This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft File: WtikTa0xXyHqmS_G4QSCxB7N_PU.mft (raw, json) Hash identifier: E10i3ghD97F9YQ+nr3ItWhrZK6ZmiUkjHddTTiPhIxk= Subject key identifier: 74:2C:E9:65:87:D2:80:09:86:BC:C1:86:03:95:8B:00:54:DD:DC:AE Authority key identifier: 5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5 Certificate issuer: /CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5 Certificate serial: 019BF951953B5E88F5EDA4C759B507BB22EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft Manifest number: 0CE7 Signing time: Mon 26 Jan 2026 08:00:31 +0000 Manifest this update: Mon 26 Jan 2026 08:00:31 +0000 Manifest next update: Tue 27 Jan 2026 08:00:31 +0000 Files and hashes: 1: WtikTa0xXyHqmS_G4QSCxB7N_PU.crl (hash: jV+6sP6FCScDzk8nAVvhpMqvIQShCZvuh3nDmNNnCDM=) 2: f_GWy2LHysske0RWtBkF7AL9X-U.roa (hash: nrjzy2n06K9FvMdvpZLXzctrlxHCSSGtGX1t8yN4WJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:51:95:3b:5e:88:f5:ed:a4:c7:59:b5:07:bb:22:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5 Validity Not Before: Jan 26 08:00:31 2026 GMT Not After : Jan 27 08:00:31 2026 GMT Subject: CN=742ce96587d2800986bcc18603958b0054dddcae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a0:e0:b0:ed:91:ac:20:21:65:6d:e4:9f:fa: 05:9f:ae:8d:7c:2c:1c:e8:49:0a:1d:7d:f7:4e:d4: 9a:8c:88:b5:2a:a7:13:3a:28:48:2e:e8:ba:c4:07: f7:af:3f:97:de:0e:fd:cb:d0:c8:12:13:f2:47:d9: 05:5f:2b:9a:b4:d2:22:37:30:36:55:6b:8e:41:17: fb:06:54:dd:e5:d9:ac:65:13:43:a5:0f:f9:b8:ad: c9:91:93:c2:51:b0:12:52:7c:50:05:83:18:7a:51: 0d:3d:72:32:ca:2f:93:ed:66:99:f0:78:f3:23:28: 70:00:7d:17:f3:b4:55:23:e8:16:74:8d:1c:55:b4: f2:30:9d:6c:e1:0a:86:79:93:eb:16:15:50:79:33: 0d:b5:49:4f:ee:85:38:81:7a:c9:98:72:e3:ea:62: 81:69:54:07:71:a9:66:02:9f:ec:19:a4:16:3b:b3: aa:2e:b4:30:98:2d:5e:4f:c4:84:97:0c:ea:ae:61: 4d:c5:35:01:4e:e9:a6:45:04:a9:fe:6f:97:8d:90: 19:77:2e:23:00:90:93:bd:b3:97:fd:6e:8b:ef:68: 1f:73:9d:99:4d:89:b5:de:e3:44:8f:48:d6:12:16: f4:07:fd:3e:54:ea:76:d9:f5:8e:a1:74:b7:87:62: 3e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:2C:E9:65:87:D2:80:09:86:BC:C1:86:03:95:8B:00:54:DD:DC:AE X509v3 Authority Key Identifier: keyid:5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1b:57:6b:58:5e:61:0d:5c:b6:57:0d:e2:2f:73:df:96:67: 6f:f9:8f:a3:c5:49:85:db:b3:90:bd:96:6b:7a:d3:73:71:47: 12:f0:4e:00:77:82:b5:7b:27:1f:ba:f8:42:76:e2:28:3f:58: a4:26:a5:b7:17:77:c5:09:ab:6d:c3:c1:88:95:72:9d:69:65: 6b:8d:47:53:65:52:8d:a3:13:a3:a6:57:af:19:00:3b:f2:41: a2:be:39:35:19:41:06:a0:69:3b:c8:6e:63:ab:5c:99:88:fa: 8a:4d:d2:21:a3:e1:49:a4:b9:49:bc:82:90:6f:f7:b8:a6:68: 8b:cb:8d:32:9a:36:b7:ed:c9:c0:dd:c0:8b:13:29:d4:6a:db: 08:af:eb:63:ea:eb:33:5e:b5:8d:a4:c9:50:9d:bd:22:95:12: 59:97:e3:9e:9c:09:68:58:1d:bc:c1:91:c7:f3:a1:f4:b8:74: a8:19:ae:dc:fb:eb:6a:8b:83:1f:28:0e:ee:76:90:fb:86:f2: 12:74:17:bb:f4:41:7b:fc:7c:42:eb:d4:0f:cb:29:eb:14:dd: 51:6b:7d:6c:01:fc:a2:e1:61:98:5c:32:e8:c9:8d:81:db:71: 5a:68:4c:9e:25:b1:72:c5:b0:f0:18:3e:b2:2a:6a:a6:ef:3f: 4f:d1:6b:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5UZU7Xoj17aTHWbUHuyLvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDhhNDRkYWQzMTVmMjFlYTk5MmZjNmUxMDQ4MmM0MWVj ZGZjZjUwHhcNMjYwMTI2MDgwMDMxWhcNMjYwMTI3MDgwMDMxWjAzMTEwLwYDVQQD Eyg3NDJjZTk2NTg3ZDI4MDA5ODZiY2MxODYwMzk1OGIwMDU0ZGRkY2FlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46DgsO2RrCAhZW3kn/oFn66NfCwc 6EkKHX33TtSajIi1KqcTOihILui6xAf3rz+X3g79y9DIEhPyR9kFXyuatNIiNzA2 VWuOQRf7BlTd5dmsZRNDpQ/5uK3JkZPCUbASUnxQBYMYelENPXIyyi+T7WaZ8Hjz IyhwAH0X87RVI+gWdI0cVbTyMJ1s4QqGeZPrFhVQeTMNtUlP7oU4gXrJmHLj6mKB aVQHcalmAp/sGaQWO7OqLrQwmC1eT8SElwzqrmFNxTUBTummRQSp/m+XjZAZdy4j AJCTvbOX/W6L72gfc52ZTYm13uNEj0jWEhb0B/0+VOp22fWOoXS3h2I+SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQs6WWH0oAJhrzBhgOViwBU3dyuMB8GA1UdIwQY MBaAFFrYpE2tMV8h6pkvxuEEgsQezfz1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3Rpa1RhMHhYeUhxbVNfRzRRU0N4QjdOX1BVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi84M2Y4MTgtMTljMC00NzAyLTgzZTUt ZDk1NjM2YTdhNjY0LzEvV3Rpa1RhMHhYeUhxbVNfRzRRU0N4QjdOX1BVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi84M2Y4MTgtMTljMC00NzAyLTgzZTUtZDk1NjM2YTdhNjY0 LzEvV3Rpa1RhMHhYeUhxbVNfRzRRU0N4QjdOX1BVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRtXa1he YQ1ctlcN4i9z35Znb/mPo8VJhduzkL2Wa3rTc3FHEvBOAHeCtXsnH7r4QnbiKD9Y pCaltxd3xQmrbcPBiJVynWlla41HU2VSjaMTo6ZXrxkAO/JBor45NRlBBqBpO8hu Y6tcmYj6ik3SIaPhSaS5SbyCkG/3uKZoi8uNMpo2t+3JwN3AixMp1GrbCK/rY+rr M161jaTJUJ29IpUSWZfjnpwJaFgdvMGRx/Oh9Lh0qBmu3PvraouDHygO7naQ+4by EnQXu/RBe/x8QuvUD8sp6xTdUWt9bAH8ouFhmFwy6MmNgdtxWmhMniWxcsWw8Bg+ sipqpu8/T9Frvg== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:25 2026 by rpki-client