This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft File: WUmzHrtuTLvQzHcMxvTVD3jw63s.mft (raw, json) Hash identifier: MZKRmvND+uUJ3ANtT+TZlM+r9/SKRtDhXxFilSCjTKY= Subject key identifier: 07:97:DC:43:74:0D:2B:5E:CF:76:6E:68:32:AA:BD:6E:63:9C:F9:3B Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Certificate serial: 019BF42BF94DD8B06DE2784568201091251E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft Manifest number: 17E5 Signing time: Sun 25 Jan 2026 08:01:21 +0000 Manifest this update: Sun 25 Jan 2026 08:01:21 +0000 Manifest next update: Mon 26 Jan 2026 08:01:21 +0000 Files and hashes: 1: Nk9NJG4XHyIhiZpIwzCgJjHeHsY.roa (hash: 0Z49Wq613/GvbBC7FSL9+m5CbpRosA76LyzaQrQgJpM=) 2: W9Cit6LkL_9xY708no6eldK9_jM.roa (hash: xffjMvZ1DYRGx1/oav0AgtKcHwsZj1OKHUORpBxzvbE=) 3: WUmzHrtuTLvQzHcMxvTVD3jw63s.crl (hash: GfBonwKrV80WZ4NTNl90tS00JiTJt9xCfCG8ojSuipw=) 4: pJGp42TNNVRFmc0VMNYNDz0RXj0.roa (hash: kwRKyNh99M0qDya3cQpvgNZdWFnHWaeh5dPoEC7mGjg=) 5: qJgbNRVZDZgsaCTgcYDVdqoZi2o.roa (hash: 1zdrqfB7Ye900CEu4KQ1GQxkoI0CFxA0D17oCktb3Eg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:2b:f9:4d:d8:b0:6d:e2:78:45:68:20:10:91:25:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b Validity Not Before: Jan 25 08:01:21 2026 GMT Not After : Jan 26 08:01:21 2026 GMT Subject: CN=0797dc43740d2b5ecf766e6832aabd6e639cf93b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ab:ad:45:1f:ab:7a:6e:3a:29:76:b2:5c:b0: ff:76:0c:55:1d:8c:e1:31:d4:cd:9f:08:41:1c:6f: 2a:2e:71:75:15:83:b2:dd:89:3d:54:f5:03:49:01: c1:33:87:78:c3:82:a0:c1:df:de:e4:d9:7f:ed:19: 04:8c:50:bf:94:e6:40:73:0a:14:c0:ac:90:99:1b: ff:6d:b1:5a:c6:4d:93:d8:7c:b2:d0:f1:ff:08:d8: aa:8f:4c:b2:eb:28:e5:3c:54:f2:04:2b:35:3d:2e: 0d:cc:65:6b:07:17:dc:41:41:36:e4:6e:51:28:0a: 03:fe:52:11:a7:4d:6f:03:ff:e2:39:3c:e1:a1:7e: d3:c8:f1:9a:6d:32:49:42:f6:36:ff:24:34:2b:22: e3:83:11:ce:11:b8:83:32:0e:c5:1f:86:d4:f2:56: b3:f1:e7:f3:0b:47:5a:58:5c:9b:bc:3d:8b:58:5c: 0a:da:e7:f2:d8:09:e6:35:f7:18:e6:d3:d3:25:94: 6c:2b:c5:63:04:b7:c9:d4:54:e4:ee:fa:e6:95:28: f8:fa:2d:e4:09:b5:f1:03:5d:51:f1:6d:d0:0f:3d: 85:07:4b:56:3b:31:a7:cd:f8:d5:17:3b:11:50:3e: ef:3d:02:d9:ff:68:37:c0:b3:60:fa:2c:cf:b2:38: 1c:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:97:DC:43:74:0D:2B:5E:CF:76:6E:68:32:AA:BD:6E:63:9C:F9:3B X509v3 Authority Key Identifier: keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5f:d2:1f:34:8f:a9:e2:b4:1f:52:f9:3a:eb:64:eb:00:89: 04:73:0c:63:6a:01:7a:e8:4f:1e:6d:78:db:18:1e:39:c5:40: 0f:83:a8:09:5f:a8:bc:f9:e9:59:f9:98:7f:a7:8c:17:18:5a: 4b:38:21:c0:79:b0:7e:19:dd:28:82:59:2c:75:9b:60:66:6a: 4c:e4:fa:af:6a:87:b2:32:eb:7f:91:06:d6:1f:32:05:0f:5b: 44:7c:0b:40:94:b2:70:4d:91:b4:35:ea:1d:35:c6:41:3a:29: fe:ee:3b:60:db:dc:db:f7:30:32:ce:2d:11:ff:aa:5c:4d:dd: 6f:50:9b:a0:2c:89:fa:16:b4:37:be:af:a4:15:0a:c6:10:f4: 33:7c:ed:ea:5d:ba:d5:ea:8a:ae:d1:f3:ee:d1:f9:d9:1a:4b: 0f:7e:bf:99:38:7f:64:e8:b6:69:4f:61:0f:99:61:09:17:cd: 56:35:38:1b:47:ac:65:6e:a7:e4:26:04:1a:52:00:b6:ec:91: 48:08:6a:9b:08:34:b4:25:66:86:f4:ef:cd:f8:28:f5:97:6f: fc:47:a6:50:d7:da:30:d7:a5:55:23:43:ec:12:9b:7a:03:b3: 0b:38:1b:9b:f6:26:b7:6b:98:8a:0a:12:fd:fe:60:d0:dc:e6: dc:bd:16:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv0K/lN2LBt4nhFaCAQkSUeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NDliMzFlYmI2ZTRjYmJkMGNjNzcwY2M2ZjRkNTBmNzhm MGViN2IwHhcNMjYwMTI1MDgwMTIxWhcNMjYwMTI2MDgwMTIxWjAzMTEwLwYDVQQD EygwNzk3ZGM0Mzc0MGQyYjVlY2Y3NjZlNjgzMmFhYmQ2ZTYzOWNmOTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKutRR+rem46KXayXLD/dgxVHYzh MdTNnwhBHG8qLnF1FYOy3Yk9VPUDSQHBM4d4w4Kgwd/e5Nl/7RkEjFC/lOZAcwoU wKyQmRv/bbFaxk2T2Hyy0PH/CNiqj0yy6yjlPFTyBCs1PS4NzGVrBxfcQUE25G5R KAoD/lIRp01vA//iOTzhoX7TyPGabTJJQvY2/yQ0KyLjgxHOEbiDMg7FH4bU8laz 8efzC0daWFybvD2LWFwK2ufy2AnmNfcY5tPTJZRsK8VjBLfJ1FTk7vrmlSj4+i3k CbXxA11R8W3QDz2FB0tWOzGnzfjVFzsRUD7vPQLZ/2g3wLNg+izPsjgcHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeX3EN0DStez3ZuaDKqvW5jnPk7MB8GA1UdIwQY MBaAFFlJsx67bky70Mx3DMb01Q948Ot7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTkt MzE4MGFlNDI3NGYzLzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9kZTVhZGQtYWM2OC00ZmIxLTg0MTktMzE4MGFlNDI3NGYz LzEvV1VtekhydHVUTHZRekhjTXh2VFZEM2p3NjNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPV/SHzSP qeK0H1L5Outk6wCJBHMMY2oBeuhPHm142xgeOcVAD4OoCV+ovPnpWfmYf6eMFxha SzghwHmwfhndKIJZLHWbYGZqTOT6r2qHsjLrf5EG1h8yBQ9bRHwLQJSycE2RtDXq HTXGQTop/u47YNvc2/cwMs4tEf+qXE3db1CboCyJ+ha0N76vpBUKxhD0M3zt6l26 1eqKrtHz7tH52RpLD36/mTh/ZOi2aU9hD5lhCRfNVjU4G0esZW6n5CYEGlIAtuyR SAhqmwg0tCVmhvTvzfgo9Zdv/EemUNfaMNelVSND7BKbegOzCzgbm/Ymt2uYigoS /f5g0Nzm3L0WJg== -----END CERTIFICATE-----Generated at Sun Jan 25 17:24:28 2026 by rpki-client