This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft File: 85-Wwg4Q928D7UeBW3pqXv2-A9U.mft (raw, json) Hash identifier: zbzpPVOuIHlX5iMw699VtOcBc9TJ8WxyI1dyUnPa+Bo= Subject key identifier: FB:BD:85:92:DD:4B:28:E8:2F:BB:49:A4:1F:22:AC:31:F9:E7:C5:BF Authority key identifier: F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 Certificate issuer: /CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Certificate serial: 019BF5ABC4DD64F2CA04E705021E4EF3064D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft Manifest number: 1312 Signing time: Sun 25 Jan 2026 15:00:33 +0000 Manifest this update: Sun 25 Jan 2026 15:00:33 +0000 Manifest next update: Mon 26 Jan 2026 15:00:33 +0000 Files and hashes: 1: 4cosnLw5Fm-5ue3YjH5Pgxj4SZk.roa (hash: foM+Gdb6JStZoN1QON4h/dJiKuqvrGQX7DM2q+rUSl0=) 2: 85-Wwg4Q928D7UeBW3pqXv2-A9U.crl (hash: UHaFkk+CsPxrNQUeqxGl+7PW4eiwwQAxECs7g9slwNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ab:c4:dd:64:f2:ca:04:e7:05:02:1e:4e:f3:06:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f39f96c20e10f76f03ed47815b7a6a5efdbe03d5 Validity Not Before: Jan 25 15:00:33 2026 GMT Not After : Jan 26 15:00:33 2026 GMT Subject: CN=fbbd8592dd4b28e82fbb49a41f22ac31f9e7c5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:a6:9c:b1:35:63:e4:63:08:d5:8c:84:ca:da: b7:d5:0a:ca:69:97:96:f3:4c:da:0a:b7:37:3a:3f: 0d:83:45:1f:44:de:7f:17:c0:00:72:18:61:77:0b: 48:18:5f:47:ef:51:c9:5d:e3:9b:1e:c5:68:67:85: 5c:5b:7b:80:6d:9e:49:0a:00:5c:89:b8:75:a0:3f: f3:18:04:43:33:2f:7d:5a:b1:23:84:52:2d:52:a3: e4:aa:f4:8e:f2:a7:cd:94:34:23:90:0d:80:cd:cf: de:a4:05:f1:e5:d1:21:47:79:ff:bc:ab:e5:7b:89: f8:84:e9:21:77:29:b8:8b:41:68:98:25:8e:df:d2: f4:7e:96:67:6a:2c:d2:bb:82:3a:bf:e1:fe:c8:f9: 51:90:4f:2a:ca:a9:d8:0f:8a:08:c0:ea:2b:18:b3: 65:c8:80:f7:ec:fa:c7:be:14:3b:df:59:56:f4:9c: d5:02:92:b9:fc:55:c2:7f:23:74:e3:95:3a:15:aa: 1f:5d:38:a9:3a:e2:ef:4d:c0:e2:eb:88:c5:62:d5: f9:ec:cb:0a:34:06:16:5a:5b:a3:50:fd:bf:56:4c: c3:b2:7f:d5:8e:e6:9a:a9:fb:26:4f:fd:cf:cb:fd: 40:56:bc:01:e1:83:56:66:ff:61:bb:68:0b:7a:c8: 2d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BD:85:92:DD:4B:28:E8:2F:BB:49:A4:1F:22:AC:31:F9:E7:C5:BF X509v3 Authority Key Identifier: keyid:F3:9F:96:C2:0E:10:F7:6F:03:ED:47:81:5B:7A:6A:5E:FD:BE:03:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85-Wwg4Q928D7UeBW3pqXv2-A9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/0b45e9-3f4a-4bd8-bab9-fb9081a16139/1/85-Wwg4Q928D7UeBW3pqXv2-A9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:29:bf:b2:9d:2f:66:0c:3d:14:e8:e6:7d:cb:d7:b2:6f:f1: 40:6f:0f:b1:48:3c:62:9a:10:7a:f6:94:37:fd:ea:19:4f:8b: f5:72:8b:7d:9e:e6:25:2d:a8:6c:11:21:92:37:7c:ec:96:dc: a6:37:fd:44:27:85:29:4b:fe:d0:d2:c5:58:94:ee:b6:5f:f7: 2b:14:1b:27:d7:5e:89:d5:ee:72:f3:ec:fc:6e:c3:9e:04:37: d7:a4:d2:83:5f:66:c5:ae:46:ba:74:06:37:9a:30:30:fc:f2: ee:4b:41:bd:09:9a:a5:53:fe:11:dd:38:73:3a:4d:27:f2:13: 14:14:50:9b:df:23:15:a5:f1:57:80:73:fc:88:7f:f4:88:ff: 5b:62:bd:b8:95:6d:80:11:03:34:12:6f:e5:58:be:4f:de:f4: 20:9f:e9:7c:d3:c6:13:6b:c5:c7:47:ad:82:7b:a8:7f:d7:ae: d6:e5:6b:af:e8:c3:9c:52:13:a7:35:6a:aa:45:82:b7:af:2b: 16:cf:fb:a2:17:5f:24:33:7f:8c:2f:18:68:1f:5e:ed:71:d6: 10:05:4f:f8:d1:8d:87:a0:15:79:25:eb:71:18:94:2d:d7:40: 8b:4f:26:fd:0c:4c:5f:6f:6f:8c:79:e6:09:d5:b0:48:0c:c9: 64:07:4c:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1q8TdZPLKBOcFAh5O8wZNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYzOWY5NmMyMGUxMGY3NmYwM2VkNDc4MTViN2E2YTVlZmRi ZTAzZDUwHhcNMjYwMTI1MTUwMDMzWhcNMjYwMTI2MTUwMDMzWjAzMTEwLwYDVQQD EyhmYmJkODU5MmRkNGIyOGU4MmZiYjQ5YTQxZjIyYWMzMWY5ZTdjNWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+6acsTVj5GMI1YyEytq31QrKaZeW 80zaCrc3Oj8Ng0UfRN5/F8AAchhhdwtIGF9H71HJXeObHsVoZ4VcW3uAbZ5JCgBc ibh1oD/zGARDMy99WrEjhFItUqPkqvSO8qfNlDQjkA2Azc/epAXx5dEhR3n/vKvl e4n4hOkhdym4i0FomCWO39L0fpZnaizSu4I6v+H+yPlRkE8qyqnYD4oIwOorGLNl yID37PrHvhQ731lW9JzVApK5/FXCfyN045U6FaofXTipOuLvTcDi64jFYtX57MsK NAYWWlujUP2/VkzDsn/VjuaaqfsmT/3Py/1AVrwB4YNWZv9hu2gLesgtPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPu9hZLdSyjoL7tJpB8irDH558W/MB8GA1UdIwQY MBaAFPOflsIOEPdvA+1HgVt6al79vgPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjkt ZmI5MDgxYTE2MTM5LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8wYjQ1ZTktM2Y0YS00YmQ4LWJhYjktZmI5MDgxYTE2MTM5 LzEvODUtV3dnNFE5MjhEN1VlQlczcHFYdjItQTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbim/sp0v Zgw9FOjmfcvXsm/xQG8PsUg8YpoQevaUN/3qGU+L9XKLfZ7mJS2obBEhkjd87Jbc pjf9RCeFKUv+0NLFWJTutl/3KxQbJ9deidXucvPs/G7DngQ316TSg19mxa5GunQG N5owMPzy7ktBvQmapVP+Ed04czpNJ/ITFBRQm98jFaXxV4Bz/Ih/9Ij/W2K9uJVt gBEDNBJv5Vi+T970IJ/pfNPGE2vFx0etgnuof9eu1uVrr+jDnFITpzVqqkWCt68r Fs/7ohdfJDN/jC8YaB9e7XHWEAVP+NGNh6AVeSXrcRiULddAi08m/QxMX29vjHnm CdWwSAzJZAdMyQ== -----END CERTIFICATE-----Generated at Mon Jan 26 02:25:43 2026 by rpki-client