This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft File: wzExr3-gKXnG6h3eCdjHYtiupB0.mft (raw, json) Hash identifier: f9WqnS0gomn0gtmcKvY/vwpQBsGoucdrMR9NS2d0kO8= Subject key identifier: 1E:B1:3B:42:9C:34:CE:F3:E0:8A:FA:B5:DB:2D:C0:CC:1B:C1:E7:B4 Authority key identifier: C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D Certificate issuer: /CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d Certificate serial: 019BF5E44044EF28B3C5C48C95EF0266FAE1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft Manifest number: 0A Signing time: Sun 25 Jan 2026 16:02:15 +0000 Manifest this update: Sun 25 Jan 2026 16:02:15 +0000 Manifest next update: Mon 26 Jan 2026 16:02:15 +0000 Files and hashes: 1: A38BrfcsQgxWnrcUUfwlwPOLep8.asa (hash: 5CbKlO4vRl7LeM/QrN8IBsyyDEAgnjsF1SDgA3maq64=) 2: wzExr3-gKXnG6h3eCdjHYtiupB0.crl (hash: mpKlY9nRq+XNEC/5RFW8uCdn6wNA4u9kG8xTVSHCboA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:e4:40:44:ef:28:b3:c5:c4:8c:95:ef:02:66:fa:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c33131af7fa02979c6ea1dde09d8c762d8aea41d Validity Not Before: Jan 25 16:02:15 2026 GMT Not After : Jan 26 16:02:15 2026 GMT Subject: CN=1eb13b429c34cef3e08afab5db2dc0cc1bc1e7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:8c:d9:68:ee:bb:2f:1a:d0:fe:dc:47:20: 3a:08:ac:b2:04:e3:b0:9b:d6:43:1e:ce:93:98:c0: 58:53:ad:a5:77:b5:c5:6a:55:f1:64:c9:48:00:23: d3:bf:9d:ba:3a:78:a8:67:b4:f2:54:39:f9:27:b7: 32:e2:e8:ef:83:13:48:96:42:9a:67:2d:9c:26:f6: 39:00:1c:6a:8d:5c:94:6a:78:e1:6c:c0:3d:58:06: ba:54:b1:1d:a8:c3:12:6f:0a:03:44:ba:b3:8a:ff: 7b:bc:aa:79:16:01:32:90:7c:75:52:7c:81:c7:9a: 6b:a0:4f:be:2b:8b:81:c0:72:d2:4d:fe:9b:43:c3: 71:6f:0e:c4:68:d3:d3:52:92:3c:eb:c0:32:4c:ed: 1f:58:2a:04:94:19:7c:fb:89:a5:57:2c:f8:f6:11: 96:4a:3c:cf:8d:02:d6:5a:58:01:0c:5e:5f:71:f2: 26:e0:36:27:0f:7e:a7:03:4f:ae:75:f2:09:8c:47: d2:19:e7:ea:22:12:f5:06:50:99:fb:2c:e0:f5:69: b8:e3:93:96:c4:54:f7:91:c7:6e:9e:0f:1c:5b:a4: 87:b5:1f:ea:2d:24:d5:c5:b8:a4:63:84:ae:9e:0b: 94:a9:bc:a1:97:dd:e1:9c:55:86:50:b6:69:14:4f: 8a:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B1:3B:42:9C:34:CE:F3:E0:8A:FA:B5:DB:2D:C0:CC:1B:C1:E7:B4 X509v3 Authority Key Identifier: keyid:C3:31:31:AF:7F:A0:29:79:C6:EA:1D:DE:09:D8:C7:62:D8:AE:A4:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzExr3-gKXnG6h3eCdjHYtiupB0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1f946c-3cc7-419d-b4b7-49b6651d92db/1/wzExr3-gKXnG6h3eCdjHYtiupB0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:79:97:3f:b5:fa:d5:23:5e:7b:4c:4f:6a:2e:4f:30:59:61: a6:14:2a:7b:11:54:d7:39:8a:b3:72:9a:3d:c6:82:ed:41:51: 59:95:d8:ef:4a:ad:a9:4a:7c:b4:e8:53:18:ba:f5:6b:90:40: 5e:ae:f6:43:f4:32:4c:29:fa:87:f1:5a:6a:b8:46:f3:a1:12: d6:f2:19:f4:3a:60:e6:5e:5c:b0:89:f3:42:03:51:59:e4:24: 04:49:6d:26:47:89:0a:eb:b8:e1:7a:bd:9c:8a:32:fd:d2:19: a3:2e:ca:d6:63:c6:a0:bf:a7:f4:12:7f:fd:cd:ed:b6:ec:de: 5d:02:59:04:aa:df:dd:6f:60:f2:b4:64:9d:97:da:14:a3:87: cb:0d:55:06:c8:fd:4d:3b:64:03:bc:f9:88:da:0e:2d:f3:57: e5:32:18:ac:ae:df:53:ea:a3:70:6d:b4:d3:65:67:92:c5:0f: 64:85:fc:01:b1:9e:cf:2a:16:67:9b:ba:98:e9:47:a7:18:02: a1:a9:38:a3:2c:8a:ed:23:d0:5a:ba:d0:2e:2a:78:52:d2:88: bb:1c:9c:b2:e9:db:80:8c:e9:30:b9:ec:35:ee:3e:4d:73:97: 84:1e:43:3c:88:50:3f:e3:f0:61:5d:8d:ab:7e:8b:ad:6f:e4: 03:c2:16:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv15EBE7yizxcSMle8CZvrhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzMzEzMWFmN2ZhMDI5NzljNmVhMWRkZTA5ZDhjNzYyZDhh ZWE0MWQwHhcNMjYwMTI1MTYwMjE1WhcNMjYwMTI2MTYwMjE1WjAzMTEwLwYDVQQD EygxZWIxM2I0MjljMzRjZWYzZTA4YWZhYjVkYjJkYzBjYzFiYzFlN2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI6M2Wjuuy8a0P7cRyA6CKyyBOOw m9ZDHs6TmMBYU62ld7XFalXxZMlIACPTv526OnioZ7TyVDn5J7cy4ujvgxNIlkKa Zy2cJvY5ABxqjVyUanjhbMA9WAa6VLEdqMMSbwoDRLqziv97vKp5FgEykHx1UnyB x5proE++K4uBwHLSTf6bQ8Nxbw7EaNPTUpI868AyTO0fWCoElBl8+4mlVyz49hGW SjzPjQLWWlgBDF5fcfIm4DYnD36nA0+udfIJjEfSGefqIhL1BlCZ+yzg9Wm445OW xFT3kcdung8cW6SHtR/qLSTVxbikY4SunguUqbyhl93hnFWGULZpFE+KyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6xO0KcNM7z4Ir6tdstwMwbwee0MB8GA1UdIwQY MBaAFMMxMa9/oCl5xuod3gnYx2LYrqQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZjk0NmMtM2NjNy00MTlkLWI0Yjct NDliNjY1MWQ5MmRiLzEvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8xZjk0NmMtM2NjNy00MTlkLWI0YjctNDliNjY1MWQ5MmRi LzEvd3pFeHIzLWdLWG5HNmgzZUNkakhZdGl1cEIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr3mXP7X6 1SNee0xPai5PMFlhphQqexFU1zmKs3KaPcaC7UFRWZXY70qtqUp8tOhTGLr1a5BA Xq72Q/QyTCn6h/FaarhG86ES1vIZ9Dpg5l5csInzQgNRWeQkBEltJkeJCuu44Xq9 nIoy/dIZoy7K1mPGoL+n9BJ//c3ttuzeXQJZBKrf3W9g8rRknZfaFKOHyw1VBsj9 TTtkA7z5iNoOLfNX5TIYrK7fU+qjcG2002VnksUPZIX8AbGezyoWZ5u6mOlHpxgC oak4oyyK7SPQWrrQLip4UtKIuxycsunbgIzpMLnsNe4+TXOXhB5DPIhQP+PwYV2N q36LrW/kA8IWUw== -----END CERTIFICATE-----Generated at Sun Jan 25 23:32:30 2026 by rpki-client