This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft File: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft (raw, json) Hash identifier: Yx5Vw7VYfBhnLuOMSTn8z4OuP2iSotVrNlhCsZLmrpg= Subject key identifier: 70:F1:5D:5E:7B:13:A0:F6:29:64:C7:FB:94:E6:64:6D:1E:67:5B:A1 Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F Certificate issuer: /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f Certificate serial: 019BF8AD6A3AFDD9C5B329229A887F9F58C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft Manifest number: 17E9 Signing time: Mon 26 Jan 2026 05:01:13 +0000 Manifest this update: Mon 26 Jan 2026 05:01:13 +0000 Manifest next update: Tue 27 Jan 2026 05:01:13 +0000 Files and hashes: 1: tKeJVPQprzbHDozpuHwQaIkze-Y.roa (hash: MtFkxMtpBK9xKMV/TWfmwpZjiWuBHp0NnIWMjL58uD4=) 2: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl (hash: tXyQeKNKowVDoU0oezvrpa0X3hO82K1cethICJkv208=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ad:6a:3a:fd:d9:c5:b3:29:22:9a:88:7f:9f:58:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f Validity Not Before: Jan 26 05:01:13 2026 GMT Not After : Jan 27 05:01:13 2026 GMT Subject: CN=70f15d5e7b13a0f62964c7fb94e6646d1e675ba1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bf:97:22:ea:b5:ae:9e:2f:b0:3c:19:c1:70: 21:87:49:12:b5:0b:84:96:bf:86:f7:3b:c7:fe:57: 65:16:92:c7:8f:23:fa:6c:6e:ae:07:7e:53:41:0f: 57:4f:1f:f5:1a:63:d0:54:00:f5:d3:68:73:1e:fd: 75:6e:4c:2b:60:da:8c:f7:65:d5:4e:b3:2c:1b:ee: 4d:15:68:6d:e8:3e:16:63:ce:2e:96:d3:11:33:18: 21:4c:d7:14:7a:b9:52:fc:d1:48:f9:2a:78:e1:0d: e0:62:95:0b:d5:b8:99:44:3c:fb:66:40:a6:12:43: 78:16:be:88:12:c8:15:08:39:bf:ef:97:80:42:bc: a7:4c:46:9e:8d:ed:05:8a:64:fc:aa:62:18:9d:bf: ee:e3:00:18:3b:d1:69:65:1b:19:6d:54:84:06:04: 71:df:79:20:e1:ef:40:cd:52:f7:f3:d4:47:5d:db: fd:da:dc:4a:25:f1:83:d4:c4:63:9d:4e:7a:98:04: a6:a9:e2:a2:92:2f:fa:40:f9:f9:e1:0f:c2:3e:22: 9a:f9:59:4b:5a:d0:90:b2:f1:4a:f0:15:10:8f:66: bb:f8:65:df:ac:ac:8e:b8:8e:18:c3:de:ec:af:c9: ad:15:e4:98:f8:87:be:e8:7f:f2:4a:a0:4c:fe:ff: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F1:5D:5E:7B:13:A0:F6:29:64:C7:FB:94:E6:64:6D:1E:67:5B:A1 X509v3 Authority Key Identifier: keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:3e:ce:33:86:4b:80:e2:cc:1a:48:f6:e9:36:de:2f:7c:f2: 9b:d2:cc:7c:a0:86:87:ac:93:2b:ea:f0:42:ce:48:64:64:e8: 48:66:a4:bf:a4:25:f5:75:9e:ec:af:cb:bc:06:5c:dd:41:bb: 9b:4e:7d:c1:fc:a0:44:c2:87:9e:5e:9f:49:9e:47:58:0e:ad: 38:64:91:82:6c:cf:a4:d6:82:60:58:38:c2:26:c8:6c:2b:df: ee:a0:2d:5c:8f:43:1f:be:41:8f:c9:ba:52:8c:6e:93:91:ff: 5d:c9:c9:5a:5c:99:f1:2e:3a:17:29:94:80:9f:eb:33:c3:f2: ea:c4:62:8c:bf:13:f2:d2:0e:e6:69:20:d9:88:7a:4d:1e:92: 9d:d5:e7:8e:b0:34:bf:13:61:95:0c:42:cf:05:cd:5b:27:6e: 60:1d:da:bb:d6:5b:08:62:9b:f7:82:f5:a5:2d:63:f2:8a:ec: 46:56:7a:17:e0:12:3c:cf:e6:91:98:5d:3b:89:75:47:da:8c: 38:10:79:41:34:8b:1d:d5:98:59:66:9d:90:2d:f2:3c:5a:b0: be:69:6b:f0:57:d8:87:26:1e:a3:9b:d5:3b:ac:35:cf:69:4c: a6:ec:fa:63:ee:36:72:5a:3d:5a:bd:8d:95:69:b8:f8:1f:d4: 73:23:15:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rWo6/dnFsykimoh/n1jCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzODUyMDFhMzNiNTI3YzY0NGFhZDVhZWNkMzc4MmM2YThj MmY1MWYwHhcNMjYwMTI2MDUwMTEzWhcNMjYwMTI3MDUwMTEzWjAzMTEwLwYDVQQD Eyg3MGYxNWQ1ZTdiMTNhMGY2Mjk2NGM3ZmI5NGU2NjQ2ZDFlNjc1YmExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyL+XIuq1rp4vsDwZwXAhh0kStQuE lr+G9zvH/ldlFpLHjyP6bG6uB35TQQ9XTx/1GmPQVAD102hzHv11bkwrYNqM92XV TrMsG+5NFWht6D4WY84ultMRMxghTNcUerlS/NFI+Sp44Q3gYpUL1biZRDz7ZkCm EkN4Fr6IEsgVCDm/75eAQrynTEaeje0FimT8qmIYnb/u4wAYO9FpZRsZbVSEBgRx 33kg4e9AzVL389RHXdv92txKJfGD1MRjnU56mASmqeKiki/6QPn54Q/CPiKa+VlL WtCQsvFK8BUQj2a7+GXfrKyOuI4Yw97sr8mtFeSY+Ie+6H/ySqBM/v9PWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDxXV57E6D2KWTH+5TmZG0eZ1uhMB8GA1UdIwQY MBaAFMOFIBoztSfGRKrVrs03gsaowvUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYt ODU3NTgwZmM2MTY3LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYtODU3NTgwZmM2MTY3 LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeD7OM4ZL gOLMGkj26TbeL3zym9LMfKCGh6yTK+rwQs5IZGToSGakv6Ql9XWe7K/LvAZc3UG7 m059wfygRMKHnl6fSZ5HWA6tOGSRgmzPpNaCYFg4wibIbCvf7qAtXI9DH75Bj8m6 Uoxuk5H/XcnJWlyZ8S46FymUgJ/rM8Py6sRijL8T8tIO5mkg2Yh6TR6SndXnjrA0 vxNhlQxCzwXNWyduYB3au9ZbCGKb94L1pS1j8orsRlZ6F+ASPM/mkZhdO4l1R9qM OBB5QTSLHdWYWWadkC3yPFqwvmlr8FfYhyYeo5vVO6w1z2lMpuz6Y+42clo9Wr2N lWm4+B/UcyMV4Q== -----END CERTIFICATE-----Generated at Mon Jan 26 09:02:49 2026 by rpki-client