This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft File: WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json) Hash identifier: kssvgYWIkhoSTC7Dm70rfUAdQwGNvOdC7HcoGyG/j8g= Subject key identifier: F0:2E:6C:18:97:96:82:FC:47:E5:B3:B1:19:39:91:52:F1:62:4C:4F Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 Certificate issuer: /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Certificate serial: 019BF87672066110899499A932B0682C745B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft Manifest number: 17FF Signing time: Mon 26 Jan 2026 04:01:10 +0000 Manifest this update: Mon 26 Jan 2026 04:01:10 +0000 Manifest next update: Tue 27 Jan 2026 04:01:10 +0000 Files and hashes: 1: 0xxG8NnQ1cHH2VuMnnW7a6ZFxBw.roa (hash: puojFO3qYRQJELluaLinsh5BQElMER1Xu8VsxXk+YDI=) 2: 5zxdjqmR3SsJvomZFwYc7Q3lUMg.roa (hash: l4rfQGKBI8UyN9DydN8xFr2Dz594CopVwc6Dn7Had1A=) 3: D-_lyCJV9Sz2bTIt9fGq5z3Su_8.roa (hash: +XSDkotkiwpFYKYiGdXlu1uwl2+rO95QfzY33Skq8BM=) 4: Iy3e1XIi2_TPudoAL1p13sZ86nk.roa (hash: ZD8BYSZqLIml0OJHAuNttBG7W2t2LH3qpbqsZj2++g0=) 5: PDKKcfMfB9Z0mxlt4jm0kcW0fg4.roa (hash: pmHMhVXHouebACUdAsdhssIPiD4oTuxtJJ4bNyh7xWs=) 6: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: YEFk+co/+XrFgt/bQXWK348YFeozvM3cm1QA5SeVCls=) 7: glPJKLzyEtOQ3A0VJ1WR_oikUIA.roa (hash: BJBEqU9Ndqs4BRPdMDfiUT/sHTP2TSMpS+6KJivs8n8=) 8: nEYDmOUwm7vPJUZ93qzJbw-7Glc.roa (hash: htajFRk/mfg74Vz00/Fc7mrofNklSksIG9I2mp6YdcQ=) 9: vfAXikjKgCjq74heQ_lW0h7lKZM.roa (hash: y9mC9ZC9KsL88BTXfe+44waOrp0v1g4TnmU21Hw3eNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 04:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:76:72:06:61:10:89:94:99:a9:32:b0:68:2c:74:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7 Validity Not Before: Jan 26 04:01:10 2026 GMT Not After : Jan 27 04:01:10 2026 GMT Subject: CN=f02e6c18979682fc47e5b3b119399152f1624c4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9a:81:2a:36:52:c5:06:90:5d:0a:d7:5c:ab: 67:69:3b:d9:3b:2b:e7:3a:81:9f:9a:d2:84:53:65: 1f:50:7c:99:d7:28:74:4d:97:fe:aa:44:3b:8d:2f: 4e:9c:69:46:21:22:32:68:6d:3d:79:4d:56:ec:bd: f6:6f:e3:44:5b:90:99:ac:a5:09:d8:24:bd:3c:6b: 57:8e:a7:90:aa:1b:ca:39:91:13:97:e6:fc:c9:1f: 80:02:9c:57:97:3a:0a:62:e7:10:ae:30:cf:e7:45: 95:3e:9e:01:fa:f9:63:d1:76:e9:66:22:19:91:01: 44:53:e3:f9:aa:ee:da:20:33:bc:96:06:0e:cf:ee: b7:b5:96:31:30:0a:3d:f8:7f:47:55:0e:ae:58:c1: 33:52:ab:88:5e:80:de:ca:15:76:1a:31:a7:2d:60: 89:6d:69:2b:b7:9c:a4:38:b9:23:18:74:df:2c:d0: a2:16:14:6f:86:48:b1:60:fd:66:a9:18:94:3a:bc: 38:a8:18:12:f3:ac:b0:60:e9:a1:08:01:ae:99:7d: bd:ff:c2:32:b0:c5:a7:f7:db:de:1a:d0:5a:4a:61: 9b:a2:6d:d4:cc:08:09:44:24:0d:46:a4:6d:3a:8f: c6:c9:25:47:99:ee:c5:ca:4f:eb:28:dc:d8:25:74: 31:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2E:6C:18:97:96:82:FC:47:E5:B3:B1:19:39:91:52:F1:62:4C:4F X509v3 Authority Key Identifier: keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ac:1b:5c:c6:29:0f:86:f0:2f:0c:9e:c1:03:12:49:78:6a: 08:dd:ba:41:64:dc:02:f5:00:9f:33:43:5b:bf:2a:c0:06:e2: 84:06:47:f1:01:23:2e:3d:8f:30:39:f0:9b:05:55:be:1d:14: c3:86:c5:20:6d:c1:9d:27:f7:33:fb:bc:ac:0a:9f:27:16:c7: 8a:86:14:fd:d7:d1:74:f4:0f:25:7b:3c:42:26:9a:81:4b:16: 49:f0:ad:81:c8:19:ee:c9:7c:1a:71:1b:3d:b2:a2:87:c9:39: 4a:92:55:d9:9f:e4:28:13:1b:55:c2:5c:ee:1a:a6:24:b8:a2: 66:da:bb:ae:5f:6e:68:1b:bf:f1:2a:d6:99:e3:57:54:f2:92: 82:ab:78:18:69:2e:95:65:45:7f:68:94:bf:8d:31:0d:8a:25: 75:76:3e:00:64:a9:1f:a4:5c:e2:6d:49:46:78:b0:a5:22:d0: 01:ca:58:ce:28:a0:03:d3:47:dd:ed:2a:db:22:39:65:12:e5: dc:24:4a:3b:b2:17:ff:f4:11:e6:ed:89:63:1b:b8:ef:c1:41: 65:8a:42:fd:84:bc:4d:30:8d:6e:83:3a:0f:9a:e7:9d:66:0c: c0:93:10:5f:da:c0:39:e5:31:a4:c4:98:86:15:23:22:27:7f: 6c:e6:f7:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4dnIGYRCJlJmpMrBoLHRbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2 MDk4YjcwHhcNMjYwMTI2MDQwMTEwWhcNMjYwMTI3MDQwMTEwWjAzMTEwLwYDVQQD EyhmMDJlNmMxODk3OTY4MmZjNDdlNWIzYjExOTM5OTE1MmYxNjI0YzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5qBKjZSxQaQXQrXXKtnaTvZOyvn OoGfmtKEU2UfUHyZ1yh0TZf+qkQ7jS9OnGlGISIyaG09eU1W7L32b+NEW5CZrKUJ 2CS9PGtXjqeQqhvKOZETl+b8yR+AApxXlzoKYucQrjDP50WVPp4B+vlj0XbpZiIZ kQFEU+P5qu7aIDO8lgYOz+63tZYxMAo9+H9HVQ6uWMEzUquIXoDeyhV2GjGnLWCJ bWkrt5ykOLkjGHTfLNCiFhRvhkixYP1mqRiUOrw4qBgS86ywYOmhCAGumX29/8Iy sMWn99veGtBaSmGbom3UzAgJRCQNRqRtOo/GySVHme7Fyk/rKNzYJXQx+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAubBiXloL8R+WzsRk5kVLxYkxPMB8GA1UdIwQY MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt NDQzYmU2M2ZjMTIzLzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs6wbXMYp D4bwLwyewQMSSXhqCN26QWTcAvUAnzNDW78qwAbihAZH8QEjLj2PMDnwmwVVvh0U w4bFIG3BnSf3M/u8rAqfJxbHioYU/dfRdPQPJXs8QiaagUsWSfCtgcgZ7sl8GnEb PbKih8k5SpJV2Z/kKBMbVcJc7hqmJLiiZtq7rl9uaBu/8SrWmeNXVPKSgqt4GGku lWVFf2iUv40xDYoldXY+AGSpH6Rc4m1JRniwpSLQAcpYziigA9NH3e0q2yI5ZRLl 3CRKO7IX//QR5u2JYxu478FBZYpC/YS8TTCNboM6D5rnnWYMwJMQX9rAOeUxpMSY hhUjIid/bOb3Xw== -----END CERTIFICATE-----Generated at Mon Jan 26 13:06:18 2026 by rpki-client