This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft File: Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft (raw, json) Hash identifier: Sag6J41rxjyqh/6lPGeI4NT84Pn6iIutMhdRhmhVp94= Subject key identifier: 69:72:FF:EA:C2:B5:A0:42:2B:B9:EA:BF:F4:39:03:1C:0B:3A:C0:75 Authority key identifier: 5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11 Certificate issuer: /CN=5acf902c6280eb5feaf675c98989d05cd1574411 Certificate serial: 019BF53EA56A2B53B892E003B207DEC5C25B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft Manifest number: 17E3 Signing time: Sun 25 Jan 2026 13:01:22 +0000 Manifest this update: Sun 25 Jan 2026 13:01:22 +0000 Manifest next update: Mon 26 Jan 2026 13:01:22 +0000 Files and hashes: 1: Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl (hash: N0oWp5eXW/O/LWs+aQJcK0MZMTJFqrSq0iVS9Z8OJHM=) 2: gCqXuZrqazYHb5kcpJpbMQpRYJc.roa (hash: afhnnfClxh2r1d+F2XrqQwP8OSJVvFHinxzsW7B2Ix0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:3e:a5:6a:2b:53:b8:92:e0:03:b2:07:de:c5:c2:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5acf902c6280eb5feaf675c98989d05cd1574411 Validity Not Before: Jan 25 13:01:22 2026 GMT Not After : Jan 26 13:01:22 2026 GMT Subject: CN=6972ffeac2b5a0422bb9eabff439031c0b3ac075 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d2:c4:fa:48:90:a7:99:d9:37:4f:a2:15:79: 37:ac:a8:af:79:07:f6:4b:c8:2f:7a:eb:d6:77:99: 8b:57:31:d7:85:90:79:af:93:7b:13:a3:3e:da:49: 44:a7:b1:f6:ff:77:16:f5:88:e4:c3:f3:62:4a:87: 72:4d:0e:aa:e7:fe:c4:e5:70:93:ad:69:3a:2c:b4: 8d:33:c4:17:fe:ee:40:40:c1:61:fc:96:73:22:18: af:f9:b1:d5:22:22:b6:64:a3:87:bf:92:e3:df:f0: 4b:3d:7c:fc:9a:b9:eb:0e:87:03:f7:79:c8:57:78: 51:34:b3:8c:f3:39:bd:36:d4:97:c1:45:f3:63:17: a4:f8:02:ea:9d:a5:8f:86:c9:71:e5:b4:3f:65:3c: 86:30:e9:46:c6:06:3c:cf:d2:88:f6:04:1f:34:3a: b2:25:d0:d4:5e:a1:4d:4c:43:43:89:1e:b0:da:b8: b7:82:80:74:46:84:93:62:ee:37:6e:01:d7:55:42: be:91:c5:20:d8:92:0d:87:23:8f:e8:eb:2b:31:14: e0:c7:c7:86:3a:b3:04:47:fa:5e:03:98:77:e7:e5: c0:ee:59:52:1e:09:87:28:83:00:b9:fd:7d:84:b3: 66:65:7d:9a:12:65:55:a5:0d:eb:06:77:59:76:d4: 02:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:72:FF:EA:C2:B5:A0:42:2B:B9:EA:BF:F4:39:03:1C:0B:3A:C0:75 X509v3 Authority Key Identifier: keyid:5A:CF:90:2C:62:80:EB:5F:EA:F6:75:C9:89:89:D0:5C:D1:57:44:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ws-QLGKA61_q9nXJiYnQXNFXRBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bacac0-57db-4347-8c87-89b5b67b7234/1/Ws-QLGKA61_q9nXJiYnQXNFXRBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:c7:9a:75:d1:34:fb:8d:33:8e:53:b3:c7:a9:41:a7:fa:e6: 52:9e:94:60:2f:fa:39:3a:c2:c0:3f:38:57:e9:2d:7f:0d:59: b0:45:5b:0c:69:5d:86:0e:21:67:6a:a3:8b:5d:83:0f:72:a4: 87:a0:f2:67:29:1d:e5:97:6e:ce:94:35:af:b4:aa:01:32:cd: 50:92:e6:42:87:57:25:64:54:ee:dc:dc:16:c1:d4:90:80:25: de:c8:d6:9f:7f:7b:a6:bd:2a:14:02:98:94:dc:e9:d3:61:c5: 08:1c:c1:f3:be:af:f2:2e:e7:d3:0a:77:9a:67:b9:01:af:91: 50:b0:7e:6f:6e:f0:60:27:b4:12:0f:b5:03:78:da:fd:46:76: 88:15:a0:ed:0c:b3:da:79:41:a7:2f:28:be:66:7f:ac:7e:07: fc:83:33:5d:03:f7:55:da:42:fb:b9:a5:63:7c:b3:96:e4:16: 63:e8:89:12:d4:30:a9:39:78:17:00:96:04:f9:be:6e:d1:49: 46:43:ba:c1:b9:8c:0f:4a:4b:5d:c4:07:0b:85:2e:7a:a0:e4: b6:61:25:a0:f2:64:60:1b:78:56:36:f5:dc:b5:71:49:6c:93: 1c:18:6f:1d:b3:1c:4f:78:60:49:f7:dd:f1:f7:86:78:41:61: 08:a0:a3:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1PqVqK1O4kuADsgfexcJbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhY2Y5MDJjNjI4MGViNWZlYWY2NzVjOTg5ODlkMDVjZDE1 NzQ0MTEwHhcNMjYwMTI1MTMwMTIyWhcNMjYwMTI2MTMwMTIyWjAzMTEwLwYDVQQD Eyg2OTcyZmZlYWMyYjVhMDQyMmJiOWVhYmZmNDM5MDMxYzBiM2FjMDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9LE+kiQp5nZN0+iFXk3rKiveQf2 S8gveuvWd5mLVzHXhZB5r5N7E6M+2klEp7H2/3cW9Yjkw/NiSodyTQ6q5/7E5XCT rWk6LLSNM8QX/u5AQMFh/JZzIhiv+bHVIiK2ZKOHv5Lj3/BLPXz8mrnrDocD93nI V3hRNLOM8zm9NtSXwUXzYxek+ALqnaWPhslx5bQ/ZTyGMOlGxgY8z9KI9gQfNDqy JdDUXqFNTENDiR6w2ri3goB0RoSTYu43bgHXVUK+kcUg2JINhyOP6OsrMRTgx8eG OrMER/peA5h35+XA7llSHgmHKIMAuf19hLNmZX2aEmVVpQ3rBndZdtQCrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGly/+rCtaBCK7nqv/Q5AxwLOsB1MB8GA1UdIwQY MBaAFFrPkCxigOtf6vZ1yYmJ0FzRV0QRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODct ODliNWI2N2I3MjM0LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iYWNhYzAtNTdkYi00MzQ3LThjODctODliNWI2N2I3MjM0 LzEvV3MtUUxHS0E2MV9xOW5YSmlZblFYTkZYUkJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN8eaddE0 +40zjlOzx6lBp/rmUp6UYC/6OTrCwD84V+ktfw1ZsEVbDGldhg4hZ2qji12DD3Kk h6DyZykd5ZduzpQ1r7SqATLNUJLmQodXJWRU7tzcFsHUkIAl3sjWn397pr0qFAKY lNzp02HFCBzB876v8i7n0wp3mme5Aa+RULB+b27wYCe0Eg+1A3ja/UZ2iBWg7Qyz 2nlBpy8ovmZ/rH4H/IMzXQP3VdpC+7mlY3yzluQWY+iJEtQwqTl4FwCWBPm+btFJ RkO6wbmMD0pLXcQHC4UueqDktmEloPJkYBt4Vjb13LVxSWyTHBhvHbMcT3hgSffd 8feGeEFhCKCjQA== -----END CERTIFICATE-----Generated at Sun Jan 25 19:23:40 2026 by rpki-client