This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft File: Wq93TsnCcwJusRfkjnP-9CiN3sg.mft (raw, json) Hash identifier: 1ItYqRLpIhjs6w06vIgy13ZcF30SEPoHdjMIpw46ecU= Subject key identifier: 27:43:C7:2A:2C:27:12:81:8A:56:06:2D:63:00:56:AA:BE:F4:0B:48 Authority key identifier: 5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8 Certificate issuer: /CN=5aaf774ec9c273026eb117e48e73fef4288ddec8 Certificate serial: 019BF507AC26BB95509348C5A9D7B4AD9667 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft Manifest number: 17EA Signing time: Sun 25 Jan 2026 12:01:19 +0000 Manifest this update: Sun 25 Jan 2026 12:01:19 +0000 Manifest next update: Mon 26 Jan 2026 12:01:19 +0000 Files and hashes: 1: 7eLRqfQBEA8deAFpD-5TqzV1b_A.roa (hash: hharO3KHrL6T47EFBvglBhYILhHBiBCy/4h0AKuaamg=) 2: Wq93TsnCcwJusRfkjnP-9CiN3sg.crl (hash: mqZNgOLGXywfeqU/z99ntnefOGYelQL15sPDrqFScys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:07:ac:26:bb:95:50:93:48:c5:a9:d7:b4:ad:96:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5aaf774ec9c273026eb117e48e73fef4288ddec8 Validity Not Before: Jan 25 12:01:19 2026 GMT Not After : Jan 26 12:01:19 2026 GMT Subject: CN=2743c72a2c2712818a56062d630056aabef40b48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:9e:2d:ad:b1:72:eb:67:f7:3e:59:7f:24:3d: 33:e7:dc:13:fc:28:05:f4:da:b7:18:55:a1:48:96: 4c:85:e5:44:42:c8:7d:f9:94:68:8a:e6:1d:97:c4: 79:66:9d:29:1b:ee:57:c9:0d:e8:f8:04:05:75:1e: 6e:95:98:f7:ce:56:06:d3:27:18:6f:9b:79:9d:a3: a2:0f:74:c2:9d:5c:5e:b6:58:10:99:d7:48:f3:e2: 94:a9:33:f0:f7:15:24:94:86:7e:bf:73:6c:22:d3: 8a:06:43:02:88:5b:1c:99:43:ce:7d:09:15:dd:16: dd:b2:5c:3b:fd:49:d8:74:64:dd:62:fe:c7:45:7b: 49:cd:f8:bd:23:6c:80:9b:81:4c:c3:a5:88:37:c4: db:db:65:61:c2:cd:d0:95:b8:4e:d6:cb:36:62:cf: 56:4d:96:ba:9c:51:90:17:d3:45:56:ff:ff:37:c8: e4:09:dc:31:4e:64:66:5d:3c:82:ae:cf:b6:c4:e4: b7:00:66:e4:eb:aa:36:0e:d7:b8:19:15:d7:ec:b2: b9:c3:a9:07:af:ab:e9:5b:82:bc:d9:7c:4e:93:24: 6f:65:7f:0a:15:7f:2f:e8:eb:0b:5a:a7:fc:56:3b: bd:72:d2:5f:b9:16:fa:6e:0e:d8:7a:97:9f:4b:08: c0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:43:C7:2A:2C:27:12:81:8A:56:06:2D:63:00:56:AA:BE:F4:0B:48 X509v3 Authority Key Identifier: keyid:5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:38:ca:09:6d:ef:bf:e4:31:be:91:82:74:64:53:8a:2e:12: cb:6d:8d:6f:23:82:9f:a1:1e:d2:58:20:25:ed:e1:25:4a:ad: 5c:17:1b:0c:66:b1:75:4d:dd:a1:9f:df:cb:f1:0d:a5:a5:f2: 03:4a:e5:59:82:a6:cd:6c:b8:07:2e:44:c4:fb:c1:fd:20:66: f5:7e:3c:94:e7:80:46:0e:b7:24:fd:89:54:28:68:50:98:b1: db:f2:94:df:17:9e:47:d8:ff:46:53:39:d7:0e:9d:9d:63:d4: c0:6a:e0:e1:34:13:d5:8a:d2:9d:26:6c:99:1e:f5:42:b3:94: 33:85:eb:42:30:52:23:4b:a2:b8:10:c0:41:9b:51:6c:30:cc: 7f:9e:36:ad:51:be:02:4c:a6:12:cd:72:2d:b1:99:d2:06:71: da:e7:64:2e:85:dd:f3:0e:ef:16:33:ac:09:9c:50:4d:81:67: d9:49:ff:e8:b0:8d:86:e8:c6:02:41:30:30:a3:cb:86:e6:82: fe:fc:4e:56:8b:5e:fa:73:69:97:d8:42:69:b0:bb:c5:db:61: 8f:20:0b:fc:2b:34:cc:08:8d:17:e5:14:bf:89:fe:d9:91:f4: 00:2e:9f:aa:a9:f7:07:47:d2:3a:0b:34:70:d6:6c:d0:3a:b0: 98:e4:57:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1B6wmu5VQk0jFqde0rZZnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhYWY3NzRlYzljMjczMDI2ZWIxMTdlNDhlNzNmZWY0Mjg4 ZGRlYzgwHhcNMjYwMTI1MTIwMTE5WhcNMjYwMTI2MTIwMTE5WjAzMTEwLwYDVQQD EygyNzQzYzcyYTJjMjcxMjgxOGE1NjA2MmQ2MzAwNTZhYWJlZjQwYjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/J4trbFy62f3Pll/JD0z59wT/CgF 9Nq3GFWhSJZMheVEQsh9+ZRoiuYdl8R5Zp0pG+5XyQ3o+AQFdR5ulZj3zlYG0ycY b5t5naOiD3TCnVxetlgQmddI8+KUqTPw9xUklIZ+v3NsItOKBkMCiFscmUPOfQkV 3Rbdslw7/UnYdGTdYv7HRXtJzfi9I2yAm4FMw6WIN8Tb22Vhws3QlbhO1ss2Ys9W TZa6nFGQF9NFVv//N8jkCdwxTmRmXTyCrs+2xOS3AGbk66o2Dte4GRXX7LK5w6kH r6vpW4K82XxOkyRvZX8KFX8v6OsLWqf8Vju9ctJfuRb6bg7YepefSwjAHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdDxyosJxKBilYGLWMAVqq+9AtIMB8GA1UdIwQY MBaAFFqvd07JwnMCbrEX5I5z/vQojd7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3E5M1RzbkNjd0p1c1Jma2puUC05Q2lOM3NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kYzQzMGQtMzc3OS00OTg5LWI4NzIt MzM2NDQwNTllODY2LzEvV3E5M1RzbkNjd0p1c1Jma2puUC05Q2lOM3NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9kYzQzMGQtMzc3OS00OTg5LWI4NzItMzM2NDQwNTllODY2 LzEvV3E5M1RzbkNjd0p1c1Jma2puUC05Q2lOM3NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGzjKCW3v v+QxvpGCdGRTii4Sy22NbyOCn6Ee0lggJe3hJUqtXBcbDGaxdU3doZ/fy/ENpaXy A0rlWYKmzWy4By5ExPvB/SBm9X48lOeARg63JP2JVChoUJix2/KU3xeeR9j/RlM5 1w6dnWPUwGrg4TQT1YrSnSZsmR71QrOUM4XrQjBSI0uiuBDAQZtRbDDMf542rVG+ AkymEs1yLbGZ0gZx2udkLoXd8w7vFjOsCZxQTYFn2Un/6LCNhujGAkEwMKPLhuaC /vxOVote+nNpl9hCabC7xdthjyAL/Cs0zAiNF+UUv4n+2ZH0AC6fqqn3B0fSOgs0 cNZs0DqwmORXjg== -----END CERTIFICATE-----Generated at Sun Jan 25 14:48:09 2026 by rpki-client