This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft File: WNidwYngCTYayyZVaA5mnAvEdFY.mft (raw, json) Hash identifier: JFs4J0U1KALkDjbXyxivCrHa464EUiGUR5/Gn7iAYyU= Subject key identifier: 55:F4:22:94:5C:AF:C0:13:0D:B3:BB:52:9C:0D:1E:1A:26:7D:E2:82 Authority key identifier: 58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56 Certificate issuer: /CN=58d89dc189e009361acb2655680e669c0bc47456 Certificate serial: 019BF6BF433B924B9FEB65D8E3A745200FBD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft Manifest number: 02EE Signing time: Sun 25 Jan 2026 20:01:28 +0000 Manifest this update: Sun 25 Jan 2026 20:01:28 +0000 Manifest next update: Mon 26 Jan 2026 20:01:28 +0000 Files and hashes: 1: WNidwYngCTYayyZVaA5mnAvEdFY.crl (hash: iQW6gFhTesEw5esKAZptyiRDCpN3gGMHg1iLZyo60HE=) 2: ziF5LUxXxsiZsU2Zn5F9Vs8QBIU.roa (hash: JWHNPV4Q0ijWQ7FA9BlDGI8xfPLJfKs3pJXg1QGEDkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:43:3b:92:4b:9f:eb:65:d8:e3:a7:45:20:0f:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d89dc189e009361acb2655680e669c0bc47456 Validity Not Before: Jan 25 20:01:28 2026 GMT Not After : Jan 26 20:01:28 2026 GMT Subject: CN=55f422945cafc0130db3bb529c0d1e1a267de282 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:f0:4a:e9:e9:f0:85:4a:50:26:c0:4a:90: 60:47:1a:f9:6f:82:91:c8:ba:7b:21:1e:bb:f8:d7: 55:25:6d:1f:48:bf:3b:d9:df:f3:f0:d1:85:bc:7a: 6f:e2:80:4e:35:9a:e6:5f:16:52:b7:ba:cd:28:4b: 2b:7d:08:84:da:52:2d:ea:6a:16:4d:31:44:1f:f1: 38:d6:c4:17:75:91:2a:a2:ff:7a:2f:19:b7:c3:10: 41:56:fc:99:c3:86:d5:2e:fa:b4:e6:16:7c:c5:3c: a7:78:f2:fc:fc:df:71:40:cf:a4:66:4d:49:89:7d: 5f:4e:22:4c:0e:99:35:e4:38:21:92:48:e1:9d:de: b1:39:d6:42:59:31:88:95:59:5b:08:73:e0:a4:ed: 13:94:83:cf:77:fb:74:a4:d1:bd:4e:15:a0:f6:e1: d1:93:e8:89:ec:fd:cc:d1:8a:74:ee:83:f4:fe:ec: 5d:d3:af:62:00:61:87:49:8d:b0:a3:8c:e9:c2:a7: de:18:60:bf:67:5f:1c:1c:60:09:fb:80:c1:eb:f8: f5:db:d7:c1:58:5b:ee:01:f2:5d:3b:93:cd:a7:5e: ac:98:75:75:b7:43:20:fe:d2:ab:20:a1:05:e5:d8: 08:0b:35:d9:ee:e0:2a:d9:40:32:46:5d:1a:e4:20: db:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:F4:22:94:5C:AF:C0:13:0D:B3:BB:52:9C:0D:1E:1A:26:7D:E2:82 X509v3 Authority Key Identifier: keyid:58:D8:9D:C1:89:E0:09:36:1A:CB:26:55:68:0E:66:9C:0B:C4:74:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNidwYngCTYayyZVaA5mnAvEdFY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/51ef46-d069-474c-9b4b-9dff5bd5488a/1/WNidwYngCTYayyZVaA5mnAvEdFY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:59:ae:18:f8:72:13:a0:7d:54:08:ec:78:89:50:74:77:cb: 87:fa:1c:b1:26:ed:16:15:a6:9e:60:ab:07:e3:14:5e:dc:5b: 4b:49:f7:e7:34:d6:a1:6c:de:93:15:93:89:8d:fb:e4:ef:13: d2:17:9f:f0:d8:c7:c5:45:b5:6a:40:23:70:2e:2f:f2:b8:bd: 02:91:9d:95:8c:01:fe:1b:8c:eb:00:e5:45:90:4f:da:8c:57: 73:9c:ed:b2:12:5e:7a:b9:8d:0c:7f:bc:55:3a:bc:98:61:46: e7:df:28:85:ca:36:03:b6:d2:f8:be:c0:06:74:5b:d6:77:58: b7:9e:e1:35:28:fe:03:1d:0e:3c:e4:c6:5a:bd:8f:ba:21:be: 26:91:00:40:2c:10:27:18:d2:8d:83:39:4a:e1:2b:bc:1c:49: 44:25:64:c8:18:8d:5f:b5:b7:6a:be:59:7c:1f:f0:7d:73:b7: 8e:98:28:ec:74:9a:ed:bd:8f:07:76:11:05:0b:a5:4e:03:bc: 99:25:60:b3:e7:25:bc:fb:79:43:a9:a5:ac:2b:af:ee:26:b3: f7:1a:36:f7:a8:c5:72:71:c4:db:95:f5:ed:2a:69:06:7a:3d: 24:d9:27:1e:3f:2d:34:03:af:94:5b:2b:bb:90:cc:22:40:b3: 0c:55:87:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v0M7kkuf62XY46dFIA+9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ZDg5ZGMxODllMDA5MzYxYWNiMjY1NTY4MGU2NjljMGJj NDc0NTYwHhcNMjYwMTI1MjAwMTI4WhcNMjYwMTI2MjAwMTI4WjAzMTEwLwYDVQQD Eyg1NWY0MjI5NDVjYWZjMDEzMGRiM2JiNTI5YzBkMWUxYTI2N2RlMjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2LwSunp8IVKUCbASpBgRxr5b4KR yLp7IR67+NdVJW0fSL872d/z8NGFvHpv4oBONZrmXxZSt7rNKEsrfQiE2lIt6moW TTFEH/E41sQXdZEqov96Lxm3wxBBVvyZw4bVLvq05hZ8xTynePL8/N9xQM+kZk1J iX1fTiJMDpk15Dghkkjhnd6xOdZCWTGIlVlbCHPgpO0TlIPPd/t0pNG9ThWg9uHR k+iJ7P3M0Yp07oP0/uxd069iAGGHSY2wo4zpwqfeGGC/Z18cHGAJ+4DB6/j129fB WFvuAfJdO5PNp16smHV1t0Mg/tKrIKEF5dgICzXZ7uAq2UAyRl0a5CDbgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFX0IpRcr8ATDbO7UpwNHhomfeKCMB8GA1UdIwQY MBaAFFjYncGJ4Ak2GssmVWgOZpwLxHRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGIt OWRmZjViZDU0ODhhLzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81MWVmNDYtZDA2OS00NzRjLTliNGItOWRmZjViZDU0ODhh LzEvV05pZHdZbmdDVFlheXlaVmFBNW1uQXZFZEZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFmuGPhy E6B9VAjseIlQdHfLh/ocsSbtFhWmnmCrB+MUXtxbS0n35zTWoWzekxWTiY375O8T 0hef8NjHxUW1akAjcC4v8ri9ApGdlYwB/huM6wDlRZBP2oxXc5ztshJeermNDH+8 VTq8mGFG598ohco2A7bS+L7ABnRb1ndYt57hNSj+Ax0OPOTGWr2PuiG+JpEAQCwQ JxjSjYM5SuErvBxJRCVkyBiNX7W3ar5ZfB/wfXO3jpgo7HSa7b2PB3YRBQulTgO8 mSVgs+clvPt5Q6mlrCuv7iaz9xo296jFcnHE25X17SppBno9JNknHj8tNAOvlFsr u5DMIkCzDFWHsg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:36:53 2026 by rpki-client