This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft File: WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft (raw, json) Hash identifier: LixPovnSpUlf+nCRgxrfsG6OfqpO1oK6FQbLPdckRLU= Subject key identifier: 43:36:45:32:30:F5:1B:8A:AC:00:D6:87:42:32:E0:8E:94:C0:28:01 Authority key identifier: 59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C Certificate issuer: /CN=597a01de87e011803f890ae17749020f995f140c Certificate serial: 019BF50721D17B9F7AC7CF9B6E9A01124FBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft Manifest number: 1543 Signing time: Sun 25 Jan 2026 12:00:43 +0000 Manifest this update: Sun 25 Jan 2026 12:00:43 +0000 Manifest next update: Mon 26 Jan 2026 12:00:43 +0000 Files and hashes: 1: 01R0I9DHDPHcmxrcTn54aUYrxU4.roa (hash: LZW1SFZial6vNqkBHwqDupXnYLh58eQuRcWzvrTL1pI=) 2: 1RuzsOoiPTgqsuSzzAU9YdpD_xE.roa (hash: Fsh9osUtIPyPkM6syYXVCCskaMH4p0nvyx/Ce7UJowo=) 3: URu6RbbpNeggkq99HoBQq0K-CGw.roa (hash: SglHd7je2yZY5MNS1/0/uqc+KTjzW8LFZ4Gz7SHINKQ=) 4: UkVdKWIJtxN1ZPO561wg1yvlmnU.roa (hash: T1UGvaY+sPgOyfHIoNQmJTNfshFbXNmoAxXGY7h2ENY=) 5: WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl (hash: WDOHdjSir7Gm3cduSU5E6sUOOKITjMSHboxAmOJmNm4=) 6: bjhvb0BbgpYztttOjwclzlXFPK0.roa (hash: vvxA9AxL6k1mLc2qjx+t+3GOkd26vCFzAe2CCZNqNvw=) 7: sj-ab-RcHql4I59TCTsyMkUD6vg.roa (hash: VE0oA0NLUA2NKVotc1jXBr68T3tf7XY/p7hOR23C2ks=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:21:d1:7b:9f:7a:c7:cf:9b:6e:9a:01:12:4f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597a01de87e011803f890ae17749020f995f140c Validity Not Before: Jan 25 12:00:43 2026 GMT Not After : Jan 26 12:00:43 2026 GMT Subject: CN=4336453230f51b8aac00d6874232e08e94c02801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:24:3c:0b:57:6b:17:b5:17:ee:64:56:61:2e: e1:ea:d5:64:18:fe:b6:99:10:0d:24:85:a6:6a:77: ed:e8:1f:85:96:05:a1:e6:fb:31:7a:18:de:6e:d8: 3f:d4:1f:9e:51:c6:ee:fa:7b:74:cf:19:3f:0f:22: 02:df:3e:00:b9:db:27:eb:52:c8:b7:ce:67:3e:30: 57:c2:5d:d9:e5:9c:3f:5f:7f:ae:0b:18:55:63:79: 43:0b:44:2d:d4:ee:41:fc:bf:9c:07:8b:53:97:bb: dd:f8:4e:95:5f:23:c6:a4:13:a4:d4:f7:a6:e1:1c: 4f:cd:1e:05:4c:a4:20:32:86:f5:00:fc:68:17:92: fd:19:37:bf:59:ba:53:22:8c:e5:b7:dd:9d:d5:dc: 25:ad:4d:ac:80:2a:be:31:f8:d9:35:e1:d9:63:06: b9:7c:95:bd:28:68:83:77:bd:c8:5e:e6:34:a2:ab: 8d:37:ca:51:d3:97:53:6d:1a:21:cc:6a:aa:c7:73: 86:d2:b1:ee:41:1d:66:61:90:eb:00:47:f2:8a:80: 33:61:3f:a2:45:ba:74:74:ee:c7:59:54:d1:98:46: e7:1c:e2:3e:6f:3e:9d:eb:32:74:2e:84:36:04:86: e3:59:c0:fd:99:b8:a0:e1:c5:57:d5:59:fe:74:42: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:36:45:32:30:F5:1B:8A:AC:00:D6:87:42:32:E0:8E:94:C0:28:01 X509v3 Authority Key Identifier: keyid:59:7A:01:DE:87:E0:11:80:3F:89:0A:E1:77:49:02:0F:99:5F:14:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXoB3ofgEYA_iQrhd0kCD5lfFAw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/23ed9a-1ca5-45ea-9b8c-73533de099c3/1/WXoB3ofgEYA_iQrhd0kCD5lfFAw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:1a:d0:2a:b2:2e:dd:d8:29:e1:15:42:eb:c5:ab:e4:f9:4a: a8:34:88:08:39:eb:cf:c8:2a:bf:90:49:b0:96:ac:b3:c5:c8: 5a:34:27:ac:76:44:ac:b6:e1:a2:a2:53:48:af:c1:8c:36:47: 16:c8:5c:ac:8e:dc:e6:25:f8:86:03:f1:7b:89:74:cd:34:6a: 26:34:99:f4:4b:37:0e:38:ee:5d:eb:a5:93:b3:5e:06:85:7f: 7a:17:d3:f9:41:02:ca:c9:b3:d2:4b:3d:a8:de:5d:91:26:71: 6d:a1:f2:b2:bc:2a:e5:43:db:d1:38:27:d2:06:cb:7a:ad:9e: 81:79:0b:b4:2b:b3:f9:9e:df:af:3a:2f:e5:b7:ae:0d:32:6d: 4e:97:7c:f5:26:e3:72:a0:7f:34:35:52:07:0b:8c:71:91:5d: a3:06:df:d6:40:30:d9:17:e2:30:1b:52:32:ff:2a:c2:7f:a9: 56:da:d4:d8:01:8e:19:6f:d0:14:1f:36:59:3e:a9:30:a8:fe: a3:90:53:05:67:a5:f6:0b:a1:38:ed:22:dc:d5:86:2a:e8:8e: 85:7c:e6:b7:05:7e:38:46:33:05:68:b6:3c:11:94:ea:a8:2d: 87:c9:b3:bc:61:b8:9c:20:44:23:f7:0a:02:d1:ea:fd:df:5f: fb:8b:08:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1ByHRe596x8+bbpoBEk+/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5N2EwMWRlODdlMDExODAzZjg5MGFlMTc3NDkwMjBmOTk1 ZjE0MGMwHhcNMjYwMTI1MTIwMDQzWhcNMjYwMTI2MTIwMDQzWjAzMTEwLwYDVQQD Eyg0MzM2NDUzMjMwZjUxYjhhYWMwMGQ2ODc0MjMyZTA4ZTk0YzAyODAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyQ8C1drF7UX7mRWYS7h6tVkGP62 mRANJIWmanft6B+FlgWh5vsxehjebtg/1B+eUcbu+nt0zxk/DyIC3z4Audsn61LI t85nPjBXwl3Z5Zw/X3+uCxhVY3lDC0Qt1O5B/L+cB4tTl7vd+E6VXyPGpBOk1Pem 4RxPzR4FTKQgMob1APxoF5L9GTe/WbpTIozlt92d1dwlrU2sgCq+MfjZNeHZYwa5 fJW9KGiDd73IXuY0oquNN8pR05dTbRohzGqqx3OG0rHuQR1mYZDrAEfyioAzYT+i Rbp0dO7HWVTRmEbnHOI+bz6d6zJ0LoQ2BIbjWcD9mbig4cVX1Vn+dELGFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEM2RTIw9RuKrADWh0Iy4I6UwCgBMB8GA1UdIwQY MBaAFFl6Ad6H4BGAP4kK4XdJAg+ZXxQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMt NzM1MzNkZTA5OWMzLzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi8yM2VkOWEtMWNhNS00NWVhLTliOGMtNzM1MzNkZTA5OWMz LzEvV1hvQjNvZmdFWUFfaVFyaGQwa0NENWxmRkF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdhrQKrIu 3dgp4RVC68Wr5PlKqDSICDnrz8gqv5BJsJass8XIWjQnrHZErLbhoqJTSK/BjDZH FshcrI7c5iX4hgPxe4l0zTRqJjSZ9Es3DjjuXeulk7NeBoV/ehfT+UECysmz0ks9 qN5dkSZxbaHysrwq5UPb0Tgn0gbLeq2egXkLtCuz+Z7frzov5beuDTJtTpd89Sbj cqB/NDVSBwuMcZFdowbf1kAw2RfiMBtSMv8qwn+pVtrU2AGOGW/QFB82WT6pMKj+ o5BTBWel9guhOO0i3NWGKuiOhXzmtwV+OEYzBWi2PBGU6qgth8mzvGG4nCBEI/cK AtHq/d9f+4sIVA== -----END CERTIFICATE-----Generated at Sun Jan 25 16:45:26 2026 by rpki-client