This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft File: WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json) Hash identifier: 5i4yRcH67oOjEaPRjeo4Qsjs1QJZdDHlyPG95lACyUM= Subject key identifier: 3A:86:80:D1:78:4B:21:66:6F:8C:10:96:18:03:2F:13:7B:B0:4F:2D Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 Certificate issuer: /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Certificate serial: 019BF651111A1EABA3078456A7D366E31B9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft Manifest number: 177B Signing time: Sun 25 Jan 2026 18:01:06 +0000 Manifest this update: Sun 25 Jan 2026 18:01:06 +0000 Manifest next update: Mon 26 Jan 2026 18:01:06 +0000 Files and hashes: 1: A-mJzajm6R6rc_fte01cBrdlwGQ.roa (hash: 2mDVxsRPuzcsX8IUNaU5b3fh5ELHeC7iXnOXAAz5DwA=) 2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: L9rGe2W8wRQbvZqrCs/tGpGHfB9t2BThI/LnvCb0PFs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:51:11:1a:1e:ab:a3:07:84:56:a7:d3:66:e3:1b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4 Validity Not Before: Jan 25 18:01:06 2026 GMT Not After : Jan 26 18:01:06 2026 GMT Subject: CN=3a8680d1784b21666f8c109618032f137bb04f2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:26:e0:b3:f7:45:b0:82:fa:68:7f:b6:25:50: 2b:02:e6:6c:8d:2c:28:db:dc:06:1f:b8:11:07:22: 1c:df:95:50:6b:f2:bf:3f:d1:4b:ec:11:6c:69:9b: 40:c8:1d:b2:5e:3c:22:a0:d6:0c:d0:d1:7d:e4:96: 15:cd:ad:9c:c8:da:a8:92:d1:4e:8e:34:bc:54:ef: cf:b0:b5:e7:29:1f:ec:a6:26:ec:f3:2a:4b:6b:eb: ad:18:91:fc:bf:59:95:3c:80:af:67:0a:6e:b8:93: f6:1e:68:3e:38:38:a3:ad:82:d7:0e:ee:81:02:4e: 8a:06:58:1b:dc:4f:77:bc:56:88:a3:bb:e4:c2:39: 39:44:37:e4:99:96:fa:4f:a2:27:20:c3:d2:ee:4a: 61:29:10:83:24:78:6b:c0:f5:0b:71:0d:a8:cd:c6: 98:9f:cd:d8:27:18:7b:3f:95:da:02:11:6f:79:19: 4f:9d:fb:7e:85:d3:4c:5e:6e:f0:65:be:66:8e:e2: 31:c8:64:17:10:f7:18:bc:24:a2:9e:b9:43:38:4f: a1:ea:68:13:14:6a:1b:b6:99:72:23:3e:c0:a3:dc: 7d:ae:55:87:27:36:ad:c0:7d:c7:fc:8f:f7:6f:9f: ef:6a:f4:fc:5a:6b:cf:e7:0d:3a:7a:be:74:41:91: f0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:86:80:D1:78:4B:21:66:6F:8C:10:96:18:03:2F:13:7B:B0:4F:2D X509v3 Authority Key Identifier: keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:92:54:d1:13:af:0d:f6:f3:1b:05:e2:ae:fa:13:b4:1e:49: 7a:b9:00:ef:28:83:16:de:3c:b1:9c:08:0a:82:7b:7d:76:33: 3d:f5:4f:c8:c8:7b:31:15:81:16:bb:67:26:b0:3f:6e:8e:27: 86:73:d4:53:55:00:47:40:b2:b0:26:6b:4b:31:2f:b8:7a:33: aa:0c:c9:fa:5c:12:9c:89:b1:95:36:e4:24:4e:97:3b:43:37: 07:30:e1:9f:30:12:73:84:04:54:42:43:8a:3a:3d:d5:a3:b4: 85:76:53:d1:aa:c6:8f:91:7f:14:12:6e:67:c1:eb:59:e7:59: c6:b8:9e:ef:98:df:e6:8a:dc:6c:b1:be:8c:42:99:11:77:76: 7d:d9:92:58:2a:ab:18:14:57:96:98:70:5e:36:13:8b:3c:f0: 12:80:f5:62:bc:20:e7:85:ed:c8:b5:f1:8a:34:5b:15:de:bb: 70:a2:d5:8f:1b:51:40:9b:fc:a2:45:a4:be:87:20:76:e2:66: 48:21:37:c1:6b:a4:11:35:77:e1:27:28:d0:5d:a4:23:56:7a: 1e:6e:1a:f2:75:e8:f6:0e:65:35:55:65:cf:e3:2c:c2:72:d4: a5:c6:e8:59:cd:60:94:17:95:7d:6e:f4:c8:24:b3:ee:e7:f2: 84:a2:8e:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2UREaHqujB4RWp9Nm4xufMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhMWIxYWNmMjI2ZjNjMmZmYzMxYzFlYjJiNmE1MTk0YjUw YjUyZjQwHhcNMjYwMTI1MTgwMTA2WhcNMjYwMTI2MTgwMTA2WjAzMTEwLwYDVQQD EygzYTg2ODBkMTc4NGIyMTY2NmY4YzEwOTYxODAzMmYxMzdiYjA0ZjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSbgs/dFsIL6aH+2JVArAuZsjSwo 29wGH7gRByIc35VQa/K/P9FL7BFsaZtAyB2yXjwioNYM0NF95JYVza2cyNqoktFO jjS8VO/PsLXnKR/spibs8ypLa+utGJH8v1mVPICvZwpuuJP2Hmg+ODijrYLXDu6B Ak6KBlgb3E93vFaIo7vkwjk5RDfkmZb6T6InIMPS7kphKRCDJHhrwPULcQ2ozcaY n83YJxh7P5XaAhFveRlPnft+hdNMXm7wZb5mjuIxyGQXEPcYvCSinrlDOE+h6mgT FGobtplyIz7Ao9x9rlWHJzatwH3H/I/3b5/vavT8WmvP5w06er50QZHweQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqGgNF4SyFmb4wQlhgDLxN7sE8tMB8GA1UdIwQY MBaAFFobGs8ibzwv/DHB6ytqUZS1C1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgt NzMxZGRiMWMwN2VkLzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgtNzMxZGRiMWMwN2Vk LzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapJU0ROv DfbzGwXirvoTtB5JerkA7yiDFt48sZwICoJ7fXYzPfVPyMh7MRWBFrtnJrA/bo4n hnPUU1UAR0CysCZrSzEvuHozqgzJ+lwSnImxlTbkJE6XO0M3BzDhnzASc4QEVEJD ijo91aO0hXZT0arGj5F/FBJuZ8HrWedZxrie75jf5orcbLG+jEKZEXd2fdmSWCqr GBRXlphwXjYTizzwEoD1Yrwg54XtyLXxijRbFd67cKLVjxtRQJv8okWkvocgduJm SCE3wWukETV34Sco0F2kI1Z6Hm4a8nXo9g5lNVVlz+MswnLUpcboWc1glBeVfW70 yCSz7ufyhKKOrg== -----END CERTIFICATE-----Generated at Mon Jan 26 01:20:08 2026 by rpki-client