This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft File: WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft (raw, json) Hash identifier: nY5FHlmxsIMeuaBdb5whwZK2psDrYd3wdLepi0sCM/Q= Subject key identifier: 06:11:13:28:27:71:D5:53:68:91:18:22:78:B6:02:6D:88:7A:9F:B6 Authority key identifier: 58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62 Certificate issuer: /CN=584d44ad55c262d84efd442dc8767b0413e1b162 Certificate serial: 019BF8ACE9DDDC65CE4FB81FE950B5F1B570 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft Manifest number: 040D Signing time: Mon 26 Jan 2026 05:00:40 +0000 Manifest this update: Mon 26 Jan 2026 05:00:40 +0000 Manifest next update: Tue 27 Jan 2026 05:00:40 +0000 Files and hashes: 1: WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl (hash: s1z8wxdZjnB2M7fbV7o6so4IOrEQ/wP0K8lRnige4X4=) 2: rm6gBchORJ-jpmu9RaApbnzR-8w.roa (hash: lte7WLkbI36lJ+4fiNF1yu19eeqodaTXa0g3tAj6qk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:ac:e9:dd:dc:65:ce:4f:b8:1f:e9:50:b5:f1:b5:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=584d44ad55c262d84efd442dc8767b0413e1b162 Validity Not Before: Jan 26 05:00:40 2026 GMT Not After : Jan 27 05:00:40 2026 GMT Subject: CN=061113282771d5536891182278b6026d887a9fb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:18:4c:e1:a1:40:9b:eb:7e:68:33:91:08: 71:f4:6f:9b:b8:d3:d2:19:7a:64:76:42:01:f1:80: 30:cd:a5:8f:d6:cc:27:b8:0e:63:5e:fb:14:6c:c5: 46:c7:50:a7:73:fa:c5:29:d4:1d:22:40:83:2e:17: 36:e3:85:48:fb:bb:fa:07:45:1e:8e:22:39:17:bc: 78:f4:2e:60:b6:56:3e:9a:42:e3:56:4a:1b:98:a3: 7a:b0:07:68:29:30:ed:27:e6:e0:49:62:a4:f6:d0: ff:7a:cd:00:bf:31:be:ca:b3:5f:97:68:b6:af:29: 5f:36:15:e2:d1:2a:ba:27:79:26:a9:e7:01:a9:f5: c6:34:72:0d:0d:a7:f1:0b:0f:43:d9:d1:5a:fc:1c: 84:2a:1d:81:02:ee:94:a0:5a:58:95:89:ee:21:cd: 29:fb:e1:d4:65:32:4c:39:42:a1:ba:2f:8a:ea:6a: fc:f1:84:3b:c9:24:2d:d9:af:95:bd:a1:9e:10:8c: 08:e0:fa:b9:a0:ae:e4:40:74:bc:b5:11:33:21:25: 49:1b:58:23:41:79:db:bc:17:80:4e:67:ff:26:af: 58:34:5d:13:04:8a:1d:68:50:e0:de:77:45:9c:6a: 2f:78:60:ce:34:1b:c9:d8:b1:6b:2b:c5:0c:3f:83: fb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:11:13:28:27:71:D5:53:68:91:18:22:78:B6:02:6D:88:7A:9F:B6 X509v3 Authority Key Identifier: keyid:58:4D:44:AD:55:C2:62:D8:4E:FD:44:2D:C8:76:7B:04:13:E1:B1:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WE1ErVXCYthO_UQtyHZ7BBPhsWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cdc024-ea9c-4508-b936-80b9120738ca/1/WE1ErVXCYthO_UQtyHZ7BBPhsWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:f7:32:97:9c:e8:ee:ee:e0:ee:d5:fb:67:74:74:b4:d6:90: a8:b9:50:ff:7e:8c:17:2e:8a:42:7c:bf:9c:73:3c:f9:f1:1d: df:d7:ce:44:43:df:9b:78:13:c7:dc:27:1d:df:f8:b5:99:0e: 20:2d:f6:98:b6:e2:e6:26:f7:0c:f5:5c:d9:9d:88:e0:a0:d3: fb:c5:76:81:39:31:08:17:ee:03:60:f1:09:ca:31:2b:06:7b: 73:c4:33:c2:97:67:b5:6a:98:ea:68:55:82:67:0b:aa:1c:d6: d9:d7:68:15:62:bb:64:58:41:8f:35:9e:a7:c2:a7:d8:ec:27: 93:70:c1:4f:e4:40:83:49:c2:e3:2e:3b:78:b7:9c:de:79:77: 87:71:4a:bb:c6:a2:15:8f:57:07:37:05:ad:8e:f2:5a:de:89: f4:79:2e:4a:13:de:5e:b6:72:67:c5:68:2b:16:c5:ab:4a:8a: 17:26:42:f4:0a:cf:b6:6a:e1:57:b5:39:1b:7a:87:d4:98:52: 6f:18:d8:33:07:6b:80:d9:2a:94:2b:f5:50:7e:6f:61:66:d1: 54:0f:05:79:80:a5:04:1b:d1:74:91:66:c0:7d:cc:d7:73:79: 30:73:7b:50:6c:30:dc:fe:c7:97:16:5f:a8:20:6a:e6:6a:b6: 02:07:08:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4rOnd3GXOT7gf6VC18bVwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4NGQ0NGFkNTVjMjYyZDg0ZWZkNDQyZGM4NzY3YjA0MTNl MWIxNjIwHhcNMjYwMTI2MDUwMDQwWhcNMjYwMTI3MDUwMDQwWjAzMTEwLwYDVQQD EygwNjExMTMyODI3NzFkNTUzNjg5MTE4MjI3OGI2MDI2ZDg4N2E5ZmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uwYTOGhQJvrfmgzkQhx9G+buNPS GXpkdkIB8YAwzaWP1swnuA5jXvsUbMVGx1Cnc/rFKdQdIkCDLhc244VI+7v6B0Ue jiI5F7x49C5gtlY+mkLjVkobmKN6sAdoKTDtJ+bgSWKk9tD/es0AvzG+yrNfl2i2 rylfNhXi0Sq6J3kmqecBqfXGNHINDafxCw9D2dFa/ByEKh2BAu6UoFpYlYnuIc0p ++HUZTJMOUKhui+K6mr88YQ7ySQt2a+VvaGeEIwI4Pq5oK7kQHS8tREzISVJG1gj QXnbvBeATmf/Jq9YNF0TBIodaFDg3ndFnGoveGDONBvJ2LFrK8UMP4P7ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYREygncdVTaJEYIni2Am2Iep+2MB8GA1UdIwQY MBaAFFhNRK1VwmLYTv1ELch2ewQT4bFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0UxRXJWWENZdGhPX1VRdHlIWjdCQlBoc1dJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jZGMwMjQtZWE5Yy00NTA4LWI5MzYt ODBiOTEyMDczOGNhLzEvV0UxRXJWWENZdGhPX1VRdHlIWjdCQlBoc1dJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jZGMwMjQtZWE5Yy00NTA4LWI5MzYtODBiOTEyMDczOGNh LzEvV0UxRXJWWENZdGhPX1VRdHlIWjdCQlBoc1dJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALPcyl5zo 7u7g7tX7Z3R0tNaQqLlQ/36MFy6KQny/nHM8+fEd39fOREPfm3gTx9wnHd/4tZkO IC32mLbi5ib3DPVc2Z2I4KDT+8V2gTkxCBfuA2DxCcoxKwZ7c8QzwpdntWqY6mhV gmcLqhzW2ddoFWK7ZFhBjzWep8Kn2Ownk3DBT+RAg0nC4y47eLec3nl3h3FKu8ai FY9XBzcFrY7yWt6J9HkuShPeXrZyZ8VoKxbFq0qKFyZC9ArPtmrhV7U5G3qH1JhS bxjYMwdrgNkqlCv1UH5vYWbRVA8FeYClBBvRdJFmwH3M13N5MHN7UGww3P7HlxZf qCBq5mq2AgcI/Q== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:26 2026 by rpki-client