This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft File: wDxpSwadoTLPTEvXwdIiloY7F20.mft (raw, json) Hash identifier: Du/EFRCl3G81ZtY++lpWgNNztkxt8m//L3b7AxoVJUk= Subject key identifier: F6:A1:5A:84:4A:88:2F:75:90:E3:A9:C8:3B:A1:8A:3F:BA:30:C5:91 Authority key identifier: C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D Certificate issuer: /CN=c03c694b069da132cf4c4bd7c1d22296863b176d Certificate serial: 019BF79AAE316C9AFA762FFBFE03863AC006 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft Manifest number: 045F Signing time: Mon 26 Jan 2026 00:01:07 +0000 Manifest this update: Mon 26 Jan 2026 00:01:07 +0000 Manifest next update: Tue 27 Jan 2026 00:01:07 +0000 Files and hashes: 1: mMU4XeLbhXJpdDenkc0Ivk-MDi8.roa (hash: QMMxxl6fyPVIcpenT7PqBSSmMyHkr6udMWC3CqmEp8U=) 2: wDxpSwadoTLPTEvXwdIiloY7F20.crl (hash: ustw/HMIxrXUs6jviHd1A4JuYdxLwPQurEbhIxrNFf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:ae:31:6c:9a:fa:76:2f:fb:fe:03:86:3a:c0:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c03c694b069da132cf4c4bd7c1d22296863b176d Validity Not Before: Jan 26 00:01:07 2026 GMT Not After : Jan 27 00:01:07 2026 GMT Subject: CN=f6a15a844a882f7590e3a9c83ba18a3fba30c591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e4:91:f0:31:5c:17:ff:03:0b:cf:0f:09:9d: ec:68:f3:a9:ef:ac:41:21:14:de:fa:12:a5:65:b2: 82:84:b5:ce:b0:03:e3:c7:8d:8a:34:7b:be:a4:80: ef:7f:15:19:1e:ec:18:d5:60:a9:25:3d:02:5c:49: 9b:8a:73:c5:b8:0e:2e:79:98:59:c6:70:b6:56:88: 49:34:d2:ef:22:21:fc:54:cc:28:28:d3:b0:11:a0: ba:a1:57:4c:8b:5a:0d:1e:70:49:4f:a8:64:0f:93: 1e:7a:5e:0c:18:5d:6a:7c:99:7e:89:5b:59:33:d9: 50:56:2c:06:65:14:7d:d9:2b:90:64:97:c7:da:b4: dd:22:70:9b:b8:69:2d:f5:9b:6f:70:a8:c1:05:7f: 78:41:4b:e3:ed:2a:c7:16:86:15:6a:d8:ed:2c:f2: 82:3e:a8:8d:ee:30:2a:16:ca:75:c8:52:73:a1:23: be:58:47:9d:fd:b5:8a:85:f1:56:70:37:23:e2:f5: 2b:9d:c5:47:9c:0c:ef:04:8e:47:99:3a:cd:5c:d3: 4b:8a:79:b9:ab:7e:e6:4d:9f:dc:f5:3b:d8:b9:99: d0:52:fc:dc:84:22:7d:aa:bb:2a:55:fd:f9:f9:ae: 30:85:30:b9:bd:f9:15:66:09:d2:96:00:4c:49:9a: d0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A1:5A:84:4A:88:2F:75:90:E3:A9:C8:3B:A1:8A:3F:BA:30:C5:91 X509v3 Authority Key Identifier: keyid:C0:3C:69:4B:06:9D:A1:32:CF:4C:4B:D7:C1:D2:22:96:86:3B:17:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDxpSwadoTLPTEvXwdIiloY7F20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/a4f4c2-ee35-43e0-8bad-44d0d0891989/1/wDxpSwadoTLPTEvXwdIiloY7F20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:88:7e:d0:a6:d4:02:8c:2a:d4:19:ed:23:3c:ec:71:0f:08: 2f:40:81:ef:3d:b9:63:57:c9:8e:b8:31:3c:3a:84:7f:81:9d: b0:1b:47:f1:e5:12:54:58:89:2a:e9:17:db:de:48:d5:5a:30: a5:9c:e3:55:ca:e9:a1:d3:fd:10:9c:2c:80:37:77:9d:83:d1: f1:17:70:d0:12:bd:7c:b0:df:d5:c5:09:7b:94:fe:3d:1d:98: d3:ed:e8:a8:21:1f:6c:b6:17:3c:51:9f:ef:c7:34:75:5c:59: 27:2e:b2:57:3b:d5:74:95:15:71:c3:f5:ab:ef:7d:24:af:d0: 2b:0e:d7:e6:46:da:61:62:12:1a:ff:5c:b0:a2:2e:34:14:90: 97:a0:b9:43:96:26:fe:04:8e:da:fb:b0:a3:13:f7:f1:60:f4: 8b:78:3c:5a:a6:e5:d9:20:13:e3:a6:59:09:43:0d:e7:cc:e4: dd:10:f9:1f:e5:35:9c:9a:85:48:4c:45:b7:33:16:65:40:a6: 71:3b:f7:87:46:34:03:b4:72:76:c4:1f:f3:18:77:a5:9f:bb: c4:91:fc:99:7c:0d:2f:00:7b:39:9e:70:81:35:7b:96:1f:2d: 43:47:01:31:ac:07:ae:98:6f:63:c9:0f:a4:94:08:96:33:38: 34:87:26:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mq4xbJr6di/7/gOGOsAGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwM2M2OTRiMDY5ZGExMzJjZjRjNGJkN2MxZDIyMjk2ODYz YjE3NmQwHhcNMjYwMTI2MDAwMTA3WhcNMjYwMTI3MDAwMTA3WjAzMTEwLwYDVQQD EyhmNmExNWE4NDRhODgyZjc1OTBlM2E5YzgzYmExOGEzZmJhMzBjNTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweSR8DFcF/8DC88PCZ3saPOp76xB IRTe+hKlZbKChLXOsAPjx42KNHu+pIDvfxUZHuwY1WCpJT0CXEmbinPFuA4ueZhZ xnC2VohJNNLvIiH8VMwoKNOwEaC6oVdMi1oNHnBJT6hkD5Meel4MGF1qfJl+iVtZ M9lQViwGZRR92SuQZJfH2rTdInCbuGkt9ZtvcKjBBX94QUvj7SrHFoYVatjtLPKC PqiN7jAqFsp1yFJzoSO+WEed/bWKhfFWcDcj4vUrncVHnAzvBI5HmTrNXNNLinm5 q37mTZ/c9TvYuZnQUvzchCJ9qrsqVf35+a4whTC5vfkVZgnSlgBMSZrQuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPahWoRKiC91kOOpyDuhij+6MMWRMB8GA1UdIwQY MBaAFMA8aUsGnaEyz0xL18HSIpaGOxdtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQt NDRkMGQwODkxOTg5LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9hNGY0YzItZWUzNS00M2UwLThiYWQtNDRkMGQwODkxOTg5 LzEvd0R4cFN3YWRvVExQVEV2WHdkSWlsb1k3RjIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIh+0KbU Aowq1BntIzzscQ8IL0CB7z25Y1fJjrgxPDqEf4GdsBtH8eUSVFiJKukX295I1Vow pZzjVcrpodP9EJwsgDd3nYPR8Rdw0BK9fLDf1cUJe5T+PR2Y0+3oqCEfbLYXPFGf 78c0dVxZJy6yVzvVdJUVccP1q+99JK/QKw7X5kbaYWISGv9csKIuNBSQl6C5Q5Ym /gSO2vuwoxP38WD0i3g8Wqbl2SAT46ZZCUMN58zk3RD5H+U1nJqFSExFtzMWZUCm cTv3h0Y0A7RydsQf8xh3pZ+7xJH8mXwNLwB7OZ5wgTV7lh8tQ0cBMawHrphvY8kP pJQIljM4NIcmpA== -----END CERTIFICATE-----Generated at Mon Jan 26 04:24:52 2026 by rpki-client