This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft File: WIsQJOoFbl7UmPbp3cIGMr32ycU.mft (raw, json) Hash identifier: 0//0q5VjM1TagH5OKGISACziy4Ia7mJxxOK9Gi5EhS0= Subject key identifier: 5C:8B:12:A9:16:AC:43:14:AD:F1:58:7A:65:FA:B4:C5:DF:5A:A6:51 Authority key identifier: 58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 Certificate issuer: /CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Certificate serial: 019BF350058DECCD33A3D878833D2BE9961F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft Manifest number: 1268 Signing time: Sun 25 Jan 2026 04:01:06 +0000 Manifest this update: Sun 25 Jan 2026 04:01:06 +0000 Manifest next update: Mon 26 Jan 2026 04:01:06 +0000 Files and hashes: 1: WIsQJOoFbl7UmPbp3cIGMr32ycU.crl (hash: RQCpsOu3VByr60UMFF2MjmME9w6sk1hRQqKHqVzhDnc=) 2: oKjaZzr2WL1sJPY2s9ct0VHgjmE.roa (hash: BfBo8KhVWa4ugCGtWR+GTTpoDD+qROZ01hHtGPmi5dE=) 3: yjgjGxpLkbkBBTHpBV60vJnCSUc.roa (hash: LFjRnJsMQiOS9lqWyTAzd8/cKu8daCLbRMnGAImYeWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f3:50:05:8d:ec:cd:33:a3:d8:78:83:3d:2b:e9:96:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=588b1024ea056e5ed498f6e9ddc20632bdf6c9c5 Validity Not Before: Jan 25 04:01:06 2026 GMT Not After : Jan 26 04:01:06 2026 GMT Subject: CN=5c8b12a916ac4314adf1587a65fab4c5df5aa651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:16:f6:f3:d4:b0:da:da:7a:c9:1d:3e:d9:39: 4f:41:69:ad:42:a1:84:80:a2:b3:a8:c1:54:27:fe: 59:b1:13:10:17:0a:65:e6:8a:84:66:d4:c8:3a:2f: 61:7c:25:2c:7e:25:13:42:77:ae:9b:c5:3c:c1:9a: 66:d9:25:27:77:d9:bd:04:20:90:e6:7c:b4:53:5c: 79:4b:07:1c:0c:5c:90:52:42:b4:fb:b4:cd:bb:37: d8:5c:d0:f3:66:b6:58:26:0e:21:cf:fa:25:e6:a1: 5d:70:01:21:dc:7d:d9:05:3f:44:44:80:18:e6:df: 28:1c:8d:9c:a5:04:af:4b:73:0f:89:ec:77:d7:fb: 51:e5:a9:6c:df:4a:f4:bc:30:8e:74:88:8e:57:c6: 90:e1:5c:11:ab:83:76:c1:6b:66:52:ae:5e:ec:2f: 1d:36:a7:70:ad:27:f8:51:d0:a9:62:c2:02:84:15: 41:30:59:bc:a2:58:98:c6:26:97:ff:ac:39:1a:92: c3:42:65:d6:2c:7c:43:51:c4:ee:16:2b:be:23:b5: 41:0a:d5:49:f5:c3:bc:ef:08:c6:02:3f:80:b4:3d: a4:8f:dc:2d:39:64:95:2c:2f:c1:01:fc:8b:40:1f: 59:6d:67:5e:5c:52:5d:10:da:4a:32:05:2a:d6:ff: 9c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:8B:12:A9:16:AC:43:14:AD:F1:58:7A:65:FA:B4:C5:DF:5A:A6:51 X509v3 Authority Key Identifier: keyid:58:8B:10:24:EA:05:6E:5E:D4:98:F6:E9:DD:C2:06:32:BD:F6:C9:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIsQJOoFbl7UmPbp3cIGMr32ycU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d34a74-d7cd-4f99-84cd-56628a46df40/1/WIsQJOoFbl7UmPbp3cIGMr32ycU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:03:b9:9f:98:45:18:e0:ee:c3:81:ba:4c:b3:95:6b:66:0b: 02:aa:31:fc:c4:d5:2d:e2:e3:58:11:e4:0e:f3:c7:95:b3:f2: 95:2d:c2:53:12:ab:06:e7:c7:3c:21:8f:f8:81:2b:44:2a:0f: 28:6b:56:a1:5d:61:ee:be:dc:62:5d:68:3e:43:5f:ac:d8:79: be:96:f9:b7:08:9b:2b:f2:6e:8b:2e:99:6c:6e:3c:33:14:97: 58:7a:dc:a3:16:6b:b8:8c:7c:61:61:4b:26:5b:e0:07:80:dd: 52:af:fe:d4:cb:5f:20:36:50:42:29:f6:c4:08:02:5f:f5:57: b4:66:64:13:8f:cb:2e:79:34:05:e7:35:35:a5:cf:ce:9f:42: 46:39:8e:75:70:e6:7b:b7:44:f4:c0:0e:55:d9:82:ed:53:41: 8a:9e:9c:fe:9b:81:56:e4:6c:c3:00:d8:7d:d5:3f:c5:c8:cd: 0c:2a:bd:02:bf:10:9f:29:11:a5:6f:01:64:67:0a:0d:a2:98: 39:9a:07:ab:ed:a9:07:79:8e:4e:a5:ba:aa:4f:df:38:38:1a: 0c:df:15:67:ff:0f:47:eb:cd:2d:61:a8:1e:c4:eb:6f:3d:5b: 6c:8c:97:aa:29:96:6f:d5:7c:2a:02:01:6a:a8:9e:3f:1c:27: 08:fd:31:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvzUAWN7M0zo9h4gz0r6ZYfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4OGIxMDI0ZWEwNTZlNWVkNDk4ZjZlOWRkYzIwNjMyYmRm NmM5YzUwHhcNMjYwMTI1MDQwMTA2WhcNMjYwMTI2MDQwMTA2WjAzMTEwLwYDVQQD Eyg1YzhiMTJhOTE2YWM0MzE0YWRmMTU4N2E2NWZhYjRjNWRmNWFhNjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRb289Sw2tp6yR0+2TlPQWmtQqGE gKKzqMFUJ/5ZsRMQFwpl5oqEZtTIOi9hfCUsfiUTQneum8U8wZpm2SUnd9m9BCCQ 5ny0U1x5SwccDFyQUkK0+7TNuzfYXNDzZrZYJg4hz/ol5qFdcAEh3H3ZBT9ERIAY 5t8oHI2cpQSvS3MPiex31/tR5als30r0vDCOdIiOV8aQ4VwRq4N2wWtmUq5e7C8d NqdwrSf4UdCpYsIChBVBMFm8oliYxiaX/6w5GpLDQmXWLHxDUcTuFiu+I7VBCtVJ 9cO87wjGAj+AtD2kj9wtOWSVLC/BAfyLQB9ZbWdeXFJdENpKMgUq1v+cmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFyLEqkWrEMUrfFYemX6tMXfWqZRMB8GA1UdIwQY MBaAFFiLECTqBW5e1Jj26d3CBjK99snFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2Qt NTY2MjhhNDZkZjQwLzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9kMzRhNzQtZDdjZC00Zjk5LTg0Y2QtNTY2MjhhNDZkZjQw LzEvV0lzUUpPb0ZibDdVbVBicDNjSUdNcjMyeWNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwO5n5hF GODuw4G6TLOVa2YLAqox/MTVLeLjWBHkDvPHlbPylS3CUxKrBufHPCGP+IErRCoP KGtWoV1h7r7cYl1oPkNfrNh5vpb5twibK/Juiy6ZbG48MxSXWHrcoxZruIx8YWFL JlvgB4DdUq/+1MtfIDZQQin2xAgCX/VXtGZkE4/LLnk0Bec1NaXPzp9CRjmOdXDm e7dE9MAOVdmC7VNBip6c/puBVuRswwDYfdU/xcjNDCq9Ar8QnykRpW8BZGcKDaKY OZoHq+2pB3mOTqW6qk/fODgaDN8VZ/8PR+vNLWGoHsTrbz1bbIyXqimWb9V8KgIB aqiePxwnCP0xEw== -----END CERTIFICATE-----Generated at Sun Jan 25 14:42:21 2026 by rpki-client