This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft File: WGFXm4dePgk9RzJblzXtv-eAn7o.mft (raw, json) Hash identifier: +J21OwQ19h7oDoshYUi+DwdXhjX1IMS4c5T0msTw3V4= Subject key identifier: F0:79:2D:F6:78:4A:DD:99:22:61:0F:62:2A:9A:E0:E5:BB:BA:F5:53 Authority key identifier: 58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA Certificate issuer: /CN=5861579b875e3e093d47325b9735edbfe7809fba Certificate serial: 019BF3188B8FCAE8F5E3C336D525917CF4A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft Manifest number: 029C Signing time: Sun 25 Jan 2026 03:00:30 +0000 Manifest this update: Sun 25 Jan 2026 03:00:30 +0000 Manifest next update: Mon 26 Jan 2026 03:00:30 +0000 Files and hashes: 1: WGFXm4dePgk9RzJblzXtv-eAn7o.crl (hash: wtsX9Ee4Qn5Z2Ss6A8qe4ibds576DFVeIKNlNYMfP2Y=) 2: y1g11tYTDokd6mXm4VJ7V893n3k.roa (hash: qDs37qTd+XjJVvV0SepC+107boLsXO+bbbpglZWksdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:18:8b:8f:ca:e8:f5:e3:c3:36:d5:25:91:7c:f4:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5861579b875e3e093d47325b9735edbfe7809fba Validity Not Before: Jan 25 03:00:30 2026 GMT Not After : Jan 26 03:00:30 2026 GMT Subject: CN=f0792df6784add9922610f622a9ae0e5bbbaf553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:da:e0:b7:47:fb:ec:ee:37:ff:25:c4:d4:b3: 0e:68:c2:7f:d5:96:a4:30:c9:8d:62:7f:1f:1b:c8: 46:f9:c6:ab:a8:d8:60:c9:29:0b:56:ab:be:d8:7c: 66:3a:c0:0a:c3:be:c9:59:eb:7d:ed:60:46:1e:31: 06:b7:24:66:27:b3:4f:9e:4d:af:2d:67:4f:98:0e: 72:63:fb:84:c3:73:92:dc:01:de:c2:0a:77:b3:21: ed:9b:9e:91:74:08:16:6e:51:d2:cb:02:83:5a:ff: cf:e9:bf:18:55:ab:81:05:3d:68:b2:5d:66:6e:de: a8:2b:5a:bb:57:6c:35:e9:47:0e:1a:37:5e:c1:a7: b5:3c:8d:92:de:75:b8:33:4d:f3:dc:37:b8:a2:b5: 4d:91:49:70:33:27:aa:36:04:51:8c:24:5f:52:7a: 42:6c:f5:c3:4c:ad:94:b7:5f:82:8d:61:e9:f5:e3: 73:a8:a6:3a:54:26:84:62:7f:15:0f:2a:a6:8c:2e: 24:f5:fb:f1:a8:16:4e:e3:47:63:16:2d:03:5f:7b: 96:44:94:dc:49:3c:d5:2e:a5:d5:f4:1f:e7:fe:8b: 17:cb:19:9b:1e:ff:98:ac:78:05:99:58:be:28:78: 25:9d:4f:b2:6f:82:34:ed:cf:0c:60:5a:bb:c7:cf: 79:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:79:2D:F6:78:4A:DD:99:22:61:0F:62:2A:9A:E0:E5:BB:BA:F5:53 X509v3 Authority Key Identifier: keyid:58:61:57:9B:87:5E:3E:09:3D:47:32:5B:97:35:ED:BF:E7:80:9F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGFXm4dePgk9RzJblzXtv-eAn7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/37b9a8-5186-43f3-9064-f5336327b881/1/WGFXm4dePgk9RzJblzXtv-eAn7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:a7:4c:1f:29:30:b2:c3:2c:4e:81:c2:10:d6:35:dd:65:b3: b4:a6:e8:1a:cc:ed:55:44:11:c0:44:ce:ce:f7:d9:b9:51:09: 49:29:6d:79:a3:ff:01:0e:90:d2:79:b8:6a:fa:3b:b9:28:8f: a6:69:78:99:36:26:62:46:6a:f9:f9:f0:8f:1d:61:bc:9b:d7: fd:72:0b:ac:ba:57:ba:7c:72:58:62:27:57:c8:1f:4d:4d:d0: f4:da:f5:16:4a:2a:b4:e4:9f:dd:fd:e4:99:6f:a7:0f:51:fc: 42:76:cd:31:d5:c3:36:d6:a3:c7:14:39:f4:8f:d3:30:92:4a: 93:a9:a5:e7:4f:cc:bd:4e:b7:f3:bc:72:e4:25:c1:f4:f1:35: f8:a5:8b:f5:1b:ca:21:54:a4:cb:60:18:38:c2:c5:2d:5e:04: ce:1c:c1:59:9e:3f:18:4f:75:9c:28:06:11:b7:af:5d:cd:78: 75:5a:3f:b5:42:57:60:0a:68:e5:9f:52:3f:f4:c5:02:ad:0d: bc:3f:e5:f8:9e:98:7a:2f:fe:ed:16:a8:ab:cf:28:fc:86:24: 1a:1a:96:6a:cd:31:c9:d5:73:b8:66:58:58:f2:7f:17:55:22: 8f:d8:cd:d1:4d:b8:2c:52:fc:38:63:ea:1e:d1:78:f6:07:d3: b3:35:e9:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzGIuPyuj148M21SWRfPSmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NjE1NzliODc1ZTNlMDkzZDQ3MzI1Yjk3MzVlZGJmZTc4 MDlmYmEwHhcNMjYwMTI1MDMwMDMwWhcNMjYwMTI2MDMwMDMwWjAzMTEwLwYDVQQD EyhmMDc5MmRmNjc4NGFkZDk5MjI2MTBmNjIyYTlhZTBlNWJiYmFmNTUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtrgt0f77O43/yXE1LMOaMJ/1Zak MMmNYn8fG8hG+carqNhgySkLVqu+2HxmOsAKw77JWet97WBGHjEGtyRmJ7NPnk2v LWdPmA5yY/uEw3OS3AHewgp3syHtm56RdAgWblHSywKDWv/P6b8YVauBBT1osl1m bt6oK1q7V2w16UcOGjdewae1PI2S3nW4M03z3De4orVNkUlwMyeqNgRRjCRfUnpC bPXDTK2Ut1+CjWHp9eNzqKY6VCaEYn8VDyqmjC4k9fvxqBZO40djFi0DX3uWRJTc STzVLqXV9B/n/osXyxmbHv+YrHgFmVi+KHglnU+yb4I07c8MYFq7x895ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPB5LfZ4St2ZImEPYiqa4OW7uvVTMB8GA1UdIwQY MBaAFFhhV5uHXj4JPUcyW5c17b/ngJ+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQt ZjUzMzYzMjdiODgxLzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8zN2I5YTgtNTE4Ni00M2YzLTkwNjQtZjUzMzYzMjdiODgx LzEvV0dGWG00ZGVQZ2s5UnpKYmx6WHR2LWVBbjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIadMHykw ssMsToHCENY13WWztKboGsztVUQRwETOzvfZuVEJSSlteaP/AQ6Q0nm4avo7uSiP pml4mTYmYkZq+fnwjx1hvJvX/XILrLpXunxyWGInV8gfTU3Q9Nr1FkoqtOSf3f3k mW+nD1H8QnbNMdXDNtajxxQ59I/TMJJKk6ml50/MvU6387xy5CXB9PE1+KWL9RvK IVSky2AYOMLFLV4EzhzBWZ4/GE91nCgGEbevXc14dVo/tUJXYApo5Z9SP/TFAq0N vD/l+J6Yei/+7Raoq88o/IYkGhqWas0xydVzuGZYWPJ/F1Uij9jN0U24LFL8OGPq HtF49gfTszXpFA== -----END CERTIFICATE-----Generated at Sun Jan 25 12:58:40 2026 by rpki-client