This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft File: WUlpi7zST8nhqfX0FIbDGvGaS8g.mft (raw, json) Hash identifier: yhGindT6nrD8ExQFkcG/PZRQl6SwJfRbUs/iM1CTmus= Subject key identifier: 13:73:6E:1E:3B:8C:E7:17:6D:D5:B5:36:24:7C:D2:83:7A:AF:5B:2C Authority key identifier: 59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8 Certificate issuer: /CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8 Certificate serial: 019BF619F2077149793B62C35AE089E15989 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft Manifest number: 17E8 Signing time: Sun 25 Jan 2026 17:00:54 +0000 Manifest this update: Sun 25 Jan 2026 17:00:54 +0000 Manifest next update: Mon 26 Jan 2026 17:00:54 +0000 Files and hashes: 1: WUlpi7zST8nhqfX0FIbDGvGaS8g.crl (hash: Jz/o3s8G0o+oBHwPS/jJCUkkzcx5OcO7jSQP8IJuVX4=) 2: rfBCbJ5UqyxJrmjFjOyG2IH9R30.roa (hash: Hq6QRnbtYlfThxdla/oR5Z86FNJ4rl+SznGomi6Y9bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:f2:07:71:49:79:3b:62:c3:5a:e0:89:e1:59:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5949698bbcd24fc9e1a9f5f41486c31af19a4bc8 Validity Not Before: Jan 25 17:00:54 2026 GMT Not After : Jan 26 17:00:54 2026 GMT Subject: CN=13736e1e3b8ce7176dd5b536247cd2837aaf5b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a2:ed:9e:9a:ad:ad:2c:b3:43:97:3c:f5:61: ab:82:95:ec:e6:13:67:04:1f:26:bf:a8:5d:a2:9d: 01:eb:52:1f:1f:37:30:29:ba:0c:d4:e7:3f:30:71: 31:33:0d:04:d2:dd:40:20:3e:d7:84:67:27:49:22: 7e:f6:e8:b5:50:0e:b4:c5:01:92:27:cf:b3:a3:50: 07:09:20:e0:6f:5e:11:82:00:23:d0:94:b5:f7:4f: c5:33:86:80:31:4f:cf:f6:16:40:f0:dd:7d:b2:94: 06:0d:f6:d9:2b:9a:9e:c9:8d:8c:e6:ba:6c:d7:ae: 66:9a:8c:da:ed:52:63:23:25:28:0e:c9:09:c8:08: 6a:74:7b:c5:03:25:f4:80:7c:0c:63:e0:4d:81:ac: df:fa:d6:4c:07:81:d2:88:58:a2:50:18:cb:8c:9c: ca:54:b8:d2:59:9e:96:02:db:70:01:da:ef:b6:7b: 77:8e:8f:03:83:fe:46:94:f1:6b:ed:70:74:48:92: 8f:27:2f:90:b7:cb:3f:49:35:51:9e:3d:bb:0c:ae: 09:08:62:98:05:27:93:88:70:dc:5b:38:99:11:57: a5:7e:b9:f3:44:82:ca:95:95:2d:17:42:32:7b:a1: f2:54:a8:53:6d:dd:52:cc:25:56:19:ba:35:6d:55: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:73:6E:1E:3B:8C:E7:17:6D:D5:B5:36:24:7C:D2:83:7A:AF:5B:2C X509v3 Authority Key Identifier: keyid:59:49:69:8B:BC:D2:4F:C9:E1:A9:F5:F4:14:86:C3:1A:F1:9A:4B:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUlpi7zST8nhqfX0FIbDGvGaS8g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/31c056-6a8a-4226-803c-583fbe64a955/1/WUlpi7zST8nhqfX0FIbDGvGaS8g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:48:43:12:2a:7a:a5:44:11:e1:63:3c:69:d9:d8:75:93:35: 9f:88:44:4b:d7:bc:a1:2e:af:f7:66:c2:f9:a3:f0:ca:e5:2b: 89:87:f8:74:b4:58:b5:6e:30:a6:9c:26:45:1d:fc:31:05:55: 1f:0c:6f:cc:e6:47:f4:ae:34:59:ae:c1:60:53:7e:89:8f:e5: 5f:cb:ed:1d:2a:72:fc:0e:fe:d1:39:aa:9f:30:27:53:41:91: 87:28:83:01:63:b7:71:e7:ae:38:17:5e:f4:a0:ce:69:70:0d: 93:1b:ae:12:47:de:3b:cf:a4:6b:20:58:ba:2a:5a:90:88:09: cd:e1:af:25:aa:75:77:45:2b:9a:85:2d:25:44:2b:7f:27:2c: 50:0a:19:eb:b9:e0:b3:60:40:44:3f:cd:88:0d:4a:62:22:a1: a5:df:0b:e9:73:45:84:3f:4b:4d:00:8b:b6:6a:4d:be:dd:1d: 68:c5:4d:08:8e:3e:74:f6:7e:7d:7b:39:a6:81:4a:48:6f:3c: 09:a8:29:04:85:19:dd:cc:63:e3:fd:2d:40:89:5c:d4:ee:b3: 54:ab:f2:15:7d:a6:f4:de:b0:73:3f:ef:41:40:17:15:81:09: ac:8f:6b:67:54:9c:9d:eb:9e:f4:52:2a:f6:2e:e1:6c:27:c4: 13:c9:7f:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GfIHcUl5O2LDWuCJ4VmJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDk2OThiYmNkMjRmYzllMWE5ZjVmNDE0ODZjMzFhZjE5 YTRiYzgwHhcNMjYwMTI1MTcwMDU0WhcNMjYwMTI2MTcwMDU0WjAzMTEwLwYDVQQD EygxMzczNmUxZTNiOGNlNzE3NmRkNWI1MzYyNDdjZDI4MzdhYWY1YjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46LtnpqtrSyzQ5c89WGrgpXs5hNn BB8mv6hdop0B61IfHzcwKboM1Oc/MHExMw0E0t1AID7XhGcnSSJ+9ui1UA60xQGS J8+zo1AHCSDgb14RggAj0JS190/FM4aAMU/P9hZA8N19spQGDfbZK5qeyY2M5rps 165mmoza7VJjIyUoDskJyAhqdHvFAyX0gHwMY+BNgazf+tZMB4HSiFiiUBjLjJzK VLjSWZ6WAttwAdrvtnt3jo8Dg/5GlPFr7XB0SJKPJy+Qt8s/STVRnj27DK4JCGKY BSeTiHDcWziZEVelfrnzRILKlZUtF0Iye6HyVKhTbd1SzCVWGbo1bVWgHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNzbh47jOcXbdW1NiR80oN6r1ssMB8GA1UdIwQY MBaAFFlJaYu80k/J4an19BSGwxrxmkvIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2Mt NTgzZmJlNjRhOTU1LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMWMwNTYtNmE4YS00MjI2LTgwM2MtNTgzZmJlNjRhOTU1 LzEvV1VscGk3elNUOG5ocWZYMEZJYkRHdkdhUzhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGEhDEip6 pUQR4WM8adnYdZM1n4hES9e8oS6v92bC+aPwyuUriYf4dLRYtW4wppwmRR38MQVV HwxvzOZH9K40Wa7BYFN+iY/lX8vtHSpy/A7+0TmqnzAnU0GRhyiDAWO3ceeuOBde 9KDOaXANkxuuEkfeO8+kayBYuipakIgJzeGvJap1d0UrmoUtJUQrfycsUAoZ67ng s2BARD/NiA1KYiKhpd8L6XNFhD9LTQCLtmpNvt0daMVNCI4+dPZ+fXs5poFKSG88 CagpBIUZ3cxj4/0tQIlc1O6zVKvyFX2m9N6wcz/vQUAXFYEJrI9rZ1Scneue9FIq 9i7hbCfEE8l/tg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:33:03 2026 by rpki-client