This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft File: WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft (raw, json) Hash identifier: /yNKDFZykWrxupfU26y7uIC3LQOMpCZUBWeqhm6eoL0= Subject key identifier: 20:8A:6C:F8:D2:29:84:D4:E2:96:9D:2D:F4:78:DF:C9:1D:3E:A4:C1 Authority key identifier: 59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A Certificate issuer: /CN=596d400faa5269099cc7b1c7a03ce69d8391f21a Certificate serial: 019BF83F7CD1011FF926CA078D7586328DEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft Manifest number: 084E Signing time: Mon 26 Jan 2026 03:01:08 +0000 Manifest this update: Mon 26 Jan 2026 03:01:08 +0000 Manifest next update: Tue 27 Jan 2026 03:01:08 +0000 Files and hashes: 1: LCyWWE7WYBlWYXA9A8WiaxxbTU8.roa (hash: R6ey8Uqth1/igLWVfN/TR2Eu26hppMIiB0ByyHlPk3A=) 2: WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl (hash: cFOBTaI6HNrTrt40kiNaEn6/AOtr0Pxh5gJYuWopTac=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f8:3f:7c:d1:01:1f:f9:26:ca:07:8d:75:86:32:8d:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=596d400faa5269099cc7b1c7a03ce69d8391f21a Validity Not Before: Jan 26 03:01:08 2026 GMT Not After : Jan 27 03:01:08 2026 GMT Subject: CN=208a6cf8d22984d4e2969d2df478dfc91d3ea4c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:32:f8:9c:24:8d:41:59:43:47:f3:34:8f:81: 77:90:d6:10:73:4b:38:ba:c8:a5:f3:51:b2:fd:1f: 55:fe:97:cd:ad:eb:af:6d:41:8c:82:ac:ca:7c:4c: 78:da:58:79:c7:f0:49:ea:0c:8e:9f:2e:df:b4:a6: 43:c4:2b:c5:27:3f:2d:95:f1:9e:b5:a2:a9:30:06: c0:b6:f7:e8:2e:d5:62:43:07:f5:5a:3b:44:85:ba: ff:30:91:c6:c6:de:6d:9c:16:fe:5b:31:45:d9:aa: d4:72:15:09:e4:7e:cf:63:a1:46:e6:7f:ab:ca:67: da:66:9d:da:f6:67:7c:b4:6a:e3:ac:70:71:80:61: a5:3b:27:04:9e:9e:75:a8:09:28:70:57:59:d1:7f: 5b:87:f6:1a:1b:90:4f:e2:37:22:a9:24:e5:04:cd: bd:2a:a3:97:06:8d:bb:08:32:17:00:cd:b3:85:7f: 2c:9c:df:8d:bb:4d:47:7b:f1:0e:a8:df:d9:9e:43: f3:76:50:57:ab:cf:5e:1e:aa:99:7e:90:62:52:2d: 26:11:ee:33:10:bd:47:46:f4:01:0d:74:f8:df:ac: 85:66:48:f4:9c:82:85:60:9c:db:10:f6:97:6c:47: a1:ad:9e:02:e8:3a:9b:44:6b:34:7d:31:0d:ee:60: be:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:8A:6C:F8:D2:29:84:D4:E2:96:9D:2D:F4:78:DF:C9:1D:3E:A4:C1 X509v3 Authority Key Identifier: keyid:59:6D:40:0F:AA:52:69:09:9C:C7:B1:C7:A0:3C:E6:9D:83:91:F2:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WW1AD6pSaQmcx7HHoDzmnYOR8ho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/ae251b-572d-41c4-ad2e-c287db934912/1/WW1AD6pSaQmcx7HHoDzmnYOR8ho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:20:90:45:f0:ae:77:e5:8a:94:e8:c2:14:f7:2c:17:65:66: de:07:17:27:a5:e2:16:1a:b6:e2:4b:3a:58:1f:5d:12:98:3b: 18:b7:96:a5:c0:f9:0e:d1:11:16:e0:50:02:f5:21:94:8d:97: 28:a9:0b:25:42:0e:f9:2b:2f:ed:af:f1:fd:ec:51:61:45:8b: 8d:b8:00:87:02:e5:23:0f:63:ae:25:1e:0a:3e:74:51:fe:87: d8:82:e4:52:4d:d3:2b:7b:f3:6f:16:85:20:12:97:10:73:21: 6d:6b:70:65:fb:b6:7e:f6:31:31:60:25:f2:95:47:ee:67:78: 80:d8:f2:9e:9d:34:7d:dd:dd:6b:ae:7d:38:c8:ad:e0:18:3e: eb:d5:64:12:cb:6f:2c:bd:0f:85:50:f3:bc:37:6a:c9:ba:e0: a1:b0:fc:ee:00:14:20:69:f3:3d:1a:2b:77:58:31:54:96:63: 0d:85:20:52:c4:37:74:06:a5:5d:1e:d3:25:25:e7:76:4c:5b: 4c:46:9d:1c:cd:90:4f:cb:b6:f7:9b:ec:09:81:55:1a:32:fa: 19:eb:b0:2d:08:d5:c6:a1:57:41:4f:a5:0f:5f:79:bc:15:97: 44:a8:8f:2a:af:5e:6b:e5:17:b0:0a:7e:ca:33:6a:3a:6c:3e: e1:26:d1:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv4P3zRAR/5JsoHjXWGMo3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5NmQ0MDBmYWE1MjY5MDk5Y2M3YjFjN2EwM2NlNjlkODM5 MWYyMWEwHhcNMjYwMTI2MDMwMTA4WhcNMjYwMTI3MDMwMTA4WjAzMTEwLwYDVQQD EygyMDhhNmNmOGQyMjk4NGQ0ZTI5NjlkMmRmNDc4ZGZjOTFkM2VhNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzL4nCSNQVlDR/M0j4F3kNYQc0s4 usil81Gy/R9V/pfNreuvbUGMgqzKfEx42lh5x/BJ6gyOny7ftKZDxCvFJz8tlfGe taKpMAbAtvfoLtViQwf1WjtEhbr/MJHGxt5tnBb+WzFF2arUchUJ5H7PY6FG5n+r ymfaZp3a9md8tGrjrHBxgGGlOycEnp51qAkocFdZ0X9bh/YaG5BP4jciqSTlBM29 KqOXBo27CDIXAM2zhX8snN+Nu01He/EOqN/ZnkPzdlBXq89eHqqZfpBiUi0mEe4z EL1HRvQBDXT436yFZkj0nIKFYJzbEPaXbEehrZ4C6DqbRGs0fTEN7mC+qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCKbPjSKYTU4padLfR438kdPqTBMB8GA1UdIwQY MBaAFFltQA+qUmkJnMexx6A85p2DkfIaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hZTI1MWItNTcyZC00MWM0LWFkMmUt YzI4N2RiOTM0OTEyLzEvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9hZTI1MWItNTcyZC00MWM0LWFkMmUtYzI4N2RiOTM0OTEy LzEvV1cxQUQ2cFNhUW1jeDdISG9Eem1uWU9SOGhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApSCQRfCu d+WKlOjCFPcsF2Vm3gcXJ6XiFhq24ks6WB9dEpg7GLeWpcD5DtERFuBQAvUhlI2X KKkLJUIO+Ssv7a/x/exRYUWLjbgAhwLlIw9jriUeCj50Uf6H2ILkUk3TK3vzbxaF IBKXEHMhbWtwZfu2fvYxMWAl8pVH7md4gNjynp00fd3da659OMit4Bg+69VkEstv LL0PhVDzvDdqybrgobD87gAUIGnzPRord1gxVJZjDYUgUsQ3dAalXR7TJSXndkxb TEadHM2QT8u295vsCYFVGjL6GeuwLQjVxqFXQU+lD195vBWXRKiPKq9ea+UXsAp+ yjNqOmw+4SbRUA== -----END CERTIFICATE-----Generated at Mon Jan 26 10:57:40 2026 by rpki-client