This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft File: WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json) Hash identifier: 6v1SEOYduO7ooXN3W4FvjjE4wNK2z3P8JJndYVctmm8= Subject key identifier: DB:4C:35:A8:32:2A:CC:9A:2E:11:0F:5A:21:A9:BF:D7:29:6B:68:40 Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF Certificate issuer: /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf Certificate serial: 019BF83F7152F9DFDFBF31F0FB6B0407AC2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft Manifest number: 12E2 Signing time: Mon 26 Jan 2026 03:01:05 +0000 Manifest this update: Mon 26 Jan 2026 03:01:05 +0000 Manifest next update: Tue 27 Jan 2026 03:01:05 +0000 Files and hashes: 1: 0VnbCUUxMHz9IQSGbuoNhNu-3i0.roa (hash: hvzM8HfzEPqtWwc9Q56WgaJxRYytObZ9iUV/CwXnl4U=) 2: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: N9XYx6Xn/6Bav37fZLNEYmQHG3iXRKoVe3EIYmi3tXY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:71:52:f9:df:df:bf:31:f0:fb:6b:04:07:ac:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf Validity Not Before: Jan 26 03:01:05 2026 GMT Not After : Jan 27 03:01:05 2026 GMT Subject: CN=db4c35a8322acc9a2e110f5a21a9bfd7296b6840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a5:c0:85:e5:10:11:03:54:e6:43:c5:84:ce: 87:32:cf:55:ee:76:38:31:7c:fa:87:0b:16:a5:33: 1e:9e:20:06:82:f5:54:bd:7e:22:53:11:18:fc:0f: b5:d2:d1:67:4e:26:35:b6:c7:27:50:0f:cf:77:f0: 92:a9:84:53:b7:87:e4:1d:5f:c7:4c:a1:ed:12:ee: 51:01:58:32:4e:39:6c:45:f6:47:72:21:b6:8f:13: 2a:ac:66:89:d0:e7:eb:88:86:cf:dd:e2:99:89:b4: d2:17:94:b5:e7:71:c8:34:e6:75:a9:0f:50:8a:51: da:ad:ab:a8:cc:20:18:61:90:36:be:fc:71:41:b6: 74:53:e1:77:fe:5d:32:41:ba:c7:43:e7:a7:4b:3c: b6:e2:1f:30:d2:56:a4:61:5f:bc:5d:cc:88:c5:bb: 2b:a7:5d:d4:eb:b5:65:c1:bc:c5:de:1c:5e:94:56: c6:dc:7e:dd:05:d0:52:de:41:a3:3b:f3:fc:33:1e: f7:0d:40:16:dd:d3:87:19:33:16:d6:80:98:7e:f9: 0f:c9:f0:45:dd:3b:e2:8d:da:d9:77:51:8f:ae:d3: c0:5d:06:ab:f3:69:4e:61:dd:4c:3b:5f:2e:5a:e5: b6:00:51:89:f3:c2:74:0d:a1:3e:df:3a:a8:fd:6a: 5c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:4C:35:A8:32:2A:CC:9A:2E:11:0F:5A:21:A9:BF:D7:29:6B:68:40 X509v3 Authority Key Identifier: keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:04:ff:09:3a:17:43:cf:a4:0a:2a:b4:a5:a3:78:e9:94:a3: 43:7d:32:01:83:a0:b1:16:45:4b:9e:11:7c:3e:e1:77:13:49: 5f:a2:34:59:0b:10:f4:9e:f2:7d:48:ec:21:e5:9e:02:70:d9: ad:75:eb:f3:2e:e1:0a:85:68:d4:c8:a7:43:3d:b6:49:3a:05: 30:e0:26:07:43:b5:e8:9b:19:62:fe:a1:8b:3a:a5:62:4c:c4: ab:93:fb:b5:f6:9c:68:f7:49:d9:1f:d9:42:80:60:08:75:75: 98:9f:6c:1c:94:b3:43:52:df:4d:64:35:19:f0:4e:ef:eb:6e: bc:55:81:d1:50:09:c8:c8:74:74:de:c7:39:c0:5a:cc:ce:d8: 9c:fe:26:1a:6f:07:e1:e7:43:1e:2b:2b:01:9b:25:a4:5e:eb: 5f:d3:be:9d:9a:56:47:2c:53:4b:71:97:f1:00:4c:bb:89:c7: 74:12:80:5d:f6:77:c2:42:2e:67:3e:6d:2e:fe:f7:01:e1:28: f2:d6:4e:0e:a8:e8:3f:c7:bc:1b:40:b0:06:ad:2c:54:9e:f4: 46:34:9a:08:08:34:4c:26:e2:c2:8a:50:cb:c5:dc:c4:c6:2f: b0:15:01:b4:5a:13:e0:12:02:3d:2b:34:46:ce:f1:28:11:bf: 14:b8:5b:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P3FS+d/fvzHw+2sEB6wuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNjExMDJlZDRkNjZkY2Q5NTJkZTAxMzA0ZTBhZmUxMzg0 ZDAwYmYwHhcNMjYwMTI2MDMwMTA1WhcNMjYwMTI3MDMwMTA1WjAzMTEwLwYDVQQD EyhkYjRjMzVhODMyMmFjYzlhMmUxMTBmNWEyMWE5YmZkNzI5NmI2ODQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KXAheUQEQNU5kPFhM6HMs9V7nY4 MXz6hwsWpTMeniAGgvVUvX4iUxEY/A+10tFnTiY1tscnUA/Pd/CSqYRTt4fkHV/H TKHtEu5RAVgyTjlsRfZHciG2jxMqrGaJ0OfriIbP3eKZibTSF5S153HINOZ1qQ9Q ilHarauozCAYYZA2vvxxQbZ0U+F3/l0yQbrHQ+enSzy24h8w0lakYV+8XcyIxbsr p13U67VlwbzF3hxelFbG3H7dBdBS3kGjO/P8Mx73DUAW3dOHGTMW1oCYfvkPyfBF 3TvijdrZd1GPrtPAXQar82lOYd1MO18uWuW2AFGJ88J0DaE+3zqo/WpcSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtMNagyKsyaLhEPWiGpv9cpa2hAMB8GA1UdIwQY MBaAFFphEC7U1m3NlS3gEwTgr+E4TQC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYt Mjg4YmQ2YjllMDkyLzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi85NWU3OGEtNTdlNy00YTU4LTkzMTYtMjg4YmQ2YjllMDky LzEvV21FUUx0VFdiYzJWTGVBVEJPQ3Y0VGhOQUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwT/CToX Q8+kCiq0paN46ZSjQ30yAYOgsRZFS54RfD7hdxNJX6I0WQsQ9J7yfUjsIeWeAnDZ rXXr8y7hCoVo1MinQz22SToFMOAmB0O16JsZYv6hizqlYkzEq5P7tfacaPdJ2R/Z QoBgCHV1mJ9sHJSzQ1LfTWQ1GfBO7+tuvFWB0VAJyMh0dN7HOcBazM7YnP4mGm8H 4edDHisrAZslpF7rX9O+nZpWRyxTS3GX8QBMu4nHdBKAXfZ3wkIuZz5tLv73AeEo 8tZODqjoP8e8G0CwBq0sVJ70RjSaCAg0TCbiwopQy8XcxMYvsBUBtFoT4BICPSs0 Rs7xKBG/FLhbtA== -----END CERTIFICATE-----Generated at Mon Jan 26 07:11:33 2026 by rpki-client