This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft File: wcbkBg4mngi5NmYHAsl4ros6GZY.mft (raw, json) Hash identifier: Fdecx3Jsuy+GHT8xAAxteTn4GNvLmZpfi4yjwWDTR2E= Subject key identifier: D4:F0:45:BF:51:7B:E9:89:35:D6:19:8B:17:77:04:9C:46:EB:7C:12 Authority key identifier: C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96 Certificate issuer: /CN=c1c6e4060e269e08b936660702c978ae8b3a1996 Certificate serial: 019BF91AECE3908C9BE31D635E5B15CD6DD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft Manifest number: 05D0 Signing time: Mon 26 Jan 2026 07:00:49 +0000 Manifest this update: Mon 26 Jan 2026 07:00:49 +0000 Manifest next update: Tue 27 Jan 2026 07:00:49 +0000 Files and hashes: 1: ra29butMifiezKtKfx76h0-beS4.roa (hash: CSRhvGkVJgI5m+Ih+PZR1asLchKiPtTXHdFmOp2umxE=) 2: wcbkBg4mngi5NmYHAsl4ros6GZY.crl (hash: WW68YURI77Hcpf9RdGxazb472xZ6cAskQiUJ8nwAVFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:1a:ec:e3:90:8c:9b:e3:1d:63:5e:5b:15:cd:6d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c6e4060e269e08b936660702c978ae8b3a1996 Validity Not Before: Jan 26 07:00:49 2026 GMT Not After : Jan 27 07:00:49 2026 GMT Subject: CN=d4f045bf517be98935d6198b1777049c46eb7c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3c:7b:04:57:04:db:78:8f:d9:b5:b5:e3:ba: 7b:bf:76:c1:1f:90:a4:d8:72:45:4a:68:c2:51:6c: 4e:95:8b:6e:d4:74:12:cf:09:04:b9:f0:a3:de:d4: b6:73:cb:0b:8c:08:8c:d0:4a:89:9d:d1:59:2a:c2: fe:4d:0e:36:26:64:b4:6d:d2:e9:c4:dd:d9:20:ab: 9e:17:8d:d2:17:88:7b:23:c2:74:1f:5c:55:0c:09: 35:c5:33:58:4f:96:1f:34:19:d0:4f:80:4c:95:df: f1:57:4f:af:ed:8f:c4:a4:24:fb:03:21:51:e1:e2: 0b:0c:bd:47:4a:48:14:d3:4f:3d:65:22:71:dd:d3: 6a:ff:df:8d:ad:62:46:39:80:06:77:d9:91:bb:71: 61:46:52:a0:5d:50:02:a0:02:ac:0f:08:f1:ad:8b: 84:d9:48:8a:8f:ad:94:7f:c2:b8:71:e3:33:39:50: d7:c6:a5:94:74:a8:6e:59:80:ef:8f:73:eb:a3:96: 7b:1a:76:a6:ce:5c:db:03:a4:7e:0e:30:ac:5b:ec: 89:41:37:73:f1:fc:31:ef:02:48:5a:cd:bd:60:da: 01:9c:9d:37:3a:ac:54:8f:24:36:67:0e:b5:92:c7: c2:5c:3e:17:e5:99:39:a0:1f:89:02:02:a6:d7:8a: 29:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F0:45:BF:51:7B:E9:89:35:D6:19:8B:17:77:04:9C:46:EB:7C:12 X509v3 Authority Key Identifier: keyid:C1:C6:E4:06:0E:26:9E:08:B9:36:66:07:02:C9:78:AE:8B:3A:19:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcbkBg4mngi5NmYHAsl4ros6GZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f73458-5ce0-4ac2-9167-71aea54af858/1/wcbkBg4mngi5NmYHAsl4ros6GZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cb:a0:c5:02:47:ac:6a:5c:47:2b:77:cc:f7:63:2b:1b:2d: 01:86:00:70:c8:74:e8:14:55:cb:e0:04:77:d5:bf:80:00:dc: b4:ac:e7:5e:f3:fd:bd:12:c8:64:3a:5e:10:aa:73:63:6c:55: 77:89:bd:9c:fc:58:e5:7b:ac:99:51:96:33:78:ec:d8:bd:77: 66:15:f2:ca:19:ae:de:d0:a8:3c:d5:a5:2e:e1:49:c1:74:15: c4:da:08:5d:ea:3d:35:f1:c3:1d:35:0a:23:56:8f:f4:52:e0: 94:25:50:64:a8:f2:91:88:ed:4c:0a:47:df:93:97:89:97:2a: bd:d2:5d:d0:be:5d:7d:b7:c3:50:fb:f5:6d:cc:fc:7f:5c:d7: 69:4e:a6:2d:30:6f:69:98:f7:f8:a6:3f:ca:f2:9f:8a:c4:06: 01:4e:ce:4a:41:4c:17:6a:6d:a5:6b:f6:78:96:5a:e3:ab:db: d6:63:c8:16:15:0e:eb:95:01:b3:77:a5:d7:3e:ac:78:af:fc: d3:4b:b3:5a:c0:68:3e:29:19:5e:cc:1a:af:5c:e8:0f:3b:8a: 6e:ca:d6:1f:31:b1:e4:65:e8:1c:83:27:44:0f:6f:c8:df:0e: a6:1e:3e:a8:89:a5:67:a4:36:56:31:42:74:a6:45:bb:4c:ae: d8:b9:06:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv5GuzjkIyb4x1jXlsVzW3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYzZlNDA2MGUyNjllMDhiOTM2NjYwNzAyYzk3OGFlOGIz YTE5OTYwHhcNMjYwMTI2MDcwMDQ5WhcNMjYwMTI3MDcwMDQ5WjAzMTEwLwYDVQQD EyhkNGYwNDViZjUxN2JlOTg5MzVkNjE5OGIxNzc3MDQ5YzQ2ZWI3YzEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzx7BFcE23iP2bW147p7v3bBH5Ck 2HJFSmjCUWxOlYtu1HQSzwkEufCj3tS2c8sLjAiM0EqJndFZKsL+TQ42JmS0bdLp xN3ZIKueF43SF4h7I8J0H1xVDAk1xTNYT5YfNBnQT4BMld/xV0+v7Y/EpCT7AyFR 4eILDL1HSkgU0089ZSJx3dNq/9+NrWJGOYAGd9mRu3FhRlKgXVACoAKsDwjxrYuE 2UiKj62Uf8K4ceMzOVDXxqWUdKhuWYDvj3Pro5Z7GnamzlzbA6R+DjCsW+yJQTdz 8fwx7wJIWs29YNoBnJ03OqxUjyQ2Zw61ksfCXD4X5Zk5oB+JAgKm14op1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTwRb9Re+mJNdYZixd3BJxG63wSMB8GA1UdIwQY MBaAFMHG5AYOJp4IuTZmBwLJeK6LOhmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjct NzFhZWE1NGFmODU4LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mNzM0NTgtNWNlMC00YWMyLTkxNjctNzFhZWE1NGFmODU4 LzEvd2Nia0JnNG1uZ2k1Tm1ZSEFzbDRyb3M2R1pZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGsugxQJH rGpcRyt3zPdjKxstAYYAcMh06BRVy+AEd9W/gADctKznXvP9vRLIZDpeEKpzY2xV d4m9nPxY5XusmVGWM3js2L13ZhXyyhmu3tCoPNWlLuFJwXQVxNoIXeo9NfHDHTUK I1aP9FLglCVQZKjykYjtTApH35OXiZcqvdJd0L5dfbfDUPv1bcz8f1zXaU6mLTBv aZj3+KY/yvKfisQGAU7OSkFMF2ptpWv2eJZa46vb1mPIFhUO65UBs3el1z6seK/8 00uzWsBoPikZXswar1zoDzuKbsrWHzGx5GXoHIMnRA9vyN8Oph4+qImlZ6Q2VjFC dKZFu0yu2LkGag== -----END CERTIFICATE-----Generated at Mon Jan 26 15:05:24 2026 by rpki-client