This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft File: wN3S1PAw-jY4wEvmNu-T0oknFlI.mft (raw, json) Hash identifier: rXs9uuatK4hNeIUO+I9QKNWTNWFJJAgQCqaciIMN2x8= Subject key identifier: 8B:58:BC:FB:AB:CF:4C:1D:9D:CD:70:6A:D0:C0:38:C6:C7:74:7E:91 Authority key identifier: C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52 Certificate issuer: /CN=c0ddd2d4f030fa3638c04be636ef93d289271652 Certificate serial: 019BF6512C836366350D070FBDECE45D51E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft Manifest number: 062A Signing time: Sun 25 Jan 2026 18:01:13 +0000 Manifest this update: Sun 25 Jan 2026 18:01:13 +0000 Manifest next update: Mon 26 Jan 2026 18:01:13 +0000 Files and hashes: 1: cPRFnymx0CIKx6ZtB7MkyWCDm0U.roa (hash: AIiSdddDnEI2m5R7XY5zbokXJZOOTj517t6eCwoUwtY=) 2: ma1O2DltnndXpH9aWxYN2FdTRIE.roa (hash: y57vLDkssL86NAU7EWD13+ZBmcV21SBi3gDMpAVaAnQ=) 3: wN3S1PAw-jY4wEvmNu-T0oknFlI.crl (hash: lFuqwuM+8MXa1gLlNUcL1g0uIl74su2y1GbuozKIxyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:2c:83:63:66:35:0d:07:0f:bd:ec:e4:5d:51:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0ddd2d4f030fa3638c04be636ef93d289271652 Validity Not Before: Jan 25 18:01:13 2026 GMT Not After : Jan 26 18:01:13 2026 GMT Subject: CN=8b58bcfbabcf4c1d9dcd706ad0c038c6c7747e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:68:52:1e:c1:fa:75:51:0b:28:80:80:2f:e6: af:be:8a:5d:75:d5:a7:9a:59:cf:e8:62:fb:24:02: b6:35:eb:82:d2:3d:3a:fd:fc:20:5f:7b:29:88:db: 73:e6:8c:63:3a:99:43:71:b0:b5:e0:fa:24:f6:d6: 41:39:b1:87:77:67:c3:13:20:4f:c5:ff:18:19:27: 89:69:b8:b9:70:6c:f9:9d:90:f3:92:05:37:97:12: 83:4e:16:9c:1e:3b:66:ac:a6:21:93:3d:ce:8d:cd: 97:be:01:d1:ae:64:7a:ee:bd:72:8f:74:d7:15:bb: 97:a8:81:15:a1:7b:96:84:5f:5b:2f:f9:8d:fe:34: b3:9b:08:3c:c5:2c:4e:42:56:33:e2:4d:67:fb:ee: 19:ff:b9:cc:52:1f:c9:b2:16:17:81:56:c0:82:77: 20:75:b5:d7:45:8d:65:da:4d:ce:e0:c3:a7:21:90: 50:ca:6d:d5:6d:20:d8:b5:51:1c:1e:38:bd:6f:d9: 7e:e2:7e:ea:74:c1:43:38:4d:1d:4f:18:73:9b:49: 6a:7d:aa:cf:03:32:6a:64:ff:60:cf:51:89:92:91: 96:9e:80:d1:b8:40:d3:d6:09:b3:98:ed:36:ea:23: 3f:a6:fc:f3:f8:9a:36:bf:c8:43:37:79:fe:0a:6d: 72:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:58:BC:FB:AB:CF:4C:1D:9D:CD:70:6A:D0:C0:38:C6:C7:74:7E:91 X509v3 Authority Key Identifier: keyid:C0:DD:D2:D4:F0:30:FA:36:38:C0:4B:E6:36:EF:93:D2:89:27:16:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wN3S1PAw-jY4wEvmNu-T0oknFlI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/86802e-3f43-4bca-9cc2-4fb40485ff7b/1/wN3S1PAw-jY4wEvmNu-T0oknFlI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:1d:fe:6a:75:9d:8b:63:7f:c3:28:d9:24:4e:9c:cc:50:33: 41:18:ec:e6:c6:3d:86:fe:28:bd:81:65:2f:c6:e7:bb:60:ac: b7:09:87:2d:96:4b:5e:3f:d4:9e:63:16:c2:f1:72:f0:88:1a: c0:7c:c6:b3:14:6c:48:14:f6:de:fd:d0:f4:c4:aa:9c:4b:9f: ee:4e:41:c6:5f:ec:cb:92:b3:11:7e:b9:b9:21:29:23:a1:21: b6:16:db:53:8d:f7:ae:4b:cf:0b:f8:34:9d:5b:a7:45:5d:7e: 23:64:a5:be:f3:cb:91:a4:cc:9b:7e:86:46:cd:8c:8b:04:9a: ba:6b:46:44:3d:f4:fb:3c:f2:b6:9c:30:8a:96:0f:47:c5:f9: 76:73:57:93:13:c4:2e:b5:7c:22:80:f6:1b:7f:9b:9a:5f:37: 6e:f3:0d:0d:62:a3:c7:14:59:58:c4:8e:70:c3:bd:8d:ba:02: 43:b9:98:65:93:78:1b:8e:98:25:a3:78:4f:2b:ef:6f:8e:59: e6:aa:e1:1b:2f:e0:0c:5b:bd:ff:5e:bf:2b:0f:6c:4d:5b:bf: 85:5b:ad:c7:ac:b4:6b:8b:f6:54:d9:3d:9a:63:11:c2:ff:47: 58:e9:4a:81:5c:2f:e2:de:b6:93:c0:12:84:91:c3:0a:da:24: b2:cd:f0:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2USyDY2Y1DQcPvezkXVHpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZGRkMmQ0ZjAzMGZhMzYzOGMwNGJlNjM2ZWY5M2QyODky NzE2NTIwHhcNMjYwMTI1MTgwMTEzWhcNMjYwMTI2MTgwMTEzWjAzMTEwLwYDVQQD Eyg4YjU4YmNmYmFiY2Y0YzFkOWRjZDcwNmFkMGMwMzhjNmM3NzQ3ZTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmhSHsH6dVELKICAL+avvopdddWn mlnP6GL7JAK2NeuC0j06/fwgX3spiNtz5oxjOplDcbC14Pok9tZBObGHd2fDEyBP xf8YGSeJabi5cGz5nZDzkgU3lxKDThacHjtmrKYhkz3Ojc2XvgHRrmR67r1yj3TX FbuXqIEVoXuWhF9bL/mN/jSzmwg8xSxOQlYz4k1n++4Z/7nMUh/JshYXgVbAgncg dbXXRY1l2k3O4MOnIZBQym3VbSDYtVEcHji9b9l+4n7qdMFDOE0dTxhzm0lqfarP AzJqZP9gz1GJkpGWnoDRuEDT1gmzmO026iM/pvzz+Jo2v8hDN3n+Cm1ylQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItYvPurz0wdnc1watDAOMbHdH6RMB8GA1UdIwQY MBaAFMDd0tTwMPo2OMBL5jbvk9KJJxZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzIt NGZiNDA0ODVmZjdiLzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My84NjgwMmUtM2Y0My00YmNhLTljYzItNGZiNDA0ODVmZjdi LzEvd04zUzFQQXctalk0d0V2bU51LVQwb2tuRmxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArB3+anWd i2N/wyjZJE6czFAzQRjs5sY9hv4ovYFlL8bnu2CstwmHLZZLXj/UnmMWwvFy8Iga wHzGsxRsSBT23v3Q9MSqnEuf7k5Bxl/sy5KzEX65uSEpI6EhthbbU433rkvPC/g0 nVunRV1+I2SlvvPLkaTMm36GRs2MiwSaumtGRD30+zzytpwwipYPR8X5dnNXkxPE LrV8IoD2G3+bml83bvMNDWKjxxRZWMSOcMO9jboCQ7mYZZN4G46YJaN4Tyvvb45Z 5qrhGy/gDFu9/16/Kw9sTVu/hVutx6y0a4v2VNk9mmMRwv9HWOlKgVwv4t62k8AS hJHDCtokss3wSA== -----END CERTIFICATE-----Generated at Sun Jan 25 21:10:34 2026 by rpki-client