This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft File: WiMq44qSM6t_wbQppQKSIK-nsog.mft (raw, json) Hash identifier: NEWg9Rqhn0Xer5+pFXxO3EBTiix8bNXF78Vgu3zLRWo= Subject key identifier: 48:1E:C7:42:1A:A6:8E:51:99:15:7E:12:43:BC:80:EE:14:44:C2:54 Authority key identifier: 5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88 Certificate issuer: /CN=5a232ae38a9233ab7fc1b429a5029220afa7b288 Certificate serial: 019BF763940664FBC3FD90BDCC042140BA7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft Manifest number: 05BB Signing time: Sun 25 Jan 2026 23:00:56 +0000 Manifest this update: Sun 25 Jan 2026 23:00:56 +0000 Manifest next update: Mon 26 Jan 2026 23:00:56 +0000 Files and hashes: 1: 2bczpro_19qb7b0LFPy3YBJe5yc.roa (hash: BYIjYdDkpZtpiQvhTGAs27NqfGWGj7dlFNZCTuDKM1Y=) 2: VtTvx9UwNgtx1V2Jc0vp8U---dM.roa (hash: bWrag/1FisfayWbQrHXxn5LEsaLQ0liEZ2iTa5BntV8=) 3: WiMq44qSM6t_wbQppQKSIK-nsog.crl (hash: jWD31uMSufq+i9oKl0DgZTxksGYalbzYZDk/9kpT1x0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:63:94:06:64:fb:c3:fd:90:bd:cc:04:21:40:ba:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a232ae38a9233ab7fc1b429a5029220afa7b288 Validity Not Before: Jan 25 23:00:56 2026 GMT Not After : Jan 26 23:00:56 2026 GMT Subject: CN=481ec7421aa68e5199157e1243bc80ee1444c254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f1:80:41:27:8f:e0:91:4b:00:87:4e:d1:aa: 61:a8:77:cd:e4:f3:cf:da:9e:0f:d9:c9:e7:d2:4d: ce:c5:64:18:53:97:fa:4a:a4:37:c8:89:d9:29:06: b5:c5:fd:e6:56:46:1d:2b:a6:33:e1:3c:c6:2b:9e: 2b:51:66:6f:58:35:73:7d:11:07:6c:e3:5a:34:a7: 40:f5:80:70:7b:32:72:b3:d0:17:96:7d:02:2d:7f: 34:16:81:2c:04:df:70:10:c9:29:60:5a:56:cc:9e: 8e:dc:46:0a:70:c3:c4:18:56:d0:1a:b1:c2:5e:9f: c2:9e:72:00:da:4e:36:68:7f:8e:8b:9d:8c:a7:eb: 8c:6f:73:46:be:5b:82:9d:e2:e6:2d:c1:d0:03:63: 60:e1:7b:67:10:8c:08:71:5b:ce:8d:53:30:bb:f9: 01:09:9e:a1:df:f8:f7:9b:5d:c6:6b:94:52:55:56: d4:9d:e7:80:f2:74:06:29:78:ce:cf:05:11:cf:c7: ef:e9:50:e0:1c:e8:05:68:cc:9e:ae:3f:49:01:e7: 0a:22:e3:b1:47:ab:de:93:f4:f9:95:df:44:9d:c7: 1c:ab:af:ca:87:2d:84:66:fe:61:2e:76:e4:31:cc: 4c:d5:ca:8f:1d:04:35:ae:69:19:4b:a8:75:22:c2: 58:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:1E:C7:42:1A:A6:8E:51:99:15:7E:12:43:BC:80:EE:14:44:C2:54 X509v3 Authority Key Identifier: keyid:5A:23:2A:E3:8A:92:33:AB:7F:C1:B4:29:A5:02:92:20:AF:A7:B2:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WiMq44qSM6t_wbQppQKSIK-nsog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6aef9e-fe4d-43e7-a1cb-10a485c0b0f2/1/WiMq44qSM6t_wbQppQKSIK-nsog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1c:e5:4b:2b:61:cd:ee:3d:e0:5e:c9:b3:c0:8a:4c:1e:0d: 59:48:b8:84:dc:c6:b1:f8:01:d2:5f:8e:aa:ef:12:4e:18:e5: c0:33:a9:6a:e9:0a:0a:2b:11:f9:bd:9f:28:25:82:37:3d:df: ef:83:f9:25:e3:df:0b:13:c2:55:58:91:2e:c1:69:98:c2:a2: c7:ef:b2:00:29:77:47:5a:5a:22:53:1f:62:84:25:21:b5:fc: 86:1a:9f:49:f1:37:aa:ed:b7:a4:fd:8b:5b:c5:a7:12:79:a8: 05:e9:08:cc:d4:df:70:14:c1:f2:c7:65:f6:b1:b6:4e:46:45: 50:19:2c:d9:ff:e3:fc:4c:3f:73:2e:93:22:8f:e0:cb:2f:63: f9:d0:ad:28:fd:74:b0:d1:06:ea:5a:83:a4:fa:8b:cc:57:f5: 86:0f:72:67:38:0e:01:30:e7:43:34:0c:a9:7f:70:94:b4:e5: 5a:29:7f:11:64:34:76:34:6a:5b:d1:0d:9c:3d:cf:be:33:db: c1:65:c6:26:b1:42:38:cb:3f:71:58:32:70:e0:07:90:7c:83: 29:fe:a0:83:22:e0:57:21:59:47:47:8a:be:17:1f:3a:fd:4d: 22:73:cf:5c:33:08:de:21:1f:e7:12:c0:b6:72:b2:cb:f1:72: 5d:84:81:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3Y5QGZPvD/ZC9zAQhQLp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMjMyYWUzOGE5MjMzYWI3ZmMxYjQyOWE1MDI5MjIwYWZh N2IyODgwHhcNMjYwMTI1MjMwMDU2WhcNMjYwMTI2MjMwMDU2WjAzMTEwLwYDVQQD Eyg0ODFlYzc0MjFhYTY4ZTUxOTkxNTdlMTI0M2JjODBlZTE0NDRjMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/GAQSeP4JFLAIdO0aphqHfN5PPP 2p4P2cnn0k3OxWQYU5f6SqQ3yInZKQa1xf3mVkYdK6Yz4TzGK54rUWZvWDVzfREH bONaNKdA9YBwezJys9AXln0CLX80FoEsBN9wEMkpYFpWzJ6O3EYKcMPEGFbQGrHC Xp/CnnIA2k42aH+Oi52Mp+uMb3NGvluCneLmLcHQA2Ng4XtnEIwIcVvOjVMwu/kB CZ6h3/j3m13Ga5RSVVbUneeA8nQGKXjOzwURz8fv6VDgHOgFaMyerj9JAecKIuOx R6vek/T5ld9Encccq6/Khy2EZv5hLnbkMcxM1cqPHQQ1rmkZS6h1IsJYDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEgex0Iapo5RmRV+EkO8gO4URMJUMB8GA1UdIwQY MBaAFFojKuOKkjOrf8G0KaUCkiCvp7KIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2It MTBhNDg1YzBiMGYyLzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82YWVmOWUtZmU0ZC00M2U3LWExY2ItMTBhNDg1YzBiMGYy LzEvV2lNcTQ0cVNNNnRfd2JRcHBRS1NJSy1uc29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANBzlSyth ze494F7Js8CKTB4NWUi4hNzGsfgB0l+Oqu8SThjlwDOpaukKCisR+b2fKCWCNz3f 74P5JePfCxPCVViRLsFpmMKix++yACl3R1paIlMfYoQlIbX8hhqfSfE3qu23pP2L W8WnEnmoBekIzNTfcBTB8sdl9rG2TkZFUBks2f/j/Ew/cy6TIo/gyy9j+dCtKP10 sNEG6lqDpPqLzFf1hg9yZzgOATDnQzQMqX9wlLTlWil/EWQ0djRqW9ENnD3PvjPb wWXGJrFCOMs/cVgycOAHkHyDKf6ggyLgVyFZR0eKvhcfOv1NInPPXDMI3iEf5xLA tnKyy/FyXYSBHw== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:09 2026 by rpki-client