This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft File: wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json) Hash identifier: K1Ixs+f2IuC7vsL2hYoQzg1D1jtHGjum9OFIpVaa8lA= Subject key identifier: 76:9B:FD:6F:A0:A0:B4:A9:96:CD:22:10:98:C4:67:98:77:8E:40:D5 Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7 Certificate issuer: /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7 Certificate serial: 019BF9F6CE45D4CF8F74C0A963A41F5EF797 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft Manifest number: 17EC Signing time: Mon 26 Jan 2026 11:00:59 +0000 Manifest this update: Mon 26 Jan 2026 11:00:59 +0000 Manifest next update: Tue 27 Jan 2026 11:00:59 +0000 Files and hashes: 1: QNKjsNYl40H8qS_OmmUbDRHp_R0.roa (hash: GhfQFXVRCo9fwAs1bLrZZyBrkFQV/H6WcDnsJN7q33o=) 2: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: LrQ3DFDahWzcPUVg37EIveRKCaYOv8BslOVCgu5nY/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:f6:ce:45:d4:cf:8f:74:c0:a9:63:a4:1f:5e:f7:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7 Validity Not Before: Jan 26 11:00:59 2026 GMT Not After : Jan 27 11:00:59 2026 GMT Subject: CN=769bfd6fa0a0b4a996cd221098c46798778e40d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c8:fb:80:21:1d:92:79:4c:4c:39:f3:d9:ac: 59:83:b2:61:61:4e:31:08:dc:80:d6:df:e8:93:7f: 74:9c:e3:d0:d9:24:07:7b:de:18:72:28:3a:17:48: 6c:ed:63:06:43:b4:dc:d6:5d:ab:6e:33:b7:a5:27: 77:6c:83:38:b6:0f:39:2c:04:e8:cc:68:7d:8a:57: 6e:7b:58:48:c0:ac:dd:d8:56:36:0d:73:6e:fa:7b: ab:5b:2e:6c:cd:ab:ad:89:c6:b1:9d:13:7a:a7:e4: ac:ae:3b:d1:7d:e8:55:1f:d5:46:2b:83:3f:a6:b4: 95:12:d2:76:df:cb:e6:d8:b4:68:9d:16:8d:f2:26: 8c:21:cc:0a:59:64:d5:73:50:c5:2d:76:79:07:56: 83:e8:8c:2d:1c:70:f2:ff:25:f6:a2:ab:79:f6:08: 63:23:0a:ac:10:c6:34:55:fa:b9:a4:ce:88:aa:10: 3f:17:3a:96:4f:20:35:27:1b:2a:59:25:55:5d:bd: c9:cb:98:b6:a5:87:7a:9f:95:00:63:32:17:21:8e: e1:a4:13:05:47:09:69:e8:55:cf:f8:d6:9f:ed:ef: 17:41:39:79:6a:fb:cd:0b:66:a8:9f:31:02:fb:c6: 1c:cf:f6:0f:de:14:75:d0:83:77:23:d5:c3:5a:58: a8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9B:FD:6F:A0:A0:B4:A9:96:CD:22:10:98:C4:67:98:77:8E:40:D5 X509v3 Authority Key Identifier: keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:86:41:eb:af:69:bb:bd:d0:7e:92:b3:b9:0d:00:60:0b:ae: a8:34:f7:2b:da:b9:ed:c1:72:d3:58:79:3b:77:0b:48:15:55: 59:71:d6:1a:d0:55:bc:e6:53:a4:8e:4f:ec:43:16:d6:05:b0: 11:93:50:cf:72:a9:e6:27:1b:7a:ee:64:20:93:37:97:1c:69: 7a:d6:e5:e8:89:ba:56:2c:47:28:fb:1c:d8:6d:6d:41:f7:35: e8:52:1d:8b:52:6f:05:12:77:73:47:59:90:ed:75:9e:e3:a1: ec:2a:1d:c3:ba:55:cb:fd:b2:e5:ba:47:92:e0:bb:1e:9d:b0: 91:80:75:b2:d6:a7:3e:df:2f:a9:b0:4e:41:2d:dd:3d:84:9a: 9d:85:2f:da:c9:68:85:0a:0e:93:21:9b:99:8b:6e:3e:23:75: 1b:7c:3f:a4:9c:4e:89:a2:99:2c:db:c2:49:d3:0f:6c:ab:52: 22:07:e5:54:6f:5d:0c:f6:83:35:c1:70:3e:ca:89:48:57:04: 12:70:14:40:b3:ef:b2:fe:47:9e:7d:59:88:d0:ab:cb:1f:fd: 01:cb:17:b8:3c:49:35:6b:3f:16:14:1c:5c:e1:c4:c9:7c:a0: 52:0e:7e:f6:2b:48:96:f6:75:2a:04:cd:2b:b7:5b:09:3d:41: d4:34:c6:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv59s5F1M+PdMCpY6QfXveXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMmZjOTMzM2RiNDNlMjRiM2YyM2JjNjRhM2FlMTNmNDBm YjBhYTcwHhcNMjYwMTI2MTEwMDU5WhcNMjYwMTI3MTEwMDU5WjAzMTEwLwYDVQQD Eyg3NjliZmQ2ZmEwYTBiNGE5OTZjZDIyMTA5OGM0Njc5ODc3OGU0MGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8j7gCEdknlMTDnz2axZg7JhYU4x CNyA1t/ok390nOPQ2SQHe94Ycig6F0hs7WMGQ7Tc1l2rbjO3pSd3bIM4tg85LATo zGh9ildue1hIwKzd2FY2DXNu+nurWy5szauticaxnRN6p+SsrjvRfehVH9VGK4M/ prSVEtJ238vm2LRonRaN8iaMIcwKWWTVc1DFLXZ5B1aD6IwtHHDy/yX2oqt59ghj IwqsEMY0Vfq5pM6IqhA/FzqWTyA1JxsqWSVVXb3Jy5i2pYd6n5UAYzIXIY7hpBMF Rwlp6FXP+Naf7e8XQTl5avvNC2aonzEC+8Ycz/YP3hR10IN3I9XDWliobQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHab/W+goLSpls0iEJjEZ5h3jkDVMB8GA1UdIwQY MBaAFMMvyTM9tD4ks/I7xko64T9A+wqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWIt YTY3MTkxNWVlOTlhLzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC85YWNhYTAtMDVlMS00NzIxLTg5ZWItYTY3MTkxNWVlOTlh LzEvd3lfSk16MjBQaVN6OGp2R1NqcmhQMEQ3Q3FjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACoZB669p u73QfpKzuQ0AYAuuqDT3K9q57cFy01h5O3cLSBVVWXHWGtBVvOZTpI5P7EMW1gWw EZNQz3Kp5icbeu5kIJM3lxxpetbl6Im6VixHKPsc2G1tQfc16FIdi1JvBRJ3c0dZ kO11nuOh7Codw7pVy/2y5bpHkuC7Hp2wkYB1stanPt8vqbBOQS3dPYSanYUv2slo hQoOkyGbmYtuPiN1G3w/pJxOiaKZLNvCSdMPbKtSIgflVG9dDPaDNcFwPsqJSFcE EnAUQLPvsv5Hnn1ZiNCryx/9AcsXuDxJNWs/FhQcXOHEyXygUg5+9itIlvZ1KgTN K7dbCT1B1DTGDw== -----END CERTIFICATE-----Generated at Mon Jan 26 18:23:29 2026 by rpki-client