This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft File: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json) Hash identifier: WeKAeWNh/8eDEPV4G2GkubIZ9bjiIlkzs83vno2wFnE= Subject key identifier: 9C:F5:79:7C:3E:60:84:0C:3C:11:56:C4:46:E7:99:DD:1C:05:2A:ED Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad Certificate serial: 019BF8088DBC06CEB74CE5814E17464A9317 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft Manifest number: 17EB Signing time: Mon 26 Jan 2026 02:01:08 +0000 Manifest this update: Mon 26 Jan 2026 02:01:08 +0000 Manifest next update: Tue 27 Jan 2026 02:01:08 +0000 Files and hashes: 1: RSH629Di86JEdgcD_JE71CBSWUg.roa (hash: 3smoBk5+RI6KLm1HKHlJ8NiPGLzfi2c1vThooYrHwBw=) 2: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: /8brRB4DKYtZm8dVahUJ9HuT0g9rs1kTtKAc94NSbBQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:8d:bc:06:ce:b7:4c:e5:81:4e:17:46:4a:93:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad Validity Not Before: Jan 26 02:01:08 2026 GMT Not After : Jan 27 02:01:08 2026 GMT Subject: CN=9cf5797c3e60840c3c1156c446e799dd1c052aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:74:ad:51:ea:d7:40:27:71:f6:dc:ac:ac: f1:65:fd:3c:7f:98:11:5c:76:ee:18:32:15:0c:07: 40:39:88:bb:4d:5f:08:eb:0f:29:68:d4:76:d7:97: f2:3d:08:ff:d9:22:a1:13:0b:ba:9c:8d:5b:db:0c: 8e:0f:0b:98:47:e3:47:e3:9e:41:5a:2a:bc:e2:aa: dd:99:d1:dc:94:6f:1e:c2:82:6f:c6:92:af:f9:2c: a5:60:b7:d0:25:f3:b3:b0:0c:5f:45:ab:7f:f0:4c: bf:41:84:c4:d3:6c:d9:a0:8b:0e:e7:b0:be:c9:62: 5b:8b:54:ec:ce:a1:fd:ce:57:57:19:9e:1f:b5:18: 8b:1e:d8:28:c2:3d:77:7f:7e:d8:6d:ec:89:90:d5: 56:3d:a1:e5:cc:de:d9:c0:4a:d3:cb:e9:e5:11:34: 11:83:e8:f9:26:ce:10:f4:e9:e7:dd:da:62:17:f0: 3d:ab:7f:35:09:47:31:9a:37:72:f6:83:15:61:4c: ff:3d:2b:01:09:ac:54:46:87:4e:1a:92:43:45:bd: d4:98:6d:1f:9a:e3:3c:84:f2:25:e9:b5:bb:f9:10: f8:93:4c:21:c7:e3:6d:6c:8d:fa:a3:ce:c5:ef:25: 09:a1:7e:05:67:4b:a3:77:f6:27:7f:62:f2:1a:f2: a1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F5:79:7C:3E:60:84:0C:3C:11:56:C4:46:E7:99:DD:1C:05:2A:ED X509v3 Authority Key Identifier: keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:36:ff:a5:8f:6d:17:3d:e2:f2:6b:d5:fa:60:cd:89:48:f8: d2:9b:e1:68:5e:02:38:13:45:00:ba:12:5a:80:35:fa:9e:65: e2:5a:b8:2e:ee:2a:4e:ce:12:b9:b7:2a:2c:5f:27:65:f3:06: 7f:4a:e9:34:db:a3:6f:ee:cf:af:ef:cb:44:6e:a2:38:28:54: d1:56:40:6e:87:30:63:da:25:24:9e:86:a0:7e:87:3e:01:2a: c7:64:ae:b9:51:35:14:f4:6c:33:27:b0:fe:b0:79:0e:75:a2: 2b:3b:39:d0:d2:c3:61:40:8e:ca:df:37:9f:b3:b6:13:39:65: db:51:6a:d5:87:67:cd:2d:77:c8:e4:1a:66:3c:ba:8b:01:7d: 39:dd:51:d7:26:82:07:e9:11:37:5d:e0:8e:56:ba:8d:ae:fc: 84:d5:9a:02:30:d6:12:4f:59:20:e0:f2:ee:91:d7:cd:7f:74: 26:9a:7e:3e:04:58:d9:a4:93:5e:0d:db:dd:44:bb:92:31:58: 36:1b:11:65:2e:a4:68:10:59:6e:c4:a4:d1:a2:73:c8:a5:f7: b4:99:ed:c7:e0:87:61:ee:d4:60:37:2e:e1:39:d4:cb:e6:1d: 33:3a:c4:46:27:63:85:93:88:55:3c:53:e7:50:7f:00:8d:65: 0f:8b:b1:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CI28Bs63TOWBThdGSpMXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZTg2NTY5YjE2OTBjOWRmZjc0NWNiYjQzODA1Yjg1ODJi MDA1YWQwHhcNMjYwMTI2MDIwMTA4WhcNMjYwMTI3MDIwMTA4WjAzMTEwLwYDVQQD Eyg5Y2Y1Nzk3YzNlNjA4NDBjM2MxMTU2YzQ0NmU3OTlkZDFjMDUyYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMt0rVHq10AncfbcrKzxZf08f5gR XHbuGDIVDAdAOYi7TV8I6w8paNR215fyPQj/2SKhEwu6nI1b2wyODwuYR+NH455B Wiq84qrdmdHclG8ewoJvxpKv+SylYLfQJfOzsAxfRat/8Ey/QYTE02zZoIsO57C+ yWJbi1TszqH9zldXGZ4ftRiLHtgowj13f37YbeyJkNVWPaHlzN7ZwErTy+nlETQR g+j5Js4Q9Onn3dpiF/A9q381CUcxmjdy9oMVYUz/PSsBCaxURodOGpJDRb3UmG0f muM8hPIl6bW7+RD4k0whx+NtbI36o87F7yUJoX4FZ0ujd/Ynf2LyGvKhEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz1eXw+YIQMPBFWxEbnmd0cBSrtMB8GA1UdIwQY MBaAFMPoZWmxaQyd/3Rcu0OAW4WCsAWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUt ZGJiYjM1YzllMzc4LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUtZGJiYjM1YzllMzc4 LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjb/pY9t Fz3i8mvV+mDNiUj40pvhaF4COBNFALoSWoA1+p5l4lq4Lu4qTs4SubcqLF8nZfMG f0rpNNujb+7Pr+/LRG6iOChU0VZAbocwY9olJJ6GoH6HPgEqx2SuuVE1FPRsMyew /rB5DnWiKzs50NLDYUCOyt83n7O2Ezll21Fq1YdnzS13yOQaZjy6iwF9Od1R1yaC B+kRN13gjla6ja78hNWaAjDWEk9ZIODy7pHXzX90Jpp+PgRY2aSTXg3b3US7kjFY NhsRZS6kaBBZbsSk0aJzyKX3tJntx+CHYe7UYDcu4TnUy+YdMzrERidjhZOIVTxT 51B/AI1lD4uxzA== -----END CERTIFICATE-----Generated at Mon Jan 26 11:10:36 2026 by rpki-client