This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft File: wiEliXTujgVFYMcXb4NH1DVbmoc.mft (raw, json) Hash identifier: mKsoMZDinOz1maJeDM5x5PFKJvC6WhiM8lkdmn02/7g= Subject key identifier: 35:EB:B7:6A:74:76:2F:30:04:C5:96:D9:2F:0F:47:C0:0A:33:19:62 Authority key identifier: C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87 Certificate issuer: /CN=c221258974ee8e054560c7176f8347d4355b9a87 Certificate serial: 019BF6F5921B1068EE0560FE04CA4A9EA847 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft Manifest number: 0A23 Signing time: Sun 25 Jan 2026 21:00:47 +0000 Manifest this update: Sun 25 Jan 2026 21:00:47 +0000 Manifest next update: Mon 26 Jan 2026 21:00:47 +0000 Files and hashes: 1: aw-WNjpmhXowt4HLmn9oWTfYk6A.roa (hash: /fTiwwaRSLZvsQsUTep5wCR0cEXV9emopBx2DPmAxcM=) 2: wiEliXTujgVFYMcXb4NH1DVbmoc.crl (hash: 7uoGz7ewLRKxHxjDd/vFXMr6XrvCzpRQJ0iotJsMaTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:f5:92:1b:10:68:ee:05:60:fe:04:ca:4a:9e:a8:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c221258974ee8e054560c7176f8347d4355b9a87 Validity Not Before: Jan 25 21:00:47 2026 GMT Not After : Jan 26 21:00:47 2026 GMT Subject: CN=35ebb76a74762f3004c596d92f0f47c00a331962 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4d:62:6f:5d:1a:60:ba:dc:cf:46:94:a5:3f: 63:62:76:a3:0f:ce:8e:a3:36:61:1c:f7:a3:3d:44: 55:3b:83:b4:91:6d:95:3b:71:8f:dc:43:db:fc:3b: b9:e3:10:81:09:a8:a4:dd:3c:ad:eb:46:d1:ee:df: 01:2c:b7:74:39:e2:9d:67:55:cc:e9:7a:e3:bc:75: 4c:f7:e0:78:81:8d:93:e9:01:0b:e5:1b:e6:87:76: 62:9b:24:0c:36:7e:fb:e8:a1:ed:e0:1b:7c:61:12: 75:86:ba:ce:10:e3:23:ea:d9:42:2a:10:67:73:06: a3:38:90:3f:47:09:a7:48:cd:58:5a:14:37:67:08: 25:a5:56:41:ee:63:4d:26:9f:7c:d4:39:ee:1b:39: 41:8c:1b:fd:d4:b8:23:ba:aa:c5:18:94:08:61:20: 5f:a2:e7:84:5f:5f:39:2b:e1:6a:8b:8c:ff:7a:ec: 19:00:63:e8:ed:b3:46:d6:11:ed:ae:8a:6e:40:16: 8e:2c:33:af:bb:6d:28:0f:00:98:f9:03:f6:7e:0b: 86:68:d1:f3:76:32:f1:80:e3:cf:4c:e1:66:5e:c5: 7f:f1:28:65:6d:c3:c4:a0:bc:b9:3d:77:65:f9:aa: bf:4a:57:ab:a8:74:98:10:07:58:3a:69:98:9c:50: 2b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EB:B7:6A:74:76:2F:30:04:C5:96:D9:2F:0F:47:C0:0A:33:19:62 X509v3 Authority Key Identifier: keyid:C2:21:25:89:74:EE:8E:05:45:60:C7:17:6F:83:47:D4:35:5B:9A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wiEliXTujgVFYMcXb4NH1DVbmoc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/08482f-a7c5-4627-a068-25f79d2d8c17/1/wiEliXTujgVFYMcXb4NH1DVbmoc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:d7:bd:1a:4c:cb:0d:6b:ea:41:1c:18:25:ae:e2:3c:c5:05: 08:1f:71:c4:33:04:bc:20:cc:1c:08:09:1e:52:91:44:05:12: 02:84:08:91:92:4a:61:e2:68:82:e9:51:03:68:34:6f:c6:d3: a8:5d:f5:40:1a:74:6e:d6:b2:2d:5b:b8:f8:0d:34:79:a7:97: ee:16:62:f1:17:ec:39:77:cd:e1:b6:f1:ef:2d:f1:d8:bb:29: fd:7b:e7:94:46:b6:de:46:b5:22:dc:1d:25:04:b8:62:32:56: f5:91:5a:87:66:99:58:35:19:dd:bd:cb:51:b3:c7:df:0a:6c: 8a:79:c5:0c:ad:11:4b:87:76:b7:0e:3a:e9:83:44:58:76:2f: b7:27:4b:cb:e1:f3:3a:e5:dc:77:a2:ff:e5:fc:02:c8:fc:0d: 1f:e6:36:c8:28:84:6f:74:e0:d5:3f:b4:69:54:51:73:62:57: 4f:f5:9e:33:50:fc:3f:b0:3b:aa:fc:c3:97:7d:7a:7c:22:8c: c9:12:ac:82:f0:09:60:ff:79:4e:85:4d:63:18:d8:7c:8a:b6: e5:87:45:7e:45:2b:1d:1b:c0:c4:7f:a7:16:e0:a6:0e:6f:69: 8c:93:b7:6f:af:4e:b7:80:0d:44:a1:9f:a9:72:a3:18:cc:90: 7e:81:e5:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv29ZIbEGjuBWD+BMpKnqhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyMjEyNTg5NzRlZThlMDU0NTYwYzcxNzZmODM0N2Q0MzU1 YjlhODcwHhcNMjYwMTI1MjEwMDQ3WhcNMjYwMTI2MjEwMDQ3WjAzMTEwLwYDVQQD EygzNWViYjc2YTc0NzYyZjMwMDRjNTk2ZDkyZjBmNDdjMDBhMzMxOTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5U1ib10aYLrcz0aUpT9jYnajD86O ozZhHPejPURVO4O0kW2VO3GP3EPb/Du54xCBCaik3Tyt60bR7t8BLLd0OeKdZ1XM 6XrjvHVM9+B4gY2T6QEL5Rvmh3ZimyQMNn776KHt4Bt8YRJ1hrrOEOMj6tlCKhBn cwajOJA/RwmnSM1YWhQ3ZwglpVZB7mNNJp981DnuGzlBjBv91LgjuqrFGJQIYSBf oueEX185K+Fqi4z/euwZAGPo7bNG1hHtropuQBaOLDOvu20oDwCY+QP2fguGaNHz djLxgOPPTOFmXsV/8ShlbcPEoLy5PXdl+aq/SlerqHSYEAdYOmmYnFArdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXrt2p0di8wBMWW2S8PR8AKMxliMB8GA1UdIwQY MBaAFMIhJYl07o4FRWDHF2+DR9Q1W5qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgt MjVmNzlkMmQ4YzE3LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi8wODQ4MmYtYTdjNS00NjI3LWEwNjgtMjVmNzlkMmQ4YzE3 LzEvd2lFbGlYVHVqZ1ZGWU1jWGI0TkgxRFZibW9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACde9GkzL DWvqQRwYJa7iPMUFCB9xxDMEvCDMHAgJHlKRRAUSAoQIkZJKYeJogulRA2g0b8bT qF31QBp0btayLVu4+A00eaeX7hZi8RfsOXfN4bbx7y3x2Lsp/XvnlEa23ka1Itwd JQS4YjJW9ZFah2aZWDUZ3b3LUbPH3wpsinnFDK0RS4d2tw466YNEWHYvtydLy+Hz OuXcd6L/5fwCyPwNH+Y2yCiEb3Tg1T+0aVRRc2JXT/WeM1D8P7A7qvzDl316fCKM yRKsgvAJYP95ToVNYxjYfIq25YdFfkUrHRvAxH+nFuCmDm9pjJO3b69Ot4ANRKGf qXKjGMyQfoHleQ== -----END CERTIFICATE-----Generated at Mon Jan 26 04:00:45 2026 by rpki-client