This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft File: WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft (raw, json) Hash identifier: bFsjEkGhKwkJITqQsXyErEPm+bzAwc1wB/4GyPl2ZnI= Subject key identifier: 81:47:4A:14:58:C6:F9:9A:FD:76:C7:21:20:82:56:B9:B3:52:2D:07 Authority key identifier: 58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 Certificate issuer: /CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Certificate serial: 019BF65178106C42A0366C6AEB9B17DC1029 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft Manifest number: 0D42 Signing time: Sun 25 Jan 2026 18:01:32 +0000 Manifest this update: Sun 25 Jan 2026 18:01:32 +0000 Manifest next update: Mon 26 Jan 2026 18:01:32 +0000 Files and hashes: 1: 3gPqmGX_E4ya7yH7PnrBcW_EHDU.roa (hash: sSd0FH8Fr+JaKJcFI4sdgdsJVqSmtXvQt/a2nWcH8C0=) 2: WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl (hash: CmWPblcABoWuNAOYAxYD2J60pkvU29g74cguab1+c18=) 3: lDMBJ-BcmPZK4Hzw0eOcJ11uY2M.roa (hash: BegtqmJXIzLJcbrc0HIdp7rcPGJlIn1UUJw6YBMx/38=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:78:10:6c:42:a0:36:6c:6a:eb:9b:17:dc:10:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=585e4f4b4a9ef5531dfe50f41541c912a335fbf1 Validity Not Before: Jan 25 18:01:32 2026 GMT Not After : Jan 26 18:01:32 2026 GMT Subject: CN=81474a1458c6f99afd76c721208256b9b3522d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:13:38:2f:74:19:f5:ce:95:c9:3f:2f:1b:4f: 70:09:6a:7c:53:b3:28:c8:67:d1:03:bc:73:8d:92: 3e:fb:b7:d5:61:9c:63:39:52:25:a0:19:ef:a7:ec: 79:95:10:53:d9:ce:ad:e5:eb:a8:a5:e7:3f:0f:b4: 1f:d5:cb:57:4b:38:08:1f:59:d9:b5:53:9b:f2:dd: 9e:38:f9:c2:42:98:91:c7:7c:f3:7b:b7:de:2e:a5: 8c:c0:c4:a7:f3:07:1e:c6:62:47:e2:98:50:ee:91: 0c:9d:60:37:15:04:ee:91:3a:4e:74:fa:84:46:be: 22:14:ce:09:b6:6b:ae:6a:17:28:da:58:ca:c7:ed: 37:fc:d9:9e:83:01:95:e2:ed:5e:aa:4d:fd:12:a7: 20:8f:cf:d2:8d:ee:7e:91:6e:5b:46:a5:7a:47:ec: f0:ba:13:b3:23:4a:3e:a4:e5:85:d1:1c:1e:de:6b: e9:05:92:83:e3:9e:da:90:83:f9:2f:cb:8e:08:a6: 10:ce:c5:09:a1:35:ad:fb:00:19:ec:24:21:37:0a: 38:e9:69:d6:d3:44:2d:c0:c7:52:29:4e:11:a8:ed: fb:d8:0d:72:41:42:eb:94:31:62:08:cd:65:23:29: 03:e1:58:4c:bc:48:72:17:15:90:74:a6:43:87:cf: 75:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:47:4A:14:58:C6:F9:9A:FD:76:C7:21:20:82:56:B9:B3:52:2D:07 X509v3 Authority Key Identifier: keyid:58:5E:4F:4B:4A:9E:F5:53:1D:FE:50:F4:15:41:C9:12:A3:35:FB:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WF5PS0qe9VMd_lD0FUHJEqM1-_E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/cfc4af-17e6-43de-921f-6baf3007905c/1/WF5PS0qe9VMd_lD0FUHJEqM1-_E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:17:e9:a3:d9:7e:42:f0:61:45:43:72:f0:86:d2:43:fc:7d: 67:be:6a:3f:94:e2:58:21:5e:e2:26:b2:09:35:3a:ee:06:97: ce:9b:56:99:d8:48:5a:da:2a:c1:c3:b3:84:f0:7b:d0:29:46: be:67:1d:33:0a:35:81:1d:16:73:7f:87:4a:37:81:ed:2b:89: fa:0c:04:c4:b0:cb:50:4d:eb:18:9b:ca:75:e8:cf:2e:e9:a3: c7:cc:02:56:8c:fa:07:1f:af:29:72:b3:58:b8:c2:4e:f9:ca: 64:54:82:8d:e3:f5:1d:03:79:e5:94:90:77:da:fa:a1:a1:e7: e7:60:dd:80:1c:34:59:72:ff:47:7d:01:67:6f:10:fc:2f:d0: c9:82:f3:1b:43:fb:5d:17:51:09:ae:3d:53:55:eb:29:8b:55: a9:43:4e:5a:fd:fa:30:b3:40:f2:3c:eb:82:dd:36:c9:33:9a: 33:70:4e:e7:da:d8:38:e4:e5:4c:4e:a7:a3:2e:d9:63:17:10: 48:69:5a:c3:23:37:f5:76:c2:d0:6b:07:d3:0a:f5:cf:e3:e0: 57:0f:8c:69:46:2c:4c:f1:d9:5c:1a:26:1a:a0:e4:dd:f3:a0: 00:05:c0:1b:d8:db:56:22:83:99:1a:cd:45:43:2b:ff:98:02: 39:f6:fa:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UXgQbEKgNmxq65sX3BApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NWU0ZjRiNGE5ZWY1NTMxZGZlNTBmNDE1NDFjOTEyYTMz NWZiZjEwHhcNMjYwMTI1MTgwMTMyWhcNMjYwMTI2MTgwMTMyWjAzMTEwLwYDVQQD Eyg4MTQ3NGExNDU4YzZmOTlhZmQ3NmM3MjEyMDgyNTZiOWIzNTIyZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6hM4L3QZ9c6VyT8vG09wCWp8U7Mo yGfRA7xzjZI++7fVYZxjOVIloBnvp+x5lRBT2c6t5euopec/D7Qf1ctXSzgIH1nZ tVOb8t2eOPnCQpiRx3zze7feLqWMwMSn8wcexmJH4phQ7pEMnWA3FQTukTpOdPqE Rr4iFM4Jtmuuahco2ljKx+03/NmegwGV4u1eqk39Eqcgj8/Sje5+kW5bRqV6R+zw uhOzI0o+pOWF0Rwe3mvpBZKD457akIP5L8uOCKYQzsUJoTWt+wAZ7CQhNwo46WnW 00QtwMdSKU4RqO372A1yQULrlDFiCM1lIykD4VhMvEhyFxWQdKZDh891oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFHShRYxvma/XbHISCCVrmzUi0HMB8GA1UdIwQY MBaAFFheT0tKnvVTHf5Q9BVByRKjNfvxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYt NmJhZjMwMDc5MDVjLzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny9jZmM0YWYtMTdlNi00M2RlLTkyMWYtNmJhZjMwMDc5MDVj LzEvV0Y1UFMwcWU5Vk1kX2xEMEZVSEpFcU0xLV9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBfpo9l+ QvBhRUNy8IbSQ/x9Z75qP5TiWCFe4iayCTU67gaXzptWmdhIWtoqwcOzhPB70ClG vmcdMwo1gR0Wc3+HSjeB7SuJ+gwExLDLUE3rGJvKdejPLumjx8wCVoz6Bx+vKXKz WLjCTvnKZFSCjeP1HQN55ZSQd9r6oaHn52DdgBw0WXL/R30BZ28Q/C/QyYLzG0P7 XRdRCa49U1XrKYtVqUNOWv36MLNA8jzrgt02yTOaM3BO59rYOOTlTE6noy7ZYxcQ SGlawyM39XbC0GsH0wr1z+PgVw+MaUYsTPHZXBomGqDk3fOgAAXAG9jbViKDmRrN RUMr/5gCOfb6xA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:00:53 2026 by rpki-client