This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft File: wjZC0as50wnsXzPk6IFK3DWEgl8.mft (raw, json) Hash identifier: TIiVEK/dc5h2hsKEj90yBkJdrTlgCzFN8RvQXypXpKM= Subject key identifier: 77:1B:8F:A2:AD:9C:37:63:96:01:3B:32:7F:A6:A4:AD:FF:25:A1:E2 Authority key identifier: C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F Certificate issuer: /CN=c23642d1ab39d309ec5f33e4e8814adc3584825f Certificate serial: 019BF5E4071CDE34796AD893B471C99C1454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft Manifest number: 0C9A Signing time: Sun 25 Jan 2026 16:02:00 +0000 Manifest this update: Sun 25 Jan 2026 16:02:00 +0000 Manifest next update: Mon 26 Jan 2026 16:02:00 +0000 Files and hashes: 1: TuWv3N1-unV3Eu3hIWcQWgFmKPQ.roa (hash: J1hOIcfa6XqS5M+c4PzgE80mhXmq9LomS1O6BvUnhgQ=) 2: wjZC0as50wnsXzPk6IFK3DWEgl8.crl (hash: 3InFkpqytoCJPL4bAVq745zmGUCdKyoFKMfKifkk8nE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:07:1c:de:34:79:6a:d8:93:b4:71:c9:9c:14:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c23642d1ab39d309ec5f33e4e8814adc3584825f Validity Not Before: Jan 25 16:02:00 2026 GMT Not After : Jan 26 16:02:00 2026 GMT Subject: CN=771b8fa2ad9c376396013b327fa6a4adff25a1e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1e:31:77:0a:49:c6:c5:f3:87:a1:1e:26:02: 5e:f6:04:58:d7:e8:e3:81:af:84:d3:b0:81:2d:e6: 0e:f2:d3:e4:70:3f:49:d5:93:ec:ad:22:ca:0f:a0: 71:46:d3:6b:bd:9f:bc:75:61:04:3e:87:b5:94:9d: 63:1f:cc:5b:11:c5:ae:b0:e0:f0:e1:fc:6e:97:80: 98:c4:34:38:52:9b:5a:b9:e2:7a:82:c7:93:43:e4: f5:ef:6f:cd:a8:51:89:4b:d0:53:14:a2:b0:8c:ea: b0:57:b5:60:68:ff:7b:3d:80:54:0d:22:02:8c:87: b5:ae:c6:a4:22:a4:b8:81:b4:f5:77:c5:ce:e1:06: 6c:ff:53:60:bc:49:15:5d:47:1f:dc:4f:38:4c:87: d1:d7:74:13:a6:b8:72:6d:2e:bc:ab:b2:94:3f:9c: a0:71:5f:d9:e7:09:5b:87:21:5a:63:cc:8f:db:b5: 98:4c:92:18:4d:26:38:b3:a2:e3:49:eb:dc:37:b6: a0:e3:6a:9b:59:b3:66:c9:5a:32:86:f1:b1:01:39: d6:1f:bf:8b:99:bd:4e:ca:a9:e6:56:b1:5d:b4:a2: 70:1e:36:a4:9d:c2:5c:37:73:56:09:29:61:46:b7: 86:67:e5:87:87:56:67:4b:0b:6b:74:d2:e3:a4:89: 90:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:1B:8F:A2:AD:9C:37:63:96:01:3B:32:7F:A6:A4:AD:FF:25:A1:E2 X509v3 Authority Key Identifier: keyid:C2:36:42:D1:AB:39:D3:09:EC:5F:33:E4:E8:81:4A:DC:35:84:82:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjZC0as50wnsXzPk6IFK3DWEgl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e41698-e7ac-418c-b91d-2267968b652f/1/wjZC0as50wnsXzPk6IFK3DWEgl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:fc:83:f3:48:4b:49:69:94:44:a0:4f:cd:e1:b6:30:22:cd: 54:08:e4:b3:d7:db:9e:33:6d:a5:cd:fe:ca:b0:d0:72:48:c3: 2b:9e:1a:c7:89:59:2b:7a:92:c2:71:5d:80:d4:90:ef:32:12: d6:27:9c:43:ae:a4:54:59:ff:33:7d:c8:f7:5e:3c:21:2d:11: 2e:f4:eb:43:cf:17:5b:45:04:5a:41:48:3a:55:46:d5:e4:9f: f6:ba:42:51:de:5d:c8:1b:1e:5d:89:88:c4:c8:3c:8d:69:52: e8:14:52:c8:b3:2d:b9:ef:81:33:67:dd:56:32:c8:24:79:64: ef:be:24:1f:c3:90:8e:b1:cf:8e:85:ce:ce:84:d1:83:9d:fb: 21:76:67:3c:63:41:f9:5f:2b:3e:31:d3:c4:1c:8f:b1:64:b7: 71:20:f7:05:19:47:fe:90:d3:e1:57:0f:56:0d:e8:06:28:55: b0:7b:16:19:ba:c0:f6:89:d9:ac:66:4a:15:d2:b6:49:f4:f1: 00:1b:31:33:bd:7a:3f:bf:f1:a8:a3:cd:f4:6e:ba:51:4e:b1: b2:6a:15:93:1d:de:76:96:fa:ae:3f:2e:46:bf:74:28:27:0f: 33:b2:d8:ac:7e:22:35:a0:0f:26:79:33:1c:c0:06:da:46:0b: 94:87:53:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15Acc3jR5atiTtHHJnBRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMzY0MmQxYWIzOWQzMDllYzVmMzNlNGU4ODE0YWRjMzU4 NDgyNWYwHhcNMjYwMTI1MTYwMjAwWhcNMjYwMTI2MTYwMjAwWjAzMTEwLwYDVQQD Eyg3NzFiOGZhMmFkOWMzNzYzOTYwMTNiMzI3ZmE2YTRhZGZmMjVhMWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR4xdwpJxsXzh6EeJgJe9gRY1+jj ga+E07CBLeYO8tPkcD9J1ZPsrSLKD6BxRtNrvZ+8dWEEPoe1lJ1jH8xbEcWusODw 4fxul4CYxDQ4UptaueJ6gseTQ+T172/NqFGJS9BTFKKwjOqwV7VgaP97PYBUDSIC jIe1rsakIqS4gbT1d8XO4QZs/1NgvEkVXUcf3E84TIfR13QTprhybS68q7KUP5yg cV/Z5wlbhyFaY8yP27WYTJIYTSY4s6LjSevcN7ag42qbWbNmyVoyhvGxATnWH7+L mb1OyqnmVrFdtKJwHjakncJcN3NWCSlhRreGZ+WHh1ZnSwtrdNLjpImQgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcbj6KtnDdjlgE7Mn+mpK3/JaHiMB8GA1UdIwQY MBaAFMI2QtGrOdMJ7F8z5OiBStw1hIJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQt MjI2Nzk2OGI2NTJmLzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lNDE2OTgtZTdhYy00MThjLWI5MWQtMjI2Nzk2OGI2NTJm LzEvd2paQzBhczUwd25zWHpQazZJRkszRFdFZ2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvyD80hL SWmURKBPzeG2MCLNVAjks9fbnjNtpc3+yrDQckjDK54ax4lZK3qSwnFdgNSQ7zIS 1iecQ66kVFn/M33I9148IS0RLvTrQ88XW0UEWkFIOlVG1eSf9rpCUd5dyBseXYmI xMg8jWlS6BRSyLMtue+BM2fdVjLIJHlk774kH8OQjrHPjoXOzoTRg537IXZnPGNB +V8rPjHTxByPsWS3cSD3BRlH/pDT4VcPVg3oBihVsHsWGbrA9onZrGZKFdK2SfTx ABsxM716P7/xqKPN9G66UU6xsmoVkx3edpb6rj8uRr90KCcPM7LYrH4iNaAPJnkz HMAG2kYLlIdTfw== -----END CERTIFICATE-----Generated at Sun Jan 25 18:27:24 2026 by rpki-client