This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft File: WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json) Hash identifier: RhsyxMR779fkN8Z+bQ3siD40aNS5MvWZ6L939ihJb1k= Subject key identifier: EE:FE:14:5B:F7:68:4D:97:9B:CC:01:F4:F0:AA:F7:6F:A0:4A:94:98 Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A Certificate issuer: /CN=5920d670649a4a4a9cb2e66772170741adf7c51a Certificate serial: 019BF650F69EBD1BB870B05CBEF2BDBA8981 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft Manifest number: 0EC9 Signing time: Sun 25 Jan 2026 18:00:59 +0000 Manifest this update: Sun 25 Jan 2026 18:00:59 +0000 Manifest next update: Mon 26 Jan 2026 18:00:59 +0000 Files and hashes: 1: 4bQ3DVIcXcKUiFmG5oHF6-JBJfw.roa (hash: OLz4ZIfxwyF5VVW3+IHUfqxoYFlnc0ssX7TuBteE4qA=) 2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: 2AObcM++856cOp3DZzgXcdrNzmFwCu7QKBVfC8d1DOg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:50:f6:9e:bd:1b:b8:70:b0:5c:be:f2:bd:ba:89:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a Validity Not Before: Jan 25 18:00:59 2026 GMT Not After : Jan 26 18:00:59 2026 GMT Subject: CN=eefe145bf7684d979bcc01f4f0aaf76fa04a9498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:b3:85:12:ff:5f:bf:d5:2b:0f:55:71:83: 06:70:db:04:d9:35:b8:74:1b:27:9d:ae:d0:c9:a5: c8:cc:e2:20:07:94:86:d6:9e:99:13:45:8f:9f:b0: 62:2b:b1:e0:2f:03:3b:9f:f3:37:26:5d:41:26:b6: 78:70:5f:a4:e5:4d:0b:65:00:0d:54:16:60:1e:f8: f5:01:de:b8:a1:8a:88:d8:b4:fb:75:a6:14:ba:c6: 20:8f:43:3f:b5:40:41:e0:7f:0f:1f:9e:cf:08:2b: 1f:2a:07:9d:a7:92:88:8b:54:cb:6f:77:a5:8e:6b: d2:a6:3c:0e:36:0a:2d:e3:c3:0f:0e:9f:c1:71:ce: cc:f5:5f:34:4c:40:6b:91:d6:da:13:4e:5f:50:20: 85:6e:11:19:7b:c3:bb:e8:72:f9:e4:50:8f:d5:a4: cf:3a:15:a6:90:05:60:8f:2d:37:bc:13:bf:9f:8b: c5:34:0a:7e:a2:22:99:a9:6e:fd:7c:ae:c9:97:14: 98:62:b7:1b:98:1f:6f:67:15:47:e4:1a:86:29:68: 58:8a:87:3a:2e:42:09:27:5a:29:50:02:c3:81:90: c6:50:c1:d1:cc:71:e0:6c:74:ba:0f:10:43:04:c3: f2:4c:01:66:b8:64:63:33:a3:fc:6a:28:df:b7:43: 4c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FE:14:5B:F7:68:4D:97:9B:CC:01:F4:F0:AA:F7:6F:A0:4A:94:98 X509v3 Authority Key Identifier: keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1d:7f:e6:8f:97:fa:b2:77:6e:d9:02:16:59:5a:d6:60:77: c1:1e:8d:8e:49:9b:f0:10:fb:04:b5:07:b6:b8:d6:c1:d4:4f: a6:20:65:a5:5c:b3:ac:c0:c4:a5:cc:b4:0f:62:70:e1:9e:82: 17:a8:ac:f4:c4:9e:0b:ad:1b:bc:2a:ca:88:d4:99:9d:10:43: d6:88:31:b5:bf:90:38:e7:b9:03:2a:88:cd:ea:37:7e:b5:ca: 52:50:a4:16:e1:28:4f:1f:cd:4c:0f:18:72:3f:f7:b6:19:6c: b1:77:3d:5b:29:3d:65:31:54:06:6e:d0:a0:8a:1a:0e:e5:a9: a1:27:ad:ed:aa:4a:aa:3c:e6:dc:0f:82:97:2f:7d:d8:30:83: 53:6f:d5:5f:d7:df:cc:f5:5d:bc:9d:26:28:90:32:80:93:8f: 27:a8:9c:f6:96:45:8e:66:82:58:26:9d:4d:c7:66:00:62:a2: 6b:29:dd:a2:36:25:fe:96:e1:b6:f0:ec:bf:77:29:3c:f9:2e: a8:15:6c:1c:22:58:03:4c:91:2f:17:43:f8:d5:84:35:26:1d: 68:3a:6c:1b:bb:b3:63:d5:2f:28:c3:b2:b8:0e:b5:2f:6f:dc: 6b:ce:cd:75:2a:17:3c:24:72:0a:43:19:5c:30:fc:91:35:ef: 39:8d:a0:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UPaevRu4cLBcvvK9uomBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5MjBkNjcwNjQ5YTRhNGE5Y2IyZTY2NzcyMTcwNzQxYWRm N2M1MWEwHhcNMjYwMTI1MTgwMDU5WhcNMjYwMTI2MTgwMDU5WjAzMTEwLwYDVQQD EyhlZWZlMTQ1YmY3Njg0ZDk3OWJjYzAxZjRmMGFhZjc2ZmEwNGE5NDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzKzhRL/X7/VKw9VcYMGcNsE2TW4 dBsnna7QyaXIzOIgB5SG1p6ZE0WPn7BiK7HgLwM7n/M3Jl1BJrZ4cF+k5U0LZQAN VBZgHvj1Ad64oYqI2LT7daYUusYgj0M/tUBB4H8PH57PCCsfKgedp5KIi1TLb3el jmvSpjwONgot48MPDp/Bcc7M9V80TEBrkdbaE05fUCCFbhEZe8O76HL55FCP1aTP OhWmkAVgjy03vBO/n4vFNAp+oiKZqW79fK7JlxSYYrcbmB9vZxVH5BqGKWhYioc6 LkIJJ1opUALDgZDGUMHRzHHgbHS6DxBDBMPyTAFmuGRjM6P8aijft0NMSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7+FFv3aE2Xm8wB9PCq92+gSpSYMB8GA1UdIwQY MBaAFFkg1nBkmkpKnLLmZ3IXB0Gt98UaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yYjhlNmQtYTJjOC00ZTdkLTk2Y2Et YWM3NjRjOTUyMzU3LzEvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yYjhlNmQtYTJjOC00ZTdkLTk2Y2EtYWM3NjRjOTUyMzU3 LzEvV1NEV2NHU2FTa3Fjc3VabmNoY0hRYTMzeFJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGh1/5o+X +rJ3btkCFlla1mB3wR6Njkmb8BD7BLUHtrjWwdRPpiBlpVyzrMDEpcy0D2Jw4Z6C F6is9MSeC60bvCrKiNSZnRBD1ogxtb+QOOe5AyqIzeo3frXKUlCkFuEoTx/NTA8Y cj/3thlssXc9Wyk9ZTFUBm7QoIoaDuWpoSet7apKqjzm3A+Cly992DCDU2/VX9ff zPVdvJ0mKJAygJOPJ6ic9pZFjmaCWCadTcdmAGKiayndojYl/pbhtvDsv3cpPPku qBVsHCJYA0yRLxdD+NWENSYdaDpsG7uzY9UvKMOyuA61L2/ca87NdSoXPCRyCkMZ XDD8kTXvOY2gnQ== -----END CERTIFICATE-----Generated at Sun Jan 25 23:34:50 2026 by rpki-client