This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft File: Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft (raw, json) Hash identifier: /Hlm+3LT2hq8IUn7M7mIXk7L8NW21fZJPkzNR7l/nk8= Subject key identifier: 42:8F:9C:EC:8F:FD:7A:F1:46:BC:77:A6:8A:CA:2D:D6:52:ED:95:EC Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa Certificate serial: 019BF83FB52FE7F018585DAD5B6E438CF068 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft Manifest number: 161B Signing time: Mon 26 Jan 2026 03:01:23 +0000 Manifest this update: Mon 26 Jan 2026 03:01:23 +0000 Manifest next update: Tue 27 Jan 2026 03:01:23 +0000 Files and hashes: 1: Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl (hash: KXZpLLPgY4aN7IPMCBjeHUJlOLKvWhAg4NoNFJ4Fblw=) 2: dNkHE3jPImN4EseW6DyqfCow5I0.roa (hash: X9y8DNM6+jX2FyF40QujMf5GG93s9rWer+VdTVcTHgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:b5:2f:e7:f0:18:58:5d:ad:5b:6e:43:8c:f0:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa Validity Not Before: Jan 26 03:01:23 2026 GMT Not After : Jan 27 03:01:23 2026 GMT Subject: CN=428f9cec8ffd7af146bc77a68aca2dd652ed95ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:3f:1b:c5:cd:99:1e:24:54:32:d0:49:03:7e: 86:6b:17:63:9d:ba:1a:55:d0:c1:28:cc:83:1e:d9: 9d:c7:82:f2:28:a3:1c:e2:40:d0:08:cb:97:bd:e0: fc:42:54:b6:34:99:40:4f:db:52:30:f8:c6:79:fc: b1:53:fa:6d:ac:30:49:85:49:28:0e:7d:c1:7b:d9: 35:d1:e9:4e:59:d7:ed:17:44:6f:ab:b4:a6:fc:8b: 49:ce:08:bf:3a:08:f3:b0:d5:f0:39:cb:4b:86:43: 3b:9b:02:6f:f7:28:4a:9f:4e:da:78:3f:ac:4f:81: a0:ae:67:75:00:f5:a7:d1:9a:c7:18:4b:44:6f:92: aa:66:02:92:0a:4f:24:50:a7:f0:63:c9:b3:e9:62: ce:64:df:94:e3:41:52:1d:2f:d6:5f:9f:a3:bb:8f: 93:c0:84:46:92:40:7c:71:74:6e:34:cd:0d:28:20: a0:8f:16:96:a4:bf:85:f4:a8:c9:55:04:7c:36:e1: 64:80:9b:ad:20:24:b5:81:91:32:b1:5b:e4:bd:60: 56:bc:49:3e:ce:86:cb:b5:e0:c7:f7:7c:36:03:df: 5c:63:1b:c8:5c:d9:7f:88:00:ac:79:0a:32:13:de: b5:d0:9f:93:03:55:7c:6f:8d:26:f5:3d:a3:16:3b: f1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:8F:9C:EC:8F:FD:7A:F1:46:BC:77:A6:8A:CA:2D:D6:52:ED:95:EC X509v3 Authority Key Identifier: keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:54:34:55:06:54:d0:c8:21:ed:50:b8:72:89:80:24:4e:95: f6:f2:b5:bd:2d:29:1d:70:32:b1:6c:9d:5b:e4:94:f9:02:a9: 56:e3:32:8e:69:e5:2d:9a:b1:e8:b4:e7:c8:85:78:a6:a9:00: ff:0e:b3:4b:f9:89:67:d4:d4:38:7c:a2:9a:6f:87:b4:b2:ac: 5a:c6:85:00:5b:fd:66:0c:bc:62:74:82:4c:3b:e5:69:48:58: 51:15:48:d9:de:2f:6b:06:ef:65:a0:6e:85:41:c3:59:48:8d: 7e:a3:65:ed:f9:16:42:0d:5d:98:c0:a3:d3:f6:bd:eb:33:0a: 83:d2:e1:7d:c0:09:b2:9c:64:b1:cd:22:1d:db:77:46:5c:56: b9:5f:e7:19:14:25:85:f4:7d:97:e9:1a:49:c7:d2:76:42:50: 9e:66:1a:82:ef:05:85:6e:e2:06:9c:4d:30:07:fa:8b:1a:13: 4c:fb:09:08:13:3b:b7:85:86:32:c4:6a:63:f6:dd:72:a7:62: d3:f9:05:ce:bf:16:13:10:3c:15:14:7f:a6:fd:0d:00:b6:f7: 0c:a6:94:ed:54:a9:cd:48:52:55:da:3e:17:7e:d8:e8:a3:1a: 18:25:e4:4c:4b:ec:3a:df:45:4c:cf:ef:5e:81:49:e4:a7:5a: 15:55:2f:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P7Uv5/AYWF2tW25DjPBoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGRhNTM5ZmViOGY4YTM3MjUzNDI2MDA2NzBjMGMxNTRl NGJhYWEwHhcNMjYwMTI2MDMwMTIzWhcNMjYwMTI3MDMwMTIzWjAzMTEwLwYDVQQD Eyg0MjhmOWNlYzhmZmQ3YWYxNDZiYzc3YTY4YWNhMmRkNjUyZWQ5NWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj8bxc2ZHiRUMtBJA36Gaxdjnboa VdDBKMyDHtmdx4LyKKMc4kDQCMuXveD8QlS2NJlAT9tSMPjGefyxU/ptrDBJhUko Dn3Be9k10elOWdftF0Rvq7Sm/ItJzgi/OgjzsNXwOctLhkM7mwJv9yhKn07aeD+s T4Ggrmd1APWn0ZrHGEtEb5KqZgKSCk8kUKfwY8mz6WLOZN+U40FSHS/WX5+ju4+T wIRGkkB8cXRuNM0NKCCgjxaWpL+F9KjJVQR8NuFkgJutICS1gZEysVvkvWBWvEk+ zobLteDH93w2A99cYxvIXNl/iACseQoyE9610J+TA1V8b40m9T2jFjvxHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKPnOyP/XrxRrx3porKLdZS7ZXsMB8GA1UdIwQY MBaAFFndpTn+uPijclNCYAZwwMFU5LqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQt ZmVjMjVkMmU5MThkLzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9iZjJiYTUtZjI4MC00OWU1LTlhMzQtZmVjMjVkMmU5MThk LzEvV2QybE9mNjQtS055VTBKZ0JuREF3VlRrdXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVQ0VQZU 0Mgh7VC4comAJE6V9vK1vS0pHXAysWydW+SU+QKpVuMyjmnlLZqx6LTnyIV4pqkA /w6zS/mJZ9TUOHyimm+HtLKsWsaFAFv9Zgy8YnSCTDvlaUhYURVI2d4vawbvZaBu hUHDWUiNfqNl7fkWQg1dmMCj0/a96zMKg9LhfcAJspxksc0iHdt3RlxWuV/nGRQl hfR9l+kaScfSdkJQnmYagu8FhW7iBpxNMAf6ixoTTPsJCBM7t4WGMsRqY/bdcqdi 0/kFzr8WExA8FRR/pv0NALb3DKaU7VSpzUhSVdo+F37Y6KMaGCXkTEvsOt9FTM/v XoFJ5KdaFVUvdw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:49 2026 by rpki-client