This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft File: WYd3IMAUaISU6mkQyDR03hPpmAI.mft (raw, json) Hash identifier: XWGCCBxBKa8pAOSRWJ0cv2Ge8aluGY/A+WB2VtZyyiQ= Subject key identifier: 22:F1:A7:38:7E:CC:11:79:3D:C9:5D:76:49:32:09:13:CA:A1:05:81 Authority key identifier: 59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02 Certificate issuer: /CN=59877720c014688494ea6910c83474de13e99802 Certificate serial: 019BF462BB205594FC53E3908C93BB0645A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft Manifest number: 1248 Signing time: Sun 25 Jan 2026 09:01:09 +0000 Manifest this update: Sun 25 Jan 2026 09:01:09 +0000 Manifest next update: Mon 26 Jan 2026 09:01:09 +0000 Files and hashes: 1: 5_NsVpM8FaeSqhKOf8w72GF6QhI.roa (hash: 2zny0xGyvTx1/9rtQ7mwoKTteA97Jpuq2EaV8f4cXH4=) 2: WYd3IMAUaISU6mkQyDR03hPpmAI.crl (hash: aSN+ngRHmlo6bsKVJprzg9lY+CaRbFrglBeCPJhZFgw=) 3: n-BI18OVOCYVCWmvlFdBExaokcM.roa (hash: H/oid2beJi/kKojW4iShxbqe/dsM2DxDZgWF5jFUBkM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:62:bb:20:55:94:fc:53:e3:90:8c:93:bb:06:45:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59877720c014688494ea6910c83474de13e99802 Validity Not Before: Jan 25 09:01:09 2026 GMT Not After : Jan 26 09:01:09 2026 GMT Subject: CN=22f1a7387ecc11793dc95d7649320913caa10581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:96:2d:65:fe:8e:9c:4d:94:a0:c9:b0:22: 15:c1:15:40:c4:d8:e5:e1:fa:bc:27:ad:11:8a:84: 1e:c2:f6:84:98:30:df:8d:63:e3:a1:17:6b:cb:f6: 2f:87:24:38:74:1c:b0:66:73:1b:60:07:8f:c8:89: ef:4d:14:98:f2:a2:41:12:c1:8c:17:7c:bc:75:ef: 93:cd:00:bb:65:98:c5:d5:f6:05:e3:61:c5:59:5e: f3:25:03:1e:18:a8:9d:03:66:b8:71:7f:77:6d:5f: 61:03:a3:7a:10:f5:15:76:11:5f:9f:ed:c5:07:c4: f2:2d:9c:87:8f:10:74:7c:2a:a9:b3:73:d4:a6:0a: 87:62:09:c3:70:ef:26:03:00:ab:d2:08:b8:cd:30: 5c:fc:71:04:bc:17:cd:a9:70:6b:1c:43:da:c3:da: 50:2b:7e:84:2d:46:79:a3:cc:85:a7:0b:45:14:4e: c8:fd:63:4d:4a:b2:66:c4:6d:c3:77:c0:2d:3f:af: e7:0d:b3:03:0c:a0:90:54:4f:30:af:ac:7b:fa:b8: d8:33:5d:ab:44:00:df:71:8f:bf:f6:47:0b:7b:22: 01:ae:f7:79:bf:09:f8:16:97:e3:f9:90:08:59:6a: 99:ed:f2:87:1d:7d:aa:40:c5:cf:82:d3:38:a5:48: 17:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F1:A7:38:7E:CC:11:79:3D:C9:5D:76:49:32:09:13:CA:A1:05:81 X509v3 Authority Key Identifier: keyid:59:87:77:20:C0:14:68:84:94:EA:69:10:C8:34:74:DE:13:E9:98:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYd3IMAUaISU6mkQyDR03hPpmAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2a0808-7e97-47e0-afbb-74ccd8240bad/1/WYd3IMAUaISU6mkQyDR03hPpmAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:cb:79:08:d1:8c:d5:17:fb:45:8e:cd:3a:f7:f9:f3:84:e6: c9:4a:63:a4:0e:31:82:a0:3a:43:ee:dd:3f:8b:31:81:0d:c6: 78:ff:32:2d:28:52:07:34:2a:de:71:04:1b:09:3b:90:38:bb: 1f:1a:35:6e:8a:6e:b3:ff:43:34:a5:43:02:b3:ef:95:e1:d5: ad:9d:b0:4f:f1:d0:c3:94:9e:49:36:6c:03:40:0b:d2:79:03: ca:83:d2:8d:22:8f:8a:b1:25:08:dc:72:b2:c2:73:ac:7a:ca: f8:df:8b:ab:09:21:3b:09:f1:75:e4:d4:59:9c:35:0e:0e:ca: 10:fe:7d:81:58:22:fa:88:da:62:c4:26:ab:0d:d0:eb:f1:6b: b1:a3:e7:c8:f8:7e:55:a6:81:4f:ce:59:cc:c8:8a:da:f1:7c: 0c:89:2d:15:d0:1b:c8:0e:bc:4d:05:53:0f:88:e0:86:b2:1c: 71:af:cf:de:16:a6:46:94:28:43:64:8b:0b:c9:b7:5c:8f:5d: e4:98:b2:ba:98:2f:f9:4d:24:a0:10:7a:31:58:73:0b:c7:ed: c0:d3:d8:11:48:a9:24:68:33:d2:64:ac:90:ee:29:b3:26:95: d6:b8:c1:9c:00:d4:88:a9:00:7c:eb:de:c9:fa:3e:0f:f8:75: 82:15:47:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0YrsgVZT8U+OQjJO7BkWoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ODc3NzIwYzAxNDY4ODQ5NGVhNjkxMGM4MzQ3NGRlMTNl OTk4MDIwHhcNMjYwMTI1MDkwMTA5WhcNMjYwMTI2MDkwMTA5WjAzMTEwLwYDVQQD EygyMmYxYTczODdlY2MxMTc5M2RjOTVkNzY0OTMyMDkxM2NhYTEwNTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru+WLWX+jpxNlKDJsCIVwRVAxNjl 4fq8J60RioQewvaEmDDfjWPjoRdry/YvhyQ4dBywZnMbYAePyInvTRSY8qJBEsGM F3y8de+TzQC7ZZjF1fYF42HFWV7zJQMeGKidA2a4cX93bV9hA6N6EPUVdhFfn+3F B8TyLZyHjxB0fCqps3PUpgqHYgnDcO8mAwCr0gi4zTBc/HEEvBfNqXBrHEPaw9pQ K36ELUZ5o8yFpwtFFE7I/WNNSrJmxG3Dd8AtP6/nDbMDDKCQVE8wr6x7+rjYM12r RADfcY+/9kcLeyIBrvd5vwn4Fpfj+ZAIWWqZ7fKHHX2qQMXPgtM4pUgXkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLxpzh+zBF5PclddkkyCRPKoQWBMB8GA1UdIwQY MBaAFFmHdyDAFGiElOppEMg0dN4T6ZgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmIt NzRjY2Q4MjQwYmFkLzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8yYTA4MDgtN2U5Ny00N2UwLWFmYmItNzRjY2Q4MjQwYmFk LzEvV1lkM0lNQVVhSVNVNm1rUXlEUjAzaFBwbUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMt5CNGM 1Rf7RY7NOvf584TmyUpjpA4xgqA6Q+7dP4sxgQ3GeP8yLShSBzQq3nEEGwk7kDi7 Hxo1bopus/9DNKVDArPvleHVrZ2wT/HQw5SeSTZsA0AL0nkDyoPSjSKPirElCNxy ssJzrHrK+N+LqwkhOwnxdeTUWZw1Dg7KEP59gVgi+ojaYsQmqw3Q6/FrsaPnyPh+ VaaBT85ZzMiK2vF8DIktFdAbyA68TQVTD4jghrIcca/P3hamRpQoQ2SLC8m3XI9d 5Jiyupgv+U0koBB6MVhzC8ftwNPYEUipJGgz0mSskO4psyaV1rjBnADUiKkAfOve yfo+D/h1ghVHQg== -----END CERTIFICATE-----Generated at Sun Jan 25 15:24:47 2026 by rpki-client