This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft File: WNh9kviQwtNllt7KHLCwu4sHoSI.mft (raw, json) Hash identifier: qJG2VlpdriJjlEien7KkgrfjVBDQxha0CvlonP9THYA= Subject key identifier: 56:63:68:92:B7:A9:C7:AF:73:FA:B9:FA:AD:1F:68:32:A7:C3:AC:B8 Authority key identifier: 58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22 Certificate issuer: /CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122 Certificate serial: 019BF499710AF0CAEDA1AEF2E7CCB563D8E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft Manifest number: 0351 Signing time: Sun 25 Jan 2026 10:00:55 +0000 Manifest this update: Sun 25 Jan 2026 10:00:55 +0000 Manifest next update: Mon 26 Jan 2026 10:00:55 +0000 Files and hashes: 1: WNh9kviQwtNllt7KHLCwu4sHoSI.crl (hash: Kggw9xroKpxRanJ1Z6WGiOmNjSENFMcfDu+lFAUlSDY=) 2: fKz1A69yLCD9Hy5RMB-BhxbMKoI.roa (hash: gMBhZrPmuKQd2KYBjPZnqO6rV1OivjKrkRnC0qrBguI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:71:0a:f0:ca:ed:a1:ae:f2:e7:cc:b5:63:d8:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d87d92f890c2d36596deca1cb0b0bb8b07a122 Validity Not Before: Jan 25 10:00:55 2026 GMT Not After : Jan 26 10:00:55 2026 GMT Subject: CN=56636892b7a9c7af73fab9faad1f6832a7c3acb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:63:e8:08:c1:db:8d:d4:14:16:31:a5:a2:1d: c6:83:ef:ce:bd:cd:40:02:e8:4d:01:d9:7a:4b:4b: c3:83:80:05:c5:72:4d:41:ad:1b:b4:c8:bd:62:5f: f7:66:e4:46:64:73:73:06:42:7c:27:42:26:d2:47: 27:f4:0c:03:2f:23:f7:d9:47:03:f7:ac:93:07:6b: 6c:fa:06:04:f8:58:fb:55:a7:3e:e6:1b:40:0f:76: 22:29:c6:d5:63:bb:42:a5:f2:d8:2e:69:b2:b7:5b: b1:3e:68:7c:e0:72:8f:a4:79:14:ff:bb:af:04:2f: 90:11:3b:0a:2c:3d:33:3c:4c:bb:2c:a6:c9:b2:cf: 70:ea:23:db:e7:0a:33:cd:55:58:c7:a6:4d:b0:e2: 38:32:fa:4c:6b:55:b6:a3:e7:84:dc:9a:c5:10:63: 59:74:65:97:4a:46:df:8e:a2:28:b7:66:68:15:b8: 00:35:87:5c:51:d1:c5:5e:59:e9:9d:f3:a2:00:8e: d6:06:7f:9d:49:06:68:d7:29:ba:8c:5b:42:f2:4f: f5:29:9e:3b:dc:8e:ef:e7:91:de:2e:38:7f:b1:02: 75:69:ee:5a:90:58:49:f4:1c:2b:f0:b3:6b:99:b7: 48:c9:8a:90:a3:a9:4b:17:94:cd:e7:bd:5f:2b:92: 40:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:63:68:92:B7:A9:C7:AF:73:FA:B9:FA:AD:1F:68:32:A7:C3:AC:B8 X509v3 Authority Key Identifier: keyid:58:D8:7D:92:F8:90:C2:D3:65:96:DE:CA:1C:B0:B0:BB:8B:07:A1:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNh9kviQwtNllt7KHLCwu4sHoSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1db213-4afd-4407-ba9c-bd73609ee5da/1/WNh9kviQwtNllt7KHLCwu4sHoSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:52:65:66:ef:9f:6c:79:3e:45:23:1a:83:c2:e6:4b:89:97: c9:d3:98:63:59:ee:c9:4a:43:ed:4f:e1:63:9f:c1:d3:31:e3: e2:bf:cc:a8:b8:f4:ca:e3:10:4f:ac:eb:ca:86:71:80:90:20: 3f:31:2d:9b:37:70:a7:d5:7b:80:88:38:c5:e7:c0:62:63:73: 83:a2:c1:ad:74:09:8e:47:ff:a3:d3:8f:c3:b9:3f:da:94:03: 45:4e:23:c5:f6:ef:35:98:94:14:cb:45:85:07:67:c2:db:73: c6:49:a1:1d:5e:7e:93:22:98:60:92:6b:7d:c9:85:d8:4c:7a: 98:a3:0f:cc:1b:cf:fe:fb:b6:c2:f4:1e:c4:ac:c2:98:a6:56: d2:10:2a:64:74:0b:8e:f0:c0:0b:0e:1a:7e:7a:e6:0d:0c:88: 17:ab:b7:32:8f:31:58:4b:57:55:ad:64:15:a9:53:d9:84:c8: 94:aa:3a:96:db:db:e0:e4:9b:15:b1:81:a0:8f:66:25:93:f2: eb:e4:2b:06:c5:b8:6c:bd:3b:89:ea:86:16:8a:c6:32:7c:05: c7:d6:a1:3e:ba:d5:e4:d5:c2:ef:dc:eb:26:f8:bb:c5:d9:ca: 77:d3:8b:e8:4f:ab:15:1f:2e:f6:ba:63:e7:a9:f8:4c:84:f1: 11:97:e6:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mXEK8Mrtoa7y58y1Y9jpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDg3ZDkyZjg5MGMyZDM2NTk2ZGVjYTFjYjBiMGJiOGIw N2ExMjIwHhcNMjYwMTI1MTAwMDU1WhcNMjYwMTI2MTAwMDU1WjAzMTEwLwYDVQQD Eyg1NjYzNjg5MmI3YTljN2FmNzNmYWI5ZmFhZDFmNjgzMmE3YzNhY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02PoCMHbjdQUFjGloh3Gg+/Ovc1A AuhNAdl6S0vDg4AFxXJNQa0btMi9Yl/3ZuRGZHNzBkJ8J0Im0kcn9AwDLyP32UcD 96yTB2ts+gYE+Fj7Vac+5htAD3YiKcbVY7tCpfLYLmmyt1uxPmh84HKPpHkU/7uv BC+QETsKLD0zPEy7LKbJss9w6iPb5wozzVVYx6ZNsOI4MvpMa1W2o+eE3JrFEGNZ dGWXSkbfjqIot2ZoFbgANYdcUdHFXlnpnfOiAI7WBn+dSQZo1ym6jFtC8k/1KZ47 3I7v55HeLjh/sQJ1ae5akFhJ9Bwr8LNrmbdIyYqQo6lLF5TN571fK5JA5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFZjaJK3qcevc/q5+q0faDKnw6y4MB8GA1UdIwQY MBaAFFjYfZL4kMLTZZbeyhywsLuLB6EiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMt YmQ3MzYwOWVlNWRhLzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xZGIyMTMtNGFmZC00NDA3LWJhOWMtYmQ3MzYwOWVlNWRh LzEvV05oOWt2aVF3dE5sbHQ3S0hMQ3d1NHNIb1NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlJlZu+f bHk+RSMag8LmS4mXydOYY1nuyUpD7U/hY5/B0zHj4r/MqLj0yuMQT6zryoZxgJAg PzEtmzdwp9V7gIg4xefAYmNzg6LBrXQJjkf/o9OPw7k/2pQDRU4jxfbvNZiUFMtF hQdnwttzxkmhHV5+kyKYYJJrfcmF2Ex6mKMPzBvP/vu2wvQexKzCmKZW0hAqZHQL jvDACw4afnrmDQyIF6u3Mo8xWEtXVa1kFalT2YTIlKo6ltvb4OSbFbGBoI9mJZPy 6+QrBsW4bL07ieqGForGMnwFx9ahPrrV5NXC79zrJvi7xdnKd9OL6E+rFR8u9rpj 56n4TITxEZfmtA== -----END CERTIFICATE-----Generated at Sun Jan 25 20:12:00 2026 by rpki-client