This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft File: WONFV0brcrtXbHtASwRu9GDRrhw.mft (raw, json) Hash identifier: 5WeRenO5ppMfjR2+z718lRm8hIWFAiy90pA8svxqh/0= Subject key identifier: 76:A6:B3:28:0C:17:50:23:6A:CB:56:BD:A6:F2:88:D2:A2:99:6D:F9 Authority key identifier: 58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C Certificate issuer: /CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Certificate serial: 019BF2AAD92C96D45C696BC2D698651DBE82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft Manifest number: CA Signing time: Sun 25 Jan 2026 01:00:41 +0000 Manifest this update: Sun 25 Jan 2026 01:00:41 +0000 Manifest next update: Mon 26 Jan 2026 01:00:41 +0000 Files and hashes: 1: 50kG0qdoh20VGTjAB3YZWLGmuFs.roa (hash: SPzlBqkyc6SEXdD4HuByqqWgNvUZc9AHV3XfuLziYkE=) 2: WONFV0brcrtXbHtASwRu9GDRrhw.crl (hash: dhbDhR6yZ2qzClQMCO6ifwoCU1FCgbVHwkP0g1nS/CM=) 3: gJAq7RAWddfkHc8Qahe2lyHl21E.roa (hash: PtVMUS5RG/3uzc8JjPjTOfc1aw8cOhcT4b5jxsnUPI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f2:aa:d9:2c:96:d4:5c:69:6b:c2:d6:98:65:1d:be:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58e3455746eb72bb576c7b404b046ef460d1ae1c Validity Not Before: Jan 25 01:00:41 2026 GMT Not After : Jan 26 01:00:41 2026 GMT Subject: CN=76a6b3280c1750236acb56bda6f288d2a2996df9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:dd:33:5d:1c:47:8e:7f:09:e8:8c:07:86:b1: 0a:a5:1f:70:a5:76:90:1f:f1:cf:19:bc:39:3c:e9: 00:05:f0:90:f7:56:1e:1a:9a:5f:85:74:f8:8e:64: 42:b5:33:eb:25:3a:21:cd:60:87:e9:e3:5c:5e:3a: a9:c4:a2:83:67:30:1f:de:7e:f5:fa:a5:f7:1b:ff: be:9d:d0:f5:c3:b6:65:3d:f4:c8:88:2d:65:8b:05: c9:e2:16:21:27:e8:84:d6:be:a8:49:44:7b:95:30: 64:35:f4:d4:d2:64:97:7c:7b:3b:a8:38:b9:2e:d4: ab:b2:20:65:74:1c:50:dc:03:7c:8d:8b:b5:98:65: a3:38:38:6d:dc:1b:8c:e9:85:99:39:7e:79:a5:45: 35:4e:28:6b:83:58:d7:09:86:89:22:0c:0c:73:ad: c4:41:46:7c:f6:82:6f:d9:73:c2:cf:e8:b0:c1:48: c7:6f:d3:19:bc:5a:ce:f5:a6:a3:a1:1a:ea:d3:9e: 4a:ed:62:37:c1:cf:26:16:b3:dd:88:76:92:82:4d: f3:86:1e:f3:e0:a0:4f:ef:5d:93:7c:57:1b:b7:bf: 70:95:d9:4e:57:cf:a1:5e:ac:5a:b2:4e:9d:8a:80: e8:80:19:e8:e2:06:5d:bb:2c:f8:74:76:b2:0d:9f: 61:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A6:B3:28:0C:17:50:23:6A:CB:56:BD:A6:F2:88:D2:A2:99:6D:F9 X509v3 Authority Key Identifier: keyid:58:E3:45:57:46:EB:72:BB:57:6C:7B:40:4B:04:6E:F4:60:D1:AE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WONFV0brcrtXbHtASwRu9GDRrhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c3e2c0-d363-46f2-b414-4e9d98a6063b/1/WONFV0brcrtXbHtASwRu9GDRrhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:cd:eb:69:16:35:8a:08:bb:0f:81:ff:b0:e5:73:5c:8e:0c: 41:7c:6c:84:84:48:ca:07:5f:ad:42:00:5d:14:5a:29:d1:a8: 84:3b:be:e5:17:f6:ae:02:4c:bf:b6:99:84:b7:db:41:2b:56: f7:b2:ca:9b:24:db:c5:61:bd:a4:2e:58:b4:49:15:db:f9:31: 0a:15:bf:ea:eb:1d:e8:37:ac:d6:50:ed:0b:ae:72:dd:78:e8: 98:34:9e:d7:4c:54:af:3d:e8:8e:9d:4e:4d:8e:44:c2:8e:0b: 69:b3:04:31:78:58:58:9d:9f:37:0e:0a:60:75:85:08:f7:69: df:e4:12:28:28:c7:df:11:85:c4:1a:fb:1f:cd:9f:4a:16:68: 91:ed:ba:65:82:85:2e:a1:91:ab:ea:ff:0e:95:d7:10:8b:a8: a8:75:f3:d8:65:71:07:be:d2:64:c8:5e:b1:7f:f8:d2:72:e4: 23:e9:6a:94:df:a4:41:b0:a8:c0:c6:c4:be:1e:0f:69:ea:68: 99:da:de:36:ea:54:1c:34:3e:4c:1f:d3:5e:0d:e3:a5:27:44: 0e:26:f6:cb:22:cc:58:09:1a:62:65:1c:56:c3:9b:66:fa:9c: d3:4e:b0:ac:15:46:05:81:16:ce:91:b0:a1:8d:29:43:6a:d3: 23:26:f9:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZvyqtksltRcaWvC1phlHb6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZTM0NTU3NDZlYjcyYmI1NzZjN2I0MDRiMDQ2ZWY0NjBk MWFlMWMwHhcNMjYwMTI1MDEwMDQxWhcNMjYwMTI2MDEwMDQxWjAzMTEwLwYDVQQD Eyg3NmE2YjMyODBjMTc1MDIzNmFjYjU2YmRhNmYyODhkMmEyOTk2ZGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj90zXRxHjn8J6IwHhrEKpR9wpXaQ H/HPGbw5POkABfCQ91YeGppfhXT4jmRCtTPrJTohzWCH6eNcXjqpxKKDZzAf3n71 +qX3G/++ndD1w7ZlPfTIiC1liwXJ4hYhJ+iE1r6oSUR7lTBkNfTU0mSXfHs7qDi5 LtSrsiBldBxQ3AN8jYu1mGWjODht3BuM6YWZOX55pUU1Tihrg1jXCYaJIgwMc63E QUZ89oJv2XPCz+iwwUjHb9MZvFrO9aajoRrq055K7WI3wc8mFrPdiHaSgk3zhh7z 4KBP712TfFcbt79wldlOV8+hXqxask6dioDogBno4gZduyz4dHayDZ9hHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHamsygMF1AjastWvabyiNKimW35MB8GA1UdIwQY MBaAFFjjRVdG63K7V2x7QEsEbvRg0a4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQt NGU5ZDk4YTYwNjNiLzEvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9jM2UyYzAtZDM2My00NmYyLWI0MTQtNGU5ZDk4YTYwNjNi LzEvV09ORlYwYnJjcnRYYkh0QVN3UnU5R0RScmh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc83raRY1 igi7D4H/sOVzXI4MQXxshIRIygdfrUIAXRRaKdGohDu+5Rf2rgJMv7aZhLfbQStW 97LKmyTbxWG9pC5YtEkV2/kxChW/6usd6Des1lDtC65y3XjomDSe10xUrz3ojp1O TY5Ewo4LabMEMXhYWJ2fNw4KYHWFCPdp3+QSKCjH3xGFxBr7H82fShZoke26ZYKF LqGRq+r/DpXXEIuoqHXz2GVxB77SZMhesX/40nLkI+lqlN+kQbCowMbEvh4Paepo mdreNupUHDQ+TB/TXg3jpSdEDib2yyLMWAkaYmUcVsObZvqc006wrBVGBYEWzpGw oY0pQ2rTIyb51Q== -----END CERTIFICATE-----Generated at Sun Jan 25 10:41:34 2026 by rpki-client