This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft File: wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json) Hash identifier: TkGXk1jwoAHz2J1tQPPtnl87Yna6rq8RCFC125tV/9k= Subject key identifier: 34:07:B8:71:81:45:86:3A:EB:FD:8D:5E:41:22:1B:A6:6A:3F:DA:46 Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB Certificate issuer: /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Certificate serial: 019BF619AF6C8FADA015D785E8DF1E0AE528 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft Manifest number: 17F6 Signing time: Sun 25 Jan 2026 17:00:36 +0000 Manifest this update: Sun 25 Jan 2026 17:00:36 +0000 Manifest next update: Mon 26 Jan 2026 17:00:36 +0000 Files and hashes: 1: D1-yFIpBHV__M0varLi2rfrfUtg.roa (hash: 1Us2UncDA53twzcYN4Fcy2Q+oxQvFCuszTijOukX0HI=) 2: P8JH6OtwnAcRCI_WtbVsia3-A3I.roa (hash: RdsjLEpKWvC5H1qPupN4JWM55Atr5/X0h0u7fxXJgQ8=) 3: _V4_YA4wR5SE7qpfb2hnztoRewk.roa (hash: ELmIzuonMNS4lclnXe8fw37wusoYS3cVfewSiaMR2aM=) 4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: AjbCOiKp+I0FyJLiNvc7ksL8IURXYRpSQxzaRZDQQ0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:af:6c:8f:ad:a0:15:d7:85:e8:df:1e:0a:e5:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb Validity Not Before: Jan 25 17:00:36 2026 GMT Not After : Jan 26 17:00:36 2026 GMT Subject: CN=3407b8718145863aebfd8d5e41221ba66a3fda46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:f2:ac:2a:25:b5:77:39:4c:23:1a:75:0b: 58:92:30:0a:33:ea:49:54:3e:60:eb:85:39:0a:e5: 0a:b0:4c:03:3c:2b:89:7a:41:c9:55:ed:76:ec:26: 05:a9:47:09:ef:d8:fa:8b:f4:90:d3:be:84:7e:8b: 36:17:b0:54:31:9d:f5:e6:88:63:28:77:3c:a2:62: 77:29:e9:e3:6b:28:f6:61:05:04:19:2e:eb:25:e7: 0e:4e:17:24:7d:12:66:43:9b:be:84:95:5c:59:78: e3:28:f3:82:5f:bd:1e:0f:4b:30:6a:64:49:4a:aa: f7:96:ef:b8:a0:43:cb:33:0c:38:58:7b:b9:de:dd: 6b:ed:4d:c3:c9:49:fd:bc:1b:fe:72:1e:6e:42:66: 1d:7e:ea:1f:9a:30:4c:97:a7:09:df:41:4a:27:b0: d0:5a:7a:73:2d:78:3b:b8:b6:61:ef:3d:4e:68:a4: 59:86:7a:cf:d9:27:32:01:08:6c:56:0c:82:d3:b0: 1c:fa:d3:69:17:97:dd:53:d4:f0:c0:02:13:7a:c7: 73:ec:57:99:d3:05:99:dd:db:75:51:f2:68:0e:4a: 6f:bb:a5:a4:01:d8:c4:e2:80:17:23:8f:c1:de:19: 62:f1:ce:bf:34:a1:82:5e:4c:30:65:f9:c9:d4:8c: f2:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:07:B8:71:81:45:86:3A:EB:FD:8D:5E:41:22:1B:A6:6A:3F:DA:46 X509v3 Authority Key Identifier: keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:7f:d0:53:e9:f3:68:8e:50:1d:35:0c:a0:97:84:c7:ee:84: 8a:92:d8:d3:eb:8b:c8:9c:55:fc:eb:69:21:a0:ee:96:b7:53: e2:8f:9e:96:e1:00:50:04:bc:46:8a:43:a8:60:91:5f:d6:ed: 6e:32:15:41:06:1f:2d:f2:11:3b:f1:c9:5f:b7:76:f2:a1:85: 1d:da:10:4d:58:64:cc:56:70:db:fa:5f:55:9e:27:1c:0a:d7: 91:16:0d:ae:9b:bd:53:b3:68:ab:43:ef:b4:38:d3:7d:5d:30: e5:7e:e6:d8:41:fc:b3:32:cf:46:49:e2:c1:9c:fe:a1:2f:56: 55:20:cd:4f:8f:a0:fd:a1:33:f5:af:4e:de:01:06:42:d6:7e: 0d:e6:3d:e3:60:ce:94:a4:2c:a7:c9:da:2c:77:b9:2a:40:91: c5:99:f8:84:b8:77:6f:14:95:ca:d2:a7:0d:a4:76:59:11:3d: 74:d7:3d:56:16:88:9f:0f:18:95:ea:60:fe:1e:4a:73:50:6e: 4e:a8:d4:95:20:fc:d0:ac:82:3b:87:e4:6d:7b:11:5c:b8:0a: 71:75:32:7a:1c:0d:11:c1:8e:73:28:ae:ed:b8:84:41:21:e7: 14:cc:f5:71:3e:74:f8:ba:c8:f3:15:bf:79:4f:b2:8d:6b:0c: 92:25:15:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2Ga9sj62gFdeF6N8eCuUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyNzM1ODY4MmRmM2RmOGJkYzcwMjQ1MDdmOTJlY2ZjNWFl MDk3YmIwHhcNMjYwMTI1MTcwMDM2WhcNMjYwMTI2MTcwMDM2WjAzMTEwLwYDVQQD EygzNDA3Yjg3MTgxNDU4NjNhZWJmZDhkNWU0MTIyMWJhNjZhM2ZkYTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7fyrColtXc5TCMadQtYkjAKM+pJ VD5g64U5CuUKsEwDPCuJekHJVe127CYFqUcJ79j6i/SQ076Efos2F7BUMZ315ohj KHc8omJ3Kenjayj2YQUEGS7rJecOThckfRJmQ5u+hJVcWXjjKPOCX70eD0swamRJ Sqr3lu+4oEPLMww4WHu53t1r7U3DyUn9vBv+ch5uQmYdfuofmjBMl6cJ30FKJ7DQ WnpzLXg7uLZh7z1OaKRZhnrP2ScyAQhsVgyC07Ac+tNpF5fdU9TwwAITesdz7FeZ 0wWZ3dt1UfJoDkpvu6WkAdjE4oAXI4/B3hli8c6/NKGCXkwwZfnJ1IzybwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQHuHGBRYY66/2NXkEiG6ZqP9pGMB8GA1UdIwQY MBaAFMJzWGgt89+L3HAkUH+S7Pxa4Je7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDct ZTg4NDY1YzQ2MTg2LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDctZTg4NDY1YzQ2MTg2 LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3/QU+nz aI5QHTUMoJeEx+6EipLY0+uLyJxV/OtpIaDulrdT4o+eluEAUAS8RopDqGCRX9bt bjIVQQYfLfIRO/HJX7d28qGFHdoQTVhkzFZw2/pfVZ4nHArXkRYNrpu9U7Noq0Pv tDjTfV0w5X7m2EH8szLPRkniwZz+oS9WVSDNT4+g/aEz9a9O3gEGQtZ+DeY942DO lKQsp8naLHe5KkCRxZn4hLh3bxSVytKnDaR2WRE9dNc9VhaInw8Ylepg/h5Kc1Bu TqjUlSD80KyCO4fkbXsRXLgKcXUyehwNEcGOcyiu7biEQSHnFMz1cT50+LrI8xW/ eU+yjWsMkiUVtg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:21:34 2026 by rpki-client