This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft File: w70m_iKV5GK-JnhTPvpTHiO38QI.mft (raw, json) Hash identifier: 7TuI+zUGRtyH006XNjBtLln0PQFuBL+1X7tGTKMMjfE= Subject key identifier: 03:46:66:85:1A:34:A1:F0:4E:9A:1C:4A:D4:69:39:E9:F2:23:19:B8 Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02 Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102 Certificate serial: 019BF499C9093C9742909142A724051FB86A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft Manifest number: 17E9 Signing time: Sun 25 Jan 2026 10:01:17 +0000 Manifest this update: Sun 25 Jan 2026 10:01:17 +0000 Manifest next update: Mon 26 Jan 2026 10:01:17 +0000 Files and hashes: 1: BpitMkNTOG0_ouRmz2bpaYkKoBY.roa (hash: YpWL3AH39Erg/3Vj3WOA5eh5wrqjLGB0H0SvsITlAwA=) 2: qKqi_rXQXOvxeFffB2pfRZ_x1CM.roa (hash: XYn4rn0UvMRvensr1fkhAzYC4HLrGdOg2tErj1J5QmQ=) 3: w70m_iKV5GK-JnhTPvpTHiO38QI.crl (hash: /04OdrH8QtHUOgoY5uPw8HGm0+tiUoujCIjV3sIMdtM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:99:c9:09:3c:97:42:90:91:42:a7:24:05:1f:b8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102 Validity Not Before: Jan 25 10:01:17 2026 GMT Not After : Jan 26 10:01:17 2026 GMT Subject: CN=034666851a34a1f04e9a1c4ad46939e9f22319b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:48:af:92:9d:99:95:d5:05:90:55:b3:cf:13: d6:7d:ca:84:47:87:34:67:f7:c7:5e:8c:33:31:c3: 46:5c:4a:53:4d:92:e6:1a:ff:89:2a:a3:a9:4a:cb: 05:e4:d9:c5:e1:fc:94:f9:96:9d:e5:f8:13:41:7e: b4:93:dd:f9:b3:55:c2:69:5b:e8:ab:e3:e2:0d:c2: d9:d9:78:ed:69:27:1a:cd:b7:7b:e9:ce:0b:3c:bf: 2c:7f:de:7a:4f:46:f3:3a:eb:e7:3d:d2:af:9a:dd: 2f:af:51:12:9c:4f:46:70:3e:da:b4:7b:5b:be:8d: cf:e6:69:1a:3e:eb:2f:cf:56:ec:59:11:5f:52:f5: 34:86:81:26:79:a5:2a:3b:75:8f:18:7b:53:20:af: 82:08:71:49:66:8b:27:f3:2c:a1:c6:56:d1:ca:da: aa:28:fb:63:b1:5b:0e:d0:7b:24:56:db:54:25:e9: f1:22:ab:13:6b:ab:4c:ab:f9:68:bc:e0:56:54:2f: 7f:6b:05:13:db:fd:89:e2:c5:ba:38:d4:f3:90:c1: bd:48:41:e3:4f:df:19:97:d4:ae:ce:dc:01:23:50: c7:17:fa:09:af:0b:76:78:ae:b0:4b:20:91:69:d9: 67:e2:62:17:ba:84:6c:8c:6e:d6:2e:95:ff:8e:4a: f6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:46:66:85:1A:34:A1:F0:4E:9A:1C:4A:D4:69:39:E9:F2:23:19:B8 X509v3 Authority Key Identifier: keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ef:2d:4b:fd:f1:cb:05:cb:ab:c9:1c:65:a8:2b:60:ba:62: a3:27:cd:a4:92:59:b0:44:74:56:8f:bf:ff:16:4e:90:0c:a1: bf:22:ab:67:dd:67:2f:01:a3:74:04:12:70:6a:0e:cd:7d:7c: 2e:b2:50:97:c0:71:e7:12:5b:27:d4:db:09:50:c8:dd:c3:ea: 5e:81:e5:94:63:1e:21:c9:49:21:b9:a2:f0:12:f5:c1:f4:1d: 10:42:2f:c4:b5:43:0e:97:24:19:9e:58:64:fc:44:51:3d:53: f4:b8:de:3b:cf:d3:a7:77:5e:39:b2:9a:3a:63:5c:71:30:a7: fe:05:93:5a:c4:6a:1b:68:ab:7b:6c:e4:b7:2e:90:0f:94:75: 9e:90:4a:26:65:1c:1d:a6:ac:d3:93:58:ba:d3:7a:c6:b3:33: 8c:b6:45:49:7e:33:99:23:e6:08:e7:bf:03:25:d8:9e:85:8b: a2:05:5a:1e:9f:0a:bc:08:ed:d1:d4:37:e2:56:7d:23:da:02: e3:6e:e2:f2:69:d6:e9:de:8f:11:31:f7:d7:8c:37:42:78:8f: 9c:bf:68:21:bf:6d:f1:8e:8d:18:02:76:5b:cf:70:18:c6:c3: db:2c:b1:a3:92:8b:99:4f:22:e9:75:9b:a9:96:5e:72:a6:39: 44:ff:b6:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0mckJPJdCkJFCpyQFH7hqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzYmQyNmZlMjI5NWU0NjJiZTI2Nzg1MzNlZmE1MzFlMjNi N2YxMDIwHhcNMjYwMTI1MTAwMTE3WhcNMjYwMTI2MTAwMTE3WjAzMTEwLwYDVQQD EygwMzQ2NjY4NTFhMzRhMWYwNGU5YTFjNGFkNDY5MzllOWYyMjMxOWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkivkp2ZldUFkFWzzxPWfcqER4c0 Z/fHXowzMcNGXEpTTZLmGv+JKqOpSssF5NnF4fyU+Zad5fgTQX60k935s1XCaVvo q+PiDcLZ2XjtaScazbd76c4LPL8sf956T0bzOuvnPdKvmt0vr1ESnE9GcD7atHtb vo3P5mkaPusvz1bsWRFfUvU0hoEmeaUqO3WPGHtTIK+CCHFJZosn8yyhxlbRytqq KPtjsVsO0HskVttUJenxIqsTa6tMq/lovOBWVC9/awUT2/2J4sW6ONTzkMG9SEHj T98Zl9SuztwBI1DHF/oJrwt2eK6wSyCRadln4mIXuoRsjG7WLpX/jkr2HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANGZoUaNKHwTpocStRpOenyIxm4MB8GA1UdIwQY MBaAFMO9Jv4ileRiviZ4Uz76Ux4jt/ECMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgt OGJkOTc2OTEwZGJmLzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC85YzVhMDAtMGI1Zi00YTk1LTk4YTgtOGJkOTc2OTEwZGJm LzEvdzcwbV9pS1Y1R0stSm5oVFB2cFRIaU8zOFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMe8tS/3x ywXLq8kcZagrYLpioyfNpJJZsER0Vo+//xZOkAyhvyKrZ91nLwGjdAQScGoOzX18 LrJQl8Bx5xJbJ9TbCVDI3cPqXoHllGMeIclJIbmi8BL1wfQdEEIvxLVDDpckGZ5Y ZPxEUT1T9LjeO8/Tp3deObKaOmNccTCn/gWTWsRqG2ire2zkty6QD5R1npBKJmUc Haas05NYutN6xrMzjLZFSX4zmSPmCOe/AyXYnoWLogVaHp8KvAjt0dQ34lZ9I9oC 427i8mnW6d6PETH314w3QniPnL9oIb9t8Y6NGAJ2W89wGMbD2yyxo5KLmU8i6XWb qZZecqY5RP+2cQ== -----END CERTIFICATE-----Generated at Sun Jan 25 19:46:37 2026 by rpki-client