This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft File: wOod26TL08tX7IYNhf9P-TAa_OU.mft (raw, json) Hash identifier: WKrzWG0kPQdS7m2I14J8qFLcwg50x/6L7QFZFN/mIqk= Subject key identifier: A1:24:2B:5D:1D:3E:6E:75:2B:B7:36:61:6F:C0:E8:E4:27:3A:2D:3A Authority key identifier: C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5 Certificate issuer: /CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5 Certificate serial: 019BF687E1B114EBDB13A957A73A845991C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft Manifest number: 17E5 Signing time: Sun 25 Jan 2026 19:00:58 +0000 Manifest this update: Sun 25 Jan 2026 19:00:58 +0000 Manifest next update: Mon 26 Jan 2026 19:00:58 +0000 Files and hashes: 1: ONtLdxm2tPCgNG6apw05G9CfJl4.roa (hash: GtpvzkZjqYfxcugYhiiM43AgTEuXOvMKvTUhpVcadjY=) 2: wOod26TL08tX7IYNhf9P-TAa_OU.crl (hash: ahycv8FVGsHswbW3njzzFBIp9pMYAGvMOqQvZuc1FTk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:e1:b1:14:eb:db:13:a9:57:a7:3a:84:59:91:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ea1ddba4cbd3cb57ec860d85ff4ff9301afce5 Validity Not Before: Jan 25 19:00:58 2026 GMT Not After : Jan 26 19:00:58 2026 GMT Subject: CN=a1242b5d1d3e6e752bb736616fc0e8e4273a2d3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a0:c7:97:ee:b3:49:c7:f5:2a:ba:4c:16:42: 4e:f0:91:21:96:fd:af:2e:cb:3e:cd:d3:d7:7a:85: 4d:8c:35:79:f4:bc:5a:30:af:e3:22:5f:20:ca:7d: e0:bd:77:4e:6d:74:7d:50:0f:e6:4a:11:8a:84:78: 91:17:5d:6a:16:c9:6f:a6:a1:c9:55:e8:fc:74:1f: 82:84:75:a8:d7:5c:61:bb:df:ae:83:18:37:30:b9: 8b:cb:d6:0a:bc:e6:bf:f0:24:96:25:4b:f2:7c:51: 62:56:02:ae:a0:bd:df:88:d4:cf:21:c7:ec:54:53: 1d:65:56:7e:2e:76:14:7c:20:df:2a:53:75:67:d7: b6:7b:b7:72:bf:c7:6a:77:4f:c6:24:71:64:2e:97: 25:04:a9:c0:7f:8e:b5:3d:5f:93:63:e4:ff:d7:fe: 3d:98:b3:ce:a7:7a:c0:db:06:bd:09:56:88:a9:4c: d7:0a:b0:c4:a0:37:81:4e:87:78:77:3f:e1:5e:b6: b8:9c:ae:11:87:84:8d:14:43:36:da:be:a5:5f:c7: e0:d1:82:37:06:a2:8b:12:66:0f:01:8e:6f:00:6c: 5b:e0:7f:8d:14:23:97:a3:fb:05:cf:c5:c9:ba:2d: d5:a9:c4:9d:78:80:03:1e:28:a8:93:78:82:e7:54: 79:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:24:2B:5D:1D:3E:6E:75:2B:B7:36:61:6F:C0:E8:E4:27:3A:2D:3A X509v3 Authority Key Identifier: keyid:C0:EA:1D:DB:A4:CB:D3:CB:57:EC:86:0D:85:FF:4F:F9:30:1A:FC:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOod26TL08tX7IYNhf9P-TAa_OU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2d953c-96bc-407b-ad6a-3cfd6c3fdca4/1/wOod26TL08tX7IYNhf9P-TAa_OU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:6a:53:cd:cc:77:b9:25:2b:0a:06:48:b4:ec:fe:b9:a1:b4: 2f:63:0f:91:35:77:ee:fc:fc:aa:a4:b6:00:a4:0f:b8:64:45: 61:0b:b4:9c:0b:4a:88:36:ea:b0:33:62:67:42:35:c1:8c:c1: 10:dc:71:ae:29:b8:25:d6:d6:f0:5e:77:e0:91:25:23:1d:49: 78:df:d7:79:d9:76:49:1f:fa:f4:f5:84:fa:58:4a:fe:43:d4: 3a:24:f4:40:79:e5:71:71:6f:67:c0:09:d3:83:3c:e4:23:d6: 52:ca:09:db:96:37:76:26:6a:92:2d:d4:c3:be:89:98:e7:ab: 86:d8:df:b2:fd:ac:ca:61:e1:91:0d:52:0a:eb:f8:04:8b:93: b0:5d:22:02:df:de:e0:a2:3c:f1:5a:df:e3:07:06:c2:e9:ae: 88:b7:73:d1:8b:18:a1:85:1d:6d:5c:e3:ef:59:bf:94:01:a1: d3:05:4d:6d:e2:b7:7e:b5:95:4c:1d:7a:6e:2a:62:cd:a6:e0: 0a:41:ce:a5:97:be:3b:40:bd:bb:17:80:23:32:23:43:1e:e2: 02:51:20:3e:26:6b:0f:a6:d6:1e:ba:37:7b:8e:75:ae:49:e8: 78:1d:26:92:61:6d:2d:64:23:98:b5:68:b1:1a:cb:ee:95:c8: 83:a5:3b:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h+GxFOvbE6lXpzqEWZHGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZWExZGRiYTRjYmQzY2I1N2VjODYwZDg1ZmY0ZmY5MzAx YWZjZTUwHhcNMjYwMTI1MTkwMDU4WhcNMjYwMTI2MTkwMDU4WjAzMTEwLwYDVQQD EyhhMTI0MmI1ZDFkM2U2ZTc1MmJiNzM2NjE2ZmMwZThlNDI3M2EyZDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16DHl+6zScf1KrpMFkJO8JEhlv2v Lss+zdPXeoVNjDV59LxaMK/jIl8gyn3gvXdObXR9UA/mShGKhHiRF11qFslvpqHJ Vej8dB+ChHWo11xhu9+ugxg3MLmLy9YKvOa/8CSWJUvyfFFiVgKuoL3fiNTPIcfs VFMdZVZ+LnYUfCDfKlN1Z9e2e7dyv8dqd0/GJHFkLpclBKnAf461PV+TY+T/1/49 mLPOp3rA2wa9CVaIqUzXCrDEoDeBTod4dz/hXra4nK4Rh4SNFEM22r6lX8fg0YI3 BqKLEmYPAY5vAGxb4H+NFCOXo/sFz8XJui3VqcSdeIADHiiok3iC51R5twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKEkK10dPm51K7c2YW/A6OQnOi06MB8GA1UdIwQY MBaAFMDqHduky9PLV+yGDYX/T/kwGvzlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEt M2NmZDZjM2ZkY2E0LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My8yZDk1M2MtOTZiYy00MDdiLWFkNmEtM2NmZDZjM2ZkY2E0 LzEvd09vZDI2VEwwOHRYN0lZTmhmOVAtVEFhX09VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2pTzcx3 uSUrCgZItOz+uaG0L2MPkTV37vz8qqS2AKQPuGRFYQu0nAtKiDbqsDNiZ0I1wYzB ENxxrim4JdbW8F534JElIx1JeN/Xedl2SR/69PWE+lhK/kPUOiT0QHnlcXFvZ8AJ 04M85CPWUsoJ25Y3diZqki3Uw76JmOerhtjfsv2symHhkQ1SCuv4BIuTsF0iAt/e 4KI88Vrf4wcGwumuiLdz0YsYoYUdbVzj71m/lAGh0wVNbeK3frWVTB16bipizabg CkHOpZe+O0C9uxeAIzIjQx7iAlEgPiZrD6bWHro3e451rknoeB0mkmFtLWQjmLVo sRrL7pXIg6U7QQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:54:32 2026 by rpki-client