This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft File: WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json) Hash identifier: S1wM7wR7JuNHOerF/S0SnjfRwz9agcN63IM5R36GnnU= Subject key identifier: E6:9E:63:66:6D:7B:23:3C:59:54:5C:CF:1E:6A:30:8C:8B:50:A1:CA Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA Certificate issuer: /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea Certificate serial: 019BF72D669FC2DBDC678C807534B3915BFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 22:01:46 +0000 Manifest this update: Sun 25 Jan 2026 22:01:46 +0000 Manifest next update: Mon 26 Jan 2026 22:01:46 +0000 Files and hashes: 1: FJ7VQcAMIvc3LwUGZdJ2_y4tX64.roa (hash: KoQb0RIcqGQvJlXxJR+BM6e+6A6w3hgDW+4kbTJ92pM=) 2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: oRPtTgeKWblBR5mL2b+FEI1OWv2n9h4E/+z2kPGm3bs=) 3: aPCbZqgtPV21c3ARjcz1UPj-qzE.roa (hash: QekkHkDa+9iEezFiFOvlr4BwgfAqsVczW7AoIwi4kRQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:2d:66:9f:c2:db:dc:67:8c:80:75:34:b3:91:5b:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea Validity Not Before: Jan 25 22:01:46 2026 GMT Not After : Jan 26 22:01:46 2026 GMT Subject: CN=e69e63666d7b233c59545ccf1e6a308c8b50a1ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6e:f3:d6:a6:80:64:a1:38:d7:b9:2b:c5:f5: 23:91:a9:ac:3c:73:88:ad:15:6c:8e:43:00:db:59: e7:42:75:28:e7:a8:91:bc:79:12:60:88:44:ba:65: ed:41:75:ab:29:f3:50:c8:94:0a:a1:60:a9:34:68: 7a:c0:39:b3:6f:0d:41:08:c8:22:5a:28:04:b4:d9: bf:54:1c:63:61:2f:82:ba:4a:a4:33:d1:d4:99:5e: cd:b0:84:77:77:43:80:68:04:4b:36:fd:d9:58:8a: 17:cf:ba:ab:47:b3:86:da:5b:cb:d6:bd:59:94:4d: fa:04:dd:6a:a0:8f:42:43:03:2f:fd:e9:e0:63:46: 5c:5f:55:2d:94:03:43:a5:19:ea:09:7c:9b:b9:e2: 0d:e1:ea:85:9c:75:9b:55:e1:0d:16:b1:a6:28:bd: 1b:3c:62:77:e1:45:26:8c:df:e4:6e:e3:7a:e8:e4: 43:83:c4:e7:cc:53:51:d4:0d:03:3a:a5:6c:41:2a: fd:0c:6d:56:02:1d:b7:c3:1e:b9:06:59:9a:22:56: bd:f6:db:e4:0a:76:60:a0:44:99:29:a5:3b:29:fb: 46:6b:90:65:5a:b9:2d:89:cf:18:18:6d:7f:14:af: 5b:05:a2:0a:2d:4b:c6:20:ab:45:99:96:ba:ab:ea: 3b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:9E:63:66:6D:7B:23:3C:59:54:5C:CF:1E:6A:30:8C:8B:50:A1:CA X509v3 Authority Key Identifier: keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:ed:10:53:e8:a9:06:70:fe:0c:85:1e:68:d8:57:45:ab:33: 77:e1:42:05:97:0b:17:b9:aa:b9:27:58:b6:0e:3c:ca:74:64: e5:3a:92:b8:52:03:51:8d:c9:76:7e:96:cf:49:a1:05:b8:3a: a8:a4:18:31:28:d8:53:af:d2:83:6e:57:85:4d:51:90:89:44: 83:8f:d0:d9:38:e1:ee:28:20:ab:97:5e:7b:64:9b:6d:e1:15: 53:1e:2a:04:e5:cb:61:3f:46:23:df:ec:b6:68:fe:27:66:58: a3:ce:f6:d3:1e:20:d1:7f:67:a4:77:54:b9:f0:34:b9:b7:6c: 3d:2a:56:00:bf:f0:dc:68:6b:66:97:c5:16:4f:9c:56:1a:67: d6:6b:08:20:77:86:cc:d2:52:06:1b:ba:fb:36:37:d1:59:61: d7:fd:ec:d2:e5:06:f4:f0:19:a5:6c:67:9d:6e:29:07:54:2e: 84:d5:9f:4c:7b:55:b3:32:76:98:35:68:8f:0a:4e:38:23:f6: 0f:56:16:84:ff:07:54:ce:d5:f1:84:c5:d6:50:04:47:b3:ca: 07:41:59:e4:e4:1e:fa:f5:68:68:99:d3:1c:73:6a:4f:52:c8: bf:c3:02:96:c9:e1:15:ba:1b:6d:c1:26:57:53:5f:05:d7:26: 5e:e9:01:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3LWafwtvcZ4yAdTSzkVv/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZWU0N2QzMmE1OTkzNDFmNWZmMWE4OGJmMTQyZTE1Mzhk YTQwZWEwHhcNMjYwMTI1MjIwMTQ2WhcNMjYwMTI2MjIwMTQ2WjAzMTEwLwYDVQQD EyhlNjllNjM2NjZkN2IyMzNjNTk1NDVjY2YxZTZhMzA4YzhiNTBhMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7m7z1qaAZKE417krxfUjkamsPHOI rRVsjkMA21nnQnUo56iRvHkSYIhEumXtQXWrKfNQyJQKoWCpNGh6wDmzbw1BCMgi WigEtNm/VBxjYS+CukqkM9HUmV7NsIR3d0OAaARLNv3ZWIoXz7qrR7OG2lvL1r1Z lE36BN1qoI9CQwMv/engY0ZcX1UtlANDpRnqCXybueIN4eqFnHWbVeENFrGmKL0b PGJ34UUmjN/kbuN66ORDg8TnzFNR1A0DOqVsQSr9DG1WAh23wx65BlmaIla99tvk CnZgoESZKaU7KftGa5BlWrktic8YGG1/FK9bBaIKLUvGIKtFmZa6q+o7XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaeY2ZteyM8WVRczx5qMIyLUKHKMB8GA1UdIwQY MBaAFFjuR9MqWZNB9f8aiL8ULhU42kDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2Ut YzU2NGI0MGVjYTA1LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9hNDI2OTktMWQzZi00YTcwLTgzY2UtYzU2NGI0MGVjYTA1 LzEvV081SDB5cFprMEgxX3hxSXZ4UXVGVGphUU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuO0QU+ip BnD+DIUeaNhXRaszd+FCBZcLF7mquSdYtg48ynRk5TqSuFIDUY3Jdn6Wz0mhBbg6 qKQYMSjYU6/Sg25XhU1RkIlEg4/Q2Tjh7iggq5dee2SbbeEVUx4qBOXLYT9GI9/s tmj+J2ZYo8720x4g0X9npHdUufA0ubdsPSpWAL/w3GhrZpfFFk+cVhpn1msIIHeG zNJSBhu6+zY30Vlh1/3s0uUG9PAZpWxnnW4pB1QuhNWfTHtVszJ2mDVojwpOOCP2 D1YWhP8HVM7V8YTF1lAER7PKB0FZ5OQe+vVoaJnTHHNqT1LIv8MClsnhFbobbcEm V1NfBdcmXukBzg== -----END CERTIFICATE-----Generated at Mon Jan 26 03:11:57 2026 by rpki-client