This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft File: wFB0h3942_Sb03ohVJHmmg-LbkM.mft (raw, json) Hash identifier: 9T0dc6HyOduDVLZ6J/r+D8/ZlLVIJx3HnwAxedIGiS8= Subject key identifier: 1E:B8:35:04:17:42:A8:23:D1:EA:7D:8E:C7:B9:1A:CD:42:39:65:64 Authority key identifier: C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43 Certificate issuer: /CN=c05074877f78dbf49bd37a215491e69a0f8b6e43 Certificate serial: 019BF6BF3DCF0E97D4CDD4DB2B272ABC59E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft Manifest number: 0E4A Signing time: Sun 25 Jan 2026 20:01:26 +0000 Manifest this update: Sun 25 Jan 2026 20:01:26 +0000 Manifest next update: Mon 26 Jan 2026 20:01:26 +0000 Files and hashes: 1: Djf7eMxemXeY18cP9FoHdLT6XA8.roa (hash: mDiReFu2hqiNWv0C31jbzdbUciZxBU6AMY/TrXH/b64=) 2: wFB0h3942_Sb03ohVJHmmg-LbkM.crl (hash: WfTrT9IOtTF4bAlcZi+ukItCbnrBrjpyWL9e91QmHOM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:3d:cf:0e:97:d4:cd:d4:db:2b:27:2a:bc:59:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05074877f78dbf49bd37a215491e69a0f8b6e43 Validity Not Before: Jan 25 20:01:26 2026 GMT Not After : Jan 26 20:01:26 2026 GMT Subject: CN=1eb835041742a823d1ea7d8ec7b91acd42396564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:fd:c0:6d:4b:ed:d2:13:ec:96:10:1f:5d:aa: 86:42:08:14:42:8d:ea:52:59:61:9e:31:25:dd:57: 7c:78:f8:66:8c:83:bd:c8:aa:2c:81:07:a2:69:e1: 81:f7:70:22:63:3e:16:69:10:b2:bb:5c:3d:fd:f4: 20:f5:6b:96:ea:12:6e:b2:d7:3f:64:a3:84:e5:8f: fe:5c:06:67:b4:f6:93:c4:de:92:56:6b:cb:16:81: f0:32:0a:e1:36:38:79:80:c5:21:fd:43:f9:67:a2: 78:e2:51:af:3e:24:1f:8f:69:f5:f4:cd:4b:85:2d: df:6a:f9:0d:96:93:74:76:ac:da:b5:03:c9:16:02: e5:fa:82:77:5a:b0:53:c4:88:f8:ef:7a:b3:fe:91: 1f:e3:96:9f:5d:3c:f3:2f:9b:85:0e:48:b3:16:37: 62:df:8a:94:a0:57:7c:9d:85:42:c1:5c:ba:53:5a: de:57:4e:56:82:cb:41:e7:f0:01:cf:26:06:87:0f: 04:4e:c5:5d:8b:a7:a2:20:09:c5:07:c4:e8:78:ba: 83:0e:2d:b1:16:6a:63:4a:af:4e:39:dc:71:21:9c: 44:25:b4:66:63:df:61:6e:a5:d9:65:f4:f4:ac:df: c2:87:ca:24:67:a8:86:07:a7:b1:9c:89:77:c0:16: a0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B8:35:04:17:42:A8:23:D1:EA:7D:8E:C7:B9:1A:CD:42:39:65:64 X509v3 Authority Key Identifier: keyid:C0:50:74:87:7F:78:DB:F4:9B:D3:7A:21:54:91:E6:9A:0F:8B:6E:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFB0h3942_Sb03ohVJHmmg-LbkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/670d1b-5129-4146-be5b-78c04bcedad3/1/wFB0h3942_Sb03ohVJHmmg-LbkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:f5:09:c6:cb:a5:65:bb:93:b2:ae:9a:77:8c:d9:28:9b:41: ec:ac:f6:d7:f9:b6:d2:e9:da:e4:b8:84:c2:b2:20:0b:db:d7: cb:fa:86:0c:87:a1:72:28:58:6e:c0:b1:40:d8:42:d5:e3:d6: f6:ce:3b:97:e4:9e:ce:6f:84:45:ea:3a:0b:0b:d8:f3:32:46: f4:21:3d:11:46:a4:66:ae:6f:d3:42:3b:71:bc:c1:f7:fd:17: 4d:5d:7a:18:cf:d1:1d:9e:48:c1:72:a3:74:d2:58:56:61:ea: 92:ae:f5:cd:1b:95:e0:7b:36:e1:33:8a:18:6a:f2:e4:e9:41: 21:b1:1a:18:5b:52:63:93:8e:6b:c5:c6:62:6f:94:c2:1a:11: ce:6c:ba:84:4e:de:d5:25:5e:67:9e:9e:4a:95:16:6d:f4:ec: 15:f4:a6:81:d2:de:66:56:45:30:75:a5:8b:c7:88:c7:13:91: db:f1:1a:a3:59:e7:6f:37:72:44:a9:0f:0f:73:8d:2c:36:b2: a0:bb:2b:3b:45:08:32:8e:de:99:1b:3b:b9:a7:42:36:93:c2: c5:12:e7:bd:62:38:d8:ad:4a:43:30:47:a2:42:58:fc:d8:b9: 2f:15:82:8d:9c:59:14:bb:82:b3:5a:c5:9e:2a:aa:fa:17:46: 46:eb:7d:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vz3PDpfUzdTbKycqvFniMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwNTA3NDg3N2Y3OGRiZjQ5YmQzN2EyMTU0OTFlNjlhMGY4 YjZlNDMwHhcNMjYwMTI1MjAwMTI2WhcNMjYwMTI2MjAwMTI2WjAzMTEwLwYDVQQD EygxZWI4MzUwNDE3NDJhODIzZDFlYTdkOGVjN2I5MWFjZDQyMzk2NTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv3AbUvt0hPslhAfXaqGQggUQo3q UllhnjEl3Vd8ePhmjIO9yKosgQeiaeGB93AiYz4WaRCyu1w9/fQg9WuW6hJustc/ ZKOE5Y/+XAZntPaTxN6SVmvLFoHwMgrhNjh5gMUh/UP5Z6J44lGvPiQfj2n19M1L hS3favkNlpN0dqzatQPJFgLl+oJ3WrBTxIj473qz/pEf45afXTzzL5uFDkizFjdi 34qUoFd8nYVCwVy6U1reV05WgstB5/ABzyYGhw8ETsVdi6eiIAnFB8ToeLqDDi2x FmpjSq9OOdxxIZxEJbRmY99hbqXZZfT0rN/Ch8okZ6iGB6exnIl3wBagywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB64NQQXQqgj0ep9jse5Gs1COWVkMB8GA1UdIwQY MBaAFMBQdId/eNv0m9N6IVSR5poPi25DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWIt NzhjMDRiY2VkYWQzLzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS82NzBkMWItNTEyOS00MTQ2LWJlNWItNzhjMDRiY2VkYWQz LzEvd0ZCMGgzOTQyX1NiMDNvaFZKSG1tZy1MYmtNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPUJxsul ZbuTsq6ad4zZKJtB7Kz21/m20una5LiEwrIgC9vXy/qGDIehcihYbsCxQNhC1ePW 9s47l+Sezm+EReo6CwvY8zJG9CE9EUakZq5v00I7cbzB9/0XTV16GM/RHZ5IwXKj dNJYVmHqkq71zRuV4Hs24TOKGGry5OlBIbEaGFtSY5OOa8XGYm+UwhoRzmy6hE7e 1SVeZ56eSpUWbfTsFfSmgdLeZlZFMHWli8eIxxOR2/Eao1nnbzdyRKkPD3ONLDay oLsrO0UIMo7emRs7uadCNpPCxRLnvWI42K1KQzBHokJY/Ni5LxWCjZxZFLuCs1rF niqq+hdGRut9Bg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:12:02 2026 by rpki-client