This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft File: W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft (raw, json) Hash identifier: RfoWIFOLnEtn+azXx8Hm8NDkmbcXmb49qmmMVTNK4vE= Subject key identifier: E8:FB:C9:BF:AE:AF:92:F1:46:EB:8D:D0:49:0B:22:80:0B:C1:18:31 Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a Certificate serial: 019BF5AC2E4D96D210BF7D31786B24A2E2BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft Manifest number: 17E7 Signing time: Sun 25 Jan 2026 15:01:00 +0000 Manifest this update: Sun 25 Jan 2026 15:01:00 +0000 Manifest next update: Mon 26 Jan 2026 15:01:00 +0000 Files and hashes: 1: CMyPiezTn5D8-YXplmxvsmXX2bc.roa (hash: ookrXpU00j/ibJDIb1qnIotSBgooiA09iz417PKBh/s=) 2: W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl (hash: D2UHZUyXLOqyp5EPv7spmWbqEedBxBW5pA86u8GkG/Y=) 3: Z7_grVtAJU7hfwbq-pCXGjagV74.roa (hash: YxhFU3h3k0uDJ916nZ5V7OvtkvXv5Nzb7/nDDuA04NE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:2e:4d:96:d2:10:bf:7d:31:78:6b:24:a2:e2:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a Validity Not Before: Jan 25 15:01:00 2026 GMT Not After : Jan 26 15:01:00 2026 GMT Subject: CN=e8fbc9bfaeaf92f146eb8dd0490b22800bc11831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:cd:e8:a6:d7:56:41:4e:6f:dd:5a:47:46:3b: f1:08:7c:f5:e5:f7:cf:c5:49:00:43:ef:4b:14:bc: 23:26:a2:87:39:af:6a:44:f9:69:26:07:8c:f5:02: dc:3d:3d:b5:2b:75:c8:0f:49:40:c6:70:99:a1:0b: d0:84:72:9b:1b:10:b2:ca:c2:cc:55:94:ba:77:cc: a1:c0:86:7b:3a:ae:4d:d8:16:3d:12:2d:72:a7:d6: 1b:7b:9e:a6:8a:85:16:ef:f2:9c:27:ff:e7:08:38: d9:ac:cf:1c:9b:2f:ad:c0:c3:84:d0:2a:03:a6:df: 12:15:24:f9:3a:f2:be:2b:74:2c:8b:c5:65:a9:51: c6:c3:5f:21:1b:89:39:d4:e8:de:f1:7f:52:4f:85: 34:7d:30:ee:3c:4b:3f:bb:3e:01:94:f1:6b:8e:5f: 70:a0:c4:4a:9a:fd:9c:4c:47:d0:ec:fa:64:2b:9f: 6f:7a:fd:43:24:64:2c:3b:13:fd:89:ae:8b:7d:30: d3:f1:25:c1:46:70:28:32:a1:d8:5b:bd:ae:e1:a0: 43:bb:3f:00:d0:31:b7:c6:76:8f:e9:9a:aa:c4:34: 41:82:89:84:11:ed:4e:03:80:cf:a6:c2:bc:94:14: 17:4f:79:bd:7d:1f:12:66:5f:df:96:61:2d:cf:5d: a5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FB:C9:BF:AE:AF:92:F1:46:EB:8D:D0:49:0B:22:80:0B:C1:18:31 X509v3 Authority Key Identifier: keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:da:a0:af:be:4d:8a:dc:92:54:b8:f5:40:73:43:01:6c:ee: a8:6e:aa:43:46:7b:05:1a:8f:d9:b8:af:be:41:22:2f:ac:02: 52:f2:47:45:44:a9:9c:b5:8d:bb:89:92:95:a1:a4:71:7a:c1: 6e:a3:67:6e:70:d0:04:49:b0:aa:47:f5:8f:a5:5c:06:62:90: fb:c4:cf:31:09:9e:e8:dc:f3:23:70:74:d4:22:f1:58:b0:78: 3e:e5:ca:74:5a:32:4b:3a:7a:9b:c2:99:d3:ec:49:c5:54:01: 63:91:91:6a:2b:07:17:fd:f9:5d:09:c1:81:3c:eb:d9:8c:5b: 5d:3f:66:85:17:56:cd:b3:7d:78:aa:d4:03:7a:f2:8f:fa:ac: 7b:d4:79:04:72:cf:4d:af:e7:69:69:ca:de:77:6d:e3:c5:6a: ed:b7:cd:ae:9f:62:c3:a7:6a:b4:61:00:38:86:b9:51:87:92: 32:3a:53:87:80:a5:f4:59:08:e2:ed:7a:33:e8:88:8f:77:a1: d4:43:2b:5c:44:95:ad:a4:c2:03:a4:38:02:5e:7a:4f:61:e1: bc:f1:b1:48:5b:03:b4:91:11:97:1e:81:a0:30:ed:2a:6c:c0: 18:76:5f:86:1a:35:4a:d0:44:5d:a1:b0:da:63:4b:33:59:e6: a3:97:54:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rC5NltIQv30xeGskouK+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViZDhkNzJiMWNiZmM2N2MzNzlhZDlhOTJjNjZmYWM2Yzhk MzIzM2EwHhcNMjYwMTI1MTUwMTAwWhcNMjYwMTI2MTUwMTAwWjAzMTEwLwYDVQQD EyhlOGZiYzliZmFlYWY5MmYxNDZlYjhkZDA0OTBiMjI4MDBiYzExODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt83optdWQU5v3VpHRjvxCHz15ffP xUkAQ+9LFLwjJqKHOa9qRPlpJgeM9QLcPT21K3XID0lAxnCZoQvQhHKbGxCyysLM VZS6d8yhwIZ7Oq5N2BY9Ei1yp9Ybe56mioUW7/KcJ//nCDjZrM8cmy+twMOE0CoD pt8SFST5OvK+K3Qsi8VlqVHGw18hG4k51Oje8X9ST4U0fTDuPEs/uz4BlPFrjl9w oMRKmv2cTEfQ7PpkK59vev1DJGQsOxP9ia6LfTDT8SXBRnAoMqHYW72u4aBDuz8A 0DG3xnaP6ZqqxDRBgomEEe1OA4DPpsK8lBQXT3m9fR8SZl/flmEtz12lnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOj7yb+ur5LxRuuN0EkLIoALwRgxMB8GA1UdIwQY MBaAFFvY1yscv8Z8N5rZqSxm+sbI0yM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgt ODkzNTllNzgzMjI0LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgtODkzNTllNzgzMjI0 LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9qgr75N itySVLj1QHNDAWzuqG6qQ0Z7BRqP2bivvkEiL6wCUvJHRUSpnLWNu4mSlaGkcXrB bqNnbnDQBEmwqkf1j6VcBmKQ+8TPMQme6NzzI3B01CLxWLB4PuXKdFoySzp6m8KZ 0+xJxVQBY5GRaisHF/35XQnBgTzr2YxbXT9mhRdWzbN9eKrUA3ryj/qse9R5BHLP Ta/naWnK3ndt48Vq7bfNrp9iw6dqtGEAOIa5UYeSMjpTh4Cl9FkI4u16M+iIj3eh 1EMrXESVraTCA6Q4Al56T2HhvPGxSFsDtJERlx6BoDDtKmzAGHZfhho1StBEXaGw 2mNLM1nmo5dU6Q== -----END CERTIFICATE-----Generated at Mon Jan 26 00:23:27 2026 by rpki-client