This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft File: WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json) Hash identifier: bu9Ngk9Po7z+V50D0hU81BAEW8trkekbJWvkAy6s9f0= Subject key identifier: F4:F3:F1:07:5C:36:4E:72:D7:91:8B:6D:F3:A0:BD:68:50:F2:83:6D Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09 Certificate issuer: /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409 Certificate serial: 019BF6879D8798BBD9EFEC8C82FCA00297F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft Manifest number: 06A1 Signing time: Sun 25 Jan 2026 19:00:41 +0000 Manifest this update: Sun 25 Jan 2026 19:00:41 +0000 Manifest next update: Mon 26 Jan 2026 19:00:41 +0000 Files and hashes: 1: OjCZNS0V7bS6o9kNX-GazXkNt6g.roa (hash: h0RBZKwBDu9T2bG9WT98CcP4agiyp1k9fyQRDt70M9A=) 2: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: PP+9Vp4FHiMNiYQye5lw4+cPfkGlUI6YltyFKtlMJ+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:87:9d:87:98:bb:d9:ef:ec:8c:82:fc:a0:02:97:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409 Validity Not Before: Jan 25 19:00:41 2026 GMT Not After : Jan 26 19:00:41 2026 GMT Subject: CN=f4f3f1075c364e72d7918b6df3a0bd6850f2836d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7c:a2:a2:99:80:45:bc:59:ec:98:fe:b9:59: f9:dd:6f:3d:d2:f6:a0:e4:1d:6a:8d:0c:46:05:b3: 14:cd:9e:77:47:73:da:58:d5:0a:a8:37:10:4b:93: 4f:9a:62:f9:7b:0a:5b:3d:c5:f3:16:a3:b5:6b:d8: 04:97:3a:20:d2:bf:84:2e:e1:65:a8:5c:f3:8a:ad: 6d:05:a4:6d:cb:d2:7f:ae:70:fb:3a:cc:3d:42:b0: 1e:ac:18:db:25:49:c5:d9:f6:22:27:a1:d7:eb:f4: f5:06:f7:a5:17:22:56:8b:e1:24:03:61:e3:ac:a3: c4:18:7e:a5:3d:19:91:6f:a7:4a:80:30:99:b9:0d: 5d:5b:a5:c8:35:b6:d1:1d:24:ee:13:de:0d:a8:bd: 34:82:74:08:08:3e:db:b6:9f:7f:9f:e7:6a:c2:a7: f7:81:35:07:fa:ab:e6:eb:cb:54:8f:87:53:08:25: f4:66:ef:d1:7b:c2:f8:8d:e4:92:96:70:01:87:18: 82:2f:56:c8:6a:c8:46:cf:9b:74:44:1b:dd:1e:e4: ff:d3:e5:2a:80:51:1c:b6:d7:f6:58:41:d7:58:e2: cf:65:81:32:66:a8:51:1f:a6:8e:c8:47:f8:a6:a8: 4d:36:c8:86:b9:b9:d9:a5:4b:63:07:52:ed:b3:5c: 22:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F3:F1:07:5C:36:4E:72:D7:91:8B:6D:F3:A0:BD:68:50:F2:83:6D X509v3 Authority Key Identifier: keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:97:fa:4f:43:d8:8b:a9:24:40:c6:b3:16:51:32:ba:50:2f: 40:e4:c3:82:69:ce:ea:a1:f9:7d:ea:36:58:ab:f1:52:a1:22: d8:28:1b:95:ba:0f:17:0c:76:a4:02:e8:0d:41:37:3b:55:4e: 48:84:03:d7:95:2d:0b:32:ff:f1:86:fd:00:6f:04:ff:5e:dc: 4d:06:e3:34:fc:75:94:57:a3:c1:ff:b9:f9:6e:75:74:53:2b: 7f:2f:16:d7:62:8f:92:4e:ca:67:04:b4:41:f3:51:24:74:98: 02:da:f4:98:2a:fa:df:fd:f7:ae:7b:52:bd:ee:78:90:d7:0e: 2f:e2:ce:67:ca:93:33:f6:90:b1:04:b7:50:ae:20:e6:d8:bc: 0e:ac:fd:4f:e7:22:24:03:90:b9:7c:8a:de:fe:7f:33:e5:03: fa:5b:e7:42:da:a9:b7:65:b9:1b:14:e4:d7:fb:fc:7c:74:fd: 9f:dd:f4:bd:bd:b7:b7:24:15:d7:46:da:da:10:9d:a0:77:fd: 9d:55:00:9a:12:0b:57:07:dd:6c:09:f9:03:56:7e:52:42:6d: 93:91:ca:84:5d:e1:b4:d9:68:14:2a:10:51:bd:ba:66:17:d5: 83:74:96:26:d3:d4:23:aa:29:a6:65:a4:86:95:ca:4d:cd:c7: 18:b5:6a:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2h52HmLvZ7+yMgvygApfzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4Y2JmZTA4MzRmOGU2NjUxMmY1NWJkNzhjYzA3NWI3ZWQ1 NmY0MDkwHhcNMjYwMTI1MTkwMDQxWhcNMjYwMTI2MTkwMDQxWjAzMTEwLwYDVQQD EyhmNGYzZjEwNzVjMzY0ZTcyZDc5MThiNmRmM2EwYmQ2ODUwZjI4MzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXyiopmARbxZ7Jj+uVn53W890vag 5B1qjQxGBbMUzZ53R3PaWNUKqDcQS5NPmmL5ewpbPcXzFqO1a9gElzog0r+ELuFl qFzziq1tBaRty9J/rnD7Osw9QrAerBjbJUnF2fYiJ6HX6/T1BvelFyJWi+EkA2Hj rKPEGH6lPRmRb6dKgDCZuQ1dW6XINbbRHSTuE94NqL00gnQICD7btp9/n+dqwqf3 gTUH+qvm68tUj4dTCCX0Zu/Re8L4jeSSlnABhxiCL1bIashGz5t0RBvdHuT/0+Uq gFEcttf2WEHXWOLPZYEyZqhRH6aOyEf4pqhNNsiGubnZpUtjB1Lts1wifwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPTz8QdcNk5y15GLbfOgvWhQ8oNtMB8GA1UdIwQY MBaAFFjL/gg0+OZlEvVb14zAdbftVvQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iZTg2M2YtYjMzYi00MzM0LWJiZDIt NDA5NDEwNjc4NmE5LzEvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9iZTg2M2YtYjMzYi00MzM0LWJiZDItNDA5NDEwNjc4NmE5 LzEvV012LUNEVDQ1bVVTOVZ2WGpNQjF0LTFXOUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5f6T0PY i6kkQMazFlEyulAvQOTDgmnO6qH5feo2WKvxUqEi2CgblboPFwx2pALoDUE3O1VO SIQD15UtCzL/8Yb9AG8E/17cTQbjNPx1lFejwf+5+W51dFMrfy8W12KPkk7KZwS0 QfNRJHSYAtr0mCr63/33rntSve54kNcOL+LOZ8qTM/aQsQS3UK4g5ti8Dqz9T+ci JAOQuXyK3v5/M+UD+lvnQtqpt2W5GxTk1/v8fHT9n930vb23tyQV10ba2hCdoHf9 nVUAmhILVwfdbAn5A1Z+UkJtk5HKhF3htNloFCoQUb26ZhfVg3SWJtPUI6oppmWk hpXKTc3HGLVqEQ== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:26 2026 by rpki-client