This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft File: WKXtjj7MkqLejICr6agZXV_5l-Y.mft (raw, json) Hash identifier: f8pLZPfDzNS+J+DrSXXm314bIrSDXK5NqozvHPlMUkQ= Subject key identifier: 8E:E4:AE:AF:4D:03:56:DE:9D:FE:E4:D2:48:5A:D7:EE:C1:5A:80:C5 Authority key identifier: 58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6 Certificate issuer: /CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6 Certificate serial: 019BF79A262C6D81462A8635583C5F3A3FE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft Manifest number: 0F50 Signing time: Mon 26 Jan 2026 00:00:33 +0000 Manifest this update: Mon 26 Jan 2026 00:00:33 +0000 Manifest next update: Tue 27 Jan 2026 00:00:33 +0000 Files and hashes: 1: 59YcII7vwSrelszgVXfE1Zyv6ic.roa (hash: q6jTMI6TImBNKUCWPMApFyq9F6Fxj9YmbzWV3XM+69w=) 2: WKXtjj7MkqLejICr6agZXV_5l-Y.crl (hash: dHRCI1e06TN3gDyhfuorPLT7ZDxhaOUVXpkOYwODrb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:26:2c:6d:81:46:2a:86:35:58:3c:5f:3a:3f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a5ed8e3ecc92a2de8c80abe9a8195d5ff997e6 Validity Not Before: Jan 26 00:00:33 2026 GMT Not After : Jan 27 00:00:33 2026 GMT Subject: CN=8ee4aeaf4d0356de9dfee4d2485ad7eec15a80c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e0:54:0b:72:f2:eb:c7:b4:47:c5:e6:4c:10: 6e:aa:2c:63:13:87:4a:e3:0f:6d:86:6e:ef:c7:0d: 62:a6:56:d9:92:37:8f:d8:7f:6e:fe:71:12:ce:e2: 5c:1c:9a:54:54:32:03:d4:89:d4:28:87:e7:41:95: b8:e1:c8:10:d4:48:bc:19:fa:0c:84:54:31:0b:05: 1c:63:e8:88:51:1c:c4:2f:03:c0:19:8c:8e:79:6f: f4:db:25:1a:50:3f:08:ed:41:f1:39:8b:58:9a:51: 98:bb:c6:66:78:50:aa:6c:05:01:b8:27:fa:8f:8b: c2:73:49:68:bc:27:5f:66:a3:2a:1b:8f:f1:e0:19: 23:00:4c:6d:80:2c:1b:09:13:05:91:89:0e:a3:59: 55:b5:f8:e3:40:98:bd:83:33:c6:5a:50:bc:8a:df: be:ee:ab:64:44:b8:b8:39:c8:e6:d5:8c:02:c1:ec: 54:ca:03:e2:65:48:62:48:88:82:fd:4e:9d:74:f9: fc:c2:72:c4:4b:f3:93:84:9d:54:bd:cc:34:1e:cf: 40:da:40:b7:f7:a3:a9:9f:4b:d5:15:2d:b9:ab:1f: f8:e0:6c:cb:ab:dd:5a:75:c3:4c:56:b8:a7:78:bf: 73:b7:3a:bd:c5:8f:75:f2:fe:0b:87:4f:dc:43:4b: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E4:AE:AF:4D:03:56:DE:9D:FE:E4:D2:48:5A:D7:EE:C1:5A:80:C5 X509v3 Authority Key Identifier: keyid:58:A5:ED:8E:3E:CC:92:A2:DE:8C:80:AB:E9:A8:19:5D:5F:F9:97:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKXtjj7MkqLejICr6agZXV_5l-Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c58189-d57e-415d-b977-0067bcaf3770/1/WKXtjj7MkqLejICr6agZXV_5l-Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:2c:28:36:89:19:78:a0:d4:57:67:7f:59:c1:9e:35:c3:ca: 47:d9:3c:ec:bd:33:4f:f3:5e:c0:84:0c:1e:c3:d2:7f:86:94: 1d:22:c8:8f:69:2e:c9:f6:16:1f:c7:03:8b:bc:2f:9a:55:fb: 85:85:be:4b:25:3f:76:7b:36:5b:9a:f2:88:db:0b:bb:22:bd: 62:fd:ab:8b:a1:93:14:73:dc:15:74:86:e0:93:fe:60:39:b8: 2a:69:da:9c:a0:33:8e:7c:59:ac:6e:4d:b0:4b:a2:af:5c:d4: 08:2e:b6:f0:21:76:21:69:df:96:f9:22:7f:c8:7e:de:87:c9: 4c:36:30:05:9f:a1:59:ff:6d:11:23:2e:55:57:9f:10:52:79: 52:96:b2:67:4f:f9:aa:63:bc:51:c7:02:47:0f:ce:04:32:43: 35:ab:c9:5d:90:e4:e2:28:c2:73:ff:99:55:13:45:20:d7:28: ee:84:0f:99:ad:ea:64:c6:d5:38:b4:98:9c:83:fd:76:0a:de: c0:1e:e7:0a:69:ab:f7:86:c5:a7:be:6f:62:28:2a:c1:72:95: 08:16:fd:8e:33:5c:51:15:4b:46:36:a2:66:ca:e4:38:7a:ff: 0b:d0:49:33:88:7a:c1:75:ab:20:a2:ef:30:85:b3:51:70:43: 24:ad:86:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3miYsbYFGKoY1WDxfOj/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTVlZDhlM2VjYzkyYTJkZThjODBhYmU5YTgxOTVkNWZm OTk3ZTYwHhcNMjYwMTI2MDAwMDMzWhcNMjYwMTI3MDAwMDMzWjAzMTEwLwYDVQQD Eyg4ZWU0YWVhZjRkMDM1NmRlOWRmZWU0ZDI0ODVhZDdlZWMxNWE4MGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAleBUC3Ly68e0R8XmTBBuqixjE4dK 4w9thm7vxw1iplbZkjeP2H9u/nESzuJcHJpUVDID1InUKIfnQZW44cgQ1Ei8GfoM hFQxCwUcY+iIURzELwPAGYyOeW/02yUaUD8I7UHxOYtYmlGYu8ZmeFCqbAUBuCf6 j4vCc0lovCdfZqMqG4/x4BkjAExtgCwbCRMFkYkOo1lVtfjjQJi9gzPGWlC8it++ 7qtkRLi4Ocjm1YwCwexUygPiZUhiSIiC/U6ddPn8wnLES/OThJ1Uvcw0Hs9A2kC3 96Opn0vVFS25qx/44GzLq91adcNMVrineL9ztzq9xY918v4Lh0/cQ0uY5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7krq9NA1benf7k0kha1+7BWoDFMB8GA1UdIwQY MBaAFFil7Y4+zJKi3oyAq+moGV1f+ZfmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5Nzct MDA2N2JjYWYzNzcwLzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jNTgxODktZDU3ZS00MTVkLWI5NzctMDA2N2JjYWYzNzcw LzEvV0tYdGpqN01rcUxlaklDcjZhZ1pYVl81bC1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSwoNokZ eKDUV2d/WcGeNcPKR9k87L0zT/NewIQMHsPSf4aUHSLIj2kuyfYWH8cDi7wvmlX7 hYW+SyU/dns2W5ryiNsLuyK9Yv2ri6GTFHPcFXSG4JP+YDm4KmnanKAzjnxZrG5N sEuir1zUCC628CF2IWnflvkif8h+3ofJTDYwBZ+hWf9tESMuVVefEFJ5UpayZ0/5 qmO8UccCRw/OBDJDNavJXZDk4ijCc/+ZVRNFINco7oQPma3qZMbVOLSYnIP9dgre wB7nCmmr94bFp75vYigqwXKVCBb9jjNcURVLRjaiZsrkOHr/C9BJM4h6wXWrIKLv MIWzUXBDJK2G2w== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:03 2026 by rpki-client