This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft File: wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft (raw, json) Hash identifier: zwMKfkZgJ1/MsjPlcCTJ9c0/jMiwOAIQCQ8U5QMfZys= Subject key identifier: DD:2D:70:A2:D3:F3:B5:53:DB:4D:C0:41:08:B0:84:8D:82:D6:17:8F Authority key identifier: C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC Certificate issuer: /CN=c0debc8850b690f1232796911bfe3c4c9aa867dc Certificate serial: 019BF8080A627200B159C8539D93DAAE2124 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft Manifest number: 04EF Signing time: Mon 26 Jan 2026 02:00:35 +0000 Manifest this update: Mon 26 Jan 2026 02:00:35 +0000 Manifest next update: Tue 27 Jan 2026 02:00:35 +0000 Files and hashes: 1: 0lgng2rjDy26wvLpufoJ44YGSa8.roa (hash: Sp2gMQIGghJdGnoU3YO/ErS7zVxVldScly14Bqy0M6k=) 2: wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl (hash: +pvDjrG3UhcTh1TmuViLmnD+gof6NJCOKvDGsOPVWog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:08:0a:62:72:00:b1:59:c8:53:9d:93:da:ae:21:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0debc8850b690f1232796911bfe3c4c9aa867dc Validity Not Before: Jan 26 02:00:35 2026 GMT Not After : Jan 27 02:00:35 2026 GMT Subject: CN=dd2d70a2d3f3b553db4dc04108b0848d82d6178f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:2d:be:bd:58:4c:62:cf:94:41:5c:36:ba:7b: 82:12:b8:1f:3b:b8:ee:23:cd:ff:c3:32:27:6e:84: 45:ed:a2:c2:7d:ad:e9:33:50:4b:be:9b:6d:3d:da: 1a:a8:36:fd:b0:84:a2:f4:07:41:3c:77:8c:5e:2c: 7d:b9:1d:01:87:89:05:cb:01:fe:b2:92:5b:d0:2f: 2b:e5:ff:91:5c:41:d6:e8:b3:bc:e6:5d:4e:de:01: 75:91:e6:68:e7:1d:43:ec:a3:b7:0f:78:1a:f6:34: 3a:d5:fe:53:d6:58:ad:6f:21:20:5d:d3:c2:cb:18: c7:95:0a:83:b4:d6:59:ad:43:08:c9:b1:43:fc:ce: 5a:ce:8c:e2:e3:37:80:e8:45:a5:da:47:bd:ee:4e: e0:8c:a9:03:e3:8b:dc:32:a4:00:9c:7a:a7:f2:e2: 43:94:7d:7c:c8:8d:cf:62:45:f6:5b:70:6c:a0:f6: 63:01:b5:c8:30:85:cd:5b:31:da:b9:eb:ab:99:33: dd:15:c3:ae:0f:ba:91:23:4d:e2:e2:e2:91:0b:35: f8:e0:40:19:52:c5:59:be:b3:cb:02:2a:c9:cc:49: e5:dd:2b:0b:aa:1c:bb:da:fd:3f:f3:81:d9:8c:a1: bc:c1:53:9e:78:79:fb:4d:4e:d5:fe:d7:4d:4a:de: 80:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:2D:70:A2:D3:F3:B5:53:DB:4D:C0:41:08:B0:84:8D:82:D6:17:8F X509v3 Authority Key Identifier: keyid:C0:DE:BC:88:50:B6:90:F1:23:27:96:91:1B:FE:3C:4C:9A:A8:67:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN68iFC2kPEjJ5aRG_48TJqoZ9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e3ca71-36f0-4c52-bc01-c6ac4dd7c8e4/1/wN68iFC2kPEjJ5aRG_48TJqoZ9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:be:01:0f:28:f1:a1:b1:83:22:85:97:47:8f:e0:16:6a:cf: 0a:bf:90:7e:45:68:29:19:c3:9b:dc:26:2a:8c:99:ef:22:5f: 34:93:39:64:d4:d3:de:80:03:79:a1:84:2f:8b:95:e6:e2:92: bc:e7:b3:70:d8:e0:71:c9:99:de:6d:54:ac:37:b7:cb:a3:e8: 5e:59:5f:bb:93:05:6e:d2:02:d8:24:77:20:47:81:56:e1:f0: 4f:34:82:47:da:11:e1:1e:41:71:11:9f:1c:22:28:ea:7e:3f: 39:43:4d:40:e6:37:e2:39:d1:a1:bf:11:07:33:e3:d2:1b:6e: 57:3b:05:8d:a0:ef:a4:66:db:89:29:9a:b0:a6:e8:27:0b:d9: e3:a4:16:2a:42:e9:5b:21:bd:32:7f:09:be:19:97:61:a4:d3: 78:2b:ac:96:8f:78:1d:6c:f6:3c:9b:f9:8c:3d:37:a5:98:17: 71:a1:0c:88:b6:ee:15:61:66:fc:69:25:ee:c6:f1:f5:aa:ed: d6:15:f8:da:25:0b:c3:39:2d:e9:5f:c7:da:5d:e1:26:10:6d: 34:50:fe:4f:af:44:3f:6a:cd:fa:49:d0:ff:33:56:e3:15:49: 6f:c7:4f:8e:56:f8:fd:43:3b:2d:63:c8:91:07:e9:5e:07:bd: 12:01:0b:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4CApicgCxWchTnZPariEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZGViYzg4NTBiNjkwZjEyMzI3OTY5MTFiZmUzYzRjOWFh ODY3ZGMwHhcNMjYwMTI2MDIwMDM1WhcNMjYwMTI3MDIwMDM1WjAzMTEwLwYDVQQD EyhkZDJkNzBhMmQzZjNiNTUzZGI0ZGMwNDEwOGIwODQ4ZDgyZDYxNzhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAui2+vVhMYs+UQVw2unuCErgfO7ju I83/wzInboRF7aLCfa3pM1BLvpttPdoaqDb9sISi9AdBPHeMXix9uR0Bh4kFywH+ spJb0C8r5f+RXEHW6LO85l1O3gF1keZo5x1D7KO3D3ga9jQ61f5T1litbyEgXdPC yxjHlQqDtNZZrUMIybFD/M5azozi4zeA6EWl2ke97k7gjKkD44vcMqQAnHqn8uJD lH18yI3PYkX2W3BsoPZjAbXIMIXNWzHaueurmTPdFcOuD7qRI03i4uKRCzX44EAZ UsVZvrPLAirJzEnl3SsLqhy72v0/84HZjKG8wVOeeHn7TU7V/tdNSt6AFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0tcKLT87VT203AQQiwhI2C1hePMB8GA1UdIwQY MBaAFMDevIhQtpDxIyeWkRv+PEyaqGfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lM2NhNzEtMzZmMC00YzUyLWJjMDEt YzZhYzRkZDdjOGU0LzEvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lM2NhNzEtMzZmMC00YzUyLWJjMDEtYzZhYzRkZDdjOGU0 LzEvd042OGlGQzJrUEVqSjVhUkdfNDhUSnFvWjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAb4BDyjx obGDIoWXR4/gFmrPCr+QfkVoKRnDm9wmKoyZ7yJfNJM5ZNTT3oADeaGEL4uV5uKS vOezcNjgccmZ3m1UrDe3y6PoXllfu5MFbtIC2CR3IEeBVuHwTzSCR9oR4R5BcRGf HCIo6n4/OUNNQOY34jnRob8RBzPj0htuVzsFjaDvpGbbiSmasKboJwvZ46QWKkLp WyG9Mn8JvhmXYaTTeCuslo94HWz2PJv5jD03pZgXcaEMiLbuFWFm/Gkl7sbx9art 1hX42iULwzkt6V/H2l3hJhBtNFD+T69EP2rN+knQ/zNW4xVJb8dPjlb4/UM7LWPI kQfpXge9EgELXw== -----END CERTIFICATE-----Generated at Mon Jan 26 09:45:32 2026 by rpki-client