This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft File: wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json) Hash identifier: AKardtXFbv+RY6JTjusgz2KlwM4JxQX14Q17SwfhV/M= Subject key identifier: 1B:7F:F2:B4:3A:C3:C8:0D:4E:AB:D6:AD:3C:37:AF:6D:4F:B2:78:EC Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7 Certificate issuer: /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7 Certificate serial: 019BF650B0DA0986EC86510DE04DCBEE61F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 18:00:41 +0000 Manifest this update: Sun 25 Jan 2026 18:00:41 +0000 Manifest next update: Mon 26 Jan 2026 18:00:41 +0000 Files and hashes: 1: sq7d7j6Ll-c_n51y9g5sD3aC3pE.roa (hash: be+6ZZf9ONJycKOxIJ6onZ/JKAQonZaE9BDfNxiECl8=) 2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: 5u00X/7XIGB98XmIX7BqV9KHBiy8x51f0iypKakHlhw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:b0:da:09:86:ec:86:51:0d:e0:4d:cb:ee:61:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7 Validity Not Before: Jan 25 18:00:41 2026 GMT Not After : Jan 26 18:00:41 2026 GMT Subject: CN=1b7ff2b43ac3c80d4eabd6ad3c37af6d4fb278ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fe:c0:d5:6d:b8:85:3c:06:01:12:cf:5c:ee: 66:02:03:3d:ac:9c:2c:40:73:ad:92:48:07:bc:b2: f2:28:96:e4:b9:bd:e6:03:7a:bc:b9:a1:bd:a3:87: 23:61:49:b7:40:34:d4:9a:73:4f:59:23:f2:1c:39: 15:b0:90:29:dd:1f:bf:20:3b:01:8d:9d:8f:15:0a: 41:62:f5:88:01:19:e0:7d:66:ed:c0:b5:68:8d:b4: 75:e1:de:a8:50:bd:ed:e2:36:ed:34:6e:37:63:1f: bb:e6:19:42:c7:b0:fa:f8:1c:0b:f6:11:6d:a0:96: 5c:24:b5:0e:bf:ed:8b:16:b2:b3:d4:8e:98:83:65: ee:de:a5:78:56:6b:d5:87:10:35:5b:0f:4e:ba:f5: e1:64:93:29:79:35:10:af:df:33:a8:fe:cf:49:72: eb:ef:2c:5f:5b:35:8e:e2:10:37:29:d0:c5:72:5d: d7:db:30:fd:66:d9:7e:cd:cf:be:71:bf:cc:87:86: 38:76:3b:ba:81:73:84:4b:f7:62:d5:57:5e:99:9b: 27:60:59:cb:16:dd:7d:13:59:d0:ea:f3:98:12:d0: 22:d5:11:ab:a3:c7:94:dc:6d:be:e7:b8:3c:60:31: 09:dc:87:29:7b:98:9b:94:41:f1:59:b3:af:3e:03: 87:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:7F:F2:B4:3A:C3:C8:0D:4E:AB:D6:AD:3C:37:AF:6D:4F:B2:78:EC X509v3 Authority Key Identifier: keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:a6:3e:7c:99:ab:29:cb:d8:68:ca:b6:5b:ec:08:8b:72:9b: 01:8e:12:2f:79:a5:ab:79:35:5d:5b:8a:43:b1:d3:fa:1f:b4: 6f:f7:ec:19:8e:ce:20:7f:d5:06:51:7a:26:19:b8:ac:8f:90: d8:fe:0e:b8:0a:ed:6b:c2:aa:d8:cf:e5:96:fd:94:24:4d:b5: 9a:a7:02:56:b0:de:61:36:47:2e:f8:c0:67:30:34:4b:b3:d8: b8:23:49:59:4e:a5:12:04:e8:17:67:11:92:64:74:c9:71:a1: 1a:80:6b:f1:77:9a:e4:22:df:14:31:82:36:57:ca:e7:88:65: 92:a8:cb:a9:2f:ab:d2:91:86:83:bd:4f:d9:5c:7e:59:e8:88: 06:ee:d0:68:cd:88:6f:42:7b:19:4b:c5:4c:28:02:1b:85:a7: 60:77:04:9b:2e:14:c2:9b:95:66:01:81:d5:3d:6f:f0:b8:1f: 25:43:3e:c7:ed:b4:0a:39:79:e5:0b:6e:29:05:0c:d6:db:1b: f6:1e:20:fe:0e:fa:e4:95:57:9b:08:d1:10:fb:4b:53:a4:4c: 93:b2:eb:4a:71:00:4b:63:06:96:b6:63:ea:24:78:9a:91:75: cd:9c:9b:20:df:cf:0e:64:1a:08:63:8c:66:d3:8f:d2:be:94: 62:68:39:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2ULDaCYbshlEN4E3L7mH4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjVlZjRkYzlkM2VjZGY0ODY2NTVjMmRkMjMxZTljYmJi MGEwYjcwHhcNMjYwMTI1MTgwMDQxWhcNMjYwMTI2MTgwMDQxWjAzMTEwLwYDVQQD EygxYjdmZjJiNDNhYzNjODBkNGVhYmQ2YWQzYzM3YWY2ZDRmYjI3OGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtP7A1W24hTwGARLPXO5mAgM9rJws QHOtkkgHvLLyKJbkub3mA3q8uaG9o4cjYUm3QDTUmnNPWSPyHDkVsJAp3R+/IDsB jZ2PFQpBYvWIARngfWbtwLVojbR14d6oUL3t4jbtNG43Yx+75hlCx7D6+BwL9hFt oJZcJLUOv+2LFrKz1I6Yg2Xu3qV4VmvVhxA1Ww9OuvXhZJMpeTUQr98zqP7PSXLr 7yxfWzWO4hA3KdDFcl3X2zD9Ztl+zc++cb/Mh4Y4dju6gXOES/di1VdemZsnYFnL Ft19E1nQ6vOYEtAi1RGro8eU3G2+57g8YDEJ3Icpe5iblEHxWbOvPgOHwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBt/8rQ6w8gNTqvWrTw3r21PsnjsMB8GA1UdIwQY MBaAFMEl703J0+zfSGZVwt0jHpy7sKC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEt ZTc0NGM1YmVmNTYxLzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEtZTc0NGM1YmVmNTYx LzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6Y+fJmr KcvYaMq2W+wIi3KbAY4SL3mlq3k1XVuKQ7HT+h+0b/fsGY7OIH/VBlF6Jhm4rI+Q 2P4OuArta8Kq2M/llv2UJE21mqcCVrDeYTZHLvjAZzA0S7PYuCNJWU6lEgToF2cR kmR0yXGhGoBr8Xea5CLfFDGCNlfK54hlkqjLqS+r0pGGg71P2Vx+WeiIBu7QaM2I b0J7GUvFTCgCG4WnYHcEmy4UwpuVZgGB1T1v8LgfJUM+x+20Cjl55QtuKQUM1tsb 9h4g/g765JVXmwjREPtLU6RMk7LrSnEAS2MGlrZj6iR4mpF1zZybIN/PDmQaCGOM ZtOP0r6UYmg56Q== -----END CERTIFICATE-----Generated at Sun Jan 25 20:53:09 2026 by rpki-client