79:e7:c5:1d:e6:57:28:6e:82:cc:b6:96:10: b6:7f:df:da:64:ed:36:07:53:d9:d4:1a:c2:d3:a9: 30:5f:f0:50:1f:b6:8e:2c:aa:cb:51:d6:b5:a4:9f: d3:cb:42:60:7c:02:31:80:1c:52:fb:47:6d:c2:09: 51:51:ca:ce:65:b4:bd:06:04:64:f6:07:f1:42:c6: 90:78:98:8f:b3:c5:5c:a3:40:cc:38:89:01:83:93: ed:5f:bb:15:cc:11:77:4d:e8:69:df:a0:d3:72:c6: 1c:6c:aa:dc:3b:65:16:ff:1b:76:dd:90:bf:39:bc: 1e:82:9c:8c:a5:ad:d9:17:d7:6e:a1:f2:8e:e2:60: 11:bf:7e:a9:8d:c8:64:d3:ea:3b:84:47:ad:d4:27: 56:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:40:A0:1B:7B:9F:E4:3F:FB:D0:18:8F:A2:E0:20:8B:1B:A8:39:9A X509v3 Authority Key Identifier: keyid:C1:72:E7:B9:62:52:EE:A8:73:26:33:D3:BA:51:A9:B0:55:83:A7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXLnuWJS7qhzJjPTulGpsFWDp7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a6ec71-16e5-4163-a042-317db4232f3b/1/wXLnuWJS7qhzJjPTulGpsFWDp7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:71:c8:7a:05:56:eb:10:a9:99:49:80:69:71:0e:0a:fc:78: 81:b6:fe:e5:f1:56:dd:8d:55:7f:14:14:a1:63:aa:92:74:23: 16:1f:eb:ce:8e:49:7f:6c:15:11:9c:b1:7d:ce:e4:ad:82:4c: 6b:98:9e:62:2e:8c:9a:c8:ce:8f:60:c9:68:f4:e5:3f:1f:47: 92:a0:92:cb:d1:bb:63:02:2a:e5:d8:7b:83:6c:e2:cf:23:e1: 7e:7f:6b:5c:ee:99:ba:67:dc:46:59:96:42:c6:9c:a5:e7:31: 05:12:8d:22:49:7f:ba:9e:5a:f7:e3:de:ae:77:e6:8b:d6:07: 5b:a4:22:9c:d6:5f:17:33:d9:db:c3:87:87:3d:1f:16:64:9d: 21:e9:6a:e4:90:e8:4f:fb:9e:73:df:4b:62:b4:78:13:bd:b2: 17:ba:47:ed:f8:01:23:99:9f:ce:fc:3c:36:3f:3d:95:84:fe: 98:c9:52:41:3d:41:ae:31:d0:68:f3:df:f1:43:6e:70:28:83: a7:74:ad:65:b5:eb:55:99:5b:05:9d:e6:39:e6:c6:b3:97:c9: ea:6e:df:4f:64:05:bd:0c:19:c8:10:c5:34:21:33:c3:a1:4a: 94:fb:90:56:d4:90:15:db:db:bc:51:d3:34:ab:db:15:09:5a: bd:d6:c5:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v3v9i4j4FS4HMElt3sDNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNzJlN2I5NjI1MmVlYTg3MzI2MzNkM2JhNTFhOWIwNTU4 M2E3YjMwHhcNMjYwMTI1MjAwMTQyWhcNMjYwMTI2MjAwMTQyWjAzMTEwLwYDVQQD EyhiNjQwYTAxYjdiOWZlNDNmZmJkMDE4OGZhMmUwMjA4YjFiYTgzOTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zCNGjw99LFtf32vYDFwf7KlUyza cJfQJAtjGBVKG17IZ1OsxtsaraMQ2So96cRdWeXnE1pE+vxsOjA69ZfXa4MXrLYN ISzCBANRm2ctCKJb+RMPw1Ob6frc3AHhfT5san9OOZYGZz/OAXnnxR3mVyhugsy2 lhC2f9/aZO02B1PZ1BrC06kwX/BQH7aOLKrLUda1pJ/Ty0JgfAIxgBxS+0dtwglR UcrOZbS9BgRk9gfxQsaQeJiPs8Vco0DMOIkBg5PtX7sVzBF3Tehp36DTcsYcbKrc O2UW/xt23ZC/ObwegpyMpa3ZF9duofKO4mARv36pjchk0+o7hEet1CdWkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZAoBt7n+Q/+9AYj6LgIIsbqDmaMB8GA1UdIwQY MBaAFMFy57liUu6ocyYz07pRqbBVg6ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDIt MzE3ZGI0MjMyZjNiLzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hNmVjNzEtMTZlNS00MTYzLWEwNDItMzE3ZGI0MjMyZjNi LzEvd1hMbnVXSlM3cWh6SmpQVHVsR3BzRldEcDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3HIegVW 6xCpmUmAaXEOCvx4gbb+5fFW3Y1VfxQUoWOqknQjFh/rzo5Jf2wVEZyxfc7krYJM a5ieYi6MmsjOj2DJaPTlPx9HkqCSy9G7YwIq5dh7g2zizyPhfn9rXO6ZumfcRlmW QsacpecxBRKNIkl/up5a9+Pernfmi9YHW6QinNZfFzPZ28OHhz0fFmSdIelq5JDo T/uec99LYrR4E72yF7pH7fgBI5mfzvw8Nj89lYT+mMlSQT1BrjHQaPPf8UNucCiD p3StZbXrVZlbBZ3mOebGs5fJ6m7fT2QFvQwZyBDFNCEzw6FKlPuQVtSQFdvbvFHT NKvbFQlavdbFOA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:41 2026 by rpki-client