This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft File: WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft (raw, json) Hash identifier: lREHeSHPE1bUNjmeUQKRON56kplpQKDRWpwfLFq48xo= Subject key identifier: 69:1A:5E:35:FA:BA:DE:BB:7D:7A:45:6B:69:F3:48:BA:AE:24:7B:9F Authority key identifier: 58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA Certificate issuer: /CN=58131e8f9a485040d9fcae7167a428b8a12f49ea Certificate serial: 019BF79A2EBA8B7FA74AC2FB56B403DE50EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft Manifest number: 0AAD Signing time: Mon 26 Jan 2026 00:00:35 +0000 Manifest this update: Mon 26 Jan 2026 00:00:35 +0000 Manifest next update: Tue 27 Jan 2026 00:00:35 +0000 Files and hashes: 1: HTiPrEB_ddl16rQ6ltRGw4XbaY4.roa (hash: 5Elms3noOpNLriRD+IFQ3F+D2wWRU/uDDSPyaot68Sk=) 2: WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl (hash: pS+dCREEDcjGc+nCRBkUrWtKjY0sygyaHzqGmNCfDQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:2e:ba:8b:7f:a7:4a:c2:fb:56:b4:03:de:50:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58131e8f9a485040d9fcae7167a428b8a12f49ea Validity Not Before: Jan 26 00:00:35 2026 GMT Not After : Jan 27 00:00:35 2026 GMT Subject: CN=691a5e35fabadebb7d7a456b69f348baae247b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:20:68:88:6f:9d:5d:a2:2a:62:50:8b:f4:05: df:20:f1:43:a8:eb:e9:8d:48:98:ca:bd:e6:a5:8b: 51:5f:61:a3:8b:25:86:ac:e0:45:85:11:a4:76:89: 0f:be:40:90:e3:ad:32:8e:23:67:ed:83:eb:95:30: e2:2a:b5:6b:44:8c:e3:9f:6a:b9:b5:35:b0:e9:39: c7:a9:ee:10:37:36:dc:b0:03:a0:c2:ff:bd:0a:91: 5b:46:84:df:7b:27:da:ce:a5:4c:0b:07:c7:36:a2: b2:73:ca:8c:e9:a5:7a:03:92:c7:85:3d:63:f0:74: 45:86:89:c3:e7:a1:68:58:a7:ab:1e:9f:79:1f:7d: 1f:35:3e:c0:33:cf:f2:9e:1e:5b:43:99:4e:f5:96: 10:08:89:0a:23:24:26:fa:75:a1:2f:2e:53:63:73: a1:f7:6b:00:b5:5a:1c:b6:73:87:c5:5c:24:59:1a: 27:f5:bc:b8:64:a2:2b:a3:77:aa:d5:48:80:54:0a: f0:64:a8:21:3f:79:48:23:07:3c:a9:5d:31:c5:b1: 0a:a3:16:a6:0a:db:b9:a0:e7:1d:96:6a:52:c3:d1: 61:21:7c:44:43:df:cf:00:a8:b0:a9:c6:1c:e2:39: 81:f6:8f:62:a2:d7:30:a3:e7:f6:89:29:8f:b4:54: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1A:5E:35:FA:BA:DE:BB:7D:7A:45:6B:69:F3:48:BA:AE:24:7B:9F X509v3 Authority Key Identifier: keyid:58:13:1E:8F:9A:48:50:40:D9:FC:AE:71:67:A4:28:B8:A1:2F:49:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBMej5pIUEDZ_K5xZ6QouKEvSeo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d74420-6425-4272-93a2-3586164a7f44/1/WBMej5pIUEDZ_K5xZ6QouKEvSeo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:52:ae:92:44:3c:2e:e6:76:3c:15:da:e5:e7:78:0f:dd:da: 8d:8c:ad:f2:d9:af:0e:cf:87:44:86:25:bb:c5:18:b9:ab:0a: a9:a4:04:d7:88:4c:53:9d:07:fa:95:77:20:03:81:e9:8b:71: 52:be:0f:b8:9d:c0:0c:64:a7:80:35:08:d4:34:42:83:84:71: ff:d0:c5:ed:81:bd:2e:5f:69:f3:44:c7:d4:e8:ff:2b:4e:9d: 73:13:ed:30:c4:aa:a2:14:ec:16:19:53:6d:e1:06:b9:77:6d: 44:ab:eb:00:74:90:c4:62:63:cc:94:b7:46:c4:80:e1:17:50: 42:b8:a4:b6:39:be:a9:76:58:da:60:0d:9d:e5:d7:5a:c0:bd: 22:ba:ca:55:d0:03:17:7e:29:06:b0:15:76:05:b1:de:f3:80: b4:ab:31:55:4f:94:d4:f7:c8:47:2d:38:51:2d:43:05:b7:f1: 23:27:59:8e:49:9e:1e:34:54:af:eb:6c:48:58:2c:2f:d7:2e: 09:df:fc:13:c0:db:5e:9b:e9:b5:f2:4e:a2:38:ee:65:3b:df: a5:fa:ff:2f:4f:95:08:b2:88:a5:10:9d:2f:08:15:a3:9b:e8: b9:9b:7d:b1:22:0f:83:16:c5:f6:d6:91:47:fc:72:b8:4a:27: ac:f0:57:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mi66i3+nSsL7VrQD3lDrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4MTMxZThmOWE0ODUwNDBkOWZjYWU3MTY3YTQyOGI4YTEy ZjQ5ZWEwHhcNMjYwMTI2MDAwMDM1WhcNMjYwMTI3MDAwMDM1WjAzMTEwLwYDVQQD Eyg2OTFhNWUzNWZhYmFkZWJiN2Q3YTQ1NmI2OWYzNDhiYWFlMjQ3YjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3iBoiG+dXaIqYlCL9AXfIPFDqOvp jUiYyr3mpYtRX2GjiyWGrOBFhRGkdokPvkCQ460yjiNn7YPrlTDiKrVrRIzjn2q5 tTWw6TnHqe4QNzbcsAOgwv+9CpFbRoTfeyfazqVMCwfHNqKyc8qM6aV6A5LHhT1j 8HRFhonD56FoWKerHp95H30fNT7AM8/ynh5bQ5lO9ZYQCIkKIyQm+nWhLy5TY3Oh 92sAtVoctnOHxVwkWRon9by4ZKIro3eq1UiAVArwZKghP3lIIwc8qV0xxbEKoxam Ctu5oOcdlmpSw9FhIXxEQ9/PAKiwqcYc4jmB9o9iotcwo+f2iSmPtFTY8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkaXjX6ut67fXpFa2nzSLquJHufMB8GA1UdIwQY MBaAFFgTHo+aSFBA2fyucWekKLihL0nqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0JNZWo1cElVRURaX0s1eFo2UW91S0V2U2VvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kNzQ0MjAtNjQyNS00MjcyLTkzYTIt MzU4NjE2NGE3ZjQ0LzEvV0JNZWo1cElVRURaX0s1eFo2UW91S0V2U2VvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kNzQ0MjAtNjQyNS00MjcyLTkzYTItMzU4NjE2NGE3ZjQ0 LzEvV0JNZWo1cElVRURaX0s1eFo2UW91S0V2U2VvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbVKukkQ8 LuZ2PBXa5ed4D93ajYyt8tmvDs+HRIYlu8UYuasKqaQE14hMU50H+pV3IAOB6Ytx Ur4PuJ3ADGSngDUI1DRCg4Rx/9DF7YG9Ll9p80TH1Oj/K06dcxPtMMSqohTsFhlT beEGuXdtRKvrAHSQxGJjzJS3RsSA4RdQQriktjm+qXZY2mANneXXWsC9IrrKVdAD F34pBrAVdgWx3vOAtKsxVU+U1PfIRy04US1DBbfxIydZjkmeHjRUr+tsSFgsL9cu Cd/8E8DbXpvptfJOojjuZTvfpfr/L0+VCLKIpRCdLwgVo5vouZt9sSIPgxbF9taR R/xyuEonrPBXQA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:02:36 2026 by rpki-client