This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft File: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft (raw, json) Hash identifier: oetQsJQDGXmDJ3uJNGx2CRbjpshO8/fST3GB/EPiGX0= Subject key identifier: DB:43:90:42:5B:31:3A:2A:90:6C:A3:D6:41:E9:B8:C1:F2:04:6E:18 Authority key identifier: 59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 Certificate issuer: /CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Certificate serial: 019BF5E3F7FE5B45141DC73C87CC9D97AC3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft Manifest number: 1365 Signing time: Sun 25 Jan 2026 16:01:56 +0000 Manifest this update: Sun 25 Jan 2026 16:01:56 +0000 Manifest next update: Mon 26 Jan 2026 16:01:56 +0000 Files and hashes: 1: ENxrzlHEmoQ6o2u0YmmjGiCeHLE.roa (hash: T0DH4Bt7Lf7uI/6XsA2J/6/aZ8CTNeiUm7gLSNK7Cno=) 2: WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl (hash: p5GKfSjSv6qYUWNYgqMc5lmuHMb8r+rC1F/dQ+EaPrU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e3:f7:fe:5b:45:14:1d:c7:3c:87:cc:9d:97:ac:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59f2470c03a0f0bad00846b0f67c7a232d557288 Validity Not Before: Jan 25 16:01:56 2026 GMT Not After : Jan 26 16:01:56 2026 GMT Subject: CN=db4390425b313a2a906ca3d641e9b8c1f2046e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:15:08:11:27:e1:0d:64:bc:4f:55:c6:61:63: cb:e4:8e:e5:ea:c1:b6:92:07:7e:bb:3a:02:db:05: 03:4e:27:9b:05:77:d9:4a:f3:cd:cc:1a:9b:1b:3d: 9f:32:e1:67:4d:7e:f7:2a:46:7f:58:1e:48:34:3e: 80:22:87:ed:87:26:35:a5:49:f6:5f:8d:a6:7f:a5: 67:8e:9f:f0:1f:99:fb:af:c2:3b:18:fd:49:1d:a6: ea:a9:54:91:4e:91:a3:3a:74:2f:b9:de:64:8f:98: 9e:bf:3e:84:fe:d7:fa:df:f6:21:c7:c4:ca:74:cf: 3a:b2:7c:02:ce:75:db:66:d8:23:4a:cb:9c:f3:27: 39:5c:0d:4e:54:95:a7:73:e1:3b:fa:41:5a:2b:ef: 35:50:7e:5e:75:8f:cf:78:3e:28:9e:55:39:e0:4d: 94:61:6c:b1:fa:59:93:db:4b:96:34:66:ab:a7:f7: bc:23:2d:9e:ab:a3:fb:fc:11:57:4e:76:4c:09:6c: ea:dd:b5:3c:c0:32:f4:75:e7:5e:cd:d4:77:6f:c8: 55:52:1c:0c:d3:d0:ad:a8:a7:ac:12:e7:33:40:91: aa:1b:07:e4:f0:b7:fa:2f:e5:18:b9:57:d2:57:bb: 3b:78:da:c9:0e:7a:31:79:d8:b7:84:92:2a:ea:ae: 6f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:43:90:42:5B:31:3A:2A:90:6C:A3:D6:41:E9:B8:C1:F2:04:6E:18 X509v3 Authority Key Identifier: keyid:59:F2:47:0C:03:A0:F0:BA:D0:08:46:B0:F6:7C:7A:23:2D:55:72:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/cec6d6-6d34-4107-b672-92bef34e77aa/1/WfJHDAOg8LrQCEaw9nx6Iy1Vcog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:89:dd:e4:87:d5:3e:ac:4a:4c:b6:e8:6e:2f:ee:7f:57:b8: a0:80:89:4d:25:1e:62:ff:24:9a:de:b0:47:16:1e:57:5d:e3: 6b:81:01:dc:e8:ff:9c:ac:9f:c8:6b:c1:36:f7:59:87:2d:2b: 7e:bf:f3:cf:2f:23:c5:cf:52:ab:dc:92:6c:4d:06:d3:00:24: 46:14:86:b0:2a:8b:e9:4e:04:5a:de:2e:7b:63:68:4e:05:29: d8:b5:f2:3b:ba:09:17:5e:25:56:0c:cf:4c:11:d1:d9:90:94: d1:af:33:aa:a9:2e:e5:f6:24:e3:ef:9d:cc:68:69:14:36:1f: 8a:13:10:97:cd:8c:d3:38:c6:67:0b:68:e1:da:4c:4d:02:d7: 49:3e:05:63:fe:6c:79:29:62:30:21:16:09:f0:1d:58:08:1b: bf:f7:3c:ab:f4:52:f9:02:c5:27:90:6e:18:61:35:88:50:62: 03:44:6e:3c:a9:21:f8:5a:0e:c1:56:ef:bf:91:e7:62:37:25: 87:fd:d0:1c:40:ca:b6:97:07:62:da:9b:7a:ec:84:d4:c7:9b: a8:37:53:b3:3d:a7:b1:6a:5d:da:a4:38:23:a9:d7:4c:de:8b: 2a:97:e3:03:a7:0b:73:87:cd:1b:05:c9:77:7a:42:d4:3c:bd: 82:85:b3:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv14/f+W0UUHcc8h8ydl6w+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZjI0NzBjMDNhMGYwYmFkMDA4NDZiMGY2N2M3YTIzMmQ1 NTcyODgwHhcNMjYwMTI1MTYwMTU2WhcNMjYwMTI2MTYwMTU2WjAzMTEwLwYDVQQD EyhkYjQzOTA0MjViMzEzYTJhOTA2Y2EzZDY0MWU5YjhjMWYyMDQ2ZTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRUIESfhDWS8T1XGYWPL5I7l6sG2 kgd+uzoC2wUDTiebBXfZSvPNzBqbGz2fMuFnTX73KkZ/WB5IND6AIofthyY1pUn2 X42mf6Vnjp/wH5n7r8I7GP1JHabqqVSRTpGjOnQvud5kj5ievz6E/tf63/Yhx8TK dM86snwCznXbZtgjSsuc8yc5XA1OVJWnc+E7+kFaK+81UH5edY/PeD4onlU54E2U YWyx+lmT20uWNGarp/e8Iy2eq6P7/BFXTnZMCWzq3bU8wDL0dedezdR3b8hVUhwM 09CtqKesEuczQJGqGwfk8Lf6L+UYuVfSV7s7eNrJDnoxedi3hJIq6q5vbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtDkEJbMToqkGyj1kHpuMHyBG4YMB8GA1UdIwQY MBaAFFnyRwwDoPC60AhGsPZ8eiMtVXKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzIt OTJiZWYzNGU3N2FhLzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9jZWM2ZDYtNmQzNC00MTA3LWI2NzItOTJiZWYzNGU3N2Fh LzEvV2ZKSERBT2c4THJRQ0VhdzlueDZJeTFWY29nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPInd5IfV PqxKTLbobi/uf1e4oICJTSUeYv8kmt6wRxYeV13ja4EB3Oj/nKyfyGvBNvdZhy0r fr/zzy8jxc9Sq9ySbE0G0wAkRhSGsCqL6U4EWt4ue2NoTgUp2LXyO7oJF14lVgzP TBHR2ZCU0a8zqqku5fYk4++dzGhpFDYfihMQl82M0zjGZwto4dpMTQLXST4FY/5s eSliMCEWCfAdWAgbv/c8q/RS+QLFJ5BuGGE1iFBiA0RuPKkh+FoOwVbvv5HnYjcl h/3QHEDKtpcHYtqbeuyE1MebqDdTsz2nsWpd2qQ4I6nXTN6LKpfjA6cLc4fNGwXJ d3pC1Dy9goWzpw== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:51 2026 by rpki-client