This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft File: _caA7hsnw6bwcBPI_CXr_wxn-50.mft (raw, json) Hash identifier: +1FARNZzOVoOhyMYkQj9G6akHdWRrdgoMlUHNYVND2Y= Subject key identifier: 71:1A:77:31:7A:98:B4:C6:F4:79:72:1A:11:6A:35:79:3F:0B:AD:E6 Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d Certificate serial: 019BF5AC8F356742CEED773F4CCD9F7C2226 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft Manifest number: 0EC9 Signing time: Sun 25 Jan 2026 15:01:25 +0000 Manifest this update: Sun 25 Jan 2026 15:01:25 +0000 Manifest next update: Mon 26 Jan 2026 15:01:25 +0000 Files and hashes: 1: 3quKn702Vi5YqrEVXzFPYc93s0o.roa (hash: Ux1SJ1+gpjARAxZ3o2ImnrNmQoc+jmNEaDOBhy8YXGc=) 2: _caA7hsnw6bwcBPI_CXr_wxn-50.crl (hash: M+whZzKYdPJMnkXSdm2iobChuSqmwFWGSnQ/3kXKlm4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:8f:35:67:42:ce:ed:77:3f:4c:cd:9f:7c:22:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d Validity Not Before: Jan 25 15:01:25 2026 GMT Not After : Jan 26 15:01:25 2026 GMT Subject: CN=711a77317a98b4c6f479721a116a35793f0bade6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bf:c3:20:e8:93:13:cd:d2:c1:07:a4:bb:72: fc:22:e1:01:c4:bb:97:08:e3:e9:dd:4b:6e:f8:9f: 65:30:59:d1:b4:3e:69:5e:05:a0:73:d1:e2:4a:f4: 97:ac:51:33:7f:c4:92:5d:85:01:d2:39:95:4e:9e: 6e:24:8d:92:f6:f5:c9:a5:1b:1d:01:ae:51:27:39: c6:6f:7d:71:92:f6:96:57:e4:f9:8e:d8:39:8e:53: 36:eb:27:4a:83:5b:54:e1:77:11:43:65:fd:09:35: c5:1a:b2:46:84:73:77:bf:ed:f0:9a:d3:b2:a9:42: 2d:02:c9:48:67:8d:64:77:8d:1e:bf:03:3e:d0:e8: 06:78:1d:dc:59:22:e4:18:5a:2d:97:22:34:e7:e5: 4a:99:bc:d7:79:5e:de:fe:f2:a8:60:ec:3b:ea:29: b5:01:10:32:0b:2c:a2:4b:3f:8d:e2:c7:ee:eb:20: 59:0b:f7:55:89:e5:2d:5a:12:2d:37:c6:16:50:61: 6c:8c:2d:2b:78:17:79:00:cd:41:17:ea:b0:c1:b4: af:7a:ca:08:29:a9:f0:22:ca:46:8e:28:e8:55:a6: dd:25:af:da:85:b6:e2:a3:33:f5:6b:87:1a:bc:d2: 79:3a:aa:d9:44:ff:f2:c9:3a:9f:8b:71:22:71:9b: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:1A:77:31:7A:98:B4:C6:F4:79:72:1A:11:6A:35:79:3F:0B:AD:E6 X509v3 Authority Key Identifier: keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:5e:61:c6:99:83:3a:e8:9e:23:e6:0d:db:2e:3d:c6:9b:a8: 84:25:bb:4e:42:af:cc:7b:76:f3:76:05:e6:8a:f8:f1:4d:76: 75:af:e5:82:08:75:71:6f:db:32:1e:91:94:b3:e1:a9:98:dd: 3e:d8:4f:04:a6:f3:ba:fc:a0:d7:ce:f0:e0:72:6a:25:ee:98: 9c:2e:f0:9a:66:d8:6a:99:e2:f2:e6:5b:c7:34:a8:74:31:7d: 77:49:5d:29:50:23:ce:af:37:47:86:e1:49:6c:f6:65:6d:74: 84:00:3e:40:33:52:ea:24:bd:bd:94:c8:94:d7:69:c0:d9:08: 61:82:61:60:9b:01:2e:f1:4c:35:97:45:93:41:ce:3e:87:00: 88:4e:82:85:ff:ec:0c:cd:07:73:26:eb:c1:71:53:ae:4a:b1: a6:db:27:76:e8:36:34:42:5b:42:21:6b:b6:15:ae:33:b4:f8: 06:b1:8b:95:32:c5:24:db:e7:13:1a:27:17:df:75:9d:7e:56: 7e:ff:fe:1d:4b:47:51:03:ae:45:40:fb:d2:a5:d7:61:1c:18: f7:be:03:83:cd:05:8b:7c:5b:96:15:83:28:a7:c5:31:be:92: 8d:ca:ac:20:ca:e9:fa:c5:f4:84:b1:9a:cd:cd:9d:16:44:03: d8:f6:39:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rI81Z0LO7Xc/TM2ffCImMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzY4MGVlMWIyN2MzYTZmMDcwMTNjOGZjMjVlYmZmMGM2 N2ZiOWQwHhcNMjYwMTI1MTUwMTI1WhcNMjYwMTI2MTUwMTI1WjAzMTEwLwYDVQQD Eyg3MTFhNzczMTdhOThiNGM2ZjQ3OTcyMWExMTZhMzU3OTNmMGJhZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7/DIOiTE83SwQeku3L8IuEBxLuX COPp3Utu+J9lMFnRtD5pXgWgc9HiSvSXrFEzf8SSXYUB0jmVTp5uJI2S9vXJpRsd Aa5RJznGb31xkvaWV+T5jtg5jlM26ydKg1tU4XcRQ2X9CTXFGrJGhHN3v+3wmtOy qUItAslIZ41kd40evwM+0OgGeB3cWSLkGFotlyI05+VKmbzXeV7e/vKoYOw76im1 ARAyCyyiSz+N4sfu6yBZC/dVieUtWhItN8YWUGFsjC0reBd5AM1BF+qwwbSvesoI KanwIspGjijoVabdJa/ahbbiozP1a4cavNJ5OqrZRP/yyTqfi3EicZvEdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEadzF6mLTG9HlyGhFqNXk/C63mMB8GA1UdIwQY MBaAFP3GgO4bJ8Om8HATyPwl6/8MZ/udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9hMTJlMWMtMWIxMC00OTM4LTk2ZDMt N2JlZDI2NzQzYmNjLzEvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9hMTJlMWMtMWIxMC00OTM4LTk2ZDMtN2JlZDI2NzQzYmNj LzEvX2NhQTdoc253NmJ3Y0JQSV9DWHJfd3huLTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeV5hxpmD OuieI+YN2y49xpuohCW7TkKvzHt283YF5or48U12da/lggh1cW/bMh6RlLPhqZjd PthPBKbzuvyg187w4HJqJe6YnC7wmmbYapni8uZbxzSodDF9d0ldKVAjzq83R4bh SWz2ZW10hAA+QDNS6iS9vZTIlNdpwNkIYYJhYJsBLvFMNZdFk0HOPocAiE6Chf/s DM0HcybrwXFTrkqxptsndug2NEJbQiFrthWuM7T4BrGLlTLFJNvnExonF991nX5W fv/+HUtHUQOuRUD70qXXYRwY974Dg80Fi3xblhWDKKfFMb6SjcqsIMrp+sX0hLGa zc2dFkQD2PY5rg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:01:23 2026 by rpki-client