This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft File: WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json) Hash identifier: ulWpmXacfMN99IMYFleuG4CE7/SY1l8pq02xKQ6Ed4w= Subject key identifier: 68:4C:B6:B4:3B:F8:02:44:A5:05:35:9E:6E:83:F3:99:D4:59:28:4C Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Certificate serial: 019BF5AC783B137BEBB89A70875026E8173A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft Manifest number: 09C7 Signing time: Sun 25 Jan 2026 15:01:19 +0000 Manifest this update: Sun 25 Jan 2026 15:01:19 +0000 Manifest next update: Mon 26 Jan 2026 15:01:19 +0000 Files and hashes: 1: 9Wfw7dNgON3Iv-f4gZLKJwmqfdk.roa (hash: VxggZehfP0xQ0L6heJyDzgszhdPfd2ExPOVBUF5TwOE=) 2: GsroAK5IWq3NdNiW9BwK5WuY-VE.roa (hash: H3yE7psnQWokNhBsDlT4htqiP5CFlu91pIZ4Z5Ln4rg=) 3: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: ucbPP6w2W/s0e0dlpQHPL1JeyBJc7B/2wdU8qKJOwJ4=) 4: hJRVUfK1kg6uQoiqwZJxzqlaXqs.roa (hash: iKpwOj9nTc417SKhdao7QMWeIdAHHJ1ZRWb6QVPeswk=) 5: hT5gh2FKGh6IG9dmw-QznV50n6I.roa (hash: W5X/W4lZOgN4/2A3moguGVvki8jP+tJhJCN4aT+0thA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f5:ac:78:3b:13:7b:eb:b8:9a:70:87:50:26:e8:17:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3 Validity Not Before: Jan 25 15:01:19 2026 GMT Not After : Jan 26 15:01:19 2026 GMT Subject: CN=684cb6b43bf80244a505359e6e83f399d459284c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:44:65:4f:38:98:c6:dd:4d:cb:1e:36:59:0f: 00:66:34:7e:a5:34:dd:59:12:cb:14:b2:14:28:ac: 42:74:3f:22:09:88:c0:e5:ca:ec:17:96:53:92:86: bb:15:4f:c7:ee:da:7a:a7:9a:29:b4:07:83:92:d6: 5d:c9:05:1b:bb:73:7a:f7:b4:f1:73:3f:11:04:1c: 3e:b8:78:9e:35:97:3f:5b:7a:20:97:41:b9:36:70: 30:bb:9d:e6:77:b6:18:db:f5:83:07:b9:fc:1c:5b: b2:92:88:10:9e:f0:3a:f9:68:08:46:74:d9:7f:8e: 74:f4:c1:05:97:06:d3:57:30:35:b0:39:c5:9b:8b: f5:ae:1d:fb:d2:11:c8:11:7d:4c:cc:9c:0b:0f:25: 27:b9:a0:77:8b:5c:99:92:ee:e1:0c:31:09:a3:e2: 87:3a:d8:02:37:c0:e5:c3:f6:45:21:0f:29:25:4c: a2:04:83:cc:b1:a3:e9:95:51:c4:c8:a9:6c:45:0b: 41:23:97:92:b2:36:8b:0a:f5:3a:b6:26:a8:62:4d: 80:2f:08:a6:59:8f:0a:fa:32:3e:8e:78:51:96:99: 54:80:b9:e8:4b:78:0b:23:c8:9b:56:7b:db:cc:62: c9:2c:7a:9f:31:0e:54:2c:48:cb:1b:24:20:c3:8c: 2b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4C:B6:B4:3B:F8:02:44:A5:05:35:9E:6E:83:F3:99:D4:59:28:4C X509v3 Authority Key Identifier: keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d5:76:b2:30:e0:f1:ab:b0:4f:c6:3e:3d:63:7b:8a:bd:21: 61:86:9f:8a:5e:f3:9f:d8:85:cc:ca:0a:55:b6:90:be:a4:f4: 2a:70:0b:fe:5f:2d:e4:6a:77:e8:bf:16:ff:a5:39:d9:21:0c: 9b:a0:7c:e3:c4:f4:5c:6d:76:31:34:c6:0b:0d:4e:08:34:59: 95:e3:3c:ae:cb:1a:7f:e7:a2:12:58:09:18:9b:bd:cf:03:77: 1d:5f:38:0d:2e:9a:c5:6d:72:77:3c:e2:db:05:58:be:0b:01: 67:73:76:8c:dd:03:5e:7b:c5:8b:a7:0d:a3:11:36:e0:69:03: c5:ab:2c:36:fa:32:b0:f4:a1:ad:10:03:40:39:2f:92:bf:a0: e4:f7:b0:70:cd:97:d4:c6:ba:37:f0:57:3f:a5:db:ad:93:82: d2:1d:fe:79:09:5a:23:94:b6:d2:75:04:1e:35:1a:ba:48:c6: c8:8b:14:73:7c:18:ca:77:fb:44:21:b1:84:d1:1a:54:6d:18: 19:5d:5d:3b:c4:06:78:27:27:4d:a0:a0:b8:79:f8:7e:7b:37: 69:3a:66:e1:be:b2:38:2b:0e:2a:64:76:8c:cd:ae:45:e9:67: 8f:89:83:17:69:64:24:72:07:9d:ba:a0:a3:17:15:fb:fa:7a: 01:8b:c0:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv1rHg7E3vruJpwh1Am6Bc6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZDM2YTIxZTliMzY4ZDc0OGJhYjhjNzdiZWJkZGUyYzIy N2M2YzMwHhcNMjYwMTI1MTUwMTE5WhcNMjYwMTI2MTUwMTE5WjAzMTEwLwYDVQQD Eyg2ODRjYjZiNDNiZjgwMjQ0YTUwNTM1OWU2ZTgzZjM5OWQ0NTkyODRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40RlTziYxt1Nyx42WQ8AZjR+pTTd WRLLFLIUKKxCdD8iCYjA5crsF5ZTkoa7FU/H7tp6p5optAeDktZdyQUbu3N697Tx cz8RBBw+uHieNZc/W3ogl0G5NnAwu53md7YY2/WDB7n8HFuykogQnvA6+WgIRnTZ f4509MEFlwbTVzA1sDnFm4v1rh370hHIEX1MzJwLDyUnuaB3i1yZku7hDDEJo+KH OtgCN8Dlw/ZFIQ8pJUyiBIPMsaPplVHEyKlsRQtBI5eSsjaLCvU6tiaoYk2ALwim WY8K+jI+jnhRlplUgLnoS3gLI8ibVnvbzGLJLHqfMQ5ULEjLGyQgw4wrqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhMtrQ7+AJEpQU1nm6D85nUWShMMB8GA1UdIwQY MBaAFFnTaiHps2jXSLq4x3vr3eLCJ8bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQt NDBlYTgwODkyZjAzLzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQtNDBlYTgwODkyZjAz LzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATdV2sjDg 8auwT8Y+PWN7ir0hYYafil7zn9iFzMoKVbaQvqT0KnAL/l8t5Gp36L8W/6U52SEM m6B848T0XG12MTTGCw1OCDRZleM8rssaf+eiElgJGJu9zwN3HV84DS6axW1ydzzi 2wVYvgsBZ3N2jN0DXnvFi6cNoxE24GkDxassNvoysPShrRADQDkvkr+g5PewcM2X 1Ma6N/BXP6XbrZOC0h3+eQlaI5S20nUEHjUaukjGyIsUc3wYynf7RCGxhNEaVG0Y GV1dO8QGeCcnTaCguHn4fns3aTpm4b6yOCsOKmR2jM2uRelnj4mDF2lkJHIHnbqg oxcV+/p6AYvArA== -----END CERTIFICATE-----Generated at Sun Jan 25 22:52:51 2026 by rpki-client