This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft File: WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft (raw, json) Hash identifier: adU5b98ACkklmmRP+po9/hfbuoiQGmYssh91JcCU7gk= Subject key identifier: AA:35:73:98:81:7B:74:44:57:0A:C0:6B:50:7D:E4:93:1E:47:CF:14 Authority key identifier: 5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B Certificate issuer: /CN=5ab1996515884434b87882b5b972a6e529ffb00b Certificate serial: 019BF83FCC1D6ADFCD9DF840C00A6447C32C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft Manifest number: 1537 Signing time: Mon 26 Jan 2026 03:01:28 +0000 Manifest this update: Mon 26 Jan 2026 03:01:28 +0000 Manifest next update: Tue 27 Jan 2026 03:01:28 +0000 Files and hashes: 1: WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl (hash: K+0ASmcbm5Mzm/fgM6gVjzCR2ZoPftZ2WKdb7ldpVqI=) 2: gsMc5yTQ5yB7hNQuR1OBuIkGkVE.roa (hash: fl4OaMl7eU6Alv7KmsWSIeUrTO2NMP6tD6HDIBxbcMQ=) 3: n6aTPqlGJJGfkw2ndfd9kElHIUE.roa (hash: eTwfqmOJCDHZnlmX4vz/z/iYHX8NIjRLHjRN1ZBjk40=) 4: sB0mmb0YWSbMF3E1k6_T_zsN2sM.roa (hash: YB4mz8FheQ84EqAJDNB1pXt2M2JuLI6viCvso+bTBuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:cc:1d:6a:df:cd:9d:f8:40:c0:0a:64:47:c3:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ab1996515884434b87882b5b972a6e529ffb00b Validity Not Before: Jan 26 03:01:28 2026 GMT Not After : Jan 27 03:01:28 2026 GMT Subject: CN=aa357398817b7444570ac06b507de4931e47cf14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:1d:36:94:3f:c6:a5:3e:a2:2d:c2:0a:69:02: 87:7f:87:a1:0c:9b:82:1b:c6:f5:3a:d8:3a:10:8e: d9:cf:79:71:2c:3e:09:da:1e:51:40:36:11:28:c2: 33:33:28:29:1a:b0:8e:13:c1:5c:1a:04:54:42:3c: b7:51:8c:a1:c1:45:06:38:0a:a7:2d:4b:04:22:33: 14:fa:b5:f0:a2:37:10:45:d2:a5:d9:a7:3c:95:b0: 1f:51:80:2b:21:22:5b:d8:e5:90:19:f9:c8:2d:3c: b3:8a:64:9a:5f:24:c9:c5:d0:79:3f:27:d2:5b:4e: 4e:70:52:b4:b8:df:2e:f8:2a:d0:14:14:db:ad:59: 67:0d:62:56:5c:8a:8f:f4:57:d2:ad:8e:1b:7c:37: 61:24:a3:88:db:9b:57:a0:92:80:69:17:40:a2:4d: 5e:0a:4f:73:c8:a7:9a:f0:c3:0c:4e:0a:38:e9:86: 13:a0:87:a4:65:fb:0b:20:a0:38:83:f9:2e:a3:f4: fd:8f:f7:1f:de:65:bd:c4:ef:93:48:6b:5f:25:65: dd:7a:4c:fb:6f:b9:cc:05:59:4c:9e:0e:e5:30:64: c0:1d:51:90:a3:2d:d8:05:38:ce:00:28:dc:3e:23: a3:93:2f:5f:dc:d6:69:59:56:b3:f0:03:e1:8a:d3: a4:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:35:73:98:81:7B:74:44:57:0A:C0:6B:50:7D:E4:93:1E:47:CF:14 X509v3 Authority Key Identifier: keyid:5A:B1:99:65:15:88:44:34:B8:78:82:B5:B9:72:A6:E5:29:FF:B0:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/94c919-e6ea-4e18-af12-ed5b01d2528c/1/WrGZZRWIRDS4eIK1uXKm5Sn_sAs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:cf:1d:00:1f:05:69:e0:ab:d3:72:e3:10:76:11:73:8a:0c: 84:6f:4d:d9:3e:80:bf:0a:05:6d:01:24:52:12:e4:5b:93:ee: e6:33:e2:9f:61:97:00:e5:f2:31:e7:05:75:3f:e0:f9:3a:f1: f8:29:b7:ae:26:5a:56:27:be:20:3b:03:57:7a:a2:d8:05:c5: a8:37:5d:b4:8c:48:77:bb:4a:26:80:04:c9:83:28:f6:d3:7f: 6a:c1:dc:b1:76:60:05:26:92:4b:b3:01:76:29:c9:c9:a4:27: 43:f9:dc:8c:9a:33:9e:78:22:1e:57:36:8b:af:6d:12:da:d5: b0:51:54:89:31:09:ac:86:ff:f4:54:db:8e:8f:82:0e:d0:91: 00:c9:7d:85:8d:1b:c1:6b:93:bf:75:81:65:60:6a:22:83:88: 1b:a1:24:24:40:05:03:c2:37:e0:94:69:4a:4e:46:38:a8:60: 1d:ea:7e:41:13:7f:28:3d:41:0a:6c:0e:75:ea:a9:e7:1e:e0: d9:9e:a0:1b:a5:ef:82:62:b7:69:b3:93:a0:3d:82:17:54:35: c0:6b:91:c1:5e:4d:91:4c:14:e7:8a:0a:4d:56:dc:ae:89:a0: 42:d0:70:ff:0e:34:27:dd:4b:f3:cb:0b:ae:86:99:e5:17:e0: 9d:d1:f5:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P8wdat/NnfhAwApkR8MsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYjE5OTY1MTU4ODQ0MzRiODc4ODJiNWI5NzJhNmU1Mjlm ZmIwMGIwHhcNMjYwMTI2MDMwMTI4WhcNMjYwMTI3MDMwMTI4WjAzMTEwLwYDVQQD EyhhYTM1NzM5ODgxN2I3NDQ0NTcwYWMwNmI1MDdkZTQ5MzFlNDdjZjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1B02lD/GpT6iLcIKaQKHf4ehDJuC G8b1Otg6EI7Zz3lxLD4J2h5RQDYRKMIzMygpGrCOE8FcGgRUQjy3UYyhwUUGOAqn LUsEIjMU+rXwojcQRdKl2ac8lbAfUYArISJb2OWQGfnILTyzimSaXyTJxdB5PyfS W05OcFK0uN8u+CrQFBTbrVlnDWJWXIqP9FfSrY4bfDdhJKOI25tXoJKAaRdAok1e Ck9zyKea8MMMTgo46YYToIekZfsLIKA4g/kuo/T9j/cf3mW9xO+TSGtfJWXdekz7 b7nMBVlMng7lMGTAHVGQoy3YBTjOACjcPiOjky9f3NZpWVaz8APhitOkPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKo1c5iBe3REVwrAa1B95JMeR88UMB8GA1UdIwQY MBaAFFqxmWUViEQ0uHiCtblypuUp/7ALMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3JHWlpSV0lSRFM0ZUlLMXVYS201U25fc0FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85NGM5MTktZTZlYS00ZTE4LWFmMTIt ZWQ1YjAxZDI1MjhjLzEvV3JHWlpSV0lSRFM0ZUlLMXVYS201U25fc0FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS85NGM5MTktZTZlYS00ZTE4LWFmMTItZWQ1YjAxZDI1Mjhj LzEvV3JHWlpSV0lSRFM0ZUlLMXVYS201U25fc0FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIM8dAB8F aeCr03LjEHYRc4oMhG9N2T6AvwoFbQEkUhLkW5Pu5jPin2GXAOXyMecFdT/g+Trx +Cm3riZaVie+IDsDV3qi2AXFqDddtIxId7tKJoAEyYMo9tN/asHcsXZgBSaSS7MB dinJyaQnQ/ncjJoznngiHlc2i69tEtrVsFFUiTEJrIb/9FTbjo+CDtCRAMl9hY0b wWuTv3WBZWBqIoOIG6EkJEAFA8I34JRpSk5GOKhgHep+QRN/KD1BCmwOdeqp5x7g 2Z6gG6XvgmK3abOToD2CF1Q1wGuRwV5NkUwU54oKTVbcromgQtBw/w40J91L88sL roaZ5RfgndH16Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:44:52 2026 by rpki-client