This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft File: WopS3JmPEUjAeCkL27TTzcPwPLw.mft (raw, json) Hash identifier: 6oeWTjAopkCCg5RPM3t9cmTRHOHbjkY95WbvLUGebIw= Subject key identifier: 60:A9:51:D3:A1:E9:7F:3A:61:BF:F9:35:7E:2D:A1:B8:1D:06:7D:4C Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC Certificate issuer: /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc Certificate serial: 019BF6BE9A7BFF477040B4D1B73056FB0655 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft Manifest number: 0BD1 Signing time: Sun 25 Jan 2026 20:00:45 +0000 Manifest this update: Sun 25 Jan 2026 20:00:45 +0000 Manifest next update: Mon 26 Jan 2026 20:00:45 +0000 Files and hashes: 1: FXpUcueuWBp6fQq5c2tPdjSTYm4.roa (hash: RuaY5W7lr0sJsovg6cTHvVcz5PIkzQYxHi6ype94V9k=) 2: WopS3JmPEUjAeCkL27TTzcPwPLw.crl (hash: PXatvhcB9eMgROYbHbkQtVNubSj2g2yUJwhtTLrSHcU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:be:9a:7b:ff:47:70:40:b4:d1:b7:30:56:fb:06:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc Validity Not Before: Jan 25 20:00:45 2026 GMT Not After : Jan 26 20:00:45 2026 GMT Subject: CN=60a951d3a1e97f3a61bff9357e2da1b81d067d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:68:2b:83:2f:9e:55:92:af:22:04:cb:e1:1b: 80:27:a9:05:ef:d3:45:c9:bb:e3:bd:5e:62:0d:cb: d1:bb:cc:b9:7c:31:36:c4:45:7f:f4:de:cc:29:5c: d3:27:59:6f:45:9c:7d:e9:2b:03:9c:37:42:bf:74: 73:6a:48:ee:de:94:f3:31:56:f3:58:a0:7b:af:61: 70:55:e5:ef:d4:06:98:52:c2:f9:9f:0d:0d:b5:e5: a0:95:49:38:9c:77:12:6c:fd:a3:a3:cd:3e:78:2b: 10:85:ad:4f:e6:46:3c:f7:0b:27:19:7e:df:7b:bf: cc:63:83:49:69:47:ab:b4:55:fd:ab:b0:f4:de:bc: d6:00:7f:b9:bd:05:db:c7:c1:84:fc:0d:f2:b5:1e: 45:fc:03:a1:48:3b:f4:02:81:dc:b9:af:39:4d:78: 1a:ed:d1:60:2d:78:ca:06:db:0c:79:9f:9a:95:c2: 86:e8:fb:4f:83:f5:24:2a:e6:c1:72:9e:ab:9f:a9: 8c:26:8b:4e:20:77:e7:a6:fe:1c:19:ae:73:ed:05: 5b:37:2e:3c:2b:55:f9:70:34:88:d6:8f:76:ca:7c: f9:45:f5:04:35:fa:55:a3:02:0f:13:91:48:8c:ac: 80:3a:78:fa:73:0e:7a:ff:8f:ac:36:2f:66:29:23: 00:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A9:51:D3:A1:E9:7F:3A:61:BF:F9:35:7E:2D:A1:B8:1D:06:7D:4C X509v3 Authority Key Identifier: keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:b4:68:af:8a:73:4e:73:aa:84:e2:f0:51:d2:32:ff:ab:f9: 1d:c6:2f:1d:55:cf:ca:6b:64:58:53:9a:39:af:d8:87:0d:9a: bc:ba:fb:6d:75:7c:ff:93:87:d7:38:ae:ed:55:16:4f:e6:2d: c6:f6:3c:97:62:91:b8:45:8d:0e:5e:d5:77:fe:49:b5:fb:3a: a5:fc:bf:6c:ee:a0:11:9f:3a:45:f1:ac:1e:59:4a:11:93:b8: 58:3b:71:a9:58:a9:16:6f:48:73:15:11:46:a5:e5:b2:b8:7f: 18:4d:a0:43:68:ad:ed:c8:9c:43:e6:b8:de:27:b7:83:ba:41: f5:1f:0a:52:39:e5:56:e5:aa:b8:6c:c9:91:86:ef:76:49:48: 05:69:6a:15:44:53:a9:49:40:37:82:16:df:7f:24:6b:08:f7: 4d:95:f2:35:76:84:e0:da:01:08:06:3a:12:18:46:f6:e7:ba: bd:b3:96:e3:8b:d2:56:42:da:f2:9a:e7:53:03:18:57:7a:a7: 63:7e:f1:15:e5:f4:ab:bb:80:64:96:2a:5d:df:72:ec:d9:31: 46:5c:d0:2a:9d:6a:90:84:4c:17:b8:78:8f:9a:7d:ba:5f:0c: d2:ea:f8:4b:7e:16:b8:c1:13:7d:f3:05:00:da:29:08:77:2a: 3f:8e:01:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2vpp7/0dwQLTRtzBW+wZVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhOGE1MmRjOTk4ZjExNDhjMDc4MjkwYmRiYjRkM2NkYzNm MDNjYmMwHhcNMjYwMTI1MjAwMDQ1WhcNMjYwMTI2MjAwMDQ1WjAzMTEwLwYDVQQD Eyg2MGE5NTFkM2ExZTk3ZjNhNjFiZmY5MzU3ZTJkYTFiODFkMDY3ZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGgrgy+eVZKvIgTL4RuAJ6kF79NF ybvjvV5iDcvRu8y5fDE2xEV/9N7MKVzTJ1lvRZx96SsDnDdCv3Rzakju3pTzMVbz WKB7r2FwVeXv1AaYUsL5nw0NteWglUk4nHcSbP2jo80+eCsQha1P5kY89wsnGX7f e7/MY4NJaUertFX9q7D03rzWAH+5vQXbx8GE/A3ytR5F/AOhSDv0AoHcua85TXga 7dFgLXjKBtsMeZ+alcKG6PtPg/UkKubBcp6rn6mMJotOIHfnpv4cGa5z7QVbNy48 K1X5cDSI1o92ynz5RfUENfpVowIPE5FIjKyAOnj6cw56/4+sNi9mKSMAAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGCpUdOh6X86Yb/5NX4tobgdBn1MMB8GA1UdIwQY MBaAFFqKUtyZjxFIwHgpC9u0083D8Dy8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2Et OTY2NmVkZWVlMWUzLzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9hM2Q4MjUtZDdhNy00N2NjLWEwY2EtOTY2NmVkZWVlMWUz LzEvV29wUzNKbVBFVWpBZUNrTDI3VFR6Y1B3UEx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrRor4pz TnOqhOLwUdIy/6v5HcYvHVXPymtkWFOaOa/Yhw2avLr7bXV8/5OH1ziu7VUWT+Yt xvY8l2KRuEWNDl7Vd/5Jtfs6pfy/bO6gEZ86RfGsHllKEZO4WDtxqVipFm9IcxUR RqXlsrh/GE2gQ2it7cicQ+a43ie3g7pB9R8KUjnlVuWquGzJkYbvdklIBWlqFURT qUlAN4IW338kawj3TZXyNXaE4NoBCAY6EhhG9ue6vbOW44vSVkLa8prnUwMYV3qn Y37xFeX0q7uAZJYqXd9y7NkxRlzQKp1qkIRMF7h4j5p9ul8M0ur4S34WuMETffMF ANopCHcqP44Bew== -----END CERTIFICATE-----Generated at Mon Jan 26 03:33:04 2026 by rpki-client