This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft File: W0Vsn395uYcZbEaEAjlqGHwVbXw.mft (raw, json) Hash identifier: VkE69ELyRuyFyxWbJdRAOEu8T3fZkMbvs/ge+nsX1i0= Subject key identifier: CE:76:A7:D1:28:B6:78:8D:BB:9C:61:1A:9D:7E:54:63:0E:F6:D0:97 Authority key identifier: 5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C Certificate issuer: /CN=5b456c9f7f79b987196c468402396a187c156d7c Certificate serial: 019BF650944961E01B16660123A8C802FA5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 18:00:34 +0000 Manifest this update: Sun 25 Jan 2026 18:00:34 +0000 Manifest next update: Mon 26 Jan 2026 18:00:34 +0000 Files and hashes: 1: W0Vsn395uYcZbEaEAjlqGHwVbXw.crl (hash: esZon8SW19mXG369WdC4C5wZotGv4zANgvLMRjsjFxU=) 2: o-kyHNKgNIUjHSBED-Es8cwoO9E.roa (hash: lOa1Oo5w8/mV1ahZL5zKke2ZPT9sWJF3NLgPW5L4ayE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:94:49:61:e0:1b:16:66:01:23:a8:c8:02:fa:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b456c9f7f79b987196c468402396a187c156d7c Validity Not Before: Jan 25 18:00:34 2026 GMT Not After : Jan 26 18:00:34 2026 GMT Subject: CN=ce76a7d128b6788dbb9c611a9d7e54630ef6d097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c8:85:2a:7b:17:f7:f0:53:8b:26:94:b9:a5: 58:62:da:71:8b:83:91:f9:0c:6a:ca:87:cf:82:77: be:0c:ba:2f:80:e2:a0:1d:b2:a5:ac:10:19:4e:3f: a2:a5:f5:46:60:2d:0a:1b:30:43:f3:f8:57:f5:46: 43:96:92:17:a2:9a:e4:24:ab:c5:47:40:4d:6b:cf: 85:37:54:30:b6:bf:0b:92:66:d7:23:34:ca:ec:f3: 91:2b:85:9d:f6:f6:b9:3d:82:19:4a:1d:4c:b6:f3: 2c:14:75:76:d1:d3:b6:24:5e:c7:31:3a:f8:0a:49: b5:b6:40:b1:fc:07:a2:84:62:57:2e:23:7d:b0:d0: c5:45:04:eb:75:ef:d4:a6:b2:c0:99:c3:79:79:e2: 50:07:a4:86:55:54:b7:9c:be:39:87:dc:5a:b6:f7: 9e:69:2e:41:6a:19:a9:e6:ae:20:12:81:70:d6:9d: 20:ed:3c:a8:7e:d1:7a:2d:84:10:66:03:04:f1:8e: 0e:cd:95:e9:18:ff:7d:f8:a7:0c:33:0d:23:72:87: f0:cf:08:8c:12:d6:68:2f:aa:50:e7:a7:c7:c2:11: 68:3f:39:4e:67:6b:01:07:bd:39:98:d0:1c:d3:6e: d1:6b:ee:64:bc:a1:c1:e4:d8:1e:93:2d:21:ec:cb: 9a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:76:A7:D1:28:B6:78:8D:BB:9C:61:1A:9D:7E:54:63:0E:F6:D0:97 X509v3 Authority Key Identifier: keyid:5B:45:6C:9F:7F:79:B9:87:19:6C:46:84:02:39:6A:18:7C:15:6D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0Vsn395uYcZbEaEAjlqGHwVbXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1defca-e125-4b00-9252-9fe86dea862a/1/W0Vsn395uYcZbEaEAjlqGHwVbXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a5:b9:f4:8a:f9:85:35:5c:90:2b:b0:12:ba:ad:cc:a0:2f: 5a:57:37:08:4e:3d:5f:52:a8:7c:29:4d:a1:8c:b5:ed:da:45: bb:90:75:bf:c1:3a:2a:4c:ac:46:8c:2a:ab:c0:e5:d7:96:ad: 47:28:a1:17:b3:44:17:25:c1:d3:98:f5:a7:24:c8:57:01:39: e4:29:75:9c:cf:fa:6a:26:1b:da:88:e3:c0:41:01:e3:99:0b: 4b:dc:c5:93:c0:fe:ba:c9:c3:fb:cf:ff:05:11:58:bb:08:28: 52:9d:b3:93:da:ed:84:91:bc:98:aa:af:2d:8c:c6:7c:9b:9e: cc:8c:dd:bb:2c:91:66:80:aa:54:7e:00:25:df:e8:cf:f7:74: 9c:9d:a0:be:04:c4:19:cb:0c:0a:d3:9c:29:e0:d3:0e:a7:19: ce:6c:e5:f8:f3:5e:5f:f9:9d:07:ad:c1:8d:b0:a8:ec:4c:1e: 01:37:d8:9f:6c:1d:53:91:b6:a6:a0:12:c7:2f:69:83:a1:24: 47:02:b9:f2:6a:b3:ab:a0:9a:9d:56:2e:c1:65:00:aa:f9:34: e8:31:3a:35:c5:3e:42:c1:61:46:19:5f:0a:0a:9b:13:23:2f: 3b:4f:3c:82:30:4e:d9:76:d6:2e:f3:9e:57:e3:8f:ca:63:5e: 42:38:71:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UJRJYeAbFmYBI6jIAvpaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNDU2YzlmN2Y3OWI5ODcxOTZjNDY4NDAyMzk2YTE4N2Mx NTZkN2MwHhcNMjYwMTI1MTgwMDM0WhcNMjYwMTI2MTgwMDM0WjAzMTEwLwYDVQQD EyhjZTc2YTdkMTI4YjY3ODhkYmI5YzYxMWE5ZDdlNTQ2MzBlZjZkMDk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8iFKnsX9/BTiyaUuaVYYtpxi4OR +QxqyofPgne+DLovgOKgHbKlrBAZTj+ipfVGYC0KGzBD8/hX9UZDlpIXoprkJKvF R0BNa8+FN1Qwtr8LkmbXIzTK7PORK4Wd9va5PYIZSh1MtvMsFHV20dO2JF7HMTr4 Ckm1tkCx/AeihGJXLiN9sNDFRQTrde/UprLAmcN5eeJQB6SGVVS3nL45h9xatvee aS5Bahmp5q4gEoFw1p0g7TyoftF6LYQQZgME8Y4OzZXpGP99+KcMMw0jcofwzwiM EtZoL6pQ56fHwhFoPzlOZ2sBB705mNAc027Ra+5kvKHB5Ngeky0h7MuawQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM52p9EotniNu5xhGp1+VGMO9tCXMB8GA1UdIwQY MBaAFFtFbJ9/ebmHGWxGhAI5ahh8FW18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTIt OWZlODZkZWE4NjJhLzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xZGVmY2EtZTEyNS00YjAwLTkyNTItOWZlODZkZWE4NjJh LzEvVzBWc24zOTV1WWNaYkVhRUFqbHFHSHdWYlh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6W59Ir5 hTVckCuwErqtzKAvWlc3CE49X1KofClNoYy17dpFu5B1v8E6KkysRowqq8Dl15at RyihF7NEFyXB05j1pyTIVwE55Cl1nM/6aiYb2ojjwEEB45kLS9zFk8D+usnD+8// BRFYuwgoUp2zk9rthJG8mKqvLYzGfJuezIzduyyRZoCqVH4AJd/oz/d0nJ2gvgTE GcsMCtOcKeDTDqcZzmzl+PNeX/mdB63BjbCo7EweATfYn2wdU5G2pqASxy9pg6Ek RwK58mqzq6CanVYuwWUAqvk06DE6NcU+QsFhRhlfCgqbEyMvO088gjBO2XbWLvOe V+OPymNeQjhxhA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:44:49 2026 by rpki-client