This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft File: WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json) Hash identifier: lkHXzf3pjV8AyVvQFCbFFLDJlWxOBHpxXmgxpV6H/b8= Subject key identifier: 43:A9:97:AF:9E:A4:91:2E:3F:42:8C:2F:51:BD:C8:9B:49:BB:67:BF Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99 Certificate issuer: /CN=5ad443ad19444814122f3b27cb93a505abe50799 Certificate serial: 019BF83FC2B8E419F85AD3098223D0430A37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft Manifest number: 17EA Signing time: Mon 26 Jan 2026 03:01:26 +0000 Manifest this update: Mon 26 Jan 2026 03:01:26 +0000 Manifest next update: Tue 27 Jan 2026 03:01:26 +0000 Files and hashes: 1: MbSMYW2z-k-tWzhRKKuMhWB5T9M.roa (hash: 36hqUzBolWCnQ5mdsvmp0C2YtpAXKgXLS0zIpWCBrC4=) 2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: Nr2SOq2PwNOLtZ7fjjtxCqGCh/Xm4MtplVGa/6k7yxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:c2:b8:e4:19:f8:5a:d3:09:82:23:d0:43:0a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799 Validity Not Before: Jan 26 03:01:26 2026 GMT Not After : Jan 27 03:01:26 2026 GMT Subject: CN=43a997af9ea4912e3f428c2f51bdc89b49bb67bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e9:94:30:82:9c:99:4a:e4:35:52:e3:a8:64: 88:de:a3:0a:77:fc:8a:92:07:e9:31:a2:8b:6a:cb: 4e:6d:6e:bf:62:3e:e2:3f:a7:35:76:85:85:d7:af: e0:5e:1e:f3:14:a4:1f:e1:1b:3e:63:a9:34:e5:84: dd:81:58:1b:57:aa:97:5d:cd:61:c1:7c:5c:bb:24: 7d:5b:e1:89:3d:93:30:a3:b0:fd:6f:5e:8b:4e:e2: 27:6f:44:52:0b:46:34:e3:e3:dd:a7:19:50:70:a8: a1:6e:09:f1:4b:0d:e5:f4:f7:34:0c:54:3b:8c:90: 27:e4:c4:09:7e:a9:11:d9:1d:8b:f7:ba:43:fb:91: 3b:8d:34:a7:75:1b:39:e5:5f:e8:37:ae:a5:37:87: 6f:56:d1:f7:b4:ad:51:b7:82:2d:70:bd:4d:4e:27: a9:c8:91:43:f5:5c:27:a2:14:5e:20:ae:f9:28:d9: 3a:22:9b:88:c9:0b:93:e9:fc:ea:1d:93:32:6c:96: 12:e3:83:88:d2:b1:e0:38:f1:36:f2:f4:80:c7:e2: 8f:57:24:6a:9f:c5:e0:ce:f7:8e:ce:ce:cf:84:36: d0:92:09:8b:6e:5b:fb:13:c8:94:85:af:b8:aa:d1: 56:f5:dc:1f:3a:69:32:29:d5:b7:00:3e:53:ae:a5: 97:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A9:97:AF:9E:A4:91:2E:3F:42:8C:2F:51:BD:C8:9B:49:BB:67:BF X509v3 Authority Key Identifier: keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:cb:59:5d:2c:1c:c1:9d:82:38:32:ba:73:c0:7d:76:43:69: 24:1d:51:05:20:2f:b9:c7:10:48:da:29:b4:b5:78:93:cf:2c: d3:b5:6b:7d:fc:c4:31:3b:ea:63:01:c5:9b:61:1d:9b:f2:6a: 5f:de:05:4e:81:7e:b6:19:f5:b0:ca:e4:8b:81:bc:db:2a:61: 51:78:17:1d:b9:14:26:bc:28:ac:00:92:60:10:66:1a:01:04: c2:28:c0:8d:ad:55:23:eb:cc:00:0d:42:68:ac:41:13:5b:9a: 46:43:55:6f:8c:a0:d6:3b:17:2a:fd:a0:70:43:cd:06:67:18: 80:a1:00:3e:e2:17:6d:a7:7a:f4:1b:f6:da:85:d9:6e:f3:44: 71:d0:b8:38:63:94:27:4b:50:cc:1c:30:06:92:85:6f:cd:2e: 7c:b8:2c:90:a9:cf:cf:72:f0:16:f8:69:a2:c7:fa:bb:42:0f: d2:e2:35:3f:a4:2e:aa:2c:2e:ad:d8:02:8f:c2:65:d1:d5:7d: 62:2d:7b:f9:31:ee:99:8b:4b:b9:95:8d:af:c3:73:03:49:f0: 76:e6:35:0e:d7:a0:80:66:a1:cc:43:2a:9a:83:5b:28:f4:c6: c2:a7:11:d4:ba:50:22:dc:9b:77:7e:ff:01:8c:6f:f4:c8:dc: a2:fb:ae:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P8K45Bn4WtMJgiPQQwo3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhZDQ0M2FkMTk0NDQ4MTQxMjJmM2IyN2NiOTNhNTA1YWJl NTA3OTkwHhcNMjYwMTI2MDMwMTI2WhcNMjYwMTI3MDMwMTI2WjAzMTEwLwYDVQQD Eyg0M2E5OTdhZjllYTQ5MTJlM2Y0MjhjMmY1MWJkYzg5YjQ5YmI2N2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOmUMIKcmUrkNVLjqGSI3qMKd/yK kgfpMaKLastObW6/Yj7iP6c1doWF16/gXh7zFKQf4Rs+Y6k05YTdgVgbV6qXXc1h wXxcuyR9W+GJPZMwo7D9b16LTuInb0RSC0Y04+PdpxlQcKihbgnxSw3l9Pc0DFQ7 jJAn5MQJfqkR2R2L97pD+5E7jTSndRs55V/oN66lN4dvVtH3tK1Rt4ItcL1NTiep yJFD9VwnohReIK75KNk6IpuIyQuT6fzqHZMybJYS44OI0rHgOPE28vSAx+KPVyRq n8XgzveOzs7PhDbQkgmLblv7E8iUha+4qtFW9dwfOmkyKdW3AD5TrqWX+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOpl6+epJEuP0KML1G9yJtJu2e/MB8GA1UdIwQY MBaAFFrUQ60ZREgUEi87J8uTpQWr5QeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUt MDI0ZTcyNTczMzVmLzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUtMDI0ZTcyNTczMzVm LzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqstZXSwc wZ2CODK6c8B9dkNpJB1RBSAvuccQSNoptLV4k88s07VrffzEMTvqYwHFm2Edm/Jq X94FToF+thn1sMrki4G82yphUXgXHbkUJrworACSYBBmGgEEwijAja1VI+vMAA1C aKxBE1uaRkNVb4yg1jsXKv2gcEPNBmcYgKEAPuIXbad69Bv22oXZbvNEcdC4OGOU J0tQzBwwBpKFb80ufLgskKnPz3LwFvhposf6u0IP0uI1P6QuqiwurdgCj8Jl0dV9 Yi17+THumYtLuZWNr8NzA0nwduY1DteggGahzEMqmoNbKPTGwqcR1LpQItybd37/ AYxv9MjcovuuIA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:32 2026 by rpki-client