This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft File: wznRHn1JkvmvswQx42BCqv3eXAo.mft (raw, json) Hash identifier: CYV33IpS9kq0YlttVRTtlbsxHGHeuWwk08Lizn7OVr4= Subject key identifier: 9B:3A:53:0C:58:30:A9:A3:37:78:8F:E9:F2:21:E1:0D:CB:B0:BE:D4 Authority key identifier: C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A Certificate issuer: /CN=c339d11e7d4992f9afb30431e36042aafdde5c0a Certificate serial: 019BFC1CA596D4B5CE0626E0A1C81A172EED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft Manifest number: 079B Signing time: Mon 26 Jan 2026 21:01:34 +0000 Manifest this update: Mon 26 Jan 2026 21:01:34 +0000 Manifest next update: Tue 27 Jan 2026 21:01:34 +0000 Files and hashes: 1: n1oRFTjCd9cFrEeWK2PvigDChJY.roa (hash: riBn9NUOMZo7Fygg/p6pfL41K2EW13FXu4gut4vgGRs=) 2: wznRHn1JkvmvswQx42BCqv3eXAo.crl (hash: xufFf9dYC4YuB7U+3dD+C2ZLzKRCVZDnFJkNOyV6lPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 21:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fc:1c:a5:96:d4:b5:ce:06:26:e0:a1:c8:1a:17:2e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c339d11e7d4992f9afb30431e36042aafdde5c0a Validity Not Before: Jan 26 21:01:34 2026 GMT Not After : Jan 27 21:01:34 2026 GMT Subject: CN=9b3a530c5830a9a337788fe9f221e10dcbb0bed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:31:79:7c:5d:20:82:96:51:99:3b:54:ed:45: e4:b5:13:32:2a:15:98:40:f2:37:81:6d:d6:41:25: bc:86:5d:9e:51:54:a3:89:c8:80:27:5a:cf:20:22: 7f:69:a9:1a:05:3e:1e:bf:80:f7:cd:51:d5:95:b1: 09:86:27:bc:e9:ae:ea:df:e5:00:3e:51:91:bf:63: d4:b4:a2:a0:44:18:17:51:e5:74:12:13:a3:4e:8b: 70:64:72:2f:dc:3a:ae:48:74:ed:6d:fb:42:7e:99: ee:bd:85:0c:20:c8:e0:e5:e1:71:1e:78:fe:20:89: a5:a9:9d:96:c4:24:48:7a:1a:b4:81:35:17:f1:d6: 67:fb:c5:31:3e:7f:54:e4:f9:38:f9:c6:49:e7:00: 5d:0c:e5:ec:84:ef:3f:18:0a:a2:82:87:e5:16:40: 17:9f:21:4d:fd:44:79:7e:1c:3c:ba:5a:23:59:d9: ed:06:ab:d6:f2:aa:3b:f3:67:87:af:07:41:77:5a: 20:9e:52:72:e4:87:29:6d:0f:ec:fe:1b:84:ce:da: cb:a2:46:18:f4:ef:12:c7:29:81:dd:aa:6d:83:64: 4d:26:c0:ad:e7:95:a6:a1:0a:92:cf:c8:7d:b5:7e: c3:03:92:c3:15:6e:82:8d:0d:75:3e:29:9d:5f:d0: b1:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:3A:53:0C:58:30:A9:A3:37:78:8F:E9:F2:21:E1:0D:CB:B0:BE:D4 X509v3 Authority Key Identifier: keyid:C3:39:D1:1E:7D:49:92:F9:AF:B3:04:31:E3:60:42:AA:FD:DE:5C:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wznRHn1JkvmvswQx42BCqv3eXAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c0def6-bc0a-4221-9791-2d8019017849/1/wznRHn1JkvmvswQx42BCqv3eXAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:27:f1:c1:f8:3e:f1:10:67:fa:40:a6:22:84:8f:a9:46:c6: 57:d9:d0:ef:a6:eb:36:69:ef:13:62:62:bb:47:c0:53:00:00: 97:41:69:bc:bf:a6:7a:68:62:03:fe:0a:62:9b:00:04:9e:99: 9c:28:11:da:22:56:bb:6e:6b:95:02:78:da:5d:a0:32:1c:27: c4:85:2e:d0:b1:a3:84:9d:c3:5c:85:9d:a9:f2:fb:52:34:87: c9:6d:c7:9a:e7:51:e8:6d:31:29:43:72:bd:2b:f3:09:2a:18: da:ca:f4:c2:fe:76:87:ba:b4:0e:98:d9:fc:2a:2a:38:96:8f: 97:d7:78:9c:50:ed:e7:f3:e6:c9:1c:1b:0d:16:a3:5b:98:60: 31:5f:fe:04:fd:8f:15:f8:8c:1d:e6:d7:29:72:2a:37:55:82: 3b:f7:64:ae:bd:5c:b9:a6:85:2c:d8:65:7d:d7:73:86:8d:81: c2:de:04:6d:3b:ba:b0:b8:0e:dc:cb:01:9e:99:24:96:96:05: 0b:97:6c:bf:6d:ef:30:4c:d4:c9:1e:d8:35:63:6e:f1:03:c6: ab:c9:0b:36:39:cb:c4:26:b9:c6:5b:ee:e0:46:92:24:4a:75: d1:fd:19:f2:e7:df:c4:39:ef:18:c0:bc:db:36:8a:c3:1e:94: 03:32:7e:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv8HKWW1LXOBibgocgaFy7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzlkMTFlN2Q0OTkyZjlhZmIzMDQzMWUzNjA0MmFhZmRk ZTVjMGEwHhcNMjYwMTI2MjEwMTM0WhcNMjYwMTI3MjEwMTM0WjAzMTEwLwYDVQQD Eyg5YjNhNTMwYzU4MzBhOWEzMzc3ODhmZTlmMjIxZTEwZGNiYjBiZWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjF5fF0ggpZRmTtU7UXktRMyKhWY QPI3gW3WQSW8hl2eUVSjiciAJ1rPICJ/aakaBT4ev4D3zVHVlbEJhie86a7q3+UA PlGRv2PUtKKgRBgXUeV0EhOjTotwZHIv3DquSHTtbftCfpnuvYUMIMjg5eFxHnj+ IImlqZ2WxCRIehq0gTUX8dZn+8UxPn9U5Pk4+cZJ5wBdDOXshO8/GAqigoflFkAX nyFN/UR5fhw8ulojWdntBqvW8qo782eHrwdBd1ognlJy5IcpbQ/s/huEztrLokYY 9O8SxymB3aptg2RNJsCt55WmoQqSz8h9tX7DA5LDFW6CjQ11PimdX9CxjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJs6UwxYMKmjN3iP6fIh4Q3LsL7UMB8GA1UdIwQY MBaAFMM50R59SZL5r7MEMeNgQqr93lwKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEt MmQ4MDE5MDE3ODQ5LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi9jMGRlZjYtYmMwYS00MjIxLTk3OTEtMmQ4MDE5MDE3ODQ5 LzEvd3puUkhuMUprdm12c3dReDQyQkNxdjNlWEFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSfxwfg+ 8RBn+kCmIoSPqUbGV9nQ76brNmnvE2Jiu0fAUwAAl0FpvL+memhiA/4KYpsABJ6Z nCgR2iJWu25rlQJ42l2gMhwnxIUu0LGjhJ3DXIWdqfL7UjSHyW3HmudR6G0xKUNy vSvzCSoY2sr0wv52h7q0DpjZ/CoqOJaPl9d4nFDt5/PmyRwbDRajW5hgMV/+BP2P FfiMHebXKXIqN1WCO/dkrr1cuaaFLNhlfddzho2Bwt4EbTu6sLgO3MsBnpkklpYF C5dsv23vMEzUyR7YNWNu8QPGq8kLNjnLxCa5xlvu4EaSJEp10f0Z8uffxDnvGMC8 2zaKwx6UAzJ+VA== -----END CERTIFICATE-----Generated at Tue Jan 27 07:17:47 2026 by rpki-client