This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft File: wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft (raw, json) Hash identifier: bGKl6J+PETVaJr2mrCz9ExpVs1wpOKEtZrWq1a297DU= Subject key identifier: BD:E8:0A:A8:8F:E7:62:38:B3:48:B3:55:E4:3D:68:98:56:ED:6B:72 Authority key identifier: C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4 Certificate issuer: /CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4 Certificate serial: 019BF5AC12F65D0A54401532EE15799F8D7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft Manifest number: 140E Signing time: Sun 25 Jan 2026 15:00:53 +0000 Manifest this update: Sun 25 Jan 2026 15:00:53 +0000 Manifest next update: Mon 26 Jan 2026 15:00:53 +0000 Files and hashes: 1: T4jsL7kwRbLlNaXve_3W_32hFoM.roa (hash: FJOo/HtzqljN7o0xBJy+iby2rmXafKenU6CHkQkrrDo=) 2: wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl (hash: pZxF6im6kYB1fsL7n0pDwHtEap4FGNiuIm9dlC0ryOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:12:f6:5d:0a:54:40:15:32:ee:15:79:9f:8d:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c15ee2d909c9b75c6d2084e3379bf03274b776f4 Validity Not Before: Jan 25 15:00:53 2026 GMT Not After : Jan 26 15:00:53 2026 GMT Subject: CN=bde80aa88fe76238b348b355e43d689856ed6b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:66:83:62:f3:70:16:0c:ea:76:48:9a:b0:d4: e4:38:c9:06:1f:81:fc:29:4d:7c:64:a6:c6:74:2b: 2a:2b:12:bd:cc:4d:2a:b4:ce:38:19:cb:1c:64:10: 50:04:33:dd:e7:7f:a8:4e:8b:cb:0b:e2:ba:b3:e5: 25:2a:f8:da:4e:1e:18:5a:31:8e:78:6d:a1:f4:57: 58:47:2b:c6:c2:1a:fa:8c:cb:35:d8:bc:a7:32:d0: 0a:45:89:bc:74:26:85:80:51:7b:0f:3c:a9:d8:8b: 7c:e4:d6:f4:fe:88:b9:1a:b0:a4:f1:db:6e:6c:7e: 4d:e9:e4:35:ec:c7:83:fc:da:36:14:97:20:aa:4a: a1:3f:57:09:43:f8:81:3f:a1:f3:9e:fd:be:2e:a3: 7a:83:71:e4:b0:0b:52:89:12:f9:66:26:27:82:d3: ac:ca:d7:27:fa:2f:da:7a:8a:06:bc:73:36:70:a1: 03:22:30:82:d5:97:48:54:94:c2:1b:bc:8c:3a:0c: 6b:d9:93:10:2e:01:c2:ac:4b:c9:41:9e:fa:07:16: 9c:e5:ae:4d:62:ae:47:9e:09:4f:b1:1f:01:5f:92: bd:85:5f:a1:d2:6f:52:67:82:86:d9:17:ab:be:af: 05:f0:86:ed:c6:79:0b:8a:02:db:11:7c:c7:ac:18: 01:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E8:0A:A8:8F:E7:62:38:B3:48:B3:55:E4:3D:68:98:56:ED:6B:72 X509v3 Authority Key Identifier: keyid:C1:5E:E2:D9:09:C9:B7:5C:6D:20:84:E3:37:9B:F0:32:74:B7:76:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV7i2QnJt1xtIITjN5vwMnS3dvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a765da-4aa1-47a2-8b5d-ebe43905eb81/1/wV7i2QnJt1xtIITjN5vwMnS3dvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:71:30:0e:e0:ac:e3:d2:ef:2a:e0:c5:b6:eb:99:70:2d:a1: 18:0e:73:e7:be:2a:e6:76:1f:b9:65:50:67:c7:51:1e:a5:59: 2d:9d:a5:9f:1d:07:7a:91:66:cf:ba:14:a8:82:60:70:11:66: b7:4a:21:23:fd:4a:ff:47:b9:73:df:5e:8d:8e:37:ad:7e:90: c5:cc:14:0e:3c:9d:cc:94:91:db:4d:24:fb:e4:12:e6:bf:b0: b4:8f:9d:74:3d:45:40:f3:ac:31:26:56:1b:68:a6:95:17:7c: ac:a0:fb:fc:cf:86:6a:dc:5a:51:23:9e:cb:34:1d:24:2a:88: df:55:43:26:3a:0d:a4:a2:6e:10:8f:2b:18:c9:a9:1e:d7:2c: 67:14:3b:fe:a9:1a:85:fe:f4:c7:b3:d7:e7:f8:e8:00:c4:3c: 3c:55:67:20:e6:64:94:c5:8d:21:fa:93:20:75:a4:35:a6:d4: 58:67:9c:a7:9c:7b:ca:a7:e7:d1:94:03:f0:cf:7d:ac:af:7b: 12:ae:b0:c6:0f:8b:60:f9:3a:c3:4c:04:e5:7a:a7:e4:1f:f2: a2:92:f6:6b:1e:31:8a:fa:a6:eb:a1:5f:27:ac:3e:5a:9d:8f: e1:61:29:09:3e:f0:3f:1d:b5:13:7f:f0:9f:48:64:51:e5:ec: b1:66:1b:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rBL2XQpUQBUy7hV5n41+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxNWVlMmQ5MDljOWI3NWM2ZDIwODRlMzM3OWJmMDMyNzRi Nzc2ZjQwHhcNMjYwMTI1MTUwMDUzWhcNMjYwMTI2MTUwMDUzWjAzMTEwLwYDVQQD EyhiZGU4MGFhODhmZTc2MjM4YjM0OGIzNTVlNDNkNjg5ODU2ZWQ2YjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmaDYvNwFgzqdkiasNTkOMkGH4H8 KU18ZKbGdCsqKxK9zE0qtM44GcscZBBQBDPd53+oTovLC+K6s+UlKvjaTh4YWjGO eG2h9FdYRyvGwhr6jMs12LynMtAKRYm8dCaFgFF7Dzyp2It85Nb0/oi5GrCk8dtu bH5N6eQ17MeD/No2FJcgqkqhP1cJQ/iBP6Hznv2+LqN6g3HksAtSiRL5ZiYngtOs ytcn+i/aeooGvHM2cKEDIjCC1ZdIVJTCG7yMOgxr2ZMQLgHCrEvJQZ76Bxac5a5N Yq5HnglPsR8BX5K9hV+h0m9SZ4KG2Rervq8F8IbtxnkLigLbEXzHrBgBIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL3oCqiP52I4s0izVeQ9aJhW7WtyMB8GA1UdIwQY MBaAFMFe4tkJybdcbSCE4zeb8DJ0t3b0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hNzY1ZGEtNGFhMS00N2EyLThiNWQt ZWJlNDM5MDVlYjgxLzEvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hNzY1ZGEtNGFhMS00N2EyLThiNWQtZWJlNDM5MDVlYjgx LzEvd1Y3aTJRbkp0MXh0SUlUak41dndNblMzZHZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHEwDuCs 49LvKuDFtuuZcC2hGA5z574q5nYfuWVQZ8dRHqVZLZ2lnx0HepFmz7oUqIJgcBFm t0ohI/1K/0e5c99ejY43rX6QxcwUDjydzJSR200k++QS5r+wtI+ddD1FQPOsMSZW G2imlRd8rKD7/M+GatxaUSOeyzQdJCqI31VDJjoNpKJuEI8rGMmpHtcsZxQ7/qka hf70x7PX5/joAMQ8PFVnIOZklMWNIfqTIHWkNabUWGecp5x7yqfn0ZQD8M99rK97 Eq6wxg+LYPk6w0wE5Xqn5B/yopL2ax4xivqm66FfJ6w+Wp2P4WEpCT7wPx21E3/w n0hkUeXssWYb6w== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:15 2026 by rpki-client