This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft File: W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft (raw, json) Hash identifier: kVoECbAIm6408bdb5ufq6WJvE9iOxQE7jTx7Ew6HhQw= Subject key identifier: D4:FE:B5:C6:64:A1:F0:3D:A3:91:E1:6F:A4:DF:D2:2D:8E:52:3E:6B Authority key identifier: 5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71 Certificate issuer: /CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71 Certificate serial: 019BF5AC323F80457819834EACC6043EAD1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft Manifest number: 0D8A Signing time: Sun 25 Jan 2026 15:01:01 +0000 Manifest this update: Sun 25 Jan 2026 15:01:01 +0000 Manifest next update: Mon 26 Jan 2026 15:01:01 +0000 Files and hashes: 1: W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl (hash: sU4lr4Q7wf1wY7JgUHJmnLpfxPiYjZOqood4OeLkco8=) 2: XcofZ2zUXbUkXhdjGHo_Ijp3eqY.roa (hash: G155Cwdr7xdTzfgF1ccmtV2g6/W9sVULFwUJkZWAH2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:32:3f:80:45:78:19:83:4e:ac:c6:04:3e:ad:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b4b452dbfd4c704bda9cc2a4e915f47192a7f71 Validity Not Before: Jan 25 15:01:01 2026 GMT Not After : Jan 26 15:01:01 2026 GMT Subject: CN=d4feb5c664a1f03da391e16fa4dfd22d8e523e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0d:d4:14:a9:ff:a5:e6:42:3a:0b:70:08:b3: d8:b4:6d:9b:d6:5f:42:5e:3c:0d:0a:59:21:94:63: f7:95:f0:49:79:0b:84:7d:e8:c8:61:5d:5e:98:c6: 0e:ec:73:1d:a0:f0:e7:c2:c1:08:ff:0c:ed:b5:d8: c0:72:09:4a:93:9c:42:04:f4:39:99:c9:c2:3f:b7: 4f:35:bf:eb:46:91:07:0d:34:3f:6d:0e:f0:12:82: 84:ab:99:23:44:df:01:0d:9c:bd:28:1e:9a:8c:4d: ad:ea:55:86:11:dc:f0:dd:9a:9e:2e:ba:78:9c:1a: 01:bb:84:bd:f0:01:71:4c:89:13:8e:7e:d4:17:e9: 4b:ab:fa:36:1a:ee:f5:30:4c:a4:e9:a9:3c:92:38: d2:6c:fb:7c:7f:13:61:5a:c4:28:d0:8e:94:0d:aa: 60:1f:7f:c2:a5:6e:13:e1:d0:2f:6a:51:c7:b0:55: eb:6d:2d:df:38:1a:ee:8a:95:9d:f8:4c:aa:02:4a: 5a:cb:78:18:7e:86:93:da:7d:56:9e:b5:59:2f:01: 8b:d6:ca:84:ed:54:03:9b:d0:6a:a3:75:ec:01:f7: a9:6c:87:4d:2f:00:f0:92:2c:ba:5f:aa:c3:3e:35: 07:22:71:c0:77:9e:7f:51:c0:44:7e:65:07:38:1d: e9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:FE:B5:C6:64:A1:F0:3D:A3:91:E1:6F:A4:DF:D2:2D:8E:52:3E:6B X509v3 Authority Key Identifier: keyid:5B:4B:45:2D:BF:D4:C7:04:BD:A9:CC:2A:4E:91:5F:47:19:2A:7F:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W0tFLb_UxwS9qcwqTpFfRxkqf3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/87ac4b-aa25-428f-a368-e58edc42f04c/1/W0tFLb_UxwS9qcwqTpFfRxkqf3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:91:c6:8e:bd:82:48:da:36:f5:e9:ef:ce:15:c7:ff:a4:39: 77:ae:57:e0:cf:64:7c:b4:61:5f:e3:59:88:8d:34:bd:74:98: 19:02:35:b3:87:44:5a:d6:2e:04:f5:d2:08:7f:e2:44:e9:2d: de:3e:da:3a:26:7e:31:c9:d0:aa:df:32:6f:a3:88:1b:22:c5: 7e:10:30:d2:56:7f:25:9f:e5:97:64:ea:61:a7:c3:7a:68:7b: 36:bf:cd:22:c1:0e:af:1d:43:12:ed:de:3c:b0:c5:7f:46:00: 8d:3d:60:f0:3c:5d:87:c5:cb:09:91:c0:0f:89:e3:ea:48:6c: a4:72:bd:0a:74:7c:e1:97:00:bc:87:40:2a:9a:5b:d9:df:89: ab:6e:81:d4:c4:55:1d:59:83:c7:dc:d4:86:32:74:72:a9:71: 1a:46:33:6f:80:4c:0c:42:aa:2c:99:53:8f:a0:f4:fc:21:05: b5:17:9f:a4:9f:24:54:33:dd:b1:34:30:df:9b:24:28:4e:58: 68:53:74:ed:9f:a2:ce:95:f0:48:fb:59:39:8f:2f:a3:62:1e: 6f:67:65:f3:30:fb:7a:82:cc:e5:b7:79:dd:85:bc:2f:8a:a2: 2a:5a:a7:73:cf:c2:e4:85:a0:6a:0b:e5:cd:09:c6:32:d2:df: 6c:3c:83:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rDI/gEV4GYNOrMYEPq0cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNGI0NTJkYmZkNGM3MDRiZGE5Y2MyYTRlOTE1ZjQ3MTky YTdmNzEwHhcNMjYwMTI1MTUwMTAxWhcNMjYwMTI2MTUwMTAxWjAzMTEwLwYDVQQD EyhkNGZlYjVjNjY0YTFmMDNkYTM5MWUxNmZhNGRmZDIyZDhlNTIzZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A3UFKn/peZCOgtwCLPYtG2b1l9C XjwNClkhlGP3lfBJeQuEfejIYV1emMYO7HMdoPDnwsEI/wzttdjAcglKk5xCBPQ5 mcnCP7dPNb/rRpEHDTQ/bQ7wEoKEq5kjRN8BDZy9KB6ajE2t6lWGEdzw3ZqeLrp4 nBoBu4S98AFxTIkTjn7UF+lLq/o2Gu71MEyk6ak8kjjSbPt8fxNhWsQo0I6UDapg H3/CpW4T4dAvalHHsFXrbS3fOBruipWd+EyqAkpay3gYfoaT2n1WnrVZLwGL1sqE 7VQDm9Bqo3XsAfepbIdNLwDwkiy6X6rDPjUHInHAd55/UcBEfmUHOB3p9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNT+tcZkofA9o5Hhb6Tf0i2OUj5rMB8GA1UdIwQY MBaAFFtLRS2/1McEvanMKk6RX0cZKn9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84N2FjNGItYWEyNS00MjhmLWEzNjgt ZTU4ZWRjNDJmMDRjLzEvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84N2FjNGItYWEyNS00MjhmLWEzNjgtZTU4ZWRjNDJmMDRj LzEvVzB0RkxiX1V4d1M5cWN3cVRwRmZSeGtxZjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5HGjr2C SNo29envzhXH/6Q5d65X4M9kfLRhX+NZiI00vXSYGQI1s4dEWtYuBPXSCH/iROkt 3j7aOiZ+McnQqt8yb6OIGyLFfhAw0lZ/JZ/ll2TqYafDemh7Nr/NIsEOrx1DEu3e PLDFf0YAjT1g8Dxdh8XLCZHAD4nj6khspHK9CnR84ZcAvIdAKppb2d+Jq26B1MRV HVmDx9zUhjJ0cqlxGkYzb4BMDEKqLJlTj6D0/CEFtRefpJ8kVDPdsTQw35skKE5Y aFN07Z+izpXwSPtZOY8vo2Ieb2dl8zD7eoLM5bd53YW8L4qiKlqnc8/C5IWgagvl zQnGMtLfbDyDCw== -----END CERTIFICATE-----Generated at Mon Jan 26 00:20:26 2026 by rpki-client