This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft File: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft (raw, json) Hash identifier: d1/HGWn+eTE7e5FeQX4OkLkaoZXJbty8qfGRuMUFpKY= Subject key identifier: E8:58:24:32:CE:C7:41:E1:70:7A:43:4A:35:08:C7:19:66:D6:BA:D3 Authority key identifier: 5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4 Certificate issuer: /CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4 Certificate serial: 019BFC89B4FA3124287951497B52E032E37B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft Manifest number: 101A Signing time: Mon 26 Jan 2026 23:00:41 +0000 Manifest this update: Mon 26 Jan 2026 23:00:41 +0000 Manifest next update: Tue 27 Jan 2026 23:00:41 +0000 Files and hashes: 1: W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl (hash: HjQuD8NqfdrPXFjxUjpBglA1vhVRKpLSLK9CR2WsRcY=) 2: mrPW8j13_GBigYYiFRrGmv4NiKA.roa (hash: StB0EISMVYcZQLzEN3Sj51HlwVcPuRJbp4s5xo96MZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:89:b4:fa:31:24:28:79:51:49:7b:52:e0:32:e3:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b862e231fcbd5391bd476c6ab9ab2b7210a87a4 Validity Not Before: Jan 26 23:00:41 2026 GMT Not After : Jan 27 23:00:41 2026 GMT Subject: CN=e8582432cec741e1707a434a3508c71966d6bad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:50:cf:b7:6b:08:88:b0:63:16:f8:9b:72:85: e6:91:90:95:76:68:9f:fd:f6:6b:18:f3:e6:cf:d0: 00:7d:08:52:07:65:a0:07:b3:23:32:32:8d:5a:86: 5f:8e:67:0a:20:3c:22:a3:bd:d1:c6:49:b6:4d:8a: f9:f5:8d:65:51:27:ec:a5:35:b6:09:0f:5a:67:8f: b8:65:49:cb:f2:84:92:f2:27:f6:cc:8c:1f:1e:b4: ce:73:42:7a:58:a0:4a:ba:7e:26:b8:96:7f:36:1c: 9a:e7:7d:c3:bb:c7:50:97:a4:8b:0e:d3:83:7e:e3: 86:d3:f8:29:d2:0d:d4:83:f8:31:d3:98:6b:98:ef: 0d:f7:74:f7:c2:b6:99:07:25:b1:c8:23:48:75:c2: 26:5a:79:27:34:fa:31:53:d6:19:ff:a1:53:c0:7b: 7a:20:0f:dc:a3:cd:37:e2:fc:b5:23:84:6b:58:88: f2:26:3f:6e:d7:6d:34:64:7e:3b:00:d0:96:2b:ed: 7a:05:5a:f0:ad:ed:80:a8:4c:65:cf:32:6b:35:38: 73:d1:23:05:94:61:dc:49:35:b9:10:11:24:5f:28: c2:34:03:72:10:46:aa:a6:84:0e:62:de:ae:49:d7: e3:ca:5a:da:9f:1f:7e:b9:bf:90:9a:00:fa:87:a2: d7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:58:24:32:CE:C7:41:E1:70:7A:43:4A:35:08:C7:19:66:D6:BA:D3 X509v3 Authority Key Identifier: keyid:5B:86:2E:23:1F:CB:D5:39:1B:D4:76:C6:AB:9A:B2:B7:21:0A:87:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3405e3-8cc0-460d-b7e9-9ba6da70fadb/1/W4YuIx_L1Tkb1HbGq5qytyEKh6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:42:a8:d0:ce:22:d3:d7:d8:2d:63:e7:ab:2d:76:02:b4:3f: f4:5b:ee:45:29:43:21:30:c9:9f:98:ce:23:e9:56:6c:1f:89: 95:67:c4:32:cb:91:58:c0:d9:01:e8:c0:cd:fe:16:f7:65:a5: f4:29:f8:46:93:8e:a3:f5:d6:eb:c0:d6:7c:31:fb:df:58:79: 03:3b:1f:21:e2:93:65:f4:2e:56:33:d1:71:16:52:1c:96:b2: cc:10:d5:08:9b:ee:f8:d6:5d:35:77:c4:11:dc:fa:e7:80:2f: 1a:41:92:7a:c3:7c:62:0c:12:81:01:4a:dd:8c:a9:2b:2f:80: f2:cc:61:b2:2a:81:6b:10:47:8e:77:3c:d0:9e:81:9d:a7:a8: 53:2e:35:2b:e3:20:46:c1:81:53:0e:43:8c:1f:70:d0:f3:35: f6:c8:bd:61:32:84:21:e3:ef:e7:92:45:e9:1f:2d:61:65:32: 2f:d5:8f:55:30:f9:49:8b:7c:f1:96:e3:ef:b9:ce:b0:e8:5e: e4:d6:dc:cb:92:fb:31:34:db:9d:09:97:c3:c1:f8:1d:58:ae: 4f:bc:69:5f:9d:3c:4a:7f:d0:72:38:5f:20:a1:20:73:83:39: c7:18:9d:62:24:43:99:9a:16:2d:ec:41:bb:fe:6d:71:54:16: c9:22:51:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8ibT6MSQoeVFJe1LgMuN7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViODYyZTIzMWZjYmQ1MzkxYmQ0NzZjNmFiOWFiMmI3MjEw YTg3YTQwHhcNMjYwMTI2MjMwMDQxWhcNMjYwMTI3MjMwMDQxWjAzMTEwLwYDVQQD EyhlODU4MjQzMmNlYzc0MWUxNzA3YTQzNGEzNTA4YzcxOTY2ZDZiYWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFDPt2sIiLBjFvibcoXmkZCVdmif /fZrGPPmz9AAfQhSB2WgB7MjMjKNWoZfjmcKIDwio73Rxkm2TYr59Y1lUSfspTW2 CQ9aZ4+4ZUnL8oSS8if2zIwfHrTOc0J6WKBKun4muJZ/Nhya533Du8dQl6SLDtOD fuOG0/gp0g3Ug/gx05hrmO8N93T3wraZByWxyCNIdcImWnknNPoxU9YZ/6FTwHt6 IA/co8034vy1I4RrWIjyJj9u1200ZH47ANCWK+16BVrwre2AqExlzzJrNThz0SMF lGHcSTW5EBEkXyjCNANyEEaqpoQOYt6uSdfjylranx9+ub+QmgD6h6LX2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhYJDLOx0HhcHpDSjUIxxlm1rrTMB8GA1UdIwQY MBaAFFuGLiMfy9U5G9R2xquasrchCoekMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTkt OWJhNmRhNzBmYWRiLzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zNDA1ZTMtOGNjMC00NjBkLWI3ZTktOWJhNmRhNzBmYWRi LzEvVzRZdUl4X0wxVGtiMUhiR3E1cXl0eUVLaDZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANEKo0M4i 09fYLWPnqy12ArQ/9FvuRSlDITDJn5jOI+lWbB+JlWfEMsuRWMDZAejAzf4W92Wl 9Cn4RpOOo/XW68DWfDH731h5AzsfIeKTZfQuVjPRcRZSHJayzBDVCJvu+NZdNXfE Edz654AvGkGSesN8YgwSgQFK3YypKy+A8sxhsiqBaxBHjnc80J6BnaeoUy41K+Mg RsGBUw5DjB9w0PM19si9YTKEIePv55JF6R8tYWUyL9WPVTD5SYt88Zbj77nOsOhe 5Nbcy5L7MTTbnQmXw8H4HViuT7xpX508Sn/QcjhfIKEgc4M5xxidYiRDmZoWLexB u/5tcVQWySJR2g== -----END CERTIFICATE-----Generated at Tue Jan 27 05:37:35 2026 by rpki-client