This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft File: wtKsHXyezPVli4jxb2E9ez6OjHI.mft (raw, json) Hash identifier: Rb32UnSAyHRPj2kCb8uc2Cj0TLTT1xjc118GY4+3+C0= Subject key identifier: 99:53:02:26:1B:BE:8E:FA:37:17:23:86:F4:60:70:0B:B8:D9:E7:D3 Authority key identifier: C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72 Certificate issuer: /CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72 Certificate serial: 019BF4625494959E324BE7F3F484B128395C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft Manifest number: 0EC0 Signing time: Sun 25 Jan 2026 09:00:43 +0000 Manifest this update: Sun 25 Jan 2026 09:00:43 +0000 Manifest next update: Mon 26 Jan 2026 09:00:43 +0000 Files and hashes: 1: 9NEEsIaoOSxV4C68oWD-8q01-s4.roa (hash: Yeh595qgzPBaen9pZBMaBJZ2g7PUtXo9qE04VFTndRI=) 2: owXJBHpnE_pu52wzEvYbFXAGAAM.roa (hash: wFpSi4A2S+i91fC051hXq5mn24CHrss9+Y9bNRQMfGc=) 3: vyMxx-DxucftXKH_GRW_7fsKph8.roa (hash: dJp/0a1qL5xrMcZ/YvnuzbIOkNcbmVQskj9Xt5cN/Wg=) 4: wtKsHXyezPVli4jxb2E9ez6OjHI.crl (hash: LN0K003oKH9+Bw8MiSQFHuDJSh0sClwb2Ljujn2u+o8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:54:94:95:9e:32:4b:e7:f3:f4:84:b1:28:39:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2d2ac1d7c9eccf5658b88f16f613d7b3e8e8c72 Validity Not Before: Jan 25 09:00:43 2026 GMT Not After : Jan 26 09:00:43 2026 GMT Subject: CN=995302261bbe8efa37172386f460700bb8d9e7d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:10:4b:29:a7:15:0e:b3:0e:bd:31:35:ec:8b: d7:1b:b1:30:bf:2d:0e:f4:c0:5e:29:d7:e7:24:d0: 52:10:2c:b1:84:3e:85:c5:01:1c:8a:1a:db:e3:ce: 00:a0:7c:11:02:6a:cb:e9:4f:ea:25:a4:8c:56:12: 83:24:81:72:d0:60:82:04:5f:32:fb:80:e0:ea:db: d9:69:ce:2a:3a:fe:40:bb:76:1a:ad:81:cf:dd:25: 9a:e6:39:e9:ab:d8:7e:8e:3b:6d:d4:e9:bc:08:06: 9e:a1:f4:ca:cd:bd:a6:41:2f:67:d9:48:b9:ca:59: 31:c5:ae:08:0b:69:53:b6:83:2b:41:aa:d3:b9:db: 2f:5a:d3:d9:ae:59:30:cc:04:d8:43:96:ca:c8:16: 5d:98:1d:dd:8d:af:03:83:5f:04:fe:29:8b:dd:b0: a7:43:1c:63:fd:ee:fd:84:99:73:33:25:b8:2f:b5: 7f:e2:02:28:2e:84:59:62:66:da:91:04:50:4c:d0: 6a:0d:2d:82:a9:bf:e3:2f:11:95:8e:7b:8d:1d:81: a0:cc:0f:d0:d6:e8:a1:8d:86:25:72:01:b5:bb:d9: 1a:ed:ad:e1:1a:a2:4c:88:ad:3d:ad:70:74:ea:87: 92:9f:fc:ce:89:1c:e5:2c:f0:7f:53:83:27:8f:39: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:53:02:26:1B:BE:8E:FA:37:17:23:86:F4:60:70:0B:B8:D9:E7:D3 X509v3 Authority Key Identifier: keyid:C2:D2:AC:1D:7C:9E:CC:F5:65:8B:88:F1:6F:61:3D:7B:3E:8E:8C:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtKsHXyezPVli4jxb2E9ez6OjHI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8b1bc2-5926-4ace-b16f-197fe8365643/1/wtKsHXyezPVli4jxb2E9ez6OjHI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:80:09:53:27:77:e2:ce:6d:0a:25:66:28:66:70:84:ee:f4: 2d:b8:67:42:52:c9:ea:e3:1c:0d:41:1b:f7:86:44:03:63:65: 75:5e:17:7b:20:1e:79:62:e8:a8:b0:08:34:c7:b3:60:31:6a: b1:40:f7:82:06:49:d2:6e:5f:be:5f:a4:dc:fe:5a:29:5f:5b: bb:f7:69:42:97:5b:37:b1:2d:2f:67:02:63:45:78:43:49:57: 84:70:b5:8a:fa:79:69:86:ed:b7:f9:fc:63:82:dd:6b:ca:8b: 19:ad:13:b0:ce:e2:96:3e:0c:6e:02:b8:8b:39:8f:0e:83:33: 59:73:1b:42:25:12:01:2a:2c:a2:de:31:74:03:a2:c6:8b:4b: 05:28:0b:45:57:e8:7a:61:30:c2:84:12:75:1a:f2:e5:4b:eb: c3:4f:14:f5:3c:d8:f2:5b:7d:c4:e2:d6:47:24:a4:e2:6c:b9: 34:f8:63:82:94:b2:cd:59:50:c7:1c:73:50:0d:3e:c0:ce:55: e3:58:15:71:69:75:68:cd:a9:3f:a8:9c:88:a6:2b:47:09:cf: 82:97:4f:a1:02:55:4d:1e:dc:b4:83:6d:c4:e5:c3:c8:9a:11: c0:be:8c:80:36:cc:27:d7:21:48:3d:d7:6c:be:0b:73:f6:65: bf:95:fe:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YlSUlZ4yS+fz9ISxKDlcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyZDJhYzFkN2M5ZWNjZjU2NThiODhmMTZmNjEzZDdiM2U4 ZThjNzIwHhcNMjYwMTI1MDkwMDQzWhcNMjYwMTI2MDkwMDQzWjAzMTEwLwYDVQQD Eyg5OTUzMDIyNjFiYmU4ZWZhMzcxNzIzODZmNDYwNzAwYmI4ZDllN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBBLKacVDrMOvTE17IvXG7Ewvy0O 9MBeKdfnJNBSECyxhD6FxQEcihrb484AoHwRAmrL6U/qJaSMVhKDJIFy0GCCBF8y +4Dg6tvZac4qOv5Au3YarYHP3SWa5jnpq9h+jjtt1Om8CAaeofTKzb2mQS9n2Ui5 ylkxxa4IC2lTtoMrQarTudsvWtPZrlkwzATYQ5bKyBZdmB3dja8Dg18E/imL3bCn Qxxj/e79hJlzMyW4L7V/4gIoLoRZYmbakQRQTNBqDS2Cqb/jLxGVjnuNHYGgzA/Q 1uihjYYlcgG1u9ka7a3hGqJMiK09rXB06oeSn/zOiRzlLPB/U4Mnjzm3twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlTAiYbvo76NxcjhvRgcAu42efTMB8GA1UdIwQY MBaAFMLSrB18nsz1ZYuI8W9hPXs+joxyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYt MTk3ZmU4MzY1NjQzLzEvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84YjFiYzItNTkyNi00YWNlLWIxNmYtMTk3ZmU4MzY1NjQz LzEvd3RLc0hYeWV6UFZsaTRqeGIyRTllejZPakhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIAJUyd3 4s5tCiVmKGZwhO70LbhnQlLJ6uMcDUEb94ZEA2NldV4XeyAeeWLoqLAINMezYDFq sUD3ggZJ0m5fvl+k3P5aKV9bu/dpQpdbN7EtL2cCY0V4Q0lXhHC1ivp5aYbtt/n8 Y4Lda8qLGa0TsM7ilj4MbgK4izmPDoMzWXMbQiUSASosot4xdAOixotLBSgLRVfo emEwwoQSdRry5Uvrw08U9TzY8lt9xOLWRySk4my5NPhjgpSyzVlQxxxzUA0+wM5V 41gVcWl1aM2pP6iciKYrRwnPgpdPoQJVTR7ctINtxOXDyJoRwL6MgDbMJ9chSD3X bL4Lc/Zlv5X+Iw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:46:05 2026 by rpki-client