This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft File: WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft (raw, json) Hash identifier: MYpcrRVspXVup1STcwIScrMNxfz+XVbzO3P9pkj0Neg= Subject key identifier: 19:D8:8A:99:35:8E:57:43:25:B4:4C:48:59:81:7D:46:88:C1:50:74 Authority key identifier: 58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0 Certificate issuer: /CN=58a763f0c467abaa701d968c3749c6dad03489b0 Certificate serial: 019BF79AE5753E3931066D21AF3F211EE5AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft Manifest number: 0D38 Signing time: Mon 26 Jan 2026 00:01:22 +0000 Manifest this update: Mon 26 Jan 2026 00:01:22 +0000 Manifest next update: Tue 27 Jan 2026 00:01:22 +0000 Files and hashes: 1: 24BGrstatddE0NyJ9qN4s0D1NFI.roa (hash: EPL27sc3ORpLwbEuXhoxlqkF4dPOLK+8gemHJMTBg/w=) 2: WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl (hash: rRua158qL0DtDL/+U54C2ZJ/mkzf516ROoD/sTa/14A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:e5:75:3e:39:31:06:6d:21:af:3f:21:1e:e5:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58a763f0c467abaa701d968c3749c6dad03489b0 Validity Not Before: Jan 26 00:01:22 2026 GMT Not After : Jan 27 00:01:22 2026 GMT Subject: CN=19d88a99358e574325b44c4859817d4688c15074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ab:71:65:29:89:0b:ee:ce:e3:92:98:71:04: b6:d9:a5:01:a7:3e:f4:39:b3:b9:05:a8:62:c8:6d: 2f:56:4f:7d:0d:c2:f3:ff:d9:16:18:94:6d:a4:64: 42:86:c7:c6:ea:28:4d:5f:1e:cd:f7:c2:43:06:57: 8c:03:8a:ff:9b:3b:69:3c:1e:30:f8:34:c7:79:d4: 1c:91:1c:fd:e1:b2:ed:1b:00:62:fc:de:c1:69:56: e9:5d:65:a0:ba:5a:fe:d6:33:8e:8c:85:fd:89:18: 3b:f7:b6:85:a3:14:3b:c4:ea:2b:49:6e:a1:44:78: 9c:de:79:fe:11:70:a3:6c:46:fb:a7:c8:eb:b3:c2: 1f:92:65:5d:eb:71:cc:48:92:b8:0e:bd:bc:7e:64: f3:db:da:2d:ff:9c:44:f1:31:70:97:2e:1a:34:8a: 3d:55:0f:64:ca:f8:22:26:14:27:8a:f5:ba:ed:ae: f4:c9:af:55:da:5b:41:c7:10:5a:c0:c8:5d:d9:cd: 08:39:8b:5d:fd:4f:bb:d0:b6:88:ee:b1:f4:b1:96: f1:d9:41:3a:9b:05:35:b2:75:8d:0d:fd:c0:13:22: 57:26:e9:65:a7:d0:c7:2b:3e:4a:55:40:a7:cc:71: 3d:0a:16:09:4b:03:03:c8:62:84:60:c8:05:e0:ba: 48:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D8:8A:99:35:8E:57:43:25:B4:4C:48:59:81:7D:46:88:C1:50:74 X509v3 Authority Key Identifier: keyid:58:A7:63:F0:C4:67:AB:AA:70:1D:96:8C:37:49:C6:DA:D0:34:89:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKdj8MRnq6pwHZaMN0nG2tA0ibA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5d6491-08ff-494d-8433-098f7c5fd975/1/WKdj8MRnq6pwHZaMN0nG2tA0ibA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:c9:ea:8d:ba:80:86:15:87:2e:6d:64:a5:d1:d2:20:6e:ee: 18:d1:d9:2a:18:e6:d2:bb:2b:25:f6:53:75:dc:a7:e8:34:03: f0:28:fc:6a:fc:f3:97:7e:af:10:46:e3:43:df:70:2e:04:3d: b6:95:be:15:2b:63:0c:84:78:c7:e8:56:22:35:50:63:ec:e7: f4:d4:38:f7:75:a0:cf:c4:f5:d5:24:cd:27:a7:fe:58:31:c0: 95:db:74:da:e0:0e:f6:bb:f5:f4:29:63:a6:27:24:e8:b3:1a: ad:64:61:25:d5:c7:dc:63:8f:fd:09:7d:5d:9b:56:10:f6:f3: 4c:2a:e9:38:90:cc:45:48:f8:04:74:bd:e2:47:ad:19:a9:5b: 0d:60:d1:cb:de:21:4c:8a:94:9c:69:ab:26:80:46:1e:d2:27: 39:3c:85:f1:a1:d9:d2:2a:2a:a3:ac:3c:c4:52:36:a5:1c:a9: ca:13:9d:8a:59:c4:f5:0f:1a:34:b8:4c:84:57:ba:51:b7:59: 82:be:25:45:f8:6d:6f:fc:91:5d:b9:85:42:3d:1f:8a:c3:8f: 7f:68:53:9b:79:40:11:79:09:01:cc:42:ed:05:7d:1b:f0:10: a8:a4:63:b5:42:aa:cc:86:e2:a2:90:36:e9:5d:3b:1c:92:68: c0:b4:c1:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3muV1PjkxBm0hrz8hHuWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YTc2M2YwYzQ2N2FiYWE3MDFkOTY4YzM3NDljNmRhZDAz NDg5YjAwHhcNMjYwMTI2MDAwMTIyWhcNMjYwMTI3MDAwMTIyWjAzMTEwLwYDVQQD EygxOWQ4OGE5OTM1OGU1NzQzMjViNDRjNDg1OTgxN2Q0Njg4YzE1MDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlatxZSmJC+7O45KYcQS22aUBpz70 ObO5BahiyG0vVk99DcLz/9kWGJRtpGRChsfG6ihNXx7N98JDBleMA4r/mztpPB4w +DTHedQckRz94bLtGwBi/N7BaVbpXWWgulr+1jOOjIX9iRg797aFoxQ7xOorSW6h RHic3nn+EXCjbEb7p8jrs8IfkmVd63HMSJK4Dr28fmTz29ot/5xE8TFwly4aNIo9 VQ9kyvgiJhQnivW67a70ya9V2ltBxxBawMhd2c0IOYtd/U+70LaI7rH0sZbx2UE6 mwU1snWNDf3AEyJXJullp9DHKz5KVUCnzHE9ChYJSwMDyGKEYMgF4LpIkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnYipk1jldDJbRMSFmBfUaIwVB0MB8GA1UdIwQY MBaAFFinY/DEZ6uqcB2WjDdJxtrQNImwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMt MDk4ZjdjNWZkOTc1LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC81ZDY0OTEtMDhmZi00OTRkLTg0MzMtMDk4ZjdjNWZkOTc1 LzEvV0tkajhNUm5xNnB3SFphTU4wbkcydEEwaWJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS8nqjbqA hhWHLm1kpdHSIG7uGNHZKhjm0rsrJfZTddyn6DQD8Cj8avzzl36vEEbjQ99wLgQ9 tpW+FStjDIR4x+hWIjVQY+zn9NQ493Wgz8T11STNJ6f+WDHAldt02uAO9rv19Clj pick6LMarWRhJdXH3GOP/Ql9XZtWEPbzTCrpOJDMRUj4BHS94ketGalbDWDRy94h TIqUnGmrJoBGHtInOTyF8aHZ0ioqo6w8xFI2pRypyhOdilnE9Q8aNLhMhFe6UbdZ gr4lRfhtb/yRXbmFQj0fisOPf2hTm3lAEXkJAcxC7QV9G/AQqKRjtUKqzIbiopA2 6V07HJJowLTBEA== -----END CERTIFICATE-----Generated at Mon Jan 26 08:41:56 2026 by rpki-client