This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft File: M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft (raw, json) Hash identifier: 2l3QoPaNaXek17UdHhjWN995yNn/IH4mXg5u1XR/xjk= Subject key identifier: 0B:9A:EF:B9:74:6E:10:3B:A4:EC:E4:50:10:AD:21:3A:BD:41:84:C2 Authority key identifier: 33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7 Certificate issuer: /CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7 Certificate serial: 019BF5073E5EBD2F7351D456B1E5C004663D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft Manifest number: 17EB Signing time: Sun 25 Jan 2026 12:00:51 +0000 Manifest this update: Sun 25 Jan 2026 12:00:51 +0000 Manifest next update: Mon 26 Jan 2026 12:00:51 +0000 Files and hashes: 1: 0hykFI2nzIfKw5O60HOpHI0FUF8.roa (hash: 654t5jHQdvrRaEAnKER11GB5whwJk06cO3f07OUyXdo=) 2: M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl (hash: i4bmBh7VPOhhW2UNVwx/9jGXD2ZFbmLTPyRwq+DmMD0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:3e:5e:bd:2f:73:51:d4:56:b1:e5:c0:04:66:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33fc1e5b6c788faf8fe9331981d65b5f864b80f7 Validity Not Before: Jan 25 12:00:51 2026 GMT Not After : Jan 26 12:00:51 2026 GMT Subject: CN=0b9aefb9746e103ba4ece45010ad213abd4184c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d2:bb:af:bd:98:46:cb:56:db:19:d8:c8:d7: 55:ac:ec:1a:2a:29:6a:17:bb:17:04:25:5c:23:41: b8:3a:7a:40:33:5e:01:b1:c5:7b:ee:ad:0d:d9:66: 0b:95:62:b1:7f:7b:94:e9:2b:1c:1b:93:c1:5e:1f: b9:3f:02:c0:2c:bb:2c:90:f3:27:76:5c:bb:84:bd: 0b:85:57:5a:07:cb:32:3e:46:c1:13:ba:27:ef:2b: d0:73:39:ca:38:d8:9d:8b:d9:0a:e3:7e:b1:e1:a1: 1b:03:66:c6:6c:5f:05:f4:d7:a7:42:24:b7:88:6e: 88:ec:50:13:1e:a0:d1:ac:49:98:96:7a:af:1c:59: 18:24:a8:cd:6f:02:69:4d:71:3f:ed:78:2a:3f:fd: 4e:fd:12:14:25:20:3d:83:39:5b:68:84:47:c1:46: 62:4f:57:7e:82:13:4c:b0:e0:45:f7:95:51:21:ca: d0:47:09:b0:1d:f3:c8:38:b4:48:31:f9:98:3f:b6: 4e:8f:9b:0b:6d:d7:fc:68:15:a9:53:ed:14:cb:17: ab:f1:c5:63:ed:a8:be:5d:67:4e:17:d4:f3:3f:23: 50:63:07:e8:eb:83:06:68:af:b4:91:29:08:a6:7a: 79:9b:16:d4:fb:b6:b1:b4:2e:5e:2e:03:17:7e:3f: db:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:9A:EF:B9:74:6E:10:3B:A4:EC:E4:50:10:AD:21:3A:BD:41:84:C2 X509v3 Authority Key Identifier: keyid:33:FC:1E:5B:6C:78:8F:AF:8F:E9:33:19:81:D6:5B:5F:86:4B:80:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_weW2x4j6-P6TMZgdZbX4ZLgPc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5dca9d-73dd-47dc-8549-b1c4de84e70e/1/M_weW2x4j6-P6TMZgdZbX4ZLgPc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:58:4c:29:53:c1:67:25:29:83:92:d4:64:a9:48:8c:4a:d7: 3a:e1:ef:0e:1a:49:4c:73:55:b4:ce:0c:81:15:8f:db:84:0f: a4:3e:9a:99:2f:6a:97:c7:43:d7:79:71:c4:8c:03:a2:11:26: 0c:93:2f:f6:d6:ea:80:d2:9c:29:ce:72:90:59:71:41:ce:31: a8:b1:08:64:a9:b7:18:11:db:13:12:7d:e7:24:3c:5b:46:f6: c9:77:3c:1a:42:eb:58:d8:9a:0a:11:2d:fe:7e:9d:07:bf:e6: 59:67:68:78:bb:5b:ba:77:31:b0:ac:80:7d:f0:f4:76:c3:1d: 39:cc:67:32:67:41:d3:a8:4f:bf:3e:17:c0:97:83:bb:80:d7: a8:35:94:2e:18:de:e2:2e:f7:75:1b:21:d8:7b:08:9a:bd:07: a8:17:3c:04:36:1b:61:4d:5f:de:72:83:c8:a6:92:19:89:f6: 6e:15:15:41:57:b5:1e:e2:7a:b1:86:1c:11:fa:c5:84:2a:7a: 5b:0f:90:1d:ab:03:98:de:a2:d6:65:e1:6c:ed:25:1e:a2:77: f1:ca:c7:b0:94:35:39:b3:37:2d:04:60:24:a2:4b:89:0e:6b: 8b:ef:97:bb:b3:1b:8d:9a:39:d5:19:fb:5b:fc:aa:84:38:fe: be:e1:bf:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1Bz5evS9zUdRWseXABGY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZmMxZTViNmM3ODhmYWY4ZmU5MzMxOTgxZDY1YjVmODY0 YjgwZjcwHhcNMjYwMTI1MTIwMDUxWhcNMjYwMTI2MTIwMDUxWjAzMTEwLwYDVQQD EygwYjlhZWZiOTc0NmUxMDNiYTRlY2U0NTAxMGFkMjEzYWJkNDE4NGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdK7r72YRstW2xnYyNdVrOwaKilq F7sXBCVcI0G4OnpAM14BscV77q0N2WYLlWKxf3uU6SscG5PBXh+5PwLALLsskPMn dly7hL0LhVdaB8syPkbBE7on7yvQcznKONidi9kK436x4aEbA2bGbF8F9NenQiS3 iG6I7FATHqDRrEmYlnqvHFkYJKjNbwJpTXE/7XgqP/1O/RIUJSA9gzlbaIRHwUZi T1d+ghNMsOBF95VRIcrQRwmwHfPIOLRIMfmYP7ZOj5sLbdf8aBWpU+0Uyxer8cVj 7ai+XWdOF9TzPyNQYwfo64MGaK+0kSkIpnp5mxbU+7axtC5eLgMXfj/b3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAua77l0bhA7pOzkUBCtITq9QYTCMB8GA1UdIwQY MBaAFDP8HltseI+vj+kzGYHWW1+GS4D3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDkt YjFjNGRlODRlNzBlLzEvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81ZGNhOWQtNzNkZC00N2RjLTg1NDktYjFjNGRlODRlNzBl LzEvTV93ZVcyeDRqNi1QNlRNWmdkWmJYNFpMZ1BjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVhMKVPB ZyUpg5LUZKlIjErXOuHvDhpJTHNVtM4MgRWP24QPpD6amS9ql8dD13lxxIwDohEm DJMv9tbqgNKcKc5ykFlxQc4xqLEIZKm3GBHbExJ95yQ8W0b2yXc8GkLrWNiaChEt /n6dB7/mWWdoeLtbuncxsKyAffD0dsMdOcxnMmdB06hPvz4XwJeDu4DXqDWULhje 4i73dRsh2HsImr0HqBc8BDYbYU1f3nKDyKaSGYn2bhUVQVe1HuJ6sYYcEfrFhCp6 Ww+QHasDmN6i1mXhbO0lHqJ38crHsJQ1ObM3LQRgJKJLiQ5ri++Xu7MbjZo51Rn7 W/yqhDj+vuG/NA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:22:47 2026 by rpki-client