This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft File: WXRV68sDv_Ki2XWtQIH5QZusrzU.mft (raw, json) Hash identifier: I6NUbeacYZmOSZbieZsx/eaMBqyHKvuFyDJeeWiaZDg= Subject key identifier: 46:4B:E2:28:7A:2B:0E:F8:4B:7A:4F:0E:E0:4B:C2:33:08:F5:8A:EC Authority key identifier: 59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35 Certificate issuer: /CN=597455ebcb03bff2a2d975ad4081f9419bacaf35 Certificate serial: 019BF6BEF0B173C8823ED58F038D042ABF3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft Manifest number: 02D4 Signing time: Sun 25 Jan 2026 20:01:07 +0000 Manifest this update: Sun 25 Jan 2026 20:01:07 +0000 Manifest next update: Mon 26 Jan 2026 20:01:07 +0000 Files and hashes: 1: J_yn6Pm9vKNMDRcVwbyp133TknU.roa (hash: mliXlxJfksLfLE++jqaaumKeI12AEMNdDLjQ9GlOQ2M=) 2: WXRV68sDv_Ki2XWtQIH5QZusrzU.crl (hash: ugNqNJ+biVHl9BjfloEu2Wgf1l9VtlHvEJ5h78UnC6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:f0:b1:73:c8:82:3e:d5:8f:03:8d:04:2a:bf:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=597455ebcb03bff2a2d975ad4081f9419bacaf35 Validity Not Before: Jan 25 20:01:07 2026 GMT Not After : Jan 26 20:01:07 2026 GMT Subject: CN=464be2287a2b0ef84b7a4f0ee04bc23308f58aec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:92:2b:bf:62:96:86:7c:46:59:96:4c:eb:ca: e1:8a:ac:a7:9d:33:b8:50:f4:69:db:6d:bd:58:d3: b1:3a:02:aa:97:13:d5:df:eb:dd:02:08:4c:eb:89: 46:94:68:21:cc:c4:2a:3a:1f:4c:47:02:bd:f9:09: 7e:de:20:f4:e2:2c:24:3a:cf:90:70:2b:6c:ea:93: a7:e4:65:0a:ec:35:fd:4e:ab:11:03:4b:db:51:ff: 96:54:f7:3a:b3:fe:5f:7e:cd:a5:56:ca:1b:10:ba: 1e:a9:1e:dc:da:eb:e9:da:63:c0:c6:92:11:13:71: 2e:99:1e:69:d1:80:00:44:49:b4:65:5d:a7:94:f1: ce:12:10:d5:e3:e9:ad:d0:cb:62:b4:26:82:fb:52: 5b:c4:fa:6b:8a:dd:b9:81:aa:4b:34:5f:dd:4f:f1: cd:4c:ca:b4:c4:ba:b9:85:0d:6d:6b:04:65:09:a2: 1d:29:f1:9d:33:4f:c9:75:7a:4e:e9:bc:0c:ac:05: 9a:52:db:f4:2b:a3:8e:12:17:b6:8f:00:a6:37:f2: 32:40:2c:b4:12:de:d0:dc:75:5f:8c:66:ce:cf:56: 43:df:39:2e:2e:02:1a:32:71:54:7e:e9:97:b1:a4: a6:73:ed:2c:98:7a:8c:c7:4c:43:b1:89:56:e9:41: 6e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4B:E2:28:7A:2B:0E:F8:4B:7A:4F:0E:E0:4B:C2:33:08:F5:8A:EC X509v3 Authority Key Identifier: keyid:59:74:55:EB:CB:03:BF:F2:A2:D9:75:AD:40:81:F9:41:9B:AC:AF:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXRV68sDv_Ki2XWtQIH5QZusrzU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6766fa-4dc7-47b2-a64f-ef34dd4de572/1/WXRV68sDv_Ki2XWtQIH5QZusrzU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:3d:cf:c2:72:02:c8:1f:e4:1c:cf:8f:08:5c:ce:46:2a:b1: e0:db:47:d7:b2:49:07:c5:18:49:d6:13:5f:61:25:d4:7c:eb: 27:74:c9:48:d9:8c:da:a0:1e:9a:84:23:24:80:8f:05:20:c2: 91:e7:33:ab:7e:d2:82:7c:8f:18:5b:bc:57:4f:93:7e:bb:35: 77:2b:41:fa:23:e3:3f:de:a2:72:db:01:8a:93:c9:42:b9:90: dd:1d:1d:31:0e:af:03:15:4b:0e:d4:5d:3e:f9:a4:39:bb:a7: 45:26:6e:47:4b:31:23:ee:1e:1c:d6:54:0d:05:3c:ad:6a:13: 91:3b:2c:28:57:0e:ec:38:0b:64:31:36:68:51:3f:08:d9:60: d0:f5:01:a9:89:e6:d3:01:31:43:0e:a2:86:d8:f7:ec:12:a3: 2b:d4:2f:7b:06:2f:a3:99:4d:00:ea:d9:4b:05:de:16:00:05: 5a:aa:4d:a0:6c:da:86:4f:bb:e0:a5:1d:f1:4d:41:dc:c6:a0: ee:15:6f:ab:ca:6a:80:4b:72:5d:69:58:37:9e:e4:ba:ff:0e: f8:03:d2:5d:52:01:76:db:e6:89:53:73:0a:90:ae:e0:1b:c7: cf:e3:4b:df:93:49:09:45:c2:69:59:5a:48:e7:74:da:b4:24: 46:25:13:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vvCxc8iCPtWPA40EKr8+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NzQ1NWViY2IwM2JmZjJhMmQ5NzVhZDQwODFmOTQxOWJh Y2FmMzUwHhcNMjYwMTI1MjAwMTA3WhcNMjYwMTI2MjAwMTA3WjAzMTEwLwYDVQQD Eyg0NjRiZTIyODdhMmIwZWY4NGI3YTRmMGVlMDRiYzIzMzA4ZjU4YWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJIrv2KWhnxGWZZM68rhiqynnTO4 UPRp2229WNOxOgKqlxPV3+vdAghM64lGlGghzMQqOh9MRwK9+Ql+3iD04iwkOs+Q cCts6pOn5GUK7DX9TqsRA0vbUf+WVPc6s/5ffs2lVsobELoeqR7c2uvp2mPAxpIR E3EumR5p0YAAREm0ZV2nlPHOEhDV4+mt0MtitCaC+1JbxPprit25gapLNF/dT/HN TMq0xLq5hQ1tawRlCaIdKfGdM0/JdXpO6bwMrAWaUtv0K6OOEhe2jwCmN/IyQCy0 Et7Q3HVfjGbOz1ZD3zkuLgIaMnFUfumXsaSmc+0smHqMx0xDsYlW6UFudQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZL4ih6Kw74S3pPDuBLwjMI9YrsMB8GA1UdIwQY MBaAFFl0VevLA7/yotl1rUCB+UGbrK81MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NzY2ZmEtNGRjNy00N2IyLWE2NGYt ZWYzNGRkNGRlNTcyLzEvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82NzY2ZmEtNGRjNy00N2IyLWE2NGYtZWYzNGRkNGRlNTcy LzEvV1hSVjY4c0R2X0tpMlhXdFFJSDVRWnVzcnpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAET3PwnIC yB/kHM+PCFzORiqx4NtH17JJB8UYSdYTX2El1HzrJ3TJSNmM2qAemoQjJICPBSDC keczq37SgnyPGFu8V0+Tfrs1dytB+iPjP96ictsBipPJQrmQ3R0dMQ6vAxVLDtRd PvmkObunRSZuR0sxI+4eHNZUDQU8rWoTkTssKFcO7DgLZDE2aFE/CNlg0PUBqYnm 0wExQw6ihtj37BKjK9QvewYvo5lNAOrZSwXeFgAFWqpNoGzahk+74KUd8U1B3Mag 7hVvq8pqgEtyXWlYN57kuv8O+APSXVIBdtvmiVNzCpCu4BvHz+NL35NJCUXCaVla SOd02rQkRiUTPg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:59:54 2026 by rpki-client