This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft File: wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json) Hash identifier: AURzBLvHeDQpVRZnrtQ3aRPOaq7WqC99Qckm4T6JiH4= Subject key identifier: 23:A1:9B:93:66:4C:C8:CC:F6:70:C1:C7:5A:38:DC:97:19:E9:32:98 Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E Certificate issuer: /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e Certificate serial: 019BF6BF552F3BABB363AFD59183E44C0565 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft Manifest number: 0C61 Signing time: Sun 25 Jan 2026 20:01:32 +0000 Manifest this update: Sun 25 Jan 2026 20:01:32 +0000 Manifest next update: Mon 26 Jan 2026 20:01:32 +0000 Files and hashes: 1: uRKhnVnG5ahcONCLHxTMtWvrhtc.roa (hash: UA0ILSRoJWCUIQSmovc4YSm+7GF2eZguJHjrv0XpnQU=) 2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: Pv79Dn3XdM2URe2DMA5/T5AdXdzNca085U49OrRoHbM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f6:bf:55:2f:3b:ab:b3:63:af:d5:91:83:e4:4c:05:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e Validity Not Before: Jan 25 20:01:32 2026 GMT Not After : Jan 26 20:01:32 2026 GMT Subject: CN=23a19b93664cc8ccf670c1c75a38dc9719e93298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d3:a8:96:d0:a4:4a:67:5e:92:bd:48:e3:c3: b6:93:d0:35:5e:1c:e1:47:a5:fb:94:0a:27:ad:85: 80:ea:32:75:d9:55:c5:1f:6c:5a:28:4b:ef:da:ae: 63:91:9c:87:cf:14:b3:b4:f3:01:9b:10:84:21:b8: 42:cf:5b:95:c8:39:3e:1a:0d:36:9f:26:e8:cd:ef: 95:57:6d:15:53:45:43:11:39:25:a1:82:b7:c5:50: 60:f7:b9:fe:db:5c:70:e8:76:f0:38:5b:28:6e:7f: dd:d5:8b:af:4f:c9:8b:5a:81:f0:97:19:a6:93:d9: 51:d3:7d:34:50:a4:4f:ca:91:c5:de:15:39:cb:ed: d8:96:26:c6:3d:03:f3:08:22:64:73:17:12:16:21: e7:5f:21:5e:6d:49:69:0c:34:18:f6:95:66:e2:a2: b9:46:f5:df:75:54:ac:09:53:41:eb:a2:97:ba:a4: b7:02:0e:34:9b:c9:03:06:ff:28:43:a9:92:87:48: 80:1f:75:11:4f:d0:f6:a9:7d:22:49:82:d3:20:21: 42:46:54:bb:39:ff:c6:14:49:6b:96:18:50:34:3f: ad:e8:46:46:f1:42:f4:51:d0:d8:7d:0d:2c:0c:c7: 84:02:f6:b6:21:fa:8e:aa:e1:39:56:37:ed:22:4a: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A1:9B:93:66:4C:C8:CC:F6:70:C1:C7:5A:38:DC:97:19:E9:32:98 X509v3 Authority Key Identifier: keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:0a:22:d5:7c:bc:01:fa:46:ab:73:85:fd:5f:8b:d7:ae:f3: 0a:0c:38:46:61:5c:3a:41:39:a0:88:8f:70:4e:93:f3:73:5f: 80:01:fa:32:3c:22:40:8a:df:ea:e9:f6:a4:c2:c6:8e:5d:a4: 30:f7:54:17:d2:de:58:55:94:7d:93:9f:a5:21:2e:94:6f:74: 1b:d9:20:fa:fc:0d:7e:68:d7:de:f3:ac:44:5b:09:55:95:8a: 0e:d6:9b:4a:33:84:46:1e:1e:c7:66:ea:79:90:b8:7c:d9:c3: dd:b4:08:01:10:0d:35:d4:37:d7:38:04:4b:1d:fe:a2:c8:da: 27:5c:7b:25:15:32:57:1f:b2:16:24:2b:4d:23:4e:1b:1c:d1: 13:98:11:1c:5a:34:01:81:6e:14:18:de:d7:f1:8f:e2:db:0b: f3:33:f0:b8:89:5f:3f:d4:68:99:fd:65:6d:f4:76:bc:b5:3e: 9d:33:62:6e:5b:3f:b7:2b:91:2b:f6:7d:17:ec:a2:64:5e:52: ed:7e:9e:ae:d0:77:a9:ee:30:fb:11:70:46:0f:1d:f7:77:1d: ca:a0:42:8e:97:29:d8:97:b5:27:32:a3:35:1d:d5:fe:4b:fc: bd:52:e8:c5:48:06:74:bb:d1:ad:aa:84:e1:94:3a:96:5a:39: e6:aa:3d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv2v1UvO6uzY6/VkYPkTAVlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwYzdmMWJhM2ZhZTcxMzY0ZTkzMmIwNTYwZDYwMmM1NzI1 ZGRhOGUwHhcNMjYwMTI1MjAwMTMyWhcNMjYwMTI2MjAwMTMyWjAzMTEwLwYDVQQD EygyM2ExOWI5MzY2NGNjOGNjZjY3MGMxYzc1YTM4ZGM5NzE5ZTkzMjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvdOoltCkSmdekr1I48O2k9A1Xhzh R6X7lAonrYWA6jJ12VXFH2xaKEvv2q5jkZyHzxSztPMBmxCEIbhCz1uVyDk+Gg02 nyboze+VV20VU0VDETkloYK3xVBg97n+21xw6HbwOFsobn/d1YuvT8mLWoHwlxmm k9lR0300UKRPypHF3hU5y+3YlibGPQPzCCJkcxcSFiHnXyFebUlpDDQY9pVm4qK5 RvXfdVSsCVNB66KXuqS3Ag40m8kDBv8oQ6mSh0iAH3URT9D2qX0iSYLTICFCRlS7 Of/GFElrlhhQND+t6EZG8UL0UdDYfQ0sDMeEAva2IfqOquE5VjftIkrr9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCOhm5NmTMjM9nDBx1o43JcZ6TKYMB8GA1UdIwQY MBaAFMDH8bo/rnE2TpMrBWDWAsVyXdqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUt ZGEzODhiYzM0ZWZiLzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUtZGEzODhiYzM0ZWZi LzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmgoi1Xy8 AfpGq3OF/V+L167zCgw4RmFcOkE5oIiPcE6T83NfgAH6MjwiQIrf6un2pMLGjl2k MPdUF9LeWFWUfZOfpSEulG90G9kg+vwNfmjX3vOsRFsJVZWKDtabSjOERh4ex2bq eZC4fNnD3bQIARANNdQ31zgESx3+osjaJ1x7JRUyVx+yFiQrTSNOGxzRE5gRHFo0 AYFuFBje1/GP4tsL8zPwuIlfP9Romf1lbfR2vLU+nTNibls/tyuRK/Z9F+yiZF5S 7X6ertB3qe4w+xFwRg8d93cdyqBCjpcp2Je1JzKjNR3V/kv8vVLoxUgGdLvRraqE 4ZQ6llo55qo9HQ== -----END CERTIFICATE-----Generated at Mon Jan 26 05:37:12 2026 by rpki-client