This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft File: _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json) Hash identifier: 7uSeHRjHaSs4s8w/Vof3IwkBIoMKXc6doZujZzT9qR8= Subject key identifier: AB:91:FA:34:D4:B5:FD:3A:CD:54:20:DF:2E:65:67:92:90:5C:B8:E2 Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B Certificate issuer: /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b Certificate serial: 019BF72D9D5A3C2A85715B6213A6CA1A9707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft Manifest number: 0666 Signing time: Sun 25 Jan 2026 22:02:00 +0000 Manifest this update: Sun 25 Jan 2026 22:02:00 +0000 Manifest next update: Mon 26 Jan 2026 22:02:00 +0000 Files and hashes: 1: G85Xi6LQh9YeTjxANf7Y_P92uAU.roa (hash: nfrcxJEREXgjydTZq0oYL3+pGSmL4O7eo8LJD41jFaA=) 2: G8U_Bva-W1pnOboVvmK15NOFVzY.roa (hash: hEqUdyUWCr6mYmi0iyZcvCuKgETeFL/FCbFk4hUk670=) 3: Q_2dI4MAgteIfC8fliTVnwdDpEo.roa (hash: FeIbDHDY5bISxy8cTg5A5vpLXI7Ze/YbhEveF3uIwyw=) 4: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: 53wlzjkAV7mCLqARZMWEAK45s0GYMwEYo8gLBz75XPY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:9d:5a:3c:2a:85:71:5b:62:13:a6:ca:1a:97:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b Validity Not Before: Jan 25 22:02:00 2026 GMT Not After : Jan 26 22:02:00 2026 GMT Subject: CN=ab91fa34d4b5fd3acd5420df2e656792905cb8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:62:80:8c:dd:49:21:57:1b:26:92:6f:59:d1: 6d:17:54:d4:fc:81:c2:82:f2:47:bd:1c:54:68:42: 12:37:86:00:9a:ac:ba:29:4c:84:44:e6:e9:60:9c: f7:73:87:73:c7:58:b6:f6:c1:ca:1f:b4:3b:df:22: 00:96:dc:41:8d:5a:7c:06:5f:30:3e:ec:31:38:10: 57:26:cb:b8:bd:42:e4:4a:68:2a:53:4f:87:be:b8: 12:1a:fe:34:1b:00:9d:66:f1:cc:9f:27:12:d3:f3: 9b:ed:90:1c:77:31:9b:48:d8:fa:ba:8e:4e:94:83: 43:18:bf:f9:63:12:8d:9f:71:bc:78:1e:fe:a4:81: 47:b8:69:88:9e:82:c5:a8:f6:a1:c8:c8:a3:d1:b9: b3:75:f1:f6:0d:ca:bc:a9:b4:0b:38:63:8b:7f:d7: ee:26:d9:0d:8a:82:3b:57:02:8e:81:5d:fc:0c:c9: 9d:1c:60:eb:a0:ca:ef:e0:4d:ad:78:c0:54:98:6f: b0:ba:d2:8c:4c:b0:f3:1a:3c:46:1e:8f:f4:bc:62: 75:b3:77:4c:e8:05:50:37:18:57:b4:ec:00:b8:9e: 47:de:df:b1:c5:04:36:ac:bf:de:06:fb:2e:8e:25: 54:b7:b0:a8:97:c2:cb:40:f3:ac:21:f6:38:68:bb: eb:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:91:FA:34:D4:B5:FD:3A:CD:54:20:DF:2E:65:67:92:90:5C:B8:E2 X509v3 Authority Key Identifier: keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:2e:4a:67:b4:c1:2a:01:c6:52:b2:8f:64:da:6b:f3:ef:05: e1:fc:2b:32:b7:92:01:79:c5:69:ee:b2:c6:98:79:bd:16:0a: 9f:73:36:9a:27:ea:7d:fa:13:83:d3:f2:56:98:68:ad:ce:a9: c7:cd:fb:ec:f3:85:49:77:93:43:54:22:6f:f2:5f:32:ea:18: cb:b4:ae:1a:6a:28:03:c3:0b:ec:7e:e4:1f:74:44:27:a2:ab: 2c:3d:85:d7:f5:7e:8b:55:e8:99:b4:96:e0:01:89:54:4b:bb: 33:24:86:b9:9a:18:8e:e3:bf:e4:af:74:04:ef:ba:df:9c:55: 0a:ce:c4:0d:02:52:ee:63:a3:03:b8:6b:2f:01:58:2b:fc:24: 61:fd:15:6d:eb:cd:fe:e6:db:22:47:c3:99:46:62:5e:27:b3: 35:36:ef:95:1f:72:c8:7e:f5:98:c9:b9:f6:a8:e5:d5:2d:ed: 3d:5b:8e:1c:46:1e:d1:97:d2:69:7b:af:bc:d5:e6:89:a9:2d: 2a:b6:d9:64:e0:2b:28:e4:2c:98:dc:4c:94:3e:e4:b9:cb:1b: cc:0c:1f:03:5f:fb:54:b5:33:cd:e3:83:28:09:ca:e7:c6:0b: 34:72:66:a8:24:a6:8d:12:c8:ef:6f:33:03:8c:29:25:ce:50: 8c:bf:7c:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LZ1aPCqFcVtiE6bKGpcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMGRkZjNmZTU3NzIyMDFhZmY3OGMyNGU5N2Y5NDRjMzgw NWZmNmIwHhcNMjYwMTI1MjIwMjAwWhcNMjYwMTI2MjIwMjAwWjAzMTEwLwYDVQQD EyhhYjkxZmEzNGQ0YjVmZDNhY2Q1NDIwZGYyZTY1Njc5MjkwNWNiOGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWKAjN1JIVcbJpJvWdFtF1TU/IHC gvJHvRxUaEISN4YAmqy6KUyERObpYJz3c4dzx1i29sHKH7Q73yIAltxBjVp8Bl8w PuwxOBBXJsu4vULkSmgqU0+HvrgSGv40GwCdZvHMnycS0/Ob7ZAcdzGbSNj6uo5O lINDGL/5YxKNn3G8eB7+pIFHuGmInoLFqPahyMij0bmzdfH2Dcq8qbQLOGOLf9fu JtkNioI7VwKOgV38DMmdHGDroMrv4E2teMBUmG+wutKMTLDzGjxGHo/0vGJ1s3dM 6AVQNxhXtOwAuJ5H3t+xxQQ2rL/eBvsujiVUt7Col8LLQPOsIfY4aLvrfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKuR+jTUtf06zVQg3y5lZ5KQXLjiMB8GA1UdIwQY MBaAFP8N3z/ldyIBr/eMJOl/lEw4Bf9rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEt MDRkMTI0N2U1ZDBhLzEvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9jNDU1YmQtYjgyNS00OTAxLTgzODEtMDRkMTI0N2U1ZDBh LzEvX3czZlAtVjNJZ0d2OTR3azZYLVVURGdGXzJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUC5KZ7TB KgHGUrKPZNpr8+8F4fwrMreSAXnFae6yxph5vRYKn3M2mifqffoTg9PyVphorc6p x8377POFSXeTQ1Qib/JfMuoYy7SuGmooA8ML7H7kH3REJ6KrLD2F1/V+i1XombSW 4AGJVEu7MySGuZoYjuO/5K90BO+635xVCs7EDQJS7mOjA7hrLwFYK/wkYf0VbevN /ubbIkfDmUZiXiezNTbvlR9yyH71mMm59qjl1S3tPVuOHEYe0ZfSaXuvvNXmiakt KrbZZOArKOQsmNxMlD7kucsbzAwfA1/7VLUzzeODKAnK58YLNHJmqCSmjRLI728z A4wpJc5QjL98JQ== -----END CERTIFICATE-----Generated at Mon Jan 26 01:10:09 2026 by rpki-client