This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft File: wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json) Hash identifier: xwxaAlBGfDzzEbpOYxteh0F0qajKeVqsgUob9nafydI= Subject key identifier: 8E:D1:5C:71:84:EB:AF:1F:5C:BB:E0:E1:0D:DA:87:80:BA:41:16:10 Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9 Certificate serial: 019BF5ABF1F7F2CD3067C8AA8C7296ECD733 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft Manifest number: 17F1 Signing time: Sun 25 Jan 2026 15:00:45 +0000 Manifest this update: Sun 25 Jan 2026 15:00:45 +0000 Manifest next update: Mon 26 Jan 2026 15:00:45 +0000 Files and hashes: 1: U4zW5QS2curvW1WWlXvfaZ-FFgE.roa (hash: urvPIf0emVxN+h0vEZuEnLmYIlJrl/akSOeGv1xVrhA=) 2: ctn8OcjHsscIiuWYKmIzKXk2VTM.roa (hash: MIK/LTNuaSONUvFAQ4mc503oI5bKuGPz3d2eDJ+oDhw=) 3: nqeAxh-Zvj9N-HZ0Z_oqfMzPECY.roa (hash: EA0w8mnUHsfVGiJBXY9XWwK4qgczfc6YuAq1VlWZzqM=) 4: vpaPc9gcyQc1zzzbJkF9n75zDFw.roa (hash: 8O4KfD0Ddn9u3Kh4fXZU6pj1hG4jVkxChi5IINDrduI=) 5: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: sYpKTA2VlJwu7/vY1G1VYAWbBwWe2kf1d0RYDaSvp+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:f1:f7:f2:cd:30:67:c8:aa:8c:72:96:ec:d7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9 Validity Not Before: Jan 25 15:00:45 2026 GMT Not After : Jan 26 15:00:45 2026 GMT Subject: CN=8ed15c7184ebaf1f5cbbe0e10dda8780ba411610 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b9:2a:77:ed:04:ec:e1:e6:51:8b:88:f1:77: 80:fb:10:a4:d4:a2:32:99:a3:62:2c:1f:81:d3:cc: 66:3b:d4:a1:b4:51:f7:b3:fe:d7:bd:35:11:3f:4f: 9d:04:6e:83:ae:d0:38:39:c5:b9:68:9a:8a:74:cf: 7b:20:83:0a:a3:f4:d6:7c:4c:d0:f7:bc:31:e7:a8: 40:e6:08:6a:81:cb:40:c0:37:9b:2d:7e:ae:f3:16: 43:64:74:c0:6b:df:ea:9a:2b:c6:bf:a4:b3:0f:9d: 03:27:7e:b7:9b:ce:9a:25:5b:20:d0:43:5f:ae:68: 40:e3:c7:6d:ef:0e:ca:08:eb:49:85:ea:b1:4d:95: fe:f6:9d:b2:ff:0c:50:9c:ff:63:57:2e:5c:37:87: 30:6a:35:18:ff:40:2c:53:53:12:50:df:d0:db:1d: 07:94:8f:de:c9:dc:f5:91:3d:ba:5e:01:cb:71:28: 55:4d:f5:99:da:3a:1d:3c:86:65:9a:10:25:34:d2: 9a:d4:e9:cd:83:71:a5:62:2e:c5:6c:13:ed:f6:c9: 01:1d:c9:e9:24:11:98:72:69:37:b8:4c:1e:93:d8: c0:bd:0f:2b:a6:26:30:20:8d:7d:89:5b:5b:43:df: 1a:b1:7b:e7:d3:fe:3b:c6:2f:18:71:ea:5f:7a:15: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D1:5C:71:84:EB:AF:1F:5C:BB:E0:E1:0D:DA:87:80:BA:41:16:10 X509v3 Authority Key Identifier: keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:69:ec:98:0c:4e:4e:26:3a:14:bb:b8:ac:90:f2:65:08:43: 8e:74:27:5c:c5:a0:8a:87:0b:6c:05:18:33:52:ce:9e:ef:c0: 7c:3e:7e:d6:2b:a3:08:c7:3d:af:14:c3:0b:1c:1d:06:02:d0: 19:85:e3:15:1e:99:cb:37:df:bc:45:28:63:48:50:d7:19:76: bb:06:c8:74:3d:1f:51:7a:04:dd:20:78:af:ca:dd:f0:2e:83: c5:e6:46:8c:59:dc:70:6f:f4:2d:e1:ea:4a:cd:da:5f:89:e0: 61:7f:2b:30:6a:1d:8c:96:8e:70:d4:9b:2a:4b:e6:1c:4e:ca: 20:2b:69:4f:a5:e9:b6:a2:08:0c:1b:c7:f8:68:3f:fb:bd:f5: aa:72:a7:b4:bb:56:e8:2d:20:3f:23:6d:41:79:8a:bc:70:be: 8b:0b:5a:b9:71:b1:e9:aa:a1:cb:a5:a2:f8:02:7e:c2:c7:6b: d8:33:46:fd:57:5b:24:5f:fe:5e:4d:47:10:16:78:49:3c:b2: fc:dc:60:a3:2e:97:a2:a2:02:09:0b:6d:79:51:b4:ea:26:b7: ae:04:7b:1b:4d:65:65:b5:d3:81:f9:3b:a3:d3:ae:2e:1c:32: 83:54:db:5a:3f:0b:d1:5f:db:ce:55:cf:30:d3:bd:56:02:cb: b0:51:7e:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q/H38s0wZ8iqjHKW7NczMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz MWUzZjkwHhcNMjYwMTI1MTUwMDQ1WhcNMjYwMTI2MTUwMDQ1WjAzMTEwLwYDVQQD Eyg4ZWQxNWM3MTg0ZWJhZjFmNWNiYmUwZTEwZGRhODc4MGJhNDExNjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbkqd+0E7OHmUYuI8XeA+xCk1KIy maNiLB+B08xmO9ShtFH3s/7XvTURP0+dBG6DrtA4OcW5aJqKdM97IIMKo/TWfEzQ 97wx56hA5ghqgctAwDebLX6u8xZDZHTAa9/qmivGv6SzD50DJ363m86aJVsg0ENf rmhA48dt7w7KCOtJheqxTZX+9p2y/wxQnP9jVy5cN4cwajUY/0AsU1MSUN/Q2x0H lI/eydz1kT26XgHLcShVTfWZ2jodPIZlmhAlNNKa1OnNg3GlYi7FbBPt9skBHcnp JBGYcmk3uEwek9jAvQ8rpiYwII19iVtbQ98asXvn0/47xi8YcepfehXFFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7RXHGE668fXLvg4Q3ah4C6QRYQMB8GA1UdIwQY MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt MWM3YjJiOTFkMzA4LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4 LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmnsmAxO TiY6FLu4rJDyZQhDjnQnXMWgiocLbAUYM1LOnu/AfD5+1iujCMc9rxTDCxwdBgLQ GYXjFR6ZyzffvEUoY0hQ1xl2uwbIdD0fUXoE3SB4r8rd8C6DxeZGjFnccG/0LeHq Ss3aX4ngYX8rMGodjJaOcNSbKkvmHE7KICtpT6XptqIIDBvH+Gg/+731qnKntLtW 6C0gPyNtQXmKvHC+iwtauXGx6aqhy6Wi+AJ+wsdr2DNG/VdbJF/+Xk1HEBZ4STyy /Nxgoy6XoqICCQtteVG06ia3rgR7G01lZbXTgfk7o9OuLhwyg1TbWj8L0V/bzlXP MNO9VgLLsFF+ew== -----END CERTIFICATE-----Generated at Sun Jan 25 20:40:32 2026 by rpki-client