This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft File: WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft (raw, json) Hash identifier: KaeD31Hs3ZnaOR6myyT8US4lxb6hnAK/YPNZlKGmcmY= Subject key identifier: F8:27:20:80:5E:95:F2:69:BF:88:38:68:D3:D9:2A:CD:28:92:84:DD Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1 Certificate issuer: /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1 Certificate serial: 019BF42BF1230D048C47118D59B6B9D25194 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft Manifest number: 0709 Signing time: Sun 25 Jan 2026 08:01:18 +0000 Manifest this update: Sun 25 Jan 2026 08:01:18 +0000 Manifest next update: Mon 26 Jan 2026 08:01:18 +0000 Files and hashes: 1: WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl (hash: 8L2ri6x4LdBkZJdiT0wPZmSaOs6i7tgMg8+4CQHEBuI=) 2: uZlDhgwC5WgpGxBcWB2bo_vzZZU.roa (hash: n7rmT7eWhWaDz6MLyzDuXY6l9WnAuvoKMn9XsT5ZVWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:f1:23:0d:04:8c:47:11:8d:59:b6:b9:d2:51:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1 Validity Not Before: Jan 25 08:01:18 2026 GMT Not After : Jan 26 08:01:18 2026 GMT Subject: CN=f82720805e95f269bf883868d3d92acd289284dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9b:fc:a6:21:05:1e:da:5a:13:87:7b:39:63: ea:69:83:51:48:44:c7:03:da:e8:57:c9:4d:3a:28: e9:9d:67:81:8f:16:e8:45:88:34:b4:2c:b4:92:f2: 6c:ec:82:69:9a:31:37:bf:05:04:29:87:f9:f1:1f: 8f:c0:6b:e5:b9:17:52:01:3a:9b:18:c1:9c:23:d7: 98:24:3d:22:ed:0e:e2:96:bb:3d:69:7f:8a:ba:b7: 1e:54:d4:37:80:fa:41:10:4b:dd:d8:2d:67:a2:1e: 87:65:95:d9:45:0a:b2:b5:b9:2a:9a:84:30:a5:b7: 1d:b5:0c:5e:b0:35:e2:98:c3:96:ee:a4:0d:79:cc: 43:1e:54:c2:43:0a:3e:ea:b5:a5:f0:9d:88:14:01: 11:da:8e:d0:4d:b8:98:bc:e9:9e:9d:55:a0:57:c7: d4:fe:f2:38:90:a3:73:09:9a:b9:a7:b1:6f:48:76: cc:ff:be:80:5d:ac:20:b6:82:93:b4:79:68:ef:7f: b9:72:a5:77:e6:fd:c7:bc:2a:16:8a:5f:84:13:7f: 83:dd:c7:f1:ca:7e:0e:c7:9f:11:9b:52:50:de:63: db:c1:c7:3e:df:60:1e:3a:61:e8:82:e3:3e:68:72: 90:81:80:9a:76:0c:c6:36:ff:0a:c6:1a:95:d9:99: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:27:20:80:5E:95:F2:69:BF:88:38:68:D3:D9:2A:CD:28:92:84:DD X509v3 Authority Key Identifier: keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:b7:e3:fa:e0:a7:5b:80:8f:c6:ac:ff:c2:2a:18:27:23:23: 32:5b:a7:04:62:1e:d4:e9:ad:d2:6f:9f:03:6f:7e:6c:74:9d: 63:d0:0a:d0:40:91:a6:f2:28:19:b3:e6:d9:ed:5c:36:ca:c2: 5e:20:cb:a9:e5:92:c5:eb:2b:32:e0:21:3a:fe:d1:30:4e:b6: 9e:6a:b1:e3:13:f4:ff:8e:6d:1b:2d:83:01:44:37:21:64:ad: 96:dc:9d:73:5e:df:db:ed:ee:f3:ed:23:94:c4:ef:de:69:19: 0a:bf:ab:61:e9:68:1a:69:6d:80:92:7f:94:0c:7c:2d:e0:6d: e2:08:48:42:db:b2:39:ce:e9:ad:9d:2e:5d:fd:df:8a:36:37: ec:f2:6b:e8:10:d2:d3:c1:d1:3a:17:b8:0c:62:ca:69:3d:e4: f0:36:9e:75:df:11:ef:04:4f:f1:8b:dc:f3:fc:61:ae:70:2c: 01:96:c5:b0:f6:21:22:81:ff:cf:2b:b5:5f:82:e9:79:8e:6e: 43:bd:66:cb:93:0c:8d:5d:8a:1c:31:46:d8:8d:f6:04:6b:f6: fa:94:ec:32:30:74:f2:5d:1e:7b:72:40:13:9a:0d:ce:5b:4d: e9:3a:05:c1:09:f8:05:69:15:19:23:b7:7b:14:f1:e2:c7:ca: ac:64:7c:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K/EjDQSMRxGNWba50lGUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YmM1MmIxNTA2OWMxYzQ3YjU0ZTk3YjlmNTY5NGI3NTVi NWNlYjEwHhcNMjYwMTI1MDgwMTE4WhcNMjYwMTI2MDgwMTE4WjAzMTEwLwYDVQQD EyhmODI3MjA4MDVlOTVmMjY5YmY4ODM4NjhkM2Q5MmFjZDI4OTI4NGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJv8piEFHtpaE4d7OWPqaYNRSETH A9roV8lNOijpnWeBjxboRYg0tCy0kvJs7IJpmjE3vwUEKYf58R+PwGvluRdSATqb GMGcI9eYJD0i7Q7ilrs9aX+KurceVNQ3gPpBEEvd2C1noh6HZZXZRQqytbkqmoQw pbcdtQxesDXimMOW7qQNecxDHlTCQwo+6rWl8J2IFAER2o7QTbiYvOmenVWgV8fU /vI4kKNzCZq5p7FvSHbM/76AXawgtoKTtHlo73+5cqV35v3HvCoWil+EE3+D3cfx yn4Ox58Rm1JQ3mPbwcc+32AeOmHoguM+aHKQgYCadgzGNv8KxhqV2Zm6pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgnIIBelfJpv4g4aNPZKs0okoTdMB8GA1UdIwQY MBaAFFm8UrFQacHEe1Tpe59WlLdVtc6xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9kMWZjZDAtNTVjMS00NmJhLTlkYjEt MmMxMGIxOWQ0YzJhLzEvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9kMWZjZDAtNTVjMS00NmJhLTlkYjEtMmMxMGIxOWQ0YzJh LzEvV2J4U3NWQnB3Y1I3Vk9sN24xYVV0MVcxenJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe7fj+uCn W4CPxqz/wioYJyMjMlunBGIe1Omt0m+fA29+bHSdY9AK0ECRpvIoGbPm2e1cNsrC XiDLqeWSxesrMuAhOv7RME62nmqx4xP0/45tGy2DAUQ3IWStltydc17f2+3u8+0j lMTv3mkZCr+rYeloGmltgJJ/lAx8LeBt4ghIQtuyOc7prZ0uXf3fijY37PJr6BDS 08HROhe4DGLKaT3k8Daedd8R7wRP8Yvc8/xhrnAsAZbFsPYhIoH/zyu1X4LpeY5u Q71my5MMjV2KHDFG2I32BGv2+pTsMjB08l0ee3JAE5oNzltN6ToFwQn4BWkVGSO3 exTx4sfKrGR8MQ== -----END CERTIFICATE-----Generated at Sun Jan 25 17:51:51 2026 by rpki-client