This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft File: w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json) Hash identifier: 7txTF/0eNAkwU+f6F+Ga6gzA85KEQltW2r7mdVvkzhk= Subject key identifier: 0D:59:32:2C:89:41:F4:FB:DC:01:E0:43:41:CB:9E:00:81:56:C2:C8 Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C Certificate issuer: /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c Certificate serial: 019BF79A64CD7A48DAF4906434ED913A8423 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft Manifest number: 0C9A Signing time: Mon 26 Jan 2026 00:00:49 +0000 Manifest this update: Mon 26 Jan 2026 00:00:49 +0000 Manifest next update: Tue 27 Jan 2026 00:00:49 +0000 Files and hashes: 1: 9jeDYK_knLWdWNHtP5D0cVO31qY.roa (hash: 6Wo1Gq7cJQHP7npXhJpTMr2r87iqorsL+3UpSfgjQL8=) 2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: Yk1dXlsytmqt0sis+hiH5yMyXXFGWS17O1e+qhkzYrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:64:cd:7a:48:da:f4:90:64:34:ed:91:3a:84:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c Validity Not Before: Jan 26 00:00:49 2026 GMT Not After : Jan 27 00:00:49 2026 GMT Subject: CN=0d59322c8941f4fbdc01e04341cb9e008156c2c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d5:10:bd:bd:e7:4e:b1:29:a6:2b:b7:14:66: 59:36:af:1e:dc:52:82:f2:b5:d1:0e:9c:af:21:94: fe:40:95:33:a4:d1:3d:96:8e:2a:84:ed:9f:23:40: e5:08:b9:1f:ac:48:9a:76:e4:7c:13:d1:59:23:c2: 2d:0e:f2:28:35:90:02:19:24:8d:35:58:c3:c9:57: ed:f4:99:5e:67:c8:0f:c6:ea:29:de:4d:81:8c:4d: e3:b6:57:7f:92:78:fc:5f:38:78:db:15:ec:60:e5: 1b:a7:1d:dc:9b:7d:91:16:a9:77:66:ed:04:e4:00: 25:4e:f2:db:c5:28:5b:e1:07:d7:c9:c4:e9:78:af: 0f:9f:23:0a:f1:d5:34:86:48:b6:8a:e2:2d:4f:3c: 71:75:34:36:ef:7c:dd:3a:4c:96:11:a6:ba:a2:c0: 83:f1:df:7a:09:0e:9c:9f:c8:2d:15:4c:79:31:c1: f9:93:d3:83:25:79:4a:b7:61:d9:cd:a9:6e:0b:b9: 5a:5b:59:8a:2f:3d:a7:34:96:f4:9b:e0:3f:d2:65: cb:9d:0c:86:18:ce:58:0a:ce:3a:8a:13:ec:12:86: ae:98:4d:32:91:d3:1a:da:3d:34:d4:c3:76:79:51: f8:c4:73:20:be:ec:45:4b:1a:a8:a2:70:0c:61:e9: be:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:59:32:2C:89:41:F4:FB:DC:01:E0:43:41:CB:9E:00:81:56:C2:C8 X509v3 Authority Key Identifier: keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:4b:bf:c8:36:88:57:bd:2c:ac:4a:2b:3c:e2:0b:f4:73:a8: 93:53:59:16:95:a2:e8:f9:1d:a4:e0:6b:0b:39:4d:50:96:e7: aa:cb:cc:f9:4f:fb:7f:be:ac:ad:18:7e:3a:de:78:72:0f:36: c0:e9:3c:34:5d:d3:92:dd:fe:c9:ea:85:3f:3f:88:8d:9f:a3: b3:ee:c9:ad:40:28:6c:00:a4:96:90:93:09:b8:17:b8:08:f0: 5d:7d:27:52:1f:5e:c8:cd:06:3a:51:1f:2c:f3:17:67:fc:dd: 5f:87:ee:c2:82:8a:ee:7e:47:3a:b0:f1:f4:d9:b8:05:11:43: 81:23:59:b8:62:28:8c:63:f9:24:6d:29:b9:82:4c:eb:21:cd: 6e:52:0a:9e:9c:fb:26:8c:c9:c6:c6:08:c0:7b:f3:fa:85:59: 77:5f:b3:da:aa:90:8d:da:32:2d:03:36:39:7a:21:a9:01:22: c4:03:09:82:3f:47:0c:54:ff:2e:24:20:c5:a2:61:97:a6:c7: ce:e8:4b:30:88:75:d3:45:d8:aa:f4:ce:07:1b:1f:48:c3:0e: 1c:dd:c8:95:8c:1e:d0:0a:e3:0c:4d:c1:0a:e4:f1:38:15:16: 3f:95:d2:92:d4:2e:3a:f8:30:ee:af:d7:d3:31:4b:2a:f4:2c: 6f:77:d9:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mmTNekja9JBkNO2ROoQjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZGYyZWYzNzAwN2Q1NGY4NmJiYTI3NTczZDMzYWQ2OTVj OWVlNWMwHhcNMjYwMTI2MDAwMDQ5WhcNMjYwMTI3MDAwMDQ5WjAzMTEwLwYDVQQD EygwZDU5MzIyYzg5NDFmNGZiZGMwMWUwNDM0MWNiOWUwMDgxNTZjMmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4NUQvb3nTrEppiu3FGZZNq8e3FKC 8rXRDpyvIZT+QJUzpNE9lo4qhO2fI0DlCLkfrEiaduR8E9FZI8ItDvIoNZACGSSN NVjDyVft9JleZ8gPxuop3k2BjE3jtld/knj8Xzh42xXsYOUbpx3cm32RFql3Zu0E 5AAlTvLbxShb4QfXycTpeK8PnyMK8dU0hki2iuItTzxxdTQ273zdOkyWEaa6osCD 8d96CQ6cn8gtFUx5McH5k9ODJXlKt2HZzaluC7laW1mKLz2nNJb0m+A/0mXLnQyG GM5YCs46ihPsEoaumE0ykdMa2j001MN2eVH4xHMgvuxFSxqoonAMYem+bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1ZMiyJQfT73AHgQ0HLngCBVsLIMB8GA1UdIwQY MBaAFMPfLvNwB9VPhruidXPTOtaVye5cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQt MjNhMjc2YTQyOGFiLzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi85YTk3ZjAtNTBiNi00ODQ0LTg5ZDQtMjNhMjc2YTQyOGFi LzEvdzk4dTgzQUgxVS1HdTZKMWM5TTYxcFhKN2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEu/yDaI V70srEorPOIL9HOok1NZFpWi6PkdpOBrCzlNUJbnqsvM+U/7f76srRh+Ot54cg82 wOk8NF3Tkt3+yeqFPz+IjZ+js+7JrUAobACklpCTCbgXuAjwXX0nUh9eyM0GOlEf LPMXZ/zdX4fuwoKK7n5HOrDx9Nm4BRFDgSNZuGIojGP5JG0puYJM6yHNblIKnpz7 JozJxsYIwHvz+oVZd1+z2qqQjdoyLQM2OXohqQEixAMJgj9HDFT/LiQgxaJhl6bH zuhLMIh100XYqvTOBxsfSMMOHN3IlYwe0ArjDE3BCuTxOBUWP5XSktQuOvgw7q/X 0zFLKvQsb3fZKQ== -----END CERTIFICATE-----Generated at Mon Jan 26 11:12:02 2026 by rpki-client