This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft File: WXSHRy03y9cmGB-fOiA4bwObO6g.mft (raw, json) Hash identifier: lVN1Cz1jygU45X/9o5xfvi13q6ny33C7ayHfVFt7S4c= Subject key identifier: 39:A7:A3:8D:60:35:27:18:14:B3:82:AB:58:94:A7:18:CB:D8:76:79 Authority key identifier: 59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 Certificate issuer: /CN=597487472d37cbd726181f9f3a20386f039b3ba8 Certificate serial: 019BF619B78431A54B81027C14C2EFEA6172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft Manifest number: 15B9 Signing time: Sun 25 Jan 2026 17:00:39 +0000 Manifest this update: Sun 25 Jan 2026 17:00:39 +0000 Manifest next update: Mon 26 Jan 2026 17:00:39 +0000 Files and hashes: 1: 0NoPiisJbpwmvBUWEe2px9KfACQ.roa (hash: fADYU9aKvqcndQu+aoL/npU6GSJIZV+Rd4qVL1uAf08=) 2: GCkGsS1uz9XBVQQhijBaSLbxwTE.roa (hash: 0L/zbSf1D/vPMlQYoADMvJgS8Ov/BldeGq2klZOZFUA=) 3: WXSHRy03y9cmGB-fOiA4bwObO6g.crl (hash: Uqf+jUInJbV0oNN6aSMFCsu3pJ+QIAjKBynpulqyCtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:19:b7:84:31:a5:4b:81:02:7c:14:c2:ef:ea:61:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597487472d37cbd726181f9f3a20386f039b3ba8 Validity Not Before: Jan 25 17:00:39 2026 GMT Not After : Jan 26 17:00:39 2026 GMT Subject: CN=39a7a38d6035271814b382ab5894a718cbd87679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0f:fc:9b:5a:38:77:54:af:bc:71:14:5b:a0: fb:c2:6c:6f:44:81:33:48:d8:5c:d8:97:7c:b6:bb: bb:61:74:b0:45:b3:c2:93:ce:e9:e6:1c:1d:4a:0b: f8:30:6c:d7:58:87:4d:74:6d:49:8b:57:83:64:26: 66:ad:af:84:eb:91:65:7d:4f:79:55:a9:a4:6f:37: cf:b5:37:f2:e8:ae:92:89:aa:12:ce:0a:12:3c:44: fa:3c:58:fe:2d:1f:09:cf:9d:33:b7:92:8f:84:11: 94:ab:af:92:e0:41:77:a7:80:cd:14:f9:5b:ac:d6: 99:5c:5f:66:a6:bb:4f:5e:80:3d:6a:c3:52:f6:43: e9:8a:59:0e:57:ee:b1:2d:60:b8:22:4e:84:46:cc: f5:6f:35:70:d5:5d:32:2a:59:a2:90:7f:d5:70:30: 33:c7:f1:e5:ba:b2:25:34:94:cb:66:a8:94:8a:6b: 1d:56:64:31:bc:2f:3a:42:b8:b1:ba:85:9f:43:51: da:2b:10:c9:02:be:0c:cb:d3:38:d6:19:93:6e:af: 52:a6:f9:33:97:6b:ef:a2:73:42:94:83:9d:3c:bb: b8:83:35:56:dc:65:bc:e3:28:ba:27:f4:28:7f:0a: ec:13:b0:0b:74:64:17:24:57:55:5b:05:cd:c4:c0: 52:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A7:A3:8D:60:35:27:18:14:B3:82:AB:58:94:A7:18:CB:D8:76:79 X509v3 Authority Key Identifier: keyid:59:74:87:47:2D:37:CB:D7:26:18:1F:9F:3A:20:38:6F:03:9B:3B:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXSHRy03y9cmGB-fOiA4bwObO6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/ea27f3-db74-4963-a18c-035281289bb0/1/WXSHRy03y9cmGB-fOiA4bwObO6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:00:3d:d6:d3:94:06:93:8c:ad:3b:a3:06:ea:2c:a4:85:c8: e9:eb:cb:02:9a:14:48:25:c0:01:4d:f3:23:bb:33:f7:57:37: b8:7d:7f:90:5b:f1:10:95:0f:ec:ba:5e:41:ed:df:1e:6b:2e: 2c:a6:52:60:2e:3b:38:af:b5:22:d5:75:8f:e8:76:79:b9:d6: 70:48:42:db:8f:1d:4c:a8:c7:83:12:14:00:01:bb:00:d5:e0: 5f:05:f7:85:29:25:e6:20:b6:14:83:fe:c1:4d:50:39:0f:79: 52:14:9e:18:8a:ca:07:c0:9f:ee:0b:53:3c:04:78:4a:28:28: 60:6b:9b:ed:83:d1:59:6f:0c:57:50:82:97:e4:c4:65:20:00: a5:df:89:7c:4f:75:9f:5f:3e:fa:8a:dc:4d:cb:61:7c:43:0d: b3:86:f6:2b:78:d7:e7:79:b0:b7:a2:e4:13:c3:eb:8c:a2:33: 6d:b6:84:3e:53:1f:e7:be:03:82:c5:78:c1:84:db:3e:d6:7f: 51:44:55:b3:6c:0d:5f:7e:91:9e:83:a4:84:29:17:18:e7:d1: 7d:de:59:27:7a:a3:f0:dd:1c:63:f1:54:63:37:15:64:98:39: 83:5c:49:1a:d1:ce:c3:30:f8:46:44:cd:70:d2:61:dd:64:ca: 71:f0:7e:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2GbeEMaVLgQJ8FMLv6mFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzQ4NzQ3MmQzN2NiZDcyNjE4MWY5ZjNhMjAzODZmMDM5 YjNiYTgwHhcNMjYwMTI1MTcwMDM5WhcNMjYwMTI2MTcwMDM5WjAzMTEwLwYDVQQD EygzOWE3YTM4ZDYwMzUyNzE4MTRiMzgyYWI1ODk0YTcxOGNiZDg3Njc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ/8m1o4d1SvvHEUW6D7wmxvRIEz SNhc2Jd8tru7YXSwRbPCk87p5hwdSgv4MGzXWIdNdG1Ji1eDZCZmra+E65FlfU95 VamkbzfPtTfy6K6SiaoSzgoSPET6PFj+LR8Jz50zt5KPhBGUq6+S4EF3p4DNFPlb rNaZXF9mprtPXoA9asNS9kPpilkOV+6xLWC4Ik6ERsz1bzVw1V0yKlmikH/VcDAz x/HlurIlNJTLZqiUimsdVmQxvC86QrixuoWfQ1HaKxDJAr4My9M41hmTbq9Spvkz l2vvonNClIOdPLu4gzVW3GW84yi6J/QofwrsE7ALdGQXJFdVWwXNxMBS9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmno41gNScYFLOCq1iUpxjL2HZ5MB8GA1UdIwQY MBaAFFl0h0ctN8vXJhgfnzogOG8DmzuoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMt MDM1MjgxMjg5YmIwLzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9lYTI3ZjMtZGI3NC00OTYzLWExOGMtMDM1MjgxMjg5YmIw LzEvV1hTSFJ5MDN5OWNtR0ItZk9pQTRid09iTzZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAA91tOU BpOMrTujBuospIXI6evLApoUSCXAAU3zI7sz91c3uH1/kFvxEJUP7LpeQe3fHmsu LKZSYC47OK+1ItV1j+h2ebnWcEhC248dTKjHgxIUAAG7ANXgXwX3hSkl5iC2FIP+ wU1QOQ95UhSeGIrKB8Cf7gtTPAR4SigoYGub7YPRWW8MV1CCl+TEZSAApd+JfE91 n18++orcTcthfEMNs4b2K3jX53mwt6LkE8PrjKIzbbaEPlMf574DgsV4wYTbPtZ/ UURVs2wNX36RnoOkhCkXGOfRfd5ZJ3qj8N0cY/FUYzcVZJg5g1xJGtHOwzD4RkTN cNJh3WTKcfB+zw== -----END CERTIFICATE-----Generated at Sun Jan 25 21:13:20 2026 by rpki-client